Commit Graph

Select branches

Hide Pull Requests

dependabot/cargo/neurosploit-rs/quinn-proto-0.11.19

feat/web-terminal-qa

main

sync-upstream

v1

v2

v2.1

v2.2

v2.3

v3.0

v3.1

v3.2

v3.2.1

v3.2.2

v3.2.3

v3.2.4

v3.3.0

v3.4.0

v3.4.1

v3.5.0

v3.5.1

v3.5.2

v3.5.3

v3.5.4

v3.5.5

v3.5.6

v3.6.0

v3.6.1

v3.6.6

v3.6.7

#10

#11

#12

#15

#16

#22

#23

#28

#30

#31

#34

#35

#36

#37

#38

#39

#40

#41

#42

#43

#46

#47

#47/merge

#5

#6

#9

1.0.0

1.1.0

1.2.0

3.0.0

v3.2.1

v3.2.2

v3.3.0

v3.4.1

v3.5.0

v3.5.1

v3.5.2

v3.5.3

v3.5.4

v3.5.5

v3.5.6

v3.6.0

v3.6.1

v3.6.2

v3.6.3

v3.6.4

v3.6.5

v3.6.6

v3.6.7

v3.6.8

v3.6.9

v4.0.0

v4.1.0

v4.2.0

v4.2.1

v4.2.2

v4.2.3

v4.2.4

Mono Color

• f279817cfe feat: authorization preamble, Docker socket discovery, rejected findings persistence, prosecutor fallback main CyberSecurityUPandClaude Opus 4.6 2026-10-06 20:56:39 -03:00
• 94404555aa v4.2.4: full Kali sandbox orchestration for recon v4.2.4 CyberSecurityUPandClaude Opus 4.8 2026-10-04 08:01:29 -03:00
• c258299eb6 v4.2.3: full recon arsenal (KingOfBugBounty), version bump v4.2.3 CyberSecurityUPandClaude Opus 4.8 2026-10-04 07:56:22 -03:00
• 07f97076de feat: multi-model preflight; deterministic subdomain fan-out for wildcard scope CyberSecurityUPandClaude Opus 4.8 2026-10-04 07:54:15 -03:00
• 88255152fe docs: add a broad focus example (TUTORIAL 6.2 + engagement.example.yaml) CyberSecurityUPandClaude Opus 4.8 2026-10-04 07:43:45 -03:00
• 101eca2700 fix: wildcard-target probe, per-run provenance, qwen via Hermes, broad default web objective CyberSecurityUPandClaude Opus 4.8 2026-10-04 01:06:28 -03:00
• c2c6de1c3f docs(tutorial): add 6.2 'Get the most out of a run' — recommended potent setup CyberSecurityUPandClaude Opus 4.8 2026-10-04 01:00:09 -03:00
• 0446bc4b5d fix(repl): throttle tool-activity feed so line editing isn't janky during a run CyberSecurityUPandClaude Opus 4.8 2026-10-04 00:56:45 -03:00
• 35bf7ea1a6 fix(repl): /show displays the real authorized scope + authz ref + pinned agents + research CyberSecurityUPandClaude Opus 4.8 2026-10-04 00:51:20 -03:00
• b55778d6f6 v4.2.2: validation keeps reproducible findings, /pocs command, version bump v4.2.2 CyberSecurityUPandClaude Opus 4.8 2026-10-04 00:40:12 -03:00
• 45ad7bf359 feat: free LLM-directed exploration (not boxed in one class), auth/OAuth focus, WAF-aware UA CyberSecurityUPandClaude Opus 4.8 2026-10-04 00:30:01 -03:00
• 3a820f09e6 feat: one-file engagement configs; scope-file reseeds stale target; English UI + any-language input; docs CyberSecurityUPandClaude Opus 4.8 2026-10-04 00:03:50 -03:00
• c233da8b17 feat(repl): /authorize — declare the whole scope in one line for a direct engagement CyberSecurityUPandClaude Opus 4.8 2026-10-03 23:57:28 -03:00
• 8354a85cb7 chore: keep Rockstar scope config local-only (untrack + gitignore); NASA stays CyberSecurityUPandClaude Opus 4.8 2026-10-03 23:54:32 -03:00
• 4ef1c9cada feat: importable scope configs + /scope-file REPL command; Rockstar & NASA templates CyberSecurityUPandClaude Opus 4.8 2026-10-03 23:53:53 -03:00
• 4ed0226a79 feat(repl): /class focus by vuln type, /authorization program ref; detect model refusals CyberSecurityUPandClaude Opus 4.8 2026-10-03 07:24:48 -03:00
• 8a3cb42c1f fix(repl/cli): /target re-derives scope; wildcard target tests subdomains; version banners CyberSecurityUPandClaude Opus 4.8 2026-10-03 01:16:25 -03:00
• 9076d30c59 feat: vulnerability-research mode — hand it a repo, it hunts a novel CVE CyberSecurityUPandClaude Opus 4.8 2026-10-02 20:25:35 -03:00
• ed4105999e fix: version strings showed 4.2.0; use CARGO_PKG_VERSION so they never go stale CyberSecurityUPandClaude Opus 4.8 2026-10-02 20:17:41 -03:00
• 7741290193 feat(agents): deep Active Directory suite — 25 host/infra skills + 7 AD chains CyberSecurityUPandClaude Opus 4.8 2026-10-02 20:13:19 -03:00
• 8051464a84 feat(web): live 'what's being tested' agent panel CyberSecurityUPandClaude Opus 4.8 2026-10-02 20:02:46 -03:00
• e1350c0c4a fix(web): REPL spawn passed run-only flags as globals, breaking every run CyberSecurityUPandClaude Opus 4.8 2026-10-02 19:56:37 -03:00
• 999d9c2209 fix(pipeline): synthesize pocs/ and evidence/ from recorded evidence (#44) CyberSecurityUPandClaude Opus 4.8 2026-10-02 19:17:27 -03:00
• c547ee6088 chore(deps): bump quinn-proto from 0.11.14 to 0.11.19 in /neurosploit-rs dependabot/cargo/neurosploit-rs/quinn-proto-0.11.19 dependabot[bot] 2026-10-02 23:07:29 +00:00
• d0219f65f5 fix(cli): make a parked one-shot run resumable — accept /continue on stdin v4.2.1 CyberSecurityUPandClaude Opus 4.8 2026-10-02 19:07:24 -03:00
• 1bfaf1837c fix(pool): emit the quota/auth PAUSE notice once, not once per parallel agent CyberSecurityUPandClaude Opus 4.8 2026-10-02 19:01:32 -03:00
• efc687c1e4 feat: --quick economy preset for short, low-cost tests (CLI + REPL + web) CyberSecurityUPandClaude Opus 4.8 2026-10-02 18:54:37 -03:00
• a916abaf75 feat(web): persist jobs + resume an interrupted run where it left off CyberSecurityUPandClaude Opus 4.8 2026-10-02 18:47:45 -03:00
• 01eac8f0c3 fix: robust LLM response handling & JSON extraction (#46) Corentin GoetghebeurandClaude Opus 4.8 2026-10-02 23:48:50 +02:00
• 5d4e7e0347 feat(models): add September 2026 models + Z.ai (GLM) provider CyberSecurityUPandClaude Opus 4.8 2026-09-27 17:48:01 -03:00
• 7c25958827 feat(web): make FAIR top-contributor rows clickable to their finding CyberSecurityUPandClaude Opus 4.8 2026-09-27 17:26:05 -03:00
• f82e3fe265 feat: deepen 268 exploitation skills; web session delete; CSS design system; JEV progress checkpoint CyberSecurityUPandClaude Opus 4.8 2026-09-26 16:25:58 -03:00
• 5ab6451c15 feat(report): SARIF 2.1.0 export + stronger cross-object reference mining (v4.2.1) CyberSecurityUPandClaude Opus 4.8 2026-09-24 12:14:49 -03:00
• e49595b8bf feat(container,coverage): Strix-1.6.2-inspired capabilities v4.2.0 CyberSecurityUPandClaude Opus 5 2026-09-23 01:27:26 -03:00
• 1adc882f6d feat(decision): wire 3 high-value System One decisions (backend = TypeSafe or Laya) CyberSecurityUPandClaude Opus 5 2026-09-23 01:18:14 -03:00
• bc00fa61eb feat(models,pocs): Grok 4.7 support; save every exploit/Frida script to the run's pocs/ CyberSecurityUPandClaude Opus 5 2026-09-21 16:35:49 -03:00
• 4b71ac63a0 feat(mobile): binary/APK/IPA testing mode + 12 RE skills — v4.2.0 CyberSecurityUPandClaude Opus 5 2026-09-20 21:08:14 -03:00
• a4afd784c7 feat(mcp,tooling): NeuroSploit as an MCP server; tool-discovery + CVE-PoC + headless doctrine v4.1.0 CyberSecurityUPandClaude Opus 5 2026-09-20 20:55:49 -03:00
• 56b2c80ae4 feat(decision): pluggable System One backend — TypeSafe (hosted) or Laya (local) CyberSecurityUPandClaude Opus 5 2026-09-20 19:27:14 -03:00
• d752e252e6 docs: drop links to the internal benchmark folder CyberSecurityUPandClaude Opus 5 2026-09-20 19:11:17 -03:00
• d5d136ef34 chore: stop tracking benchmarks/ (internal only, not for the public repo) CyberSecurityUPandClaude Opus 5 2026-09-20 19:10:40 -03:00
• 651b2bfc81 bench: A vs B·TS gap re-test — both close the gaps, TypeSafe calibrates severity CyberSecurityUPandClaude Opus 5 2026-09-20 19:04:08 -03:00
• d334946915 bench: refresh the TypeSafe benchmark — 13/13 coverage, data-type-aware severity CyberSecurityUPandClaude Opus 5 2026-09-20 14:06:39 -03:00
• fce86522ca feat(chain,skills): close benchmark misses — CRLF-on-Location, second-order precondition; condense BENCHMARK CyberSecurityUPandClaude Opus 5 2026-09-20 12:42:36 -03:00
• dff2e3c0f0 chore: stop tracking articles/ (local-only, not for the public repo) CyberSecurityUPandClaude Opus 5 2026-09-20 12:35:39 -03:00
• c9e1f74e23 feat(cvss,typesafe): data-type-aware impact + evidence back-fill; LinkedIn article CyberSecurityUPandClaude Opus 5 2026-09-20 12:34:34 -03:00
• 088d133c80 release: v4.1.0 — assurance layer, TypeSafe, hardening + benchmark CyberSecurityUPandClaude Opus 5 2026-09-20 12:25:23 -03:00
• d2ec0a112d fix(models): treat subscription session/usage-limit stdout as exhaustion CyberSecurityUPandClaude Opus 5 2026-09-19 23:16:56 -03:00
• b23fae7318 fix(transport): exempt loopback from the fail-closed gate (unambiguous host) CyberSecurityUPandClaude Opus 5 2026-09-19 18:24:34 -03:00
• 7661b5eb4e fix(wiring): resolve the last two placebos — pomdp belief gate + harness-owned inbox CyberSecurityUPandClaude Opus 5 2026-09-19 18:20:14 -03:00
• 8e84656f4f feat(typesafe): confirmation-loop agent + --typesafe flag (on/off/auto) for A/B CyberSecurityUPandClaude Opus 5 2026-09-19 18:15:10 -03:00
• 48c38d4798 fix(wiring): activate cvss.rs + waf.rs (were shelf-ware); TypeSafe into CVSS + agent selection CyberSecurityUPandClaude Opus 5 2026-09-19 18:06:50 -03:00
• c3de51d508 feat(typesafe): System One calibrated adjudication (RLCD tier) CyberSecurityUPandClaude Opus 5 2026-09-19 17:56:34 -03:00
• 2e95556df5 feat(hardening): scope-evasion resistance, evidence integrity, untrusted tool output CyberSecurityUPandClaude Opus 5 2026-09-18 21:52:14 -03:00
• b4903575c0 feat(assurance): target gate (default-deny), evidence-graded CVSS, audit anchoring, P1–P5 bundle CyberSecurityUPandClaude Opus 5 2026-09-18 21:25:21 -03:00
• 8894649ccb feat(scope): --scope-file YAML loader + web Scoping/Guardrails UI CyberSecurityUPandClaude Opus 5 2026-09-18 19:20:29 -03:00
• f1fb6b8bc7 feat: PoC validator, Kali sandbox, intercept proxy, compliance, +8 validators CyberSecurityUPandClaude Opus 5 2026-09-14 10:26:06 -03:00
• 64d6efa8c3 feat(waf): tell the edge apart from the application CyberSecurityUPandClaude Opus 5 2026-09-14 01:39:20 -03:00
• 8aa776665a feat(net): fail-closed egress, self-hosted OOB channel, inbound SMS CyberSecurityUPandClaude Opus 5 2026-09-14 01:35:36 -03:00
• 90b4614d94 docs: benchmark vs Strix/Shannon/Penligent, README for budget, provenance, AD graph CyberSecurityUPandClaude Opus 5 2026-09-14 01:21:49 -03:00
• 8d44e4cf4a feat(internal): internal network / AD attack graph with choke-point analysis CyberSecurityUPandClaude Opus 5 2026-09-14 01:19:15 -03:00
• 408350539f feat(budget,provenance): reasoning budget modes and JOASNSCOPE provenance CyberSecurityUPandClaude Opus 5 2026-09-14 01:14:03 -03:00
• 40b047b9e7 feat(agents): 10 skills for techniques the catalogue was missing CyberSecurityUPandClaude Opus 5 2026-09-14 00:57:45 -03:00
• 36c9e05ea7 feat(uncertainty): collect more evidence instead of handing a human a thin verdict CyberSecurityUPandClaude Opus 5 2026-09-14 00:54:01 -03:00
• 170ed3808e fix(pool): a voting panel of distinct providers, not one model asked n times CyberSecurityUPandClaude Opus 5 2026-09-14 00:51:29 -03:00
• fb65074cab feat(chain): attack paths derived per vulnerability, after every agent has reported CyberSecurityUPandClaude Opus 5 2026-09-14 00:49:52 -03:00
• 0422b8dc41 feat(cvss): grade by the impact actually demonstrated, not by the class name CyberSecurityUPandClaude Opus 5 2026-09-14 00:39:35 -03:00
• 9c6b2a3c54 feat(prosecutor): a second judge that shrinks claims instead of deleting findings CyberSecurityUPandClaude Opus 5 2026-09-14 00:35:38 -03:00
• 3800b029f2 feat: browser validator for XSS, and replay that separates request from effect CyberSecurityUPandClaude Opus 5 2026-09-14 00:32:31 -03:00
• 22f2a3894d feat(claims): separate mechanic from impact so an overstatement stops deleting the observation CyberSecurityUPandClaude Opus 5 2026-09-14 00:27:29 -03:00
• 53a6a45448 feat(report): CVSS v3.1 with vectors, a PDF that survives long payloads, capped over-claims CyberSecurityUPandClaude Opus 5 2026-09-14 00:22:10 -03:00
• 936e358850 fix(pipeline): dedupe findings by what they are, not by how they were worded CyberSecurityUPandClaude Opus 5 2026-09-13 20:03:57 -03:00
• b4da49fae4 fix(harness): stop discarding findings when an agent narrates before answering CyberSecurityUPandClaude Opus 5 2026-09-13 19:46:20 -03:00
• 61ae3bc74d feat(report): rebuild reports on demand, from the CLI and the web CyberSecurityUPandClaude Opus 5 2026-09-13 19:27:26 -03:00
• 481a4eb1b9 feat: wire capability tokens and the audit trail through CLI, REPL and web CyberSecurityUPandClaude Opus 5 2026-09-13 19:18:32 -03:00
• 3456c32f4d feat(harness): risk model, engagement policies, capability tokens, audit trail CyberSecurityUPandClaude Opus 5 2026-09-13 17:56:31 -03:00
• c3a6132153 feat(report): findings that answer where / why / how to fix, with a pasteable PoC CyberSecurityUPandClaude Opus 5 2026-09-13 17:48:14 -03:00
• d8ebe05507 feat(harness): replay engine — the harness re-runs the interaction itself CyberSecurityUPandClaude Opus 5 2026-09-13 15:26:50 -03:00
• 4f277838c6 fix(web): responsive pass — real device sizes, scroll in the right containers CyberSecurityUPandClaude Opus 5 2026-09-13 15:16:24 -03:00
• 6475dba752 feat(validation): 13 more CWE validators, each with a rejection rule CyberSecurityUPandClaude Opus 5 2026-09-13 15:10:23 -03:00
• 093c87fbc6 feat(harness): enforced scope guard + deterministic Evidence & Validation Engine CyberSecurityUPandClaude Opus 5 2026-09-13 15:03:21 -03:00
• 6e1b73e036 Merge remote-tracking branch 'origin/main' CyberSecurityUP 2026-09-07 16:58:46 -03:00
• 9d83cb6e30 feat: attack knowledge graph, layered memory, command rectification, FAIR dashboard feat/web-terminal-qa CyberSecurityUPandClaude Opus 5 2026-09-07 15:35:36 -03:00
• 0ef0ce8d94 feat(web): xterm.js terminal dock + front-end QA pass CyberSecurityUPandClaude Opus 5 2026-09-07 13:33:16 -03:00
• 20e2060151 Update README.md Joas A Santos 2026-08-29 11:38:05 -03:00
• cea73a563a Merge branch 'docs/web-console-tutorial' into main CyberSecurityUPandClaude Sonnet 5 2026-08-24 11:43:23 -03:00
• ec53880298 docs: document web console in README/TUTORIAL, note REPL-backed run CyberSecurityUPandClaude Sonnet 5 2026-08-24 11:43:20 -03:00
• 4fbe608a7a feat(web): drive run/whitebox/greybox exploitation through a real REPL session v4.0.0 CyberSecurityUPandClaude Sonnet 5 2026-08-23 16:04:55 -03:00
• 07bed42467 feat(harness): /only REPL command; redesign the HTML report (drop attack-chain, match Typst) CyberSecurityUPandClaude Sonnet 5 2026-08-23 16:04:34 -03:00
• ecc2a9ae03 docs: refresh README for v4.0.0 - correct stale counts, expand web console section CyberSecurityUP 2026-08-23 15:47:59 -03:00
• e253b8b291 feat(web): bulk select/clear-all leads; custom lead generates a real agent CyberSecurityUPandClaude Sonnet 5 2026-08-23 15:43:13 -03:00
• 8047c66e8f fix(web): finding modal — dedupe repeated attribution text, prose vs code sections CyberSecurityUPandClaude Sonnet 5 2026-08-23 15:35:21 -03:00
• a083990ce4 fix(web): attack-graph canvas follows the app theme instead of forcing dark CyberSecurityUPandClaude Sonnet 5 2026-08-23 15:33:48 -03:00
• 7f365b4e88 feat(web): render the attack path as a real node graph, not flat cards CyberSecurityUPandClaude Sonnet 5 2026-08-23 15:21:41 -03:00
• d42e9ff8e8 fix(web): global [hidden] bug, progress bar, F5 persistence, finding detail + PoC CyberSecurityUPandClaude Sonnet 5 2026-08-23 14:37:28 -03:00
• 51c38c1db3 Merge pull request #43 from JoasASantos/feat/v4.0.0-web-ui Joas A Santos 2026-08-23 14:27:42 -03:00
• 040170e54a fix(web): category master switch reads as partial, not off, when only some agents are deselected CyberSecurityUPandClaude Sonnet 5 2026-08-23 14:27:27 -03:00
• 3dcfeb7377 feat(web): require an engagement name before launch CyberSecurityUPandClaude Sonnet 5 2026-08-23 14:20:34 -03:00
• bb659412fc feat(web): engagement wizard, model/auth picker, Auth & Keys menu, attack-path graph CyberSecurityUPandClaude Sonnet 5 2026-08-23 14:16:46 -03:00
• d1d1c71e24 feat(4.0.0): web console — lead board + live findings + real CLI REPL CyberSecurityUPandClaude Sonnet 5 2026-08-23 13:59:19 -03:00