Files
CyberSecurityUP 3ca3f269ee v3.4.x: intelligent agent selection, whitebox, recon/code agents, Gemini, artifacts, RL, XBOW GUI
Harness intelligence:
- After recon, the model SELECTS which specialist agents match the target
  (select_agents) — runs the relevant subset, not blindly top-N
- RL reward store (rl.rs): per-agent weights persist to data/rl_state_rs.json,
  reward validated findings (severity-weighted), decay idle, bias next run
- Run artifacts persisted as JSON + MD (recon, exploitation transcript,
  findings, html report) under runs/<target>-<ts>/ for reuse by other AIs

Whitebox mode:
- run_whitebox: walks a repo, builds bounded source context, runs code agents,
  validates by adversarial vote. CLI `whitebox <path>` + web "White-box" mode

Agents: +12 recon (subdomain/tech/js/api/secrets/dns/content/param/waf/cloud/
graphql/osint) and +24 code SAST reviewers (sqli/cmdi/path/ssrf/xss/deser/
secrets/crypto/authz/idor/xxe/redirect/ssti/race/eval/csrf/random/logging/
upload/mass-assign/jwt/cors). Loader gains recon/ + code/ categories → 249 total

Models: +Google Gemini provider (API + gemini CLI subscription); installed_cli_
backends now detects gemini; chat_cli handles gemini/codex/grok + optional
Playwright MCP (.mcp.json) on the subscription path with autonomy flags

GUI: full XBOW-style redesign — sidebar (Operate/Library), topbar status, mode
segment (black-box/white-box), model panel, live console, severity cards,
agent browser with category filters, models view; responsive + aligned

Verified: cargo build --release clean; CLI agents/whitebox; LIVE subscription
run shows model selecting 23→4 agents, RL update, artifacts written; GUI +
white-box toggle in Playwright.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-23 11:39:56 -03:00

103 lines
1.7 KiB
Plaintext

# ==============================
# Environment & Secrets
# ==============================
.env
.env.local
.env.production
.env.*.local
# ==============================
# Python
# ==============================
venv/
__pycache__/
*.pyc
*.pyo
*.pyd
*.egg-info/
dist/
build/
*.egg
# ==============================
# Node.js / Frontend
# ==============================
frontend/node_modules/
frontend/dist/
# ==============================
# Database & Scan Data
# ==============================
data/neurosploit.db
data/neurosploit.db.*
data/*.db
data/*.db.*
data/execution_history.json
data/access_control_learning.json
data/reports/
# ==============================
# Reports & Screenshots
# ==============================
reports/screenshots/
# ==============================
# Logs & PIDs
# ==============================
logs/
.pids/
*.log
# ==============================
# macOS
# ==============================
.DS_Store
.AppleDouble
.LSOverride
# ==============================
# IDE & Editor
# ==============================
.vscode/
.idea/
*.swp
*.swo
*~
# ==============================
# Claude Code local config
# ==============================
.claude/
# ==============================
# Docker (runtime)
# ==============================
docker/*.env
# ==============================
# Results (runtime output)
# ==============================
results/
# v3.3.0 runtime RL state
data/rl_state.json
# Playwright demo artifacts
.playwright-mcp/
neurosploit_gui_*.png
neurosploit_demo_*.png
logs/webgui.log
# generated reports
reports/report.*
reports/*.pdf
# Rust build artifacts (v3.4.0)
neurosploit-rs/target/
reports/*.html
reports/report_rs.html
runs/
data/rl_state_rs.json
neurosploit-rs/runs/
v34_gui.png