mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-06-30 16:55:34 +02:00
CyberSecurityUP
3ca3f269ee
Harness intelligence: - After recon, the model SELECTS which specialist agents match the target (select_agents) — runs the relevant subset, not blindly top-N - RL reward store (rl.rs): per-agent weights persist to data/rl_state_rs.json, reward validated findings (severity-weighted), decay idle, bias next run - Run artifacts persisted as JSON + MD (recon, exploitation transcript, findings, html report) under runs/<target>-<ts>/ for reuse by other AIs Whitebox mode: - run_whitebox: walks a repo, builds bounded source context, runs code agents, validates by adversarial vote. CLI `whitebox <path>` + web "White-box" mode Agents: +12 recon (subdomain/tech/js/api/secrets/dns/content/param/waf/cloud/ graphql/osint) and +24 code SAST reviewers (sqli/cmdi/path/ssrf/xss/deser/ secrets/crypto/authz/idor/xxe/redirect/ssti/race/eval/csrf/random/logging/ upload/mass-assign/jwt/cors). Loader gains recon/ + code/ categories → 249 total Models: +Google Gemini provider (API + gemini CLI subscription); installed_cli_ backends now detects gemini; chat_cli handles gemini/codex/grok + optional Playwright MCP (.mcp.json) on the subscription path with autonomy flags GUI: full XBOW-style redesign — sidebar (Operate/Library), topbar status, mode segment (black-box/white-box), model panel, live console, severity cards, agent browser with category filters, models view; responsive + aligned Verified: cargo build --release clean; CLI agents/whitebox; LIVE subscription run shows model selecting 23→4 agents, RL update, artifacts written; GUI + white-box toggle in Playwright. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
37 lines
1.0 KiB
Markdown
37 lines
1.0 KiB
Markdown
# JavaScript Analysis Specialist Agent
|
|
|
|
## User Prompt
|
|
You are performing reconnaissance on **{target}** to extract endpoints, secrets and logic from client-side JS.
|
|
|
|
**Recon Context:**
|
|
{recon_json}
|
|
|
|
**METHODOLOGY:**
|
|
|
|
### 1. Collect
|
|
- Gather all JS bundles and sourcemaps; `katana`/`gau` for URLs
|
|
|
|
### 2. Extract
|
|
- Regex for API paths, fetch/axios calls, API keys (sk-, AIza, nvapi-), tokens
|
|
|
|
### 3. Map
|
|
- Build an endpoint + parameter inventory from the JS for downstream agents
|
|
|
|
### 4. Report Format
|
|
For each CONFIRMED finding:
|
|
```
|
|
FINDING:
|
|
- Title: JavaScript Analysis Specialist at [asset/endpoint]
|
|
- Severity: Low
|
|
- CWE: CWE-200
|
|
- Endpoint: [URL/host]
|
|
- Vector: [what/where]
|
|
- Payload: [PoC / vulnerable code snippet]
|
|
- Evidence: [proof / exact code quoted]
|
|
- Impact: Hidden endpoints and leaked secrets in bundles
|
|
- Remediation: Strip secrets from client code; restrict sourcemaps
|
|
```
|
|
|
|
## System Prompt
|
|
You are a JS-recon specialist. Report only endpoints/secrets actually present in the served JS, quoting the snippet. Validated secrets only; never invent.
|