@pensar/apex 0.0.113-canary.e01104f0 → 0.0.113
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +37 -36
- package/build/agent-cff8va32.js +16 -0
- package/build/{agent-ek9gh3ae.js → agent-k1n19b3w.js} +8 -8
- package/build/{auth-bs9a4180.js → auth-a0ftn8cb.js} +4 -4
- package/build/{authentication-d1mjs6ez.js → authentication-vjefzf37.js} +7 -7
- package/build/blackboxAgent-dq8eany1.js +17 -0
- package/build/{blackboxPentest-ds6gmjj1.js → blackboxPentest-26japf1w.js} +12 -12
- package/build/{cli-t30ekexm.js → cli-065mgjsh.js} +2 -2
- package/build/{cli-j9s2krw4.js → cli-0v3p48tt.js} +2 -2
- package/build/{cli-mdm43fxw.js → cli-4sxvxwcb.js} +1 -1
- package/build/{cli-9x51bc66.js → cli-6nhtpv4g.js} +1 -1
- package/build/{cli-tmnh3w7x.js → cli-7kpzf8kz.js} +2 -2
- package/build/{cli-kjrwahpt.js → cli-g0r410cd.js} +1 -1
- package/build/{cli-t90adgwt.js → cli-j6qdxby9.js} +2 -2
- package/build/{cli-v0xwk0fh.js → cli-mnqb1xvt.js} +1 -1
- package/build/{cli-n7nkxh7s.js → cli-qeg15dzj.js} +1 -1
- package/build/{cli-pv90y7mr.js → cli-t7dpdkd6.js} +10 -10
- package/build/{cli-gs2474ec.js → cli-tat7hrek.js} +6 -6
- package/build/{cli-j7pkgdg0.js → cli-wqh6md2n.js} +1 -1
- package/build/{cli-ppsx314k.js → cli-yc2cs5cs.js} +1 -1
- package/build/cli.js +20 -20
- package/build/{fixes-450w8gzw.js → fixes-szq7tb0p.js} +4 -4
- package/build/{index-d9ss9bw1.js → index-4ds7eh13.js} +6 -6
- package/build/{index-wepykpjm.js → index-8dgs0erz.js} +2 -2
- package/build/{index-jx79cjz7.js → index-sr5w8v3d.js} +12 -12
- package/build/{issues-8b9rp58m.js → issues-7yvjwc2j.js} +4 -4
- package/build/{logs-6kata0m1.js → logs-22ks7j0v.js} +4 -4
- package/build/pentest-agm6pqh1.js +25 -0
- package/build/{pentests-yc4mznf0.js → pentests-7a8s43nj.js} +4 -4
- package/build/{projects-x2wbwev6.js → projects-0a1zfjgm.js} +4 -4
- package/build/{targetedPentest-rkz6f573.js → targetedPentest-qrcrtpzg.js} +8 -8
- package/build/{uninstall-eps6r1sy.js → uninstall-hp43qwmn.js} +1 -1
- package/package.json +1 -1
- package/build/agent-c3nr8yd0.js +0 -16
- package/build/blackboxAgent-qptvwtaz.js +0 -17
- package/build/pentest-bhejyq2n.js +0 -25
package/README.md
CHANGED
|
@@ -1,8 +1,6 @@
|
|
|
1
1
|
<h1 align="center">Pensar Apex</h1>
|
|
2
2
|
|
|
3
|
-
<p align="center">
|
|
4
|
-
AI-powered penetration testing using autonomous agents — directly in your terminal. Run blackbox and whitebox pentests that explore, reason, and surface real vulnerabilities.
|
|
5
|
-
|
|
3
|
+
<p align="center">AI-powered penetration testing using an AI agent to perform comprehensive blackbox and whitebox pentesting - directly in your terminal.
|
|
6
4
|
</p>
|
|
7
5
|
|
|
8
6
|
<p align="center">
|
|
@@ -21,49 +19,53 @@ Want to run from the cloud or integrate it with your CI/CD? See <a href="https:/
|
|
|
21
19
|
<!-- <p align="center">
|
|
22
20
|
<img src="screenshot.png" alt="Pensar Apex Screenshot" width="800">
|
|
23
21
|
</p> -->
|
|
24
|
-
## What is Apex?
|
|
25
22
|
|
|
26
|
-
|
|
23
|
+
## Use Cases
|
|
27
24
|
|
|
28
|
-
|
|
25
|
+
Apex enables both developers and security professionals to run autonomous and assisted penetration testing directly from the terminal.
|
|
29
26
|
|
|
30
|
-
|
|
27
|
+
### Developers: Run a Pentest in Minutes
|
|
31
28
|
|
|
32
|
-
|
|
29
|
+
Apex makes it easy for developers to run a real penetration test without needing deep offensive security expertise.
|
|
33
30
|
|
|
34
|
-
|
|
31
|
+
Using the autonomous `/pentest` mode, Apex will perform reconnaissance, attack surface discovery, vulnerability testing, and exploitation attempts automatically.
|
|
35
32
|
|
|
36
|
-
|
|
37
|
-
- **Structured, auditable output** - Every vulnerability is automatically scored (CVSS 4.0), classified (CWE), and documented with evidence and remediation steps. No raw tool dumps.
|
|
38
|
-
- **Real exploitation, not guesswork** - Apex writes, runs, and validates proof-of-concept scripts. If the PoC doesn't succeed, it pivots to a different technique.
|
|
39
|
-
- **Blackbox and whitebox** - Test a live target with no source access, or analyze your codebase to map endpoints and test them against a running instance.
|
|
40
|
-
- **30+ built-in tools** - Browser automation, shell execution, HTTP requests, file analysis, web search for CVE lookups, authenticated crawling, and more. Optional Kali Linux container adds 25+ offensive security tools (nmap, sqlmap, hydra, hashcat, gobuster, and others).
|
|
33
|
+
This allows teams to quickly identify security issues before they reach production.
|
|
41
34
|
|
|
42
|
-
|
|
35
|
+
```bash
|
|
36
|
+
/pentest
|
|
37
|
+
```
|
|
43
38
|
|
|
44
|
-
|
|
39
|
+
Examples:
|
|
45
40
|
|
|
46
|
-
|
|
41
|
+
- Test a staging environment before deploying
|
|
42
|
+
- Scan a newly launched domain or API
|
|
43
|
+
- Run quick security checks during development
|
|
44
|
+
- Identify exposed services or misconfigurations
|
|
47
45
|
|
|
48
|
-
|
|
46
|
+
This is the **fastest way to get real pentesting coverage without becoming a security expert.**
|
|
49
47
|
|
|
50
|
-
|
|
48
|
+
---
|
|
51
49
|
|
|
52
|
-
|
|
50
|
+
### Security Engineers: Advanced Operator Workflows
|
|
53
51
|
|
|
54
|
-
|
|
52
|
+
Security professionals can use Apex as an **agentic offensive security harness** that orchestrates tools and reasoning workflows.
|
|
53
|
+
|
|
54
|
+
The `/operator` mode allows engineers to work interactively with the Offensive Security Agent, guiding investigations and chaining tools dynamically.
|
|
55
|
+
|
|
56
|
+
```bash
|
|
57
|
+
/operator
|
|
58
|
+
```
|
|
55
59
|
|
|
56
|
-
|
|
57
|
-
- Run `/pentest` before merging a PR — catch vulnerabilities as naturally as running tests
|
|
58
|
-
- Get actionable findings with severity scores, evidence, and suggested fixes — no security background needed
|
|
59
|
-
- Integrate into CI/CD via headless CLI commands or Pensar Console
|
|
60
|
+
Examples:
|
|
60
61
|
|
|
61
|
-
|
|
62
|
-
-
|
|
63
|
-
-
|
|
64
|
-
-
|
|
65
|
-
-
|
|
62
|
+
- Deep investigation of suspicious endpoints
|
|
63
|
+
- Manual exploitation of discovered vulnerabilities
|
|
64
|
+
- Tool orchestration across recon and exploitation phases
|
|
65
|
+
- Validation and reproduction of vulnerabilities
|
|
66
|
+
- Open-source security research / testing
|
|
66
67
|
|
|
68
|
+
This turns Apex into a **terminal-native AI pentesting partner** rather than just a scanner.
|
|
67
69
|
|
|
68
70
|
## Installation
|
|
69
71
|
|
|
@@ -80,18 +82,17 @@ brew tap pensarai/tap
|
|
|
80
82
|
brew install apex
|
|
81
83
|
```
|
|
82
84
|
|
|
83
|
-
#### npm
|
|
84
|
-
|
|
85
|
-
```bash
|
|
86
|
-
npm install -g @pensar/apex
|
|
87
|
-
```
|
|
88
|
-
|
|
89
85
|
#### Windows (PowerShell)
|
|
90
86
|
|
|
91
87
|
```powershell
|
|
92
88
|
irm https://www.pensarai.com/apex.ps1 | iex
|
|
93
89
|
```
|
|
94
90
|
|
|
91
|
+
#### npm
|
|
92
|
+
|
|
93
|
+
```bash
|
|
94
|
+
npm install -g @pensar/apex
|
|
95
|
+
```
|
|
95
96
|
|
|
96
97
|
## Usage
|
|
97
98
|
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import {
|
|
2
|
+
CodeAgent
|
|
3
|
+
} from "./cli-7kpzf8kz.js";
|
|
4
|
+
import"./cli-t7dpdkd6.js";
|
|
5
|
+
import"./cli-wqh6md2n.js";
|
|
6
|
+
import"./cli-j6qdxby9.js";
|
|
7
|
+
import"./cli-yc2cs5cs.js";
|
|
8
|
+
import"./cli-qeg15dzj.js";
|
|
9
|
+
import"./cli-6nhtpv4g.js";
|
|
10
|
+
import"./cli-mnqb1xvt.js";
|
|
11
|
+
import"./cli-0tpx8khk.js";
|
|
12
|
+
import"./cli-7ckctq7a.js";
|
|
13
|
+
import"./cli-8rxa073f.js";
|
|
14
|
+
export {
|
|
15
|
+
CodeAgent
|
|
16
|
+
};
|
|
@@ -1,18 +1,18 @@
|
|
|
1
1
|
import {
|
|
2
2
|
WhiteboxAttackSurfaceResultSchema
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-4sxvxwcb.js";
|
|
4
4
|
import {
|
|
5
5
|
OffensiveSecurityAgent
|
|
6
|
-
} from "./cli-
|
|
7
|
-
import"./cli-
|
|
6
|
+
} from "./cli-t7dpdkd6.js";
|
|
7
|
+
import"./cli-wqh6md2n.js";
|
|
8
8
|
import {
|
|
9
9
|
hasToolCall,
|
|
10
10
|
tool
|
|
11
|
-
} from "./cli-
|
|
12
|
-
import"./cli-
|
|
13
|
-
import"./cli-
|
|
14
|
-
import"./cli-
|
|
15
|
-
import"./cli-
|
|
11
|
+
} from "./cli-j6qdxby9.js";
|
|
12
|
+
import"./cli-yc2cs5cs.js";
|
|
13
|
+
import"./cli-qeg15dzj.js";
|
|
14
|
+
import"./cli-6nhtpv4g.js";
|
|
15
|
+
import"./cli-mnqb1xvt.js";
|
|
16
16
|
import"./cli-0tpx8khk.js";
|
|
17
17
|
import"./cli-7ckctq7a.js";
|
|
18
18
|
import"./cli-8rxa073f.js";
|
|
@@ -8,14 +8,14 @@ import {
|
|
|
8
8
|
pollWorkOSToken,
|
|
9
9
|
selectWorkspace,
|
|
10
10
|
startDeviceFlow
|
|
11
|
-
} from "./cli-
|
|
11
|
+
} from "./cli-yc2cs5cs.js";
|
|
12
12
|
import {
|
|
13
13
|
config,
|
|
14
14
|
getPensarApiUrl,
|
|
15
15
|
getPensarConsoleUrl
|
|
16
|
-
} from "./cli-
|
|
17
|
-
import"./cli-
|
|
18
|
-
import"./cli-
|
|
16
|
+
} from "./cli-qeg15dzj.js";
|
|
17
|
+
import"./cli-6nhtpv4g.js";
|
|
18
|
+
import"./cli-mnqb1xvt.js";
|
|
19
19
|
import {
|
|
20
20
|
__require
|
|
21
21
|
} from "./cli-8rxa073f.js";
|
|
@@ -3,15 +3,15 @@ import {
|
|
|
3
3
|
} from "./cli-6gtnyaqf.js";
|
|
4
4
|
import {
|
|
5
5
|
OffensiveSecurityAgent
|
|
6
|
-
} from "./cli-
|
|
7
|
-
import"./cli-
|
|
6
|
+
} from "./cli-t7dpdkd6.js";
|
|
7
|
+
import"./cli-wqh6md2n.js";
|
|
8
8
|
import {
|
|
9
9
|
hasToolCall
|
|
10
|
-
} from "./cli-
|
|
11
|
-
import"./cli-
|
|
12
|
-
import"./cli-
|
|
13
|
-
import"./cli-
|
|
14
|
-
import"./cli-
|
|
10
|
+
} from "./cli-j6qdxby9.js";
|
|
11
|
+
import"./cli-yc2cs5cs.js";
|
|
12
|
+
import"./cli-qeg15dzj.js";
|
|
13
|
+
import"./cli-6nhtpv4g.js";
|
|
14
|
+
import"./cli-mnqb1xvt.js";
|
|
15
15
|
import"./cli-0tpx8khk.js";
|
|
16
16
|
import"./cli-7ckctq7a.js";
|
|
17
17
|
import"./cli-8rxa073f.js";
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import {
|
|
2
|
+
BlackboxAttackSurfaceAgent
|
|
3
|
+
} from "./cli-065mgjsh.js";
|
|
4
|
+
import"./cli-6gtnyaqf.js";
|
|
5
|
+
import"./cli-t7dpdkd6.js";
|
|
6
|
+
import"./cli-wqh6md2n.js";
|
|
7
|
+
import"./cli-j6qdxby9.js";
|
|
8
|
+
import"./cli-yc2cs5cs.js";
|
|
9
|
+
import"./cli-qeg15dzj.js";
|
|
10
|
+
import"./cli-6nhtpv4g.js";
|
|
11
|
+
import"./cli-mnqb1xvt.js";
|
|
12
|
+
import"./cli-0tpx8khk.js";
|
|
13
|
+
import"./cli-7ckctq7a.js";
|
|
14
|
+
import"./cli-8rxa073f.js";
|
|
15
|
+
export {
|
|
16
|
+
BlackboxAttackSurfaceAgent
|
|
17
|
+
};
|
|
@@ -1,18 +1,18 @@
|
|
|
1
1
|
import {
|
|
2
2
|
runPentestWorkflow
|
|
3
|
-
} from "./cli-
|
|
4
|
-
import"./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
3
|
+
} from "./cli-tat7hrek.js";
|
|
4
|
+
import"./cli-0v3p48tt.js";
|
|
5
|
+
import"./cli-7kpzf8kz.js";
|
|
6
|
+
import"./cli-4sxvxwcb.js";
|
|
7
|
+
import"./cli-065mgjsh.js";
|
|
8
8
|
import"./cli-6gtnyaqf.js";
|
|
9
|
-
import"./cli-
|
|
10
|
-
import"./cli-
|
|
11
|
-
import"./cli-
|
|
12
|
-
import"./cli-
|
|
13
|
-
import"./cli-
|
|
14
|
-
import"./cli-
|
|
15
|
-
import"./cli-
|
|
9
|
+
import"./cli-t7dpdkd6.js";
|
|
10
|
+
import"./cli-wqh6md2n.js";
|
|
11
|
+
import"./cli-j6qdxby9.js";
|
|
12
|
+
import"./cli-yc2cs5cs.js";
|
|
13
|
+
import"./cli-qeg15dzj.js";
|
|
14
|
+
import"./cli-6nhtpv4g.js";
|
|
15
|
+
import"./cli-mnqb1xvt.js";
|
|
16
16
|
import"./cli-0tpx8khk.js";
|
|
17
17
|
import"./cli-7ckctq7a.js";
|
|
18
18
|
import"./cli-8rxa073f.js";
|
|
@@ -3,11 +3,11 @@ import {
|
|
|
3
3
|
} from "./cli-6gtnyaqf.js";
|
|
4
4
|
import {
|
|
5
5
|
OffensiveSecurityAgent
|
|
6
|
-
} from "./cli-
|
|
6
|
+
} from "./cli-t7dpdkd6.js";
|
|
7
7
|
import {
|
|
8
8
|
hasToolCall,
|
|
9
9
|
stepCountIs
|
|
10
|
-
} from "./cli-
|
|
10
|
+
} from "./cli-j6qdxby9.js";
|
|
11
11
|
|
|
12
12
|
// src/core/agents/specialized/attackSurface/blackboxAgent.ts
|
|
13
13
|
import { join } from "path";
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
import {
|
|
2
2
|
OffensiveSecurityAgent
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-t7dpdkd6.js";
|
|
4
4
|
import {
|
|
5
5
|
exports_external,
|
|
6
6
|
init_zod
|
|
7
|
-
} from "./cli-
|
|
7
|
+
} from "./cli-j6qdxby9.js";
|
|
8
8
|
|
|
9
9
|
// src/core/agents/specialized/pentest/agent.ts
|
|
10
10
|
init_zod();
|
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
import {
|
|
2
2
|
OffensiveSecurityAgent
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-t7dpdkd6.js";
|
|
4
4
|
import {
|
|
5
5
|
stepCountIs
|
|
6
|
-
} from "./cli-
|
|
6
|
+
} from "./cli-j6qdxby9.js";
|
|
7
7
|
|
|
8
8
|
// src/core/agents/specialized/codeAgent/prompts.ts
|
|
9
9
|
var CODE_AGENT_SYSTEM_PROMPT = `You are an expert coding agent with direct filesystem access. You will be given a specific objective — focus exclusively on completing it.
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import {
|
|
2
2
|
signGatewayRequest
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-yc2cs5cs.js";
|
|
4
4
|
import {
|
|
5
5
|
config,
|
|
6
6
|
ensureValidToken,
|
|
7
7
|
getPensarGatewayUrl
|
|
8
|
-
} from "./cli-
|
|
8
|
+
} from "./cli-qeg15dzj.js";
|
|
9
9
|
import {
|
|
10
10
|
getModelInfo
|
|
11
11
|
} from "./cli-0tpx8khk.js";
|
|
@@ -3,7 +3,7 @@ import { spawnSync } from "child_process";
|
|
|
3
3
|
// package.json
|
|
4
4
|
var package_default = {
|
|
5
5
|
name: "@pensar/apex",
|
|
6
|
-
version: "0.0.113
|
|
6
|
+
version: "0.0.113",
|
|
7
7
|
description: "AI-powered penetration testing CLI tool with terminal UI",
|
|
8
8
|
module: "src/tui/index.tsx",
|
|
9
9
|
main: "build/cli.js",
|
|
@@ -17,7 +17,7 @@ import {
|
|
|
17
17
|
update,
|
|
18
18
|
write,
|
|
19
19
|
writeRaw
|
|
20
|
-
} from "./cli-
|
|
20
|
+
} from "./cli-wqh6md2n.js";
|
|
21
21
|
import {
|
|
22
22
|
_enum,
|
|
23
23
|
_null,
|
|
@@ -46,18 +46,18 @@ import {
|
|
|
46
46
|
union,
|
|
47
47
|
unknown,
|
|
48
48
|
zod_default
|
|
49
|
-
} from "./cli-
|
|
49
|
+
} from "./cli-j6qdxby9.js";
|
|
50
50
|
import {
|
|
51
51
|
signGatewayRequest
|
|
52
|
-
} from "./cli-
|
|
52
|
+
} from "./cli-yc2cs5cs.js";
|
|
53
53
|
import {
|
|
54
54
|
config,
|
|
55
55
|
ensureValidToken,
|
|
56
56
|
getPensarApiUrl
|
|
57
|
-
} from "./cli-
|
|
57
|
+
} from "./cli-qeg15dzj.js";
|
|
58
58
|
import {
|
|
59
59
|
getCurrentVersion
|
|
60
|
-
} from "./cli-
|
|
60
|
+
} from "./cli-mnqb1xvt.js";
|
|
61
61
|
import {
|
|
62
62
|
__commonJS,
|
|
63
63
|
__require,
|
|
@@ -90666,7 +90666,7 @@ When to use delegate_to_auth_subagent vs authenticate_session:
|
|
|
90666
90666
|
if (credentials) {
|
|
90667
90667
|
ctx.session.credentialManager.addFromAuthCredentials(credentials);
|
|
90668
90668
|
}
|
|
90669
|
-
const { runAuthenticationAgent } = await import("./authentication-
|
|
90669
|
+
const { runAuthenticationAgent } = await import("./authentication-vjefzf37.js");
|
|
90670
90670
|
const subagentCallbacks = cbs ? {
|
|
90671
90671
|
onTextDelta: (d) => cbs.onTextDelta?.({ ...d, subagentId }),
|
|
90672
90672
|
onToolCall: (d) => cbs.onToolCall?.({ ...d, subagentId }),
|
|
@@ -91568,7 +91568,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
|
|
|
91568
91568
|
});
|
|
91569
91569
|
if (cwd) {
|
|
91570
91570
|
try {
|
|
91571
|
-
const { WhiteboxAttackSurfaceAgent } = await import("./agent-
|
|
91571
|
+
const { WhiteboxAttackSurfaceAgent } = await import("./agent-k1n19b3w.js");
|
|
91572
91572
|
const agent = new WhiteboxAttackSurfaceAgent({
|
|
91573
91573
|
codebasePath: cwd,
|
|
91574
91574
|
model: ctx.model,
|
|
@@ -91620,7 +91620,7 @@ should be passed directly to spawn_pentest_swarm for deep testing.`,
|
|
|
91620
91620
|
}
|
|
91621
91621
|
}
|
|
91622
91622
|
try {
|
|
91623
|
-
const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-
|
|
91623
|
+
const { BlackboxAttackSurfaceAgent } = await import("./blackboxAgent-dq8eany1.js");
|
|
91624
91624
|
const agent = new BlackboxAttackSurfaceAgent({
|
|
91625
91625
|
target,
|
|
91626
91626
|
model: ctx.model,
|
|
@@ -91699,7 +91699,7 @@ Pass every target you want tested — the swarm handles concurrency automaticall
|
|
|
91699
91699
|
toolCallDescription: exports_external.string().describe("A concise, human-readable description of what this tool call is doing")
|
|
91700
91700
|
}),
|
|
91701
91701
|
execute: async ({ targets }) => {
|
|
91702
|
-
const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-
|
|
91702
|
+
const { runPentestSwarm, DEFAULT_CONCURRENCY } = await import("./pentest-agm6pqh1.js");
|
|
91703
91703
|
if (!ctx.model) {
|
|
91704
91704
|
return {
|
|
91705
91705
|
success: false,
|
|
@@ -91826,7 +91826,7 @@ Returns an array of results with the text output from each agent.`,
|
|
|
91826
91826
|
});
|
|
91827
91827
|
}
|
|
91828
91828
|
async function runSingleCodingAgent(ctx, codebasePath, objective, agentIndex, name) {
|
|
91829
|
-
const { CodeAgent } = await import("./agent-
|
|
91829
|
+
const { CodeAgent } = await import("./agent-cff8va32.js");
|
|
91830
91830
|
const subagentId = `coding-agent-${agentIndex}`;
|
|
91831
91831
|
ctx.subagentCallbacks?.onSubagentSpawn?.({
|
|
91832
91832
|
subagentId,
|
|
@@ -1,23 +1,23 @@
|
|
|
1
1
|
import {
|
|
2
2
|
TargetedPentestAgent
|
|
3
|
-
} from "./cli-
|
|
3
|
+
} from "./cli-0v3p48tt.js";
|
|
4
4
|
import {
|
|
5
5
|
CodeAgent
|
|
6
|
-
} from "./cli-
|
|
6
|
+
} from "./cli-7kpzf8kz.js";
|
|
7
7
|
import {
|
|
8
8
|
EndpointSchema
|
|
9
|
-
} from "./cli-
|
|
9
|
+
} from "./cli-4sxvxwcb.js";
|
|
10
10
|
import {
|
|
11
11
|
BlackboxAttackSurfaceAgent
|
|
12
|
-
} from "./cli-
|
|
12
|
+
} from "./cli-065mgjsh.js";
|
|
13
13
|
import {
|
|
14
14
|
CweEntrySchema,
|
|
15
15
|
FindingsRegistry
|
|
16
|
-
} from "./cli-
|
|
16
|
+
} from "./cli-t7dpdkd6.js";
|
|
17
17
|
import {
|
|
18
18
|
exports_external,
|
|
19
19
|
init_zod
|
|
20
|
-
} from "./cli-
|
|
20
|
+
} from "./cli-j6qdxby9.js";
|
|
21
21
|
|
|
22
22
|
// src/core/workflows/pentest.ts
|
|
23
23
|
import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
|
package/build/cli.js
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
#!/usr/bin/env bun
|
|
2
2
|
// @bun
|
|
3
|
-
import"./cli-
|
|
4
|
-
import"./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
3
|
+
import"./cli-j6qdxby9.js";
|
|
4
|
+
import"./cli-yc2cs5cs.js";
|
|
5
|
+
import"./cli-qeg15dzj.js";
|
|
6
|
+
import"./cli-6nhtpv4g.js";
|
|
7
7
|
import {
|
|
8
8
|
package_default
|
|
9
|
-
} from "./cli-
|
|
9
|
+
} from "./cli-mnqb1xvt.js";
|
|
10
10
|
import"./cli-0tpx8khk.js";
|
|
11
11
|
import"./cli-7ckctq7a.js";
|
|
12
12
|
import {
|
|
@@ -16,7 +16,7 @@ import {
|
|
|
16
16
|
// package.json
|
|
17
17
|
var package_default2 = {
|
|
18
18
|
name: "@pensar/apex",
|
|
19
|
-
version: "0.0.113
|
|
19
|
+
version: "0.0.113",
|
|
20
20
|
description: "AI-powered penetration testing CLI tool with terminal UI",
|
|
21
21
|
module: "src/tui/index.tsx",
|
|
22
22
|
main: "build/cli.js",
|
|
@@ -351,9 +351,9 @@ Global options:
|
|
|
351
351
|
async function runPentest() {
|
|
352
352
|
const { config: config2 } = await import("./main-2483qzbq.js").then((m)=>__toESM(m.default,1));
|
|
353
353
|
config2();
|
|
354
|
-
const { runPentestAgent } = await import("./blackboxPentest-
|
|
355
|
-
const { sessions } = await import("./index-
|
|
356
|
-
const { config: appConfig } = await import("./index-
|
|
354
|
+
const { runPentestAgent } = await import("./blackboxPentest-26japf1w.js");
|
|
355
|
+
const { sessions } = await import("./index-4ds7eh13.js");
|
|
356
|
+
const { config: appConfig } = await import("./index-8dgs0erz.js");
|
|
357
357
|
const { getDefaultModelForConfig } = await import("./utils-9fhmzzzh.js");
|
|
358
358
|
const target = getArgRequired("--target");
|
|
359
359
|
const cwd = getArg("--cwd");
|
|
@@ -408,9 +408,9 @@ Report: ${reportPath}` : ""}`);
|
|
|
408
408
|
async function runTargetedPentest() {
|
|
409
409
|
const { config: config2 } = await import("./main-2483qzbq.js").then((m)=>__toESM(m.default,1));
|
|
410
410
|
config2();
|
|
411
|
-
const { runTargetedPentestAgent } = await import("./targetedPentest-
|
|
412
|
-
const { sessions } = await import("./index-
|
|
413
|
-
const { config: appConfig } = await import("./index-
|
|
411
|
+
const { runTargetedPentestAgent } = await import("./targetedPentest-qrcrtpzg.js");
|
|
412
|
+
const { sessions } = await import("./index-4ds7eh13.js");
|
|
413
|
+
const { config: appConfig } = await import("./index-8dgs0erz.js");
|
|
414
414
|
const { getDefaultModelForConfig } = await import("./utils-9fhmzzzh.js");
|
|
415
415
|
const target = getArgRequired("--target");
|
|
416
416
|
const objectives = getAllArgs("--objective");
|
|
@@ -472,25 +472,25 @@ if (command === "version" || command === "--version" || command === "-v") {
|
|
|
472
472
|
await runTargetedPentest();
|
|
473
473
|
} else if (command === "auth") {
|
|
474
474
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
475
|
-
await import("./auth-
|
|
475
|
+
await import("./auth-a0ftn8cb.js");
|
|
476
476
|
} else if (command === "uninstall") {
|
|
477
477
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
478
|
-
await import("./uninstall-
|
|
478
|
+
await import("./uninstall-hp43qwmn.js");
|
|
479
479
|
} else if (command === "projects") {
|
|
480
480
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
481
|
-
await import("./projects-
|
|
481
|
+
await import("./projects-0a1zfjgm.js");
|
|
482
482
|
} else if (command === "pentests") {
|
|
483
483
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
484
|
-
await import("./pentests-
|
|
484
|
+
await import("./pentests-7a8s43nj.js");
|
|
485
485
|
} else if (command === "issues") {
|
|
486
486
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
487
|
-
await import("./issues-
|
|
487
|
+
await import("./issues-7yvjwc2j.js");
|
|
488
488
|
} else if (command === "fixes") {
|
|
489
489
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
490
|
-
await import("./fixes-
|
|
490
|
+
await import("./fixes-szq7tb0p.js");
|
|
491
491
|
} else if (command === "logs") {
|
|
492
492
|
process.argv = [process.argv[0], process.argv[1], ...args.slice(1)];
|
|
493
|
-
await import("./logs-
|
|
493
|
+
await import("./logs-22ks7j0v.js");
|
|
494
494
|
} else if (command === "doctor") {
|
|
495
495
|
const { runDoctor } = await import("./doctor-b7612pzw.js");
|
|
496
496
|
await runDoctor();
|
|
@@ -500,7 +500,7 @@ if (command === "version" || command === "--version" || command === "-v") {
|
|
|
500
500
|
console.error("All other commands work with Node \u2014 run 'pensar --help'.");
|
|
501
501
|
process.exit(1);
|
|
502
502
|
}
|
|
503
|
-
await import("./index-
|
|
503
|
+
await import("./index-sr5w8v3d.js");
|
|
504
504
|
} else {
|
|
505
505
|
console.error(`Error: Unknown command '${command}'`);
|
|
506
506
|
console.error();
|
|
@@ -2,10 +2,10 @@
|
|
|
2
2
|
import {
|
|
3
3
|
getFix,
|
|
4
4
|
listFixes
|
|
5
|
-
} from "./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
5
|
+
} from "./cli-g0r410cd.js";
|
|
6
|
+
import"./cli-qeg15dzj.js";
|
|
7
|
+
import"./cli-6nhtpv4g.js";
|
|
8
|
+
import"./cli-mnqb1xvt.js";
|
|
9
9
|
import"./cli-8rxa073f.js";
|
|
10
10
|
|
|
11
11
|
// src/cli/fixes.ts
|
|
@@ -17,17 +17,17 @@ import {
|
|
|
17
17
|
update,
|
|
18
18
|
write,
|
|
19
19
|
writeRaw
|
|
20
|
-
} from "./cli-
|
|
20
|
+
} from "./cli-wqh6md2n.js";
|
|
21
21
|
import {
|
|
22
22
|
init_zod,
|
|
23
23
|
zod_default
|
|
24
|
-
} from "./cli-
|
|
25
|
-
import"./cli-
|
|
26
|
-
import"./cli-
|
|
27
|
-
import"./cli-
|
|
24
|
+
} from "./cli-j6qdxby9.js";
|
|
25
|
+
import"./cli-yc2cs5cs.js";
|
|
26
|
+
import"./cli-qeg15dzj.js";
|
|
27
|
+
import"./cli-6nhtpv4g.js";
|
|
28
28
|
import {
|
|
29
29
|
getCurrentVersion
|
|
30
|
-
} from "./cli-
|
|
30
|
+
} from "./cli-mnqb1xvt.js";
|
|
31
31
|
import"./cli-0tpx8khk.js";
|
|
32
32
|
import"./cli-7ckctq7a.js";
|
|
33
33
|
import {
|
|
@@ -8,11 +8,11 @@ import {
|
|
|
8
8
|
readExecutionMetrics,
|
|
9
9
|
runPentestWorkflow,
|
|
10
10
|
writeExecutionMetrics
|
|
11
|
-
} from "./cli-
|
|
12
|
-
import"./cli-
|
|
13
|
-
import"./cli-
|
|
14
|
-
import"./cli-
|
|
15
|
-
import"./cli-
|
|
11
|
+
} from "./cli-tat7hrek.js";
|
|
12
|
+
import"./cli-0v3p48tt.js";
|
|
13
|
+
import"./cli-7kpzf8kz.js";
|
|
14
|
+
import"./cli-4sxvxwcb.js";
|
|
15
|
+
import"./cli-065mgjsh.js";
|
|
16
16
|
import"./cli-6gtnyaqf.js";
|
|
17
17
|
import {
|
|
18
18
|
ALL_TOOL_NAMES,
|
|
@@ -23,17 +23,17 @@ import {
|
|
|
23
23
|
createInitialOperatorState,
|
|
24
24
|
normalizeMessages,
|
|
25
25
|
sessions
|
|
26
|
-
} from "./cli-
|
|
26
|
+
} from "./cli-t7dpdkd6.js";
|
|
27
27
|
import {
|
|
28
28
|
createToolsetState,
|
|
29
29
|
init_toolset,
|
|
30
30
|
read,
|
|
31
31
|
write
|
|
32
|
-
} from "./cli-
|
|
32
|
+
} from "./cli-wqh6md2n.js";
|
|
33
33
|
import {
|
|
34
34
|
buildAuthConfig,
|
|
35
35
|
stepCountIs
|
|
36
|
-
} from "./cli-
|
|
36
|
+
} from "./cli-j6qdxby9.js";
|
|
37
37
|
import {
|
|
38
38
|
disconnect,
|
|
39
39
|
fetchWorkspaces,
|
|
@@ -44,18 +44,18 @@ import {
|
|
|
44
44
|
selectWorkspace,
|
|
45
45
|
startDeviceFlow,
|
|
46
46
|
validateGateway
|
|
47
|
-
} from "./cli-
|
|
47
|
+
} from "./cli-yc2cs5cs.js";
|
|
48
48
|
import {
|
|
49
49
|
config,
|
|
50
50
|
getPensarApiUrl,
|
|
51
51
|
getPensarConsoleUrl
|
|
52
|
-
} from "./cli-
|
|
52
|
+
} from "./cli-qeg15dzj.js";
|
|
53
53
|
import {
|
|
54
54
|
update
|
|
55
|
-
} from "./cli-
|
|
55
|
+
} from "./cli-6nhtpv4g.js";
|
|
56
56
|
import {
|
|
57
57
|
checkForUpdate
|
|
58
|
-
} from "./cli-
|
|
58
|
+
} from "./cli-mnqb1xvt.js";
|
|
59
59
|
import {
|
|
60
60
|
AVAILABLE_MODELS
|
|
61
61
|
} from "./cli-0tpx8khk.js";
|
|
@@ -3,10 +3,10 @@ import {
|
|
|
3
3
|
getIssue,
|
|
4
4
|
listIssues,
|
|
5
5
|
updateIssue
|
|
6
|
-
} from "./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
9
|
-
import"./cli-
|
|
6
|
+
} from "./cli-g0r410cd.js";
|
|
7
|
+
import"./cli-qeg15dzj.js";
|
|
8
|
+
import"./cli-6nhtpv4g.js";
|
|
9
|
+
import"./cli-mnqb1xvt.js";
|
|
10
10
|
import"./cli-8rxa073f.js";
|
|
11
11
|
|
|
12
12
|
// src/cli/issues.ts
|
|
@@ -2,10 +2,10 @@
|
|
|
2
2
|
import {
|
|
3
3
|
listAgentLogs,
|
|
4
4
|
searchAgentLogs
|
|
5
|
-
} from "./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
5
|
+
} from "./cli-g0r410cd.js";
|
|
6
|
+
import"./cli-qeg15dzj.js";
|
|
7
|
+
import"./cli-6nhtpv4g.js";
|
|
8
|
+
import"./cli-mnqb1xvt.js";
|
|
9
9
|
import"./cli-8rxa073f.js";
|
|
10
10
|
|
|
11
11
|
// src/cli/logs.ts
|
|
@@ -0,0 +1,25 @@
|
|
|
1
|
+
import {
|
|
2
|
+
DEFAULT_CONCURRENCY,
|
|
3
|
+
runPentestSwarm,
|
|
4
|
+
runPentestWorkflow
|
|
5
|
+
} from "./cli-tat7hrek.js";
|
|
6
|
+
import"./cli-0v3p48tt.js";
|
|
7
|
+
import"./cli-7kpzf8kz.js";
|
|
8
|
+
import"./cli-4sxvxwcb.js";
|
|
9
|
+
import"./cli-065mgjsh.js";
|
|
10
|
+
import"./cli-6gtnyaqf.js";
|
|
11
|
+
import"./cli-t7dpdkd6.js";
|
|
12
|
+
import"./cli-wqh6md2n.js";
|
|
13
|
+
import"./cli-j6qdxby9.js";
|
|
14
|
+
import"./cli-yc2cs5cs.js";
|
|
15
|
+
import"./cli-qeg15dzj.js";
|
|
16
|
+
import"./cli-6nhtpv4g.js";
|
|
17
|
+
import"./cli-mnqb1xvt.js";
|
|
18
|
+
import"./cli-0tpx8khk.js";
|
|
19
|
+
import"./cli-7ckctq7a.js";
|
|
20
|
+
import"./cli-8rxa073f.js";
|
|
21
|
+
export {
|
|
22
|
+
runPentestWorkflow,
|
|
23
|
+
runPentestSwarm,
|
|
24
|
+
DEFAULT_CONCURRENCY
|
|
25
|
+
};
|
|
@@ -3,10 +3,10 @@ import {
|
|
|
3
3
|
dispatchPentest,
|
|
4
4
|
getScan,
|
|
5
5
|
listScans
|
|
6
|
-
} from "./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
9
|
-
import"./cli-
|
|
6
|
+
} from "./cli-g0r410cd.js";
|
|
7
|
+
import"./cli-qeg15dzj.js";
|
|
8
|
+
import"./cli-6nhtpv4g.js";
|
|
9
|
+
import"./cli-mnqb1xvt.js";
|
|
10
10
|
import"./cli-8rxa073f.js";
|
|
11
11
|
|
|
12
12
|
// src/cli/pentests.ts
|
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
#!/usr/bin/env bun
|
|
2
2
|
import {
|
|
3
3
|
listProjects
|
|
4
|
-
} from "./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
4
|
+
} from "./cli-g0r410cd.js";
|
|
5
|
+
import"./cli-qeg15dzj.js";
|
|
6
|
+
import"./cli-6nhtpv4g.js";
|
|
7
|
+
import"./cli-mnqb1xvt.js";
|
|
8
8
|
import"./cli-8rxa073f.js";
|
|
9
9
|
|
|
10
10
|
// src/cli/projects.ts
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
import {
|
|
2
2
|
TargetedPentestAgent
|
|
3
|
-
} from "./cli-
|
|
4
|
-
import"./cli-
|
|
5
|
-
import"./cli-
|
|
6
|
-
import"./cli-
|
|
7
|
-
import"./cli-
|
|
8
|
-
import"./cli-
|
|
9
|
-
import"./cli-
|
|
10
|
-
import"./cli-
|
|
3
|
+
} from "./cli-0v3p48tt.js";
|
|
4
|
+
import"./cli-t7dpdkd6.js";
|
|
5
|
+
import"./cli-wqh6md2n.js";
|
|
6
|
+
import"./cli-j6qdxby9.js";
|
|
7
|
+
import"./cli-yc2cs5cs.js";
|
|
8
|
+
import"./cli-qeg15dzj.js";
|
|
9
|
+
import"./cli-6nhtpv4g.js";
|
|
10
|
+
import"./cli-mnqb1xvt.js";
|
|
11
11
|
import"./cli-0tpx8khk.js";
|
|
12
12
|
import"./cli-7ckctq7a.js";
|
|
13
13
|
import"./cli-8rxa073f.js";
|
package/package.json
CHANGED
package/build/agent-c3nr8yd0.js
DELETED
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import {
|
|
2
|
-
CodeAgent
|
|
3
|
-
} from "./cli-tmnh3w7x.js";
|
|
4
|
-
import"./cli-pv90y7mr.js";
|
|
5
|
-
import"./cli-j7pkgdg0.js";
|
|
6
|
-
import"./cli-t90adgwt.js";
|
|
7
|
-
import"./cli-ppsx314k.js";
|
|
8
|
-
import"./cli-n7nkxh7s.js";
|
|
9
|
-
import"./cli-9x51bc66.js";
|
|
10
|
-
import"./cli-v0xwk0fh.js";
|
|
11
|
-
import"./cli-0tpx8khk.js";
|
|
12
|
-
import"./cli-7ckctq7a.js";
|
|
13
|
-
import"./cli-8rxa073f.js";
|
|
14
|
-
export {
|
|
15
|
-
CodeAgent
|
|
16
|
-
};
|
|
@@ -1,17 +0,0 @@
|
|
|
1
|
-
import {
|
|
2
|
-
BlackboxAttackSurfaceAgent
|
|
3
|
-
} from "./cli-t30ekexm.js";
|
|
4
|
-
import"./cli-6gtnyaqf.js";
|
|
5
|
-
import"./cli-pv90y7mr.js";
|
|
6
|
-
import"./cli-j7pkgdg0.js";
|
|
7
|
-
import"./cli-t90adgwt.js";
|
|
8
|
-
import"./cli-ppsx314k.js";
|
|
9
|
-
import"./cli-n7nkxh7s.js";
|
|
10
|
-
import"./cli-9x51bc66.js";
|
|
11
|
-
import"./cli-v0xwk0fh.js";
|
|
12
|
-
import"./cli-0tpx8khk.js";
|
|
13
|
-
import"./cli-7ckctq7a.js";
|
|
14
|
-
import"./cli-8rxa073f.js";
|
|
15
|
-
export {
|
|
16
|
-
BlackboxAttackSurfaceAgent
|
|
17
|
-
};
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import {
|
|
2
|
-
DEFAULT_CONCURRENCY,
|
|
3
|
-
runPentestSwarm,
|
|
4
|
-
runPentestWorkflow
|
|
5
|
-
} from "./cli-gs2474ec.js";
|
|
6
|
-
import"./cli-j9s2krw4.js";
|
|
7
|
-
import"./cli-tmnh3w7x.js";
|
|
8
|
-
import"./cli-mdm43fxw.js";
|
|
9
|
-
import"./cli-t30ekexm.js";
|
|
10
|
-
import"./cli-6gtnyaqf.js";
|
|
11
|
-
import"./cli-pv90y7mr.js";
|
|
12
|
-
import"./cli-j7pkgdg0.js";
|
|
13
|
-
import"./cli-t90adgwt.js";
|
|
14
|
-
import"./cli-ppsx314k.js";
|
|
15
|
-
import"./cli-n7nkxh7s.js";
|
|
16
|
-
import"./cli-9x51bc66.js";
|
|
17
|
-
import"./cli-v0xwk0fh.js";
|
|
18
|
-
import"./cli-0tpx8khk.js";
|
|
19
|
-
import"./cli-7ckctq7a.js";
|
|
20
|
-
import"./cli-8rxa073f.js";
|
|
21
|
-
export {
|
|
22
|
-
runPentestWorkflow,
|
|
23
|
-
runPentestSwarm,
|
|
24
|
-
DEFAULT_CONCURRENCY
|
|
25
|
-
};
|