agent-bypass 2.13.5 → 2.13.7

package/scripts/tool_inventory.py

@@ -0,0 +1,74 @@
+#!/usr/bin/env python3
+"""Read-only, offline capability discovery for agent-bypass 2.13.6.
+
+No network calls, installation, subprocess execution, scanning or file modification.
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import platform
+import shutil
+from pathlib import Path
+
+TOOLS = {
+    "package_audit": ["python3", "node", "npm", "git", "rg", "jq"],
+    "static_code": ["rg", "semgrep", "codeql", "python3"],
+    "dependencies": ["osv-scanner", "trivy", "syft", "python3"],
+    "binary": ["file", "readelf", "objdump", "strings", "ghidraRun", "r2"],
+    "android": ["jadx", "apktool", "aapt", "keytool", "unzip"],
+    "pcap": ["tshark", "capinfos", "wireshark", "python3"],
+    "web_static": ["rg", "jq", "python3", "node"],
+    "authorized_http": ["curl", "httpx", "mitmproxy"],
+    "forensics": ["vol", "volatility3", "exiftool", "strings", "file"],
+}
+PACKAGED = [
+    "argsmini.py", "basicauth_brute.py", "cvefetch.py", "deck.py", "depscan.py",
+    "dirbrute.py", "fastrecon.py", "jsrip.py", "mutate.py", "platf.py",
+    "portscan.py", "webprobe.py", "doh_resolve.sh",
+]
+
+
+def discover(root: Path, task: str) -> dict:
+    if task not in TOOLS:
+        raise ValueError("Unknown task")
+    tools = [{"name": name, "installed": bool(shutil.which(name)),
+              "path": shutil.which(name)} for name in TOOLS[task]]
+    scripts = [{"name": name, "present": (root / "scripts" / name).is_file()}
+               for name in PACKAGED]
+    return {
+        "task": task,
+        "platform": platform.system(),
+        "architecture": platform.machine(),
+        "python": platform.python_version(),
+        "root": str(root.resolve()),
+        "tools": tools,
+        "packaged_scripts": scripts,
+        "selection_note": "Only checks tool availability. Does not execute tools or authorize external operations.",
+        "result_state": "inventory_only",
+    }
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="Offline, read-only security analysis tool inventory")
+    parser.add_argument("--task", choices=sorted(TOOLS), default="package_audit")
+    parser.add_argument("--root", type=Path, default=Path(__file__).resolve().parent.parent)
+    parser.add_argument("--json", action="store_true", help="machine-readable inventory")
+    args = parser.parse_args()
+    if not args.root.is_dir():
+        parser.error("--root must be an existing directory")
+    result = discover(args.root, args.task)
+    if args.json:
+        print(json.dumps(result, ensure_ascii=False, indent=2))
+    else:
+        print("Task:", result["task"], "| OS:", result["platform"], "| Arch:", result["architecture"])
+        for item in result["tools"]:
+            print("  {} {:<16} {}".format("OK" if item["installed"] else "--", item["name"], item["path"] or "not found"))
+        print("Packaged scripts found:", sum(1 for x in result["packaged_scripts"] if x["present"]),
+              "/", len(result["packaged_scripts"]))
+        print("Inspection only: no tools were run.")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/webprobe.py

@@ -5,12 +5,15 @@ Web 批量指纹 + 路径探测器
 用法: python3 webprobe.py <domain> [<domain> ...]      # 或完整 URL
 输出: jsonl（指纹 + 命中路径）
 """
-import sys, json, ssl, re, urllib.request, urllib.error
+import os
+import sys, json, ssl, re, urllib.parse, urllib.request, urllib.error
 
 UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
 CTX = ssl.create_default_context()
-CTX.check_hostname = False
-CTX.verify_mode = ssl.CERT_NONE
+# 默认验证证书；确需对自签/异常证书目标作业时设 AB_INSECURE=1 显式降级
+if os.environ.get("AB_INSECURE") == "1":
+    CTX.check_hostname = False
+    CTX.verify_mode = ssl.CERT_NONE
 
 PROBE_PATHS = [
     "/", "/robots.txt", "/.env", "/.git/HEAD", "/config.json", "/config.js",
@@ -24,6 +27,25 @@ PROBE_PATHS = [
     "/backup.zip", "/db.sql", "/phpinfo.php", "/info.php", "/server-status",
 ]
 
+def parse_target(raw):
+    """接受域名 / host:port / 完整 URL，返回 (host[:port], scheme, path_prefix)；非法输入抛 ValueError"""
+    raw = (raw or "").strip()
+    if not raw:
+        raise ValueError("空目标")
+    if "://" in raw:
+        sp = urllib.parse.urlsplit(raw)
+        if sp.scheme not in ("http", "https"):
+            raise ValueError(f"不支持的协议: {sp.scheme}")
+        if not sp.netloc or not re.fullmatch(r"[A-Za-z0-9._\-]+(:\d{1,5})?", sp.netloc):
+            raise ValueError(f"非法主机名: {sp.netloc}")
+        return sp.netloc, sp.scheme, sp.path.rstrip("/")
+    hostport, _, rest = raw.partition("/")
+    if not re.fullmatch(r"[A-Za-z0-9._\-]+(:\d{1,5})?", hostport):
+        raise ValueError(f"非法主机: {hostport}")
+    prefix = ("/" + rest.rstrip("/")) if rest else ""
+    return hostport, "https", prefix
+
+
 def req(url, method="GET", data=None, timeout=12, headers=None):
     h = {"User-Agent": UA, "Accept": "*/*"}
     if headers: h.update(headers)
@@ -74,11 +96,17 @@ def _pool_map(items, fn, workers):
 
 def scan(domain):
     out = {"domain": domain, "hits": [], "errors": []}
+    try:
+        host, scheme, prefix = parse_target(domain)
+    except ValueError as e:
+        out["root_status"] = 0
+        out["errors"].append(f"目标非法: {e}")
+        return out
     # 指纹（https 失败自动回落 http；都不可达则快速返回）
-    base = f"https://{domain}"
+    base = f"{scheme}://{host}{prefix}"
     st, hd, bd = req(base + "/")
-    if st == 0:
-        base = f"http://{domain}"
+    if st == 0 and scheme == "https":
+        base = f"http://{host}{prefix}"
         st, hd, bd = req(base + "/")
     if st == 0:
         out["root_status"] = 0

package/tests/test_tool_inventory.py

@@ -0,0 +1,40 @@
+"""Offline regression tests for the additive tool inventory."""
+import json
+import subprocess
+import sys
+import unittest
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+SCRIPT = ROOT / 'scripts' / 'tool_inventory.py'
+TASKS = ['package_audit','static_code','dependencies','binary','android','pcap','web_static','authorized_http','forensics']
+
+
+class InventoryTests(unittest.TestCase):
+    def test_all_tasks_json(self):
+        for task in TASKS:
+            with self.subTest(task=task):
+                run = subprocess.run([sys.executable, str(SCRIPT), '--root', str(ROOT), '--task', task, '--json'], capture_output=True, text=True, check=True)
+                payload = json.loads(run.stdout)
+                self.assertEqual(payload['task'], task)
+                self.assertEqual(payload['result_state'], 'inventory_only')
+                self.assertTrue(payload['tools'])
+                self.assertTrue(all(isinstance(x['installed'],bool) for x in payload['tools']))
+
+    def test_bad_task_rejected(self):
+        run = subprocess.run([sys.executable, str(SCRIPT), '--task', 'unauthorized'], capture_output=True, text=True)
+        self.assertNotEqual(run.returncode, 0)
+
+    def test_broken_root_rejected(self):
+        run = subprocess.run([sys.executable, str(SCRIPT), '--root', '/nonexistent/a-b-c-directory'], capture_output=True, text=True)
+        self.assertNotEqual(run.returncode, 0)
+
+    def test_documents_linked(self):
+        skill = (ROOT / 'SKILL.md').read_text(encoding='utf-8')
+        for item in ['agent-routing.md','tool-selection.md','verification-gates.md','framework-comparison-2026.md','tool_inventory.py']:
+            self.assertIn(item, skill)
+        self.assertEqual(skill.count('<!-- module:'), 33)
+
+
+if __name__ == '__main__':
+    unittest.main()