Files
CyberSecurityUP eb4e13efea v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents
REPL interactivity & findings:
- Live findings registered during a run: /results shows them accumulating;
  /finding opens a selection menu with FULL details (PoC, command, evidence,
  CVSS, OWASP/CWE, remediation). Past runs too.
- /expand (and Ctrl+O) dump the last full, untruncated commands.
- Findings colored by severity in the feed (not all-yellow); confirmed vote = green.

Stop & report:
- CRITICAL: /stop no longer kills validation. New SOFT stop (pool.soft) halts
  launching new agents but lets in-flight + VALIDATION finish — so confirmed
  findings are kept. /stop now asks 3 ways: [1] validate then report,
  [2] report raw (no validation), [3] discard.
- Report file:// URL printed on completion/stop.

Report:
- Typst report restructured: executive summary, a Vulnerability Summary TABLE
  (#, vuln, severity, CVSS, OWASP/CWE), and per-finding sections with criticality,
  CVSS, OWASP/CWE, description/impact, PoC, evidence, remediation. owasp passed through.

Agents: +14 app-stack/CVE (IIS tilde/WebDAV/ViewState/debug/handler-bypass,
CMS fingerprint + WordPress/Joomla/Drupal/default-admin, app-server consoles,
exposed VCS, known-CVE & outdated-component exploitation) → 343 total.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-24 23:21:43 -03:00

107 lines
1.8 KiB
Plaintext

# ==============================
# Environment & Secrets
# ==============================
.env
.env.local
.env.production
.env.*.local
# ==============================
# Python
# ==============================
venv/
__pycache__/
*.pyc
*.pyo
*.pyd
*.egg-info/
dist/
build/
*.egg
# ==============================
# Node.js / Frontend
# ==============================
frontend/node_modules/
frontend/dist/
# ==============================
# Database & Scan Data
# ==============================
data/neurosploit.db
data/neurosploit.db.*
data/*.db
data/*.db.*
data/execution_history.json
data/access_control_learning.json
data/reports/
# ==============================
# Reports & Screenshots
# ==============================
reports/screenshots/
# ==============================
# Logs & PIDs
# ==============================
logs/
.pids/
*.log
# ==============================
# macOS
# ==============================
.DS_Store
.AppleDouble
.LSOverride
# ==============================
# IDE & Editor
# ==============================
.vscode/
.idea/
*.swp
*.swo
*~
# ==============================
# Claude Code local config
# ==============================
.claude/
# ==============================
# Docker (runtime)
# ==============================
docker/*.env
# ==============================
# Results (runtime output)
# ==============================
results/
# v3.3.0 runtime RL state
data/rl_state.json
# Playwright demo artifacts
.playwright-mcp/
neurosploit_gui_*.png
neurosploit_demo_*.png
logs/webgui.log
# generated reports
reports/report.*
reports/*.pdf
# Rust build artifacts (v3.4.0)
neurosploit-rs/target/
reports/*.html
reports/report_rs.html
runs/
data/rl_state_rs.json
neurosploit-rs/runs/
v34_gui.png
data/repl_runs.json
data/repl_history.txt
.neurosploit/
/tmp/*