2 Commits

Include renames

Author	SHA1	Message	Date
CyberSecurityUPandClaude Opus 4.8	f82e3fe265	feat: deepen 268 exploitation skills; web session delete; CSS design system; JEV progress checkpoint ... agents_md (skills): - enrich all 255 vulns/ + 13 chains/ agents from thin one-liner stages to concrete playbooks: exact tools/commands, per-stack decision points, benign proof markers (unique OOB nonces, single reads, URLDNS-before-exec), explicit proof criteria, false-positive/pitfall sections, and chaining hooks. Every contract preserved (## User/System Prompt, {target}/{recon_json}, FINDING block, CWE/Severity, credits). avg 37->53 lines; loader parses all 449. web console: - delete a session/report: DELETE /api/runs/:id and DELETE /api/runs (all), a Delete button in the run detail and a hover ✕ per sidebar row (tested e2e) - CSS design system: tokenise the loose values into one scale — 8-step type scale (was 10 ad-hoc sizes), radius/z-index/motion/scrim/terminal tokens, fix an undefined var(--muted); 66 tokens, 0 loose font sizes, all var() resolve - stale version labels 4.0.0/4.2.0 -> 4.2.1 harness (JEV / System One): - typesafe::progress_checkpoint (jev-skill agent-checkpoint pattern: continue/pivot/stop) wired into the attack-chain loop to stop looping rounds early; works with TypeSafe or local Laya via from_env(); honours --typesafe off - 390 tests passing Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-09-26 16:25:58 -03:00
CyberSecurityUPandClaude Opus 4.8	eb4e13efea	v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents ... REPL interactivity & findings: - Live findings registered during a run: /results shows them accumulating; /finding opens a selection menu with FULL details (PoC, command, evidence, CVSS, OWASP/CWE, remediation). Past runs too. - /expand (and Ctrl+O) dump the last full, untruncated commands. - Findings colored by severity in the feed (not all-yellow); confirmed vote = green. Stop & report: - CRITICAL: /stop no longer kills validation. New SOFT stop (pool.soft) halts launching new agents but lets in-flight + VALIDATION finish — so confirmed findings are kept. /stop now asks 3 ways: [1] validate then report, [2] report raw (no validation), [3] discard. - Report file:// URL printed on completion/stop. Report: - Typst report restructured: executive summary, a Vulnerability Summary TABLE (#, vuln, severity, CVSS, OWASP/CWE), and per-finding sections with criticality, CVSS, OWASP/CWE, description/impact, PoC, evidence, remediation. owasp passed through. Agents: +14 app-stack/CVE (IIS tilde/WebDAV/ViewState/debug/handler-bypass, CMS fingerprint + WordPress/Joomla/Drupal/default-admin, app-server consoles, exposed VCS, known-CVE & outdated-component exploitation) → 343 total. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-24 23:21:43 -03:00