@poolzin/pool-bot 2026.3.13 → 2026.3.15

package/extensions/hexstrike-ai/src/server/requirements.txt

@@ -0,0 +1,84 @@
+# HexStrike AI MCP Agents v6.0
+#
+# INSTALLATION COMMANDS:
+# python3 -m venv hexstrike_env
+# source hexstrike_env/bin/activate
+# python3 -m pip install -r requirements.txt
+# python3 hexstrike_server.py
+
+# ============================================================================
+# CORE FRAMEWORK DEPENDENCIES (ACTUALLY USED)
+# ============================================================================
+flask>=2.3.0,<4.0.0             # Web framework for API server (flask import)
+requests>=2.31.0,<3.0.0         # HTTP library (requests import)
+psutil>=5.9.0,<6.0.0            # System utilities (psutil import)
+fastmcp>=0.2.0,<1.0.0           # MCP framework (from mcp.server.fastmcp import FastMCP)
+
+# ============================================================================
+# WEB SCRAPING & AUTOMATION (ACTUALLY USED)
+# ============================================================================
+beautifulsoup4>=4.12.0,<5.0.0   # HTML parsing (from bs4 import BeautifulSoup)
+selenium>=4.15.0,<5.0.0         # Browser automation (selenium imports)
+webdriver-manager>=4.0.0,<5.0.0 # ChromeDriver management (referenced in code)
+
+# ============================================================================
+# ASYNC & NETWORKING (ACTUALLY USED)
+# ============================================================================
+aiohttp>=3.8.0,<4.0.0           # Async HTTP (aiohttp import)
+
+# ============================================================================
+# PROXY & TESTING (ACTUALLY USED)
+# ============================================================================
+mitmproxy>=9.0.0,<11.0.0        # HTTP proxy (mitmproxy imports)
+
+# ============================================================================
+# BINARY ANALYSIS (CONDITIONALLY USED)
+# ============================================================================
+pwntools>=4.10.0,<5.0.0         # Binary exploitation (from pwn import *)
+angr>=9.2.0,<10.0.0             # Binary analysis (import angr)
+bcrypt==4.0.1                   # Pin bcrypt version for passlib compatibility (fixes pwntools dependency issue)
+
+# ============================================================================
+# EXTERNAL SECURITY TOOLS (150+ Tools - Install separately)
+# ============================================================================
+#
+# HexStrike v6.0 integrates with 150+ external security tools that must be
+# installed separately from their official sources:
+#
+# 🔍 Network & Reconnaissance (25+ tools):
+# - nmap, masscan, rustscan, autorecon, amass, subfinder, fierce
+# - dnsenum, theharvester, responder, netexec, enum4linux-ng
+#
+# 🌐 Web Application Security (40+ tools):
+# - gobuster, feroxbuster, ffuf, dirb, dirsearch, nuclei, nikto
+# - sqlmap, wpscan, arjun, paramspider, x8, katana, httpx
+# - dalfox, jaeles, hakrawler, gau, waybackurls, wafw00f
+#
+# 🔐 Authentication & Password (12+ tools):
+# - hydra, john, hashcat, medusa, patator, netexec
+# - evil-winrm, hash-identifier, ophcrack
+#
+# 🔬 Binary Analysis & Reverse Engineering (25+ tools):
+# - ghidra, radare2, gdb, binwalk, ropgadget, checksec, strings
+# - volatility3, foremost, steghide, exiftool, angr, pwntools
+#
+# ☁️ Cloud & Container Security (20+ tools):
+# - prowler, scout-suite, trivy, kube-hunter, kube-bench
+# - docker-bench-security, checkov, terrascan, falco
+#
+# 🏆 CTF & Forensics (20+ tools):
+# - volatility3, autopsy, sleuthkit, stegsolve, zsteg, outguess
+# - photorec, testdisk, scalpel, bulk-extractor
+#
+# 🕵️ OSINT & Intelligence (20+ tools):
+# - sherlock, social-analyzer, recon-ng, maltego, spiderfoot
+# - shodan-cli, censys-cli, have-i-been-pwned
+#
+# Installation Notes:
+# 1. Kali Linux 2024.1+ includes most tools by default
+# 2. Ubuntu/Debian users should install tools from official repositories
+# 3. Some tools require compilation from source or additional setup
+# 4. Cloud tools require API keys and authentication configuration
+# 5. Browser Agent requires Chrome/Chromium and ChromeDriver installation
+#
+# For complete installation instructions and setup guides, see README.md

package/extensions/hexstrike-ai/src/server-manager.ts

@@ -0,0 +1,83 @@
+import { spawn, ChildProcess } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export interface ServerConfig {
+  port: number;
+  host: string;
+  pythonPath?: string;
+}
+
+export class HexStrikeServerManager {
+  private process: ChildProcess | null = null;
+  private config: { port: number; host: string; pythonPath: string };
+
+  constructor(config: Partial<ServerConfig> = {}) {
+    this.config = {
+      port: config.port ?? 8888,
+      host: config.host ?? "127.0.0.1",
+      pythonPath: config.pythonPath ?? "python3",
+    };
+  }
+
+  async start(): Promise<void> {
+    const serverPath = path.join(__dirname, "server", "hexstrike_server.py");
+    
+    this.process = spawn(this.config.pythonPath, [serverPath], {
+      env: {
+        ...process.env,
+        HEXSTRIKE_PORT: String(this.config.port),
+        HEXSTRIKE_HOST: this.config.host,
+      },
+      stdio: ["ignore", "pipe", "pipe"],
+    });
+
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        reject(new Error("HexStrike server failed to start within 30s"));
+      }, 30000);
+
+      this.process?.stdout?.on("data", (data: Buffer) => {
+        const output = data.toString();
+        console.log(`[HexStrike] ${output}`);
+        if (output.includes("Server started") || output.includes("Listening")) {
+          clearTimeout(timeout);
+          resolve();
+        }
+      });
+
+      this.process?.stderr?.on("data", (data: Buffer) => {
+        console.error(`[HexStrike] ${data.toString()}`);
+      });
+
+      this.process?.on("error", (err) => {
+        clearTimeout(timeout);
+        reject(err);
+      });
+
+      this.process?.on("exit", (code) => {
+        if (code !== 0 && code !== null) {
+          clearTimeout(timeout);
+          reject(new Error(`HexStrike server exited with code ${code}`));
+        }
+      });
+    });
+  }
+
+  async stop(): Promise<void> {
+    if (this.process) {
+      this.process.kill("SIGTERM");
+      await new Promise((resolve) => setTimeout(resolve, 5000));
+      if (!this.process.killed) {
+        this.process.kill("SIGKILL");
+      }
+      this.process = null;
+    }
+  }
+
+  get isRunning(): boolean {
+    return this.process !== null && !this.process.killed;
+  }
+}

package/extensions/hexstrike-ai/tsconfig.json

@@ -0,0 +1,20 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "resolveJsonModule": true,
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true
+  },
+  "include": ["src/**/*"],
+  "exclude": ["node_modules", "dist", "src/server"]
+}

package/extensions/page-agent/README.md

@@ -0,0 +1,159 @@
+# Page Agent Extension for PoolBot
+
+AI-powered browser automation extension that enables PoolBot to control web browsers through natural language instructions. Built on Playwright with a ReAct (Reasoning + Acting) agent loop.
+
+## Features
+
+- **ReAct Agent Loop**: Observe → Think → Act cycle for autonomous web navigation
+- **8 Built-in Tools**: Navigate, click, type, select, scroll, wait, execute_script, done
+- **Multi-Language Support**: English and Chinese interfaces
+- **Custom Instructions**: Per-domain instructions for specialized handling
+- **Event-Driven**: Real-time activity and history tracking
+- **Lifecycle Hooks**: Pre/post step callbacks for custom logic
+
+## Installation
+
+```bash
+# Install as PoolBot extension
+poolbot extension install @poolbot/page-agent
+
+# Or manual installation
+cd extensions/page-agent
+pnpm install
+pnpm build
+```
+
+## Configuration
+
+Add to your PoolBot configuration:
+
+```json
+{
+  "pageAgent": {
+    "maxSteps": 30,
+    "llm": {
+      "provider": "anthropic",
+      "model": "claude-3-5-sonnet-20241022",
+      "apiKey": "${ANTHROPIC_API_KEY}",
+      "baseURL": "https://api.anthropic.com",
+      "temperature": 0.7,
+      "maxRetries": 3
+    },
+    "language": "en-US",
+    "instructions": {
+      "system": "Custom system prompt for all tasks",
+      "getPageInstructions": {
+        "github.com": "Focus on code repositories and pull requests",
+        "docs.example.com": "Extract API documentation content"
+      }
+    }
+  }
+}
+```
+
+## Usage
+
+### Basic Task Execution
+
+```typescript
+import { PageAgentService } from '@poolbot/page-agent'
+
+const agent = new PageAgentService(config, controller)
+
+const result = await agent.executeTask(
+  'Go to example.com and find the pricing information'
+)
+
+console.log(result.output)     // Task output
+console.log(result.stepsTaken) // Number of steps executed
+```
+
+### Event Monitoring
+
+```typescript
+agent.on('activity', (activity) => {
+  console.log(`Step ${activity.stepNumber}: ${activity.action}`)
+})
+
+agent.on('history', (event) => {
+  console.log(`History: ${event.type} - ${event.summary}`)
+})
+```
+
+### Lifecycle Hooks
+
+```typescript
+const agent = new PageAgentService(config, controller, {
+  beforeStep: async (step) => {
+    console.log(`About to execute: ${step.action}`)
+    return { continue: true }
+  },
+  afterStep: async (step, result) => {
+    console.log(`Completed: ${step.action} with ${result}`)
+  }
+})
+```
+
+## Available Tools
+
+| Tool | Description | Parameters |
+|------|-------------|------------|
+| `navigate` | Navigate to URL | `url: string` |
+| `click` | Click element | `selector: string` |
+| `type` | Type text | `selector: string, text: string` |
+| `select` | Select dropdown option | `selector: string, value: string` |
+| `scroll` | Scroll page | `direction: 'up' \| 'down', amount?: number` |
+| `wait` | Wait for time/selector | `duration?: number, selector?: string` |
+| `execute_script` | Run JavaScript | `script: string` |
+| `done` | Complete task | `success: boolean, answer?: string` |
+
+## Architecture
+
+```
+┌─────────────────┐
+│  PageAgentService│  ← ReAct loop orchestration
+├─────────────────┤
+│  PoolBotPageController │  ← Playwright wrapper
+├─────────────────┤
+│  Browser Tools  │  ← 8 automation tools
+└─────────────────┘
+```
+
+## Testing
+
+```bash
+# Run all tests
+pnpm test
+
+# Watch mode
+pnpm test:watch
+
+# Coverage
+pnpm test:coverage
+```
+
+## API Reference
+
+### PageAgentService
+
+- `executeTask(instruction: string): Promise<PageAgentExecutionResult>` - Execute a task
+- `stop(): void` - Stop current execution
+- `getStatus(): PageAgentStatus` - Get current status
+- `on(event, handler)` - Subscribe to events
+
+### PoolBotPageController
+
+- `goto(url: string)` - Navigate to URL
+- `click(selector: string)` - Click element
+- `type(selector: string, text: string)` - Type text
+- `select(selector: string, value: string)` - Select option
+- `scroll(direction, amount)` - Scroll page
+- `waitForSelector(selector: string)` - Wait for element
+- `waitForTimeout(ms: number)` - Wait for time
+- `evaluate<T>(script: string): Promise<T>` - Execute JavaScript
+- `screenshot(): Promise<string>` - Take screenshot (base64)
+- `getPageContent(): Promise<string>` - Get page text content
+
+## License
+
+MIT