mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-06-30 07:15:30 +02:00
CyberSecurityUP
55af0d4634
Re-model the pentest agent into an autonomous, markdown-driven engine that turns a URL into a full engagement and delegates execution to a locally installed agentic CLI backend. Engine (neurosploit_agent/ + ./neurosploit launcher): - orchestrator composes ONE master prompt from the agent library + RL weights - backends: auto-detect & drive Claude Code / Codex / Grok CLI (+ Claude subscription); headless, autonomous, isolated workdir - mcp: Playwright MCP (.mcp.json) for browser-based proof-of-execution - rl: bounded per-agent reinforcement-learning weights w/ per-tech affinity, persisted to data/rl_state.json - models: latest registry incl. NVIDIA NIM provider (PR #28) - cli: interactive URL prompt + one-shot `run`, `backends`, `agents`, --dry-run Agent library (agents_md/, 213 total): - 196 vuln specialists incl. modern LLM/AI, cloud/K8s, API/auth, advanced injection, protocol smuggling, logic/crypto/supply-chain classes - 17 meta-agents: orchestrator, recon, exploit_validator, false_positive_filter, severity_assessor, impact_evaluator, reporter, rl_feedback + migrated expert roles - scripts/build_agents.py data-driven builder; REGISTRY.md index Docs: rewritten README.md, v3.3.0 RELEASE.md, .env.example (NVIDIA NIM, xAI, engine vars). Retire legacy Python orchestration (neurosploit.py + agent classes) to legacy/. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
50 lines
1.6 KiB
Python
50 lines
1.6 KiB
Python
"""
|
|
MCP bridge for NeuroSploit v3.3.0.
|
|
|
|
Generates the MCP server configuration the agentic CLI backend loads so the
|
|
autonomous run can drive a real browser (Playwright) and any extra MCP tooling.
|
|
Playwright lets agents render SPAs, execute JS, capture DOM/network/screenshots
|
|
and confirm client-side execution (XSS/CSTI) — turning "the payload reflected"
|
|
into "the payload executed", which is what the validator agents demand.
|
|
"""
|
|
|
|
import json
|
|
import os
|
|
import shutil
|
|
from typing import Dict
|
|
|
|
ROOT = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
|
|
|
|
|
|
def playwright_server() -> Dict:
|
|
"""Prefer a local @playwright/mcp; fall back to npx on demand."""
|
|
return {
|
|
"command": "npx",
|
|
"args": ["-y", "@playwright/mcp@latest", "--headless", "--isolated"],
|
|
}
|
|
|
|
|
|
def build_mcp_config(extra: Dict[str, Dict] | None = None) -> Dict:
|
|
servers = {"playwright": playwright_server()}
|
|
if extra:
|
|
servers.update(extra)
|
|
return {"mcpServers": servers}
|
|
|
|
|
|
def write_mcp_config(workdir: str, extra: Dict[str, Dict] | None = None) -> str:
|
|
"""Write a `.mcp.json` into the run workdir and return its path.
|
|
|
|
Claude Code auto-loads `.mcp.json` from the working directory; Codex/Grok
|
|
accept an explicit config path (see backends.py).
|
|
"""
|
|
cfg = build_mcp_config(extra)
|
|
path = os.path.join(workdir, ".mcp.json")
|
|
os.makedirs(workdir, exist_ok=True)
|
|
json.dump(cfg, open(path, "w", encoding="utf-8"), indent=2)
|
|
return path
|
|
|
|
|
|
def playwright_available() -> bool:
|
|
"""Best-effort check that Playwright MCP can be launched."""
|
|
return shutil.which("npx") is not None
|