farai 0.3.1 → 0.3.3

package/docker/kali/Dockerfile

@@ -31,9 +31,6 @@ ARG INTERACTSH_VERSION=1.3.1
 ARG TYPESCRIPT_VERSION=5.9.3
 ARG TYPESCRIPT_LANGUAGE_SERVER_VERSION=4.3.4
 ARG PYRIGHT_VERSION=1.1.408
-ARG KALI_CONTRACT=curated-security-runtime-2026-09
-
-LABEL org.farai.kali.contract="${KALI_CONTRACT}"
 
 COPY farai-tool-manifest.json /usr/local/share/farai/farai-tool-manifest.json
 
@@ -116,12 +113,68 @@ RUN useradd --system --create-home --home-dir /home/mitm --shell /usr/sbin/nolog
   && certutil -d sql:/root/.pki/nssdb -N --empty-password \
   && certutil -d sql:/root/.pki/nssdb -A -n farai-mitmproxy -t "C,," -i /usr/local/share/farai/farai-mitmproxy-ca.pem
 
+ENV PIP_BREAK_SYSTEM_PACKAGES=1
+
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    apktool jadx dex2jar adb aapt apksigner \
+    fcrackzip stegseek hashid python3-pwntools proxychains4 \
+    ruby ruby-dev \
+    cmake ninja-build pkg-config libicu-dev libcapstone-dev libunicorn-dev \
+    clang automake autoconf libtool libgmp-dev libmpc-dev libmpfr-dev libssl-dev libffi-dev \
+  && apt-get clean \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN export GOBIN=/usr/local/bin GOFLAGS=-buildvcs=false GOSUMDB=off \
+  && go install github.com/lc/gau/v2/cmd/gau@latest \
+  && go install github.com/tomnomnom/waybackurls@latest \
+  && go install github.com/jaeles-project/gospider@latest \
+  && go install github.com/hakluke/hakrawler@latest \
+  && go install github.com/sensepost/gowitness@latest \
+  && go install github.com/projectdiscovery/notify/cmd/notify@latest \
+  && go install github.com/tomnomnom/anew@latest \
+  && go install github.com/tomnomnom/qsreplace@latest \
+  && go install github.com/tomnomnom/unfurl@latest \
+  && go install github.com/zricethezav/gitleaks/v8@latest \
+  && rm -rf /root/go/pkg /root/.cache/go-build
+
+RUN curl -sSfL https://raw.githubusercontent.com/trufflesecurity/trufflehog/main/scripts/install.sh | sh -s -- -b /usr/local/bin
+
+RUN gem install --no-document -n /usr/local/bin one_gadget zsteg
+
+ENV PIPX_HOME=/opt/pipx PIPX_BIN_DIR=/usr/local/bin
+
+RUN pipx install ROPgadget \
+  && pipx install apkleaks \
+  && pipx install git-dumper \
+  && chmod -R a+rX /opt/pipx
+
+RUN pipx install git+https://github.com/RsaCtfTool/RsaCtfTool.git \
+  && chmod -R a+rX /opt/pipx \
+  || echo "[warn] RsaCtfTool install skipped"
+
+RUN git clone --depth 1 https://github.com/hugsy/gef.git /opt/gef \
+  && echo "source /opt/gef/gef.py" >> /root/.gdbinit
+
+RUN git clone --depth 1 https://github.com/ticarpi/jwt_tool.git /opt/jwt_tool \
+  && pip install termcolor cprint pycryptodomex requests ratelimit \
+  && printf '#!/bin/sh\nexec python3 /opt/jwt_tool/jwt_tool.py "$@"\n' > /usr/local/bin/jwt_tool \
+  && chmod 0755 /usr/local/bin/jwt_tool
+
+RUN git clone --depth 1 https://github.com/worawit/blutter.git /opt/blutter \
+  && pip install pyelftools requests \
+  && printf '#!/bin/sh\nexec python3 /opt/blutter/blutter.py "$@"\n' > /usr/local/bin/blutter \
+  && chmod 0755 /usr/local/bin/blutter
+
+RUN git clone --depth 1 https://github.com/danielmiessler/SecLists.git /usr/share/seclists
+
 COPY redsocks.conf.tmpl /usr/local/share/farai/redsocks.conf.tmpl
 COPY farai-proxy-init.sh /usr/local/bin/farai-proxy-init
 COPY farai-proxy-teardown.sh /usr/local/bin/farai-proxy-teardown
 COPY farai-mitmproxy-mcp.sh /usr/local/bin/mitmproxy-mcp
 COPY farai_mitmproxy_mcp.py /usr/local/share/farai/farai_mitmproxy_mcp.py
 COPY farai-image-doctor.py /usr/local/bin/farai-image-doctor
+COPY farai-image-contract /usr/local/share/farai/farai-image-contract
 RUN chmod 0755 /usr/local/bin/farai-proxy-init /usr/local/bin/farai-proxy-teardown /usr/local/bin/mitmproxy-mcp /usr/local/bin/farai-image-doctor \
   && farai-image-doctor --write /usr/local/share/farai/kali-capabilities.json
 
@@ -132,3 +185,6 @@ ENV NODE_EXTRA_CA_CERTS=/usr/local/share/farai/farai-mitmproxy-ca.pem \
     GIT_SSL_CAINFO=/etc/ssl/certs/ca-certificates.crt
 
 WORKDIR /workspace
+
+ARG KALI_CONTRACT=curated-security-runtime-2026-10
+LABEL org.farai.kali.contract="${KALI_CONTRACT}"

package/docker/kali/farai-image-contract

@@ -0,0 +1 @@
+curated-security-runtime-2026-10

package/docker/kali/farai-image-doctor.py

@@ -19,9 +19,22 @@ def resolve_manifest_path():
     raise FileNotFoundError("farai tool manifest not found")
 
 
+def resolve_contract():
+    env = os.environ.get("KALI_CONTRACT")
+    if env and env.strip():
+        return env.strip()
+    for candidate in (
+        Path("/usr/local/share/farai/farai-image-contract"),
+        Path(__file__).with_name("farai-image-contract"),
+    ):
+        if candidate.is_file():
+            return candidate.read_text(encoding="utf-8").strip()
+    raise FileNotFoundError("kali image contract not found")
+
+
 MANIFEST_PATH = resolve_manifest_path()
 MANIFEST = json.loads(MANIFEST_PATH.read_text(encoding="utf-8"))
-CONTRACT = MANIFEST["contract"]
+CONTRACT = resolve_contract()
 APT_PACKAGES = tuple(MANIFEST["aptPackages"])
 WORKFLOWS = MANIFEST["workflows"]
 PINNED_TOOLS = MANIFEST["pinnedTools"]

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "farai",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "private": false,
   "type": "module",
-  "description": "Cyber-first freestyle local AI agent",
+  "description": "AI Harness for Security Assessments",
   "license": "Apache-2.0",
   "packageManager": "bun@1.3.14",
   "homepage": "https://github.com/pajarori/farai#readme",