Files
NeuroSploit/backend/config.py
CyberSecurityUP e0935793c5 NeuroSploit v3.2 - Autonomous AI Penetration Testing Platform
116 modules | 100 vuln types | 18 API routes | 18 frontend pages

Major features:
- VulnEngine: 100 vuln types, 526+ payloads, 12 testers, anti-hallucination prompts
- Autonomous Agent: 3-stream auto pentest, multi-session (5 concurrent), pause/resume/stop
- CLI Agent: Claude Code / Gemini CLI / Codex CLI inside Kali containers
- Validation Pipeline: negative controls, proof of execution, confidence scoring, judge
- AI Reasoning: ReACT engine, token budget, endpoint classifier, CVE hunter, deep recon
- Multi-Agent: 5 specialists + orchestrator + researcher AI + vuln type agents
- RAG System: BM25/TF-IDF/ChromaDB vectorstore, few-shot, reasoning templates
- Smart Router: 20 providers (8 CLI OAuth + 12 API), tier failover, token refresh
- Kali Sandbox: container-per-scan, 56 tools, VPN support, on-demand install
- Full IA Testing: methodology-driven comprehensive pentest sessions
- Notifications: Discord, Telegram, WhatsApp/Twilio multi-channel alerts
- Frontend: React/TypeScript with 18 pages, real-time WebSocket updates
2026-02-22 17:59:28 -03:00

85 lines
2.7 KiB
Python
Executable File

"""
NeuroSploit v3 - Configuration
"""
import os
from pathlib import Path
from typing import Optional
from pydantic_settings import BaseSettings
class Settings(BaseSettings):
"""Application settings"""
# Application
APP_NAME: str = "NeuroSploit v3"
APP_VERSION: str = "3.0.0"
DEBUG: bool = True
# Server
HOST: str = "0.0.0.0"
PORT: int = 8000
# Database
DATABASE_URL: str = "sqlite+aiosqlite:///./data/neurosploit.db"
# Paths
BASE_DIR: Path = Path(__file__).parent.parent
DATA_DIR: Path = BASE_DIR / "data"
REPORTS_DIR: Path = DATA_DIR / "reports"
SCANS_DIR: Path = DATA_DIR / "scans"
PROMPTS_DIR: Path = BASE_DIR / "prompts"
# LLM Settings
ANTHROPIC_API_KEY: Optional[str] = os.getenv("ANTHROPIC_API_KEY")
OPENAI_API_KEY: Optional[str] = os.getenv("OPENAI_API_KEY")
OPENROUTER_API_KEY: Optional[str] = os.getenv("OPENROUTER_API_KEY")
GEMINI_API_KEY: Optional[str] = os.getenv("GEMINI_API_KEY")
TOGETHER_API_KEY: Optional[str] = os.getenv("TOGETHER_API_KEY")
FIREWORKS_API_KEY: Optional[str] = os.getenv("FIREWORKS_API_KEY")
DEFAULT_LLM_PROVIDER: str = "claude"
DEFAULT_LLM_MODEL: str = "claude-sonnet-4-20250514"
MAX_OUTPUT_TOKENS: Optional[int] = None
ENABLE_MODEL_ROUTING: bool = False
# Feature Flags
ENABLE_KNOWLEDGE_AUGMENTATION: bool = False
ENABLE_BROWSER_VALIDATION: bool = False
ENABLE_VULN_AGENTS: bool = False
VULN_AGENT_CONCURRENCY: int = 10
ENABLE_SMART_ROUTER: bool = False
# RAG (Retrieval-Augmented Generation)
ENABLE_RAG: bool = True # Enabled by default (zero deps, uses BM25)
RAG_BACKEND: str = "auto" # "auto", "chromadb", "tfidf", "bm25"
# External Methodology File (injected into all LLM calls)
METHODOLOGY_FILE: Optional[str] = None # Path to .md methodology file
# CLI Agent (AI CLI tools inside Kali sandbox)
ENABLE_CLI_AGENT: bool = False # Feature flag (default: disabled)
CLI_AGENT_MAX_RUNTIME: int = 1800 # Max runtime in seconds (default: 30 min)
CLI_AGENT_DEFAULT_PROVIDER: str = "claude_code" # Default CLI provider
# Codex LLM
CODEX_API_KEY: Optional[str] = os.getenv("CODEX_API_KEY")
# Scan Settings
MAX_CONCURRENT_SCANS: int = 5
DEFAULT_TIMEOUT: int = 30
MAX_REQUESTS_PER_SECOND: int = 10
# CORS
CORS_ORIGINS: list = ["http://localhost:3000", "http://127.0.0.1:3000"]
class Config:
env_file = ".env"
case_sensitive = True
settings = Settings()
# Ensure directories exist
settings.DATA_DIR.mkdir(parents=True, exist_ok=True)
settings.REPORTS_DIR.mkdir(parents=True, exist_ok=True)
settings.SCANS_DIR.mkdir(parents=True, exist_ok=True)