NeuroSploit

mirror of https://github.com/CyberSecurityUP/NeuroSploit.git synced 2026-07-04 02:17:50 +02:00

Files

T

CyberSecurityUP 3ca04498a9 harness: deterministic HTTP probe grounds recon & decisions (more robust)

New harness::probe runs a real request/response analysis of the target BEFORE
the model recon and injects the observed facts into recon, so agent-selection
and exploitation decisions are grounded in evidence (robust even when model
recon is weak):
- status & redirect, Server/X-Powered-By/content-type, 6 security headers,
  cookie flags (HttpOnly/Secure/SameSite), CORS reflection test (arbitrary
  Origin + credentials), tech fingerprint, linked scripts, form count, a 404
  baseline for soft-404 differentials, and high-signal paths (/robots.txt,
  /.git/config, /.env, /sitemap.xml, /.well-known/security.txt).
- Best-effort (never fatal — degrades to a note on network failure), honors the
  identifying User-Agent and the Burp/ZAP proxy. Wired into black-box run() and
  greybox recon. A one-line probe summary streams to the live feed.

2026-07-02 13:48:04 -03:00

app

identification/attribution + multi-role access-control auth (v3.5.5)

2026-07-01 23:59:02 -03:00

crates/harness

harness: deterministic HTTP probe grounds recon & decisions (more robust)

2026-07-02 13:48:04 -03:00

templates

v3.5.1: live findings + /finding + Ctrl+O/expand + 3-way /stop (soft validate) + report URL + structured Typst + IIS/CMS/CVE agents

2026-06-24 23:21:43 -03:00

Cargo.lock

v3.5.5 — cloud infrastructure testing + REPL polish