dsh-pentester 1.0.0 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +22 -5
- package/docker/kali/TOOL_PROMPT.md +7 -8
- package/lib/build-id.json +1 -0
- package/lib/client.js +3712 -48
- package/lib/client.js.map +4 -4
- package/lib/index.d.ts +0 -12
- package/lib/index.js +2072 -430
- package/lib/index.js.map +1 -1
- package/package.json +13 -13
- package/presets/pentester/agent.cordis.yml +71 -44
- package/presets/pentester/run-state.mjs +99 -90
package/README.md
CHANGED
|
@@ -18,22 +18,39 @@ Delegation（并行多个）= 各一个 DSH child session（AgentProfile + 不
|
|
|
18
18
|
Deliverable = 文件（workspace/stages/<NN>-<stage>/delegations/D-00N/）
|
|
19
19
|
```
|
|
20
20
|
|
|
21
|
+
## 准备
|
|
22
|
+
|
|
23
|
+
安装deepseek harness
|
|
24
|
+
|
|
25
|
+
```bash
|
|
26
|
+
npm install -g @deepseek-ai/dsh
|
|
27
|
+
```
|
|
28
|
+
|
|
29
|
+
准备docker镜像
|
|
30
|
+
```bash
|
|
31
|
+
docker pull fb0sh/dsh-pentester-kali:1.0.0
|
|
32
|
+
```
|
|
33
|
+
|
|
21
34
|
## 安装
|
|
22
35
|
|
|
23
36
|
```bash
|
|
37
|
+
# npm 源
|
|
38
|
+
dsh plugin --profile web add dsh-pentester@latest
|
|
39
|
+
|
|
24
40
|
# github 源
|
|
25
41
|
dsh plugin --profile web add github:fb0sh/dsh-pentester
|
|
26
|
-
# npm 源
|
|
27
|
-
dsh plugin --profile web add dsh-pentester
|
|
28
42
|
```
|
|
43
|
+
安装后需要重启dsh
|
|
29
44
|
|
|
30
45
|
## 布局
|
|
31
46
|
|
|
32
47
|
| 目录/文件 | 职责 |
|
|
33
48
|
| --- | --- |
|
|
34
|
-
| `src/` | model/stages/profiles/store、workspace/git、dsh/delegations/tools/worker-tools、docker/（host/connection/images/runtime）、rpc/settings-store、index |
|
|
35
|
-
| `src/
|
|
36
|
-
| `
|
|
49
|
+
| `src/` | model/stages/profiles/store、workspace/git、dsh/delegations/tools/worker-tools、docker/（host/connection/images/runtime）、rpc/settings-store、targets、migrate、index |
|
|
50
|
+
| `src/pentest/` | pre-engagement/assets/findings 领域逻辑 |
|
|
51
|
+
| `src/ui/client/` | Settings 的 "Pentester Config" 页（Docker Engine / Toolbox Image） |
|
|
52
|
+
| `src/ui-view/` | Pentester 数据面板（invocations snapshot / binding / RPC） |
|
|
53
|
+
| `agents/*/profile.yml` | 7 个 AgentProfile（impact/recon/reporting/threat-model/validation/vulnerability/web） |
|
|
37
54
|
| `docker/` | Toolbox Dockerfile（kali 等，镜像白名单来源） |
|
|
38
55
|
| `presets/pentester/` | Root persona preset + `run-state.mjs`（工具面限制 + 动态状态注入） |
|
|
39
56
|
|
|
@@ -42,7 +42,7 @@ tool-info <name> 查不到时，不要假设该工具存在；
|
|
|
42
42
|
Workspace 结构（每次 run 一致，不要另造目录）：
|
|
43
43
|
|
|
44
44
|
/workspace/
|
|
45
|
-
├── .dsh-pentester/ #
|
|
45
|
+
├── .dsh-pentester/ # 宿主状态（只读参考；切勿修改）
|
|
46
46
|
├── target/ # target.json scope/ roe/ inputs/
|
|
47
47
|
├── assets/ # assets.json（提升后的资产）
|
|
48
48
|
├── stages/
|
|
@@ -52,23 +52,22 @@ Workspace 结构（每次 run 一致，不要另造目录）：
|
|
|
52
52
|
│ └── D-XXX/ # 每个 Worker 的专属目录
|
|
53
53
|
├── findings/ # findings.md 等（提升后）
|
|
54
54
|
├── report/ # 最终报告
|
|
55
|
-
|
|
56
|
-
└── STATUS.md # 宿主自动生成的可读状态
|
|
55
|
+
└── traffic/ # 流量记录（勿动）
|
|
57
56
|
|
|
58
57
|
只写你自己的 delegation 目录：
|
|
59
58
|
|
|
60
59
|
/workspace/stages/<NN>-<stage>/delegations/<D-XXX>/
|
|
61
|
-
├── input/ #
|
|
60
|
+
├── input/ # task_prompt 快照（只读）
|
|
62
61
|
├── work/ # 工作文件（默认 cwd）
|
|
63
62
|
├── artifacts/ # 最终产物
|
|
64
63
|
├── evidence/ # 可复验证据（命令 + 输出）
|
|
65
|
-
└──
|
|
64
|
+
└── result.md # 当前正式可交付结果（Worker 写/更新）
|
|
66
65
|
|
|
67
66
|
规则：
|
|
68
67
|
|
|
69
|
-
- 可以读整个 /workspace
|
|
70
|
-
- 只能写你自己的 delegations/<D-XXX>/ 目录（work/ artifacts/ evidence/
|
|
71
|
-
-
|
|
68
|
+
- 可以读整个 /workspace/（历史阶段、别人的成果）；
|
|
69
|
+
- 只能写你自己的 delegations/<D-XXX>/ 目录（work/ artifacts/ evidence/ result.md）；
|
|
70
|
+
- 写/更新 result.md 作为当前 Delegation 的正式可交付结果；
|
|
72
71
|
- 不要创建新的顶层目录；不要修改其他 delegation 目录。
|
|
73
72
|
|
|
74
73
|
Git：
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"buildId":"2.0.0+c5466b6","version":"2.0.0","sha":"c5466b6"}
|