mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-10-05 15:37:24 +02:00
Spin Kali up for the engagement, run tool-recon in it, let the LLM refine on top, tear it down after. - kali_provision_recon_tools(): installs the recon toolbox (subfinder/httpx/ katana/gau/waybackurls/nuclei/naabu/dnsx/assetfinder/gf/qsreplace/anew via go install + apt) in the Kali sandbox on demand, idempotent, once per run. - kali_tool_recon(): deterministic tool-recon phase — gau/waybackurls/katana URL harvest + targeted nuclei (exposures/misconfig/takeovers, high-signal only) + gf-flagged candidate URLs by class — over the live hosts, then folded into the recon context so the LLM works on top of the tool output and confirms each. Runs in the sandbox (--sandbox) or on host tools via recon_tool(). - Engine autostart: if the container engine is installed but not running, start it automatically (colima start / open -a Docker / systemctl start docker / podman machine start) and poll until up — a --sandbox run no longer fails just because the daemon wasn't started. Clear guidance if it can't be started. - Teardown: the Kali container is removed at the end of the run (override with NEUROSPLOIT_KEEP_SANDBOX=1). Version 4.2.4 across CLI/clap/web/README/TUTORIAL. 423 tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
22 lines
499 B
TOML
22 lines
499 B
TOML
[workspace]
|
|
members = ["crates/harness", "app"]
|
|
resolver = "2"
|
|
|
|
[workspace.package]
|
|
version = "4.2.4"
|
|
edition = "2021"
|
|
license = "MIT"
|
|
repository = "https://github.com/JoasASantos/NeuroSploit"
|
|
|
|
[workspace.dependencies]
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = ["full"] }
|
|
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
|
|
anyhow = "1"
|
|
futures = "0.3"
|
|
|
|
[profile.release]
|
|
opt-level = 2
|
|
lto = "thin"
|