mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-06-30 07:15:30 +02:00
CyberSecurityUP
eb4e13efea
REPL interactivity & findings: - Live findings registered during a run: /results shows them accumulating; /finding opens a selection menu with FULL details (PoC, command, evidence, CVSS, OWASP/CWE, remediation). Past runs too. - /expand (and Ctrl+O) dump the last full, untruncated commands. - Findings colored by severity in the feed (not all-yellow); confirmed vote = green. Stop & report: - CRITICAL: /stop no longer kills validation. New SOFT stop (pool.soft) halts launching new agents but lets in-flight + VALIDATION finish — so confirmed findings are kept. /stop now asks 3 ways: [1] validate then report, [2] report raw (no validation), [3] discard. - Report file:// URL printed on completion/stop. Report: - Typst report restructured: executive summary, a Vulnerability Summary TABLE (#, vuln, severity, CVSS, OWASP/CWE), and per-finding sections with criticality, CVSS, OWASP/CWE, description/impact, PoC, evidence, remediation. owasp passed through. Agents: +14 app-stack/CVE (IIS tilde/WebDAV/ViewState/debug/handler-bypass, CMS fingerprint + WordPress/Joomla/Drupal/default-admin, app-server consoles, exposed VCS, known-CVE & outdated-component exploitation) → 343 total. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
125 lines
4.6 KiB
Typst
125 lines
4.6 KiB
Typst
// NeuroSploit v3.5.1 — Typst report template (blank, structured).
|
|
//
|
|
// The harness generates `report.typ` per run by prepending a `findings` array
|
|
// and a `meta` dict, then including this template's rendering logic. This file
|
|
// is the reference/blank template: it renders a cover, an executive summary with
|
|
// severity counts, and one section per finding. Compile with:
|
|
// typst compile report.typ report.pdf
|
|
//
|
|
// Expected inputs (defined above this template in the generated file):
|
|
// #let meta = (target: "", run_id: "", generated: "", model: "")
|
|
// #let findings = ( (severity: "", title: "", agent: "", cwe: "", cvss: "",
|
|
// endpoint: "", payload: "", evidence: "", impact: "",
|
|
// remediation: "", votes: "", confidence: 0.0), ... )
|
|
|
|
#let sevcolor = (
|
|
Critical: rgb("#c0392b"), High: rgb("#e67e22"), Medium: rgb("#f1c40f"),
|
|
Low: rgb("#3498db"), Info: rgb("#7f8c8d"),
|
|
)
|
|
#let sevbadge(s) = box(
|
|
fill: sevcolor.at(s, default: rgb("#7f8c8d")), inset: (x: 5pt, y: 2pt),
|
|
radius: 3pt, text(fill: white, weight: "bold", size: 8pt, upper(s)),
|
|
)
|
|
#let sevrank(s) = (Critical: 0, High: 1, Medium: 2, Low: 3, Info: 4).at(s, default: 5)
|
|
|
|
#set page(margin: 2cm, numbering: "1", footer: context [
|
|
#set text(size: 8pt, fill: gray)
|
|
NeuroSploit v3.5.1 · #meta.target · confidential
|
|
#h(1fr) #counter(page).display()
|
|
])
|
|
#set text(font: ("Helvetica Neue", "Helvetica", "Arial"), size: 10pt)
|
|
#set heading(numbering: none)
|
|
|
|
// ---- Cover ----
|
|
#v(3cm)
|
|
#align(center)[
|
|
#text(28pt, weight: "bold")[#text(fill: rgb("#7c5cff"))[Neuro]Sploit]
|
|
#v(2pt)
|
|
#text(15pt, fill: gray)[Penetration Test Report]
|
|
#v(1cm)
|
|
#text(13pt)[Target: #strong(meta.target)]
|
|
#v(4pt)
|
|
#text(10pt, fill: gray)[Run #meta.run_id · #meta.generated · models: #meta.model]
|
|
#v(8pt)
|
|
#text(9pt, fill: gray)[by #strong[Joas A Santos] & #strong[Red Team Leaders]]
|
|
]
|
|
#pagebreak()
|
|
|
|
// ---- Executive summary ----
|
|
= Executive Summary
|
|
|
|
#let counts = (:)
|
|
#for f in findings {
|
|
counts.insert(f.severity, counts.at(f.severity, default: 0) + 1)
|
|
}
|
|
#if findings.len() == 0 [
|
|
No validated findings were produced for this engagement. All candidate issues
|
|
were either unproven or rejected by multi-model adversarial validation.
|
|
] else [
|
|
This engagement produced #strong(str(findings.len())) validated finding(s),
|
|
each confirmed by multi-model voting.
|
|
|
|
#v(6pt)
|
|
#grid(columns: 5, gutter: 8pt,
|
|
..("Critical", "High", "Medium", "Low", "Info").map(s => box(
|
|
width: 100%, inset: 8pt, radius: 6pt, stroke: 0.5pt + sevcolor.at(s),
|
|
align(center)[
|
|
#text(18pt, weight: "bold", fill: sevcolor.at(s))[#str(counts.at(s, default: 0))]
|
|
#v(-4pt) #text(8pt, upper(s))
|
|
],
|
|
))
|
|
)
|
|
]
|
|
|
|
#let sorted = findings.sorted(key: f => sevrank(f.severity))
|
|
|
|
// ---- Vulnerability summary table ----
|
|
#if sorted.len() > 0 [
|
|
#v(8pt)
|
|
== Vulnerability Summary
|
|
#v(4pt)
|
|
#table(
|
|
columns: (auto, 1fr, auto, auto, auto),
|
|
inset: 6pt, align: (left + horizon, left + horizon, center + horizon, center + horizon, center + horizon),
|
|
stroke: 0.5pt + rgb("#dddddd"),
|
|
table.header(
|
|
text(weight: "bold")[\#], text(weight: "bold")[Vulnerability],
|
|
text(weight: "bold")[Severity], text(weight: "bold")[CVSS], text(weight: "bold")[OWASP / CWE],
|
|
),
|
|
..sorted.enumerate().map(((i, f)) => (
|
|
str(i + 1), f.title, sevbadge(f.severity), f.cvss, f.owasp,
|
|
)).flatten()
|
|
)
|
|
]
|
|
|
|
#v(10pt)
|
|
#line(length: 100%, stroke: 0.5pt + gray)
|
|
|
|
// ---- Detailed findings ----
|
|
= Findings
|
|
#if sorted.len() == 0 [
|
|
#text(fill: gray)[_Nothing to report._]
|
|
]
|
|
#for (i, f) in sorted.enumerate() [
|
|
#block(breakable: false, width: 100%, inset: 10pt, radius: 6pt,
|
|
stroke: (left: 3pt + sevcolor.at(f.severity, default: gray), rest: 0.5pt + rgb("#dddddd")))[
|
|
#sevbadge(f.severity) #h(6pt) #text(12pt, weight: "bold")[#str(i + 1). #f.title]
|
|
#v(4pt)
|
|
#table(
|
|
columns: (auto, 1fr, auto, 1fr),
|
|
inset: 4pt, stroke: none, align: left + horizon,
|
|
text(8pt, fill: gray)[Criticality], text(8pt)[#f.severity],
|
|
text(8pt, fill: gray)[CVSS], text(8pt)[#f.cvss],
|
|
text(8pt, fill: gray)[OWASP/CWE], text(8pt)[#f.owasp · #f.cwe],
|
|
text(8pt, fill: gray)[Confidence], text(8pt)[#f.votes votes · #str(f.confidence)],
|
|
text(8pt, fill: gray)[Location], text(8pt)[#raw(f.endpoint)],
|
|
text(8pt, fill: gray)[Agent], text(8pt)[#raw(f.agent)],
|
|
)
|
|
#v(4pt) #strong[Description / Impact] #linebreak() #text(9pt)[#f.impact]
|
|
#v(4pt) #strong[Proof of Concept] #linebreak() #raw(f.payload)
|
|
#v(3pt) #strong[Evidence] #linebreak() #raw(f.evidence)
|
|
#v(3pt) #strong[Remediation] #linebreak() #text(9pt)[#f.remediation]
|
|
]
|
|
#v(8pt)
|
|
]
|