dsh-pentester 0.0.1 → 0.1.0-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +59 -7
- package/cordis.dev.patch.yml +16 -0
- package/cordis.patch.yml +2 -0
- package/lib/client.js +26578 -0
- package/lib/client.js.map +7 -0
- package/lib/container-listing-CE5t-Y_H.js +56 -0
- package/lib/container-listing-CE5t-Y_H.js.map +1 -0
- package/lib/container-listing-DZPBvrLD.js +56 -0
- package/lib/container-listing-DZPBvrLD.js.map +1 -0
- package/lib/docker-tar-_wf8UrSj.js +66 -0
- package/lib/docker-tar-_wf8UrSj.js.map +1 -0
- package/lib/engagement-container-store-B9D8g0wq.js +641 -0
- package/lib/engagement-container-store-B9D8g0wq.js.map +1 -0
- package/lib/engagement-container-store-Cu1wuur1.js +639 -0
- package/lib/engagement-container-store-Cu1wuur1.js.map +1 -0
- package/lib/index.d.ts +3938 -0
- package/lib/index.js +16310 -0
- package/lib/index.js.map +1 -0
- package/package.json +80 -8
- package/presets/pentester-mode/agent.cordis.yml +60 -0
- package/presets/pentester-mode/preset.yml +3 -0
- package/index.js +0 -5
package/README.md
CHANGED
|
@@ -1,13 +1,65 @@
|
|
|
1
1
|
# dsh-pentester
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) 的 PTES 渗透测试编排插件。
|
|
4
4
|
|
|
5
|
-
|
|
5
|
+
它是一个标准的 DSH **bundle**：`package.json` 声明 `dsh.bundle.patch`，`cordis.patch.yml` 将插件插入 profile。
|
|
6
6
|
|
|
7
|
-
|
|
8
|
-
dsh plugin --profile web add dsh-pentester
|
|
9
|
-
````
|
|
7
|
+
## 能力
|
|
10
8
|
|
|
11
|
-
|
|
9
|
+
- PTES 七阶段工作流
|
|
10
|
+
- 自动 Engagement bootstrap（`pentester_ensure_engagement`，幂等）
|
|
11
|
+
- Orchestrator + subagent Agent Run
|
|
12
|
+
- Agent Template、Skills、MCP、Toolbox
|
|
13
|
+
- Tool Broker（Scope、grant、AUTO / APPROVAL / DENY）
|
|
14
|
+
- Docker 与 MCP 执行后端
|
|
15
|
+
- Artifact / Evidence / Finding 持久化
|
|
16
|
+
- 审批与 capability 控制
|
|
17
|
+
- Native DSH 人机交互（`ask_user_question`）
|
|
18
|
+
- Pentester Native UI（`conversation.view`）
|
|
19
|
+
- 报告（`report.md`）
|
|
12
20
|
|
|
13
|
-
|
|
21
|
+
架构状态：[`docs/status.md`](docs/status.md)。
|
|
22
|
+
AI / 贡献者规则：[`AGENTS.md`](AGENTS.md)。
|
|
23
|
+
文档索引：[`docs/README.md`](docs/README.md)。
|
|
24
|
+
英文版 README：[`docs/README.en.md`](docs/README.en.md)。
|
|
25
|
+
|
|
26
|
+
## 安装
|
|
27
|
+
|
|
28
|
+
```sh
|
|
29
|
+
dsh plugin --profile web add .
|
|
30
|
+
dsh --profile web --dump-config # 查找 "# == dsh-pentester"
|
|
31
|
+
dsh web --profile web
|
|
32
|
+
```
|
|
33
|
+
|
|
34
|
+
加载成功会输出 `[dsh-pentester] loaded`。生产默认：`devSeed=false`。仅开发 fixture：`dsh web --patch ./cordis.dev.patch.yml`。
|
|
35
|
+
|
|
36
|
+
从 GitHub 安装（pnpm ≥10 在允许构建前会拒绝 `prepare`）：
|
|
37
|
+
|
|
38
|
+
```sh
|
|
39
|
+
dsh plugin --profile web add github:fb0sh/dsh-pentester
|
|
40
|
+
# 复制到 ~/.dsh/profiles/web/pnpm-workspace.yaml：
|
|
41
|
+
# allowBuilds:
|
|
42
|
+
# dsh-pentester: true
|
|
43
|
+
dsh plugin --profile web add github:fb0sh/dsh-pentester
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
卸载：`dsh plugin --profile web remove dsh-pentester`。
|
|
47
|
+
|
|
48
|
+
保持以下名称同步：`package.json` 的 `name`、`src/index.ts` 的 `name`、`cordis.patch.yml` 的 `id` / `name`。
|
|
49
|
+
|
|
50
|
+
## 开发
|
|
51
|
+
|
|
52
|
+
```sh
|
|
53
|
+
pnpm install
|
|
54
|
+
pnpm test
|
|
55
|
+
pnpm run check
|
|
56
|
+
pnpm run build
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
`pnpm run check` 即 `tsc --noEmit` 加 `pnpm run build`（host `tsdown` + client bundle）。
|
|
60
|
+
|
|
61
|
+
官方 Quickstart：https://deepseek-harness.github.io/deepseek-harness/guide/quickstart
|
|
62
|
+
|
|
63
|
+
## License
|
|
64
|
+
|
|
65
|
+
MIT
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
# Development overlay. Not shipped as the default plugin patch.
|
|
2
|
+
# Enable the canonical DEV fixture Engagement (opt-in only):
|
|
3
|
+
#
|
|
4
|
+
# dsh web --patch ./cordis.dev.patch.yml
|
|
5
|
+
#
|
|
6
|
+
# or merge this insert into a development profile. Production `cordis.patch.yml`
|
|
7
|
+
# must not set devSeed.
|
|
8
|
+
- insert:
|
|
9
|
+
- id: dsh-pentester
|
|
10
|
+
name: dsh-pentester
|
|
11
|
+
config:
|
|
12
|
+
verbose: true
|
|
13
|
+
devSeed: true
|
|
14
|
+
# UI Preview: presentation-only sample data for inspecting the layouts.
|
|
15
|
+
# Independent of devSeed; uncomment to enable without creating fixture state.
|
|
16
|
+
# uiPreview: true
|