pentesting 0.2.1 → 0.2.3

package/README.md

@@ -31,15 +31,14 @@ npm install -g pentesting
 ### Configure
 
 ```bash
-# Anthropic API
+# Required: API Key (either works)
+export PENTEST_API_KEY=your_api_key
+# or
 export ANTHROPIC_API_KEY=your_api_key
 
-# OpenAI-compatible APIs (GLM, etc.)
-export ANTHROPIC_API_KEY=your_api_key
-export ANTHROPIC_BASE_URL=https://your-api-endpoint.com/v1
-
-# Optional
-export PENTEST_MODEL=claude-sonnet-4-20250514  # or your model
+# For other providers (GLM, OpenRouter, etc.)
+export PENTEST_BASE_URL=https://your-api-endpoint.com/v1
+export PENTEST_MODEL=your-model-name
 export PENTEST_MAX_TOKENS=16384
 ```
 
@@ -198,9 +197,9 @@ await agent.addMCPServer('security-tools', 'docker', [
 
 | Variable | Description | Default |
 |----------|-------------|---------|
-| ANTHROPIC_API_KEY | Claude API key | Required |
-| ANTHROPIC_BASE_URL | API endpoint URL (for GLM, etc.) | - |
-| PENTEST_MODEL | Claude model | claude-sonnet-4-20250514 |
+| PENTEST_API_KEY | API key (alternative: ANTHROPIC_API_KEY) | Required |
+| PENTEST_BASE_URL | API endpoint URL (for GLM, etc.) | - |
+| PENTEST_MODEL | Model name | claude-sonnet-4-20250514 |
 | PENTEST_MAX_TOKENS | Max response tokens | 16384 |
 | PENTESTING_DOCKER | Force Docker execution | 0 |
 | PENTESTING_CONTAINER | Docker container name | pentesting-tools |

package/dist/index.js

@@ -1374,11 +1374,12 @@ const { chromium } = require('playwright');
 }
 
 // src/config/constants.ts
-var APP_VERSION = "0.2.1";
+var APP_VERSION = "0.2.3";
 var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
-var CLAUDE_MODEL = process.env.PENTEST_MODEL || "claude-sonnet-4-20250514";
-var CLAUDE_MAX_TOKENS = parseInt(process.env.PENTEST_MAX_TOKENS || "16384", 10);
-var ANTHROPIC_BASE_URL = process.env.ANTHROPIC_BASE_URL || void 0;
+var LLM_API_KEY = process.env.PENTEST_API_KEY || process.env.ANTHROPIC_API_KEY || "";
+var LLM_BASE_URL = process.env.PENTEST_BASE_URL || void 0;
+var LLM_MODEL = process.env.PENTEST_MODEL || "claude-sonnet-4-20250514";
+var LLM_MAX_TOKENS = parseInt(process.env.PENTEST_MAX_TOKENS || "16384", 10);
 var AGENT_CONFIG = {
   maxIterations: 200,
   maxToolCallsPerIteration: 10,
@@ -1885,8 +1886,8 @@ async function compactHistory(client, messages, keepRecent = 4) {
     return `[${msg.role.toUpperCase()}]: ${content}`;
   }).join("\n\n");
   const response = await client.messages.create({
-    model: CLAUDE_MODEL,
-    max_tokens: CLAUDE_MAX_TOKENS,
+    model: LLM_MODEL,
+    max_tokens: LLM_MAX_TOKENS,
     system: COMPACTION_PROMPT,
     messages: [{
       role: "user",
@@ -2979,8 +2980,8 @@ var AutonomousHackingAgent = class extends EventEmitter3 {
   constructor(apiKey, config) {
     super();
     this.client = new Anthropic({
-      apiKey: apiKey || process.env.ANTHROPIC_API_KEY,
-      baseURL: ANTHROPIC_BASE_URL
+      apiKey: apiKey || LLM_API_KEY || process.env.PENTEST_API_KEY,
+      baseURL: LLM_BASE_URL
     });
     this.config = { ...AGENT_CONFIG, ...config };
     this.tools = ALL_TOOLS;
@@ -3234,7 +3235,7 @@ Current situation:
 What went wrong and what different approach should be tried?
 `;
     const response = await this.client.messages.create({
-      model: CLAUDE_MODEL,
+      model: LLM_MODEL,
       max_tokens: 4096,
       messages: [{ role: "user", content: reflectionPrompt }]
     });
@@ -3382,8 +3383,8 @@ Goal: Deep penetration to obtain root/system privileges, extract internal data,
     }
     const response = await withRetry(
       () => this.client.messages.create({
-        model: CLAUDE_MODEL,
-        max_tokens: CLAUDE_MAX_TOKENS,
+        model: LLM_MODEL,
+        max_tokens: LLM_MAX_TOKENS,
         system: systemPrompt,
         tools: this.tools,
         messages
@@ -3670,8 +3671,8 @@ ${this.state.findings.filter((f) => f.severity !== "info").map((f) => `- Address
     try {
       const systemPrompt = this.buildContextualPrompt();
       const response = await this.client.messages.create({
-        model: CLAUDE_MODEL,
-        max_tokens: CLAUDE_MAX_TOKENS,
+        model: LLM_MODEL,
+        max_tokens: LLM_MAX_TOKENS,
         system: systemPrompt,
         messages: this.state.history,
         tools: this.tools
@@ -3703,8 +3704,8 @@ ${this.state.findings.filter((f) => f.severity !== "info").map((f) => `- Address
       }
       if (hasToolCalls && response.stop_reason === "tool_use") {
         const followUp = await this.client.messages.create({
-          model: CLAUDE_MODEL,
-          max_tokens: CLAUDE_MAX_TOKENS,
+          model: LLM_MODEL,
+          max_tokens: LLM_MAX_TOKENS,
           system: systemPrompt,
           messages: this.state.history,
           tools: this.tools
@@ -4761,7 +4762,7 @@ ${chalk.hex(THEME.status.warning)("Examples:")}
 
 ${chalk.hex(THEME.status.warning)("Environment:")}
 
-  ${chalk.hex(THEME.text.accent)("ANTHROPIC_API_KEY")}    Required - Anthropic API key
+  ${chalk.hex(THEME.text.accent)("PENTEST_API_KEY")}      Required - LLM API key
   ${chalk.hex(THEME.text.accent)("PENTEST_MODEL")}        Optional - Model override
 
 ${chalk.hex(THEME.text.muted)("For ethical hacking and authorized testing only.")}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",