pentesting 0.21.9 → 0.21.11

package/README.md

@@ -36,3 +36,6 @@ docker run -it --rm \
   agnusdei1207/pentesting
 ```
 
+## Issue
+
+email: agnusdei1207@gmail.com

package/dist/main.js

@@ -157,7 +157,7 @@ var EXIT_CODES = {
 var ID_LENGTH = AGENT_LIMITS.ID_LENGTH;
 var ID_RADIX = AGENT_LIMITS.ID_RADIX;
 var APP_NAME = "Pentest AI";
-var APP_VERSION = "0.21.9";
+var APP_VERSION = "0.21.11";
 var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
 var LLM_ROLES = {
   SYSTEM: "system",
@@ -2995,12 +2995,57 @@ var SEARCH_LIMIT = {
 // src/shared/utils/debug-logger.ts
 import { appendFileSync as appendFileSync2, writeFileSync as writeFileSync3 } from "fs";
 import { join as join2 } from "path";
+
+// src/shared/constants/paths.ts
+import path2 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { homedir } from "os";
+var __filename2 = fileURLToPath2(import.meta.url);
+var __dirname2 = path2.dirname(__filename2);
+var PROJECT_ROOT = path2.resolve(__dirname2, "../../../");
+var WORKSPACE_DIR_NAME = ".pentesting";
+function getWorkspaceRoot() {
+  return path2.join(homedir(), WORKSPACE_DIR_NAME);
+}
+var WORKSPACE = {
+  /** Root directory (resolved lazily via getWorkspaceRoot) */
+  get ROOT() {
+    return getWorkspaceRoot();
+  },
+  /** Per-session state snapshots */
+  get SESSIONS() {
+    return path2.join(getWorkspaceRoot(), "sessions");
+  },
+  /** Debug logs */
+  get DEBUG() {
+    return path2.join(getWorkspaceRoot(), "debug");
+  },
+  /** Generated reports */
+  get REPORTS() {
+    return path2.join(getWorkspaceRoot(), "reports");
+  },
+  /** Downloaded loot, captured files */
+  get LOOT() {
+    return path2.join(getWorkspaceRoot(), "loot");
+  },
+  /** Temporary files for active operations */
+  get TEMP() {
+    return path2.join(getWorkspaceRoot(), "temp");
+  }
+};
+var PATHS = {
+  ROOT: PROJECT_ROOT,
+  SRC: path2.join(PROJECT_ROOT, "src"),
+  DIST: path2.join(PROJECT_ROOT, "dist")
+};
+
+// src/shared/utils/debug-logger.ts
 var DebugLogger = class _DebugLogger {
   static instance;
   logPath;
   initialized = false;
   constructor(clearOnInit = false) {
-    const debugDir = join2(process.cwd(), ".pentesting", "debug");
+    const debugDir = WORKSPACE.DEBUG;
     try {
       ensureDirExists(debugDir);
       this.logPath = join2(debugDir, "debug.log");
@@ -3071,7 +3116,8 @@ function debugLog(category, message, data) {
 }
 
 // src/engine/tools/web-browser.ts
-import { join as join5, tmpdir as tmpdir3 } from "path";
+import { join as join5 } from "path";
+import { tmpdir as tmpdir3 } from "os";
 
 // src/shared/constants/browser/config.ts
 var BROWSER_CONFIG = {
@@ -3188,7 +3234,8 @@ async function installPlaywright() {
 // src/engine/tools/web-browser-script.ts
 import { spawn as spawn4 } from "child_process";
 import { writeFileSync as writeFileSync4, unlinkSync as unlinkSync2 } from "fs";
-import { join as join4, tmpdir as tmpdir2 } from "path";
+import { join as join4 } from "path";
+import { tmpdir as tmpdir2 } from "os";
 function safeJsString(str) {
   return JSON.stringify(str);
 }
@@ -4683,8 +4730,8 @@ Returns: All available wordlists with their paths, sizes, and categories.`,
       }
     },
     execute: async (p) => {
-      const { existsSync: existsSync6, statSync, readdirSync: readdirSync2 } = await import("fs");
-      const { join: join9 } = await import("path");
+      const { existsSync: existsSync7, statSync: statSync2, readdirSync: readdirSync3 } = await import("fs");
+      const { join: join10 } = await import("path");
       const category = p.category || "";
       const search = p.search || "";
       const minSize = p.min_size || 0;
@@ -4699,11 +4746,11 @@ Returns: All available wordlists with their paths, sizes, and categories.`,
       let totalCount = 0;
       const scanDir = (dirPath, maxDepth = 3, currentDepth = 0) => {
         if (currentDepth > maxDepth) return;
-        if (!existsSync6(dirPath)) return;
+        if (!existsSync7(dirPath)) return;
         try {
-          const entries = readdirSync2(dirPath, { withFileTypes: true });
+          const entries = readdirSync3(dirPath, { withFileTypes: true });
           for (const entry of entries) {
-            const fullPath = join9(dirPath, entry.name);
+            const fullPath = join10(dirPath, entry.name);
             if (entry.isDirectory()) {
               if (entry.name.startsWith(".")) continue;
               if (entry.name === "doc") continue;
@@ -4714,7 +4761,7 @@ Returns: All available wordlists with their paths, sizes, and categories.`,
                 continue;
               }
               try {
-                const stats = statSync(fullPath);
+                const stats = statSync2(fullPath);
                 const sizeBytes = stats.size;
                 if (sizeBytes < minSize) continue;
                 const relPath = fullPath;
@@ -5124,8 +5171,8 @@ Requires root/sudo privileges.`,
       const iface = p.interface || "";
       const duration = p.duration || NETWORK_CONFIG.DEFAULT_SPOOF_DURATION;
       const hostsFile = createTempFile(".hosts");
-      const { writeFileSync: writeFileSync5 } = await import("fs");
-      writeFileSync5(hostsFile, `${spoofIp}	${domain}
+      const { writeFileSync: writeFileSync6 } = await import("fs");
+      writeFileSync6(hostsFile, `${spoofIp}	${domain}
 ${spoofIp}	*.${domain}
 `);
       const ifaceFlag = iface ? `-i ${iface}` : "";
@@ -5828,80 +5875,80 @@ var ServiceParser = class {
 
 // src/domains/registry.ts
 import { join as join6, dirname as dirname3 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var __dirname2 = dirname3(fileURLToPath2(import.meta.url));
+import { fileURLToPath as fileURLToPath3 } from "url";
+var __dirname3 = dirname3(fileURLToPath3(import.meta.url));
 var DOMAINS = {
   [SERVICE_CATEGORIES.NETWORK]: {
     id: SERVICE_CATEGORIES.NETWORK,
     name: "Network Infrastructure",
     description: "Vulnerability scanning, port mapping, and network service exploitation.",
-    promptPath: join6(__dirname2, "network/prompt.md")
+    promptPath: join6(__dirname3, "network/prompt.md")
   },
   [SERVICE_CATEGORIES.WEB]: {
     id: SERVICE_CATEGORIES.WEB,
     name: "Web Application",
     description: "Web app security testing, injection attacks, and auth bypass.",
-    promptPath: join6(__dirname2, "web/prompt.md")
+    promptPath: join6(__dirname3, "web/prompt.md")
   },
   [SERVICE_CATEGORIES.DATABASE]: {
     id: SERVICE_CATEGORIES.DATABASE,
     name: "Database Security",
     description: "SQL injection, database enumeration, and data extraction.",
-    promptPath: join6(__dirname2, "database/prompt.md")
+    promptPath: join6(__dirname3, "database/prompt.md")
   },
   [SERVICE_CATEGORIES.AD]: {
     id: SERVICE_CATEGORIES.AD,
     name: "Active Directory",
     description: "Kerberos, LDAP, and Windows domain privilege escalation.",
-    promptPath: join6(__dirname2, "ad/prompt.md")
+    promptPath: join6(__dirname3, "ad/prompt.md")
   },
   [SERVICE_CATEGORIES.EMAIL]: {
     id: SERVICE_CATEGORIES.EMAIL,
     name: "Email Services",
     description: "SMTP, IMAP, POP3 security and user enumeration.",
-    promptPath: join6(__dirname2, "email/prompt.md")
+    promptPath: join6(__dirname3, "email/prompt.md")
   },
   [SERVICE_CATEGORIES.REMOTE_ACCESS]: {
     id: SERVICE_CATEGORIES.REMOTE_ACCESS,
     name: "Remote Access",
     description: "SSH, RDP, VNC and other remote control protocols.",
-    promptPath: join6(__dirname2, "remote-access/prompt.md")
+    promptPath: join6(__dirname3, "remote-access/prompt.md")
   },
   [SERVICE_CATEGORIES.FILE_SHARING]: {
     id: SERVICE_CATEGORIES.FILE_SHARING,
     name: "File Sharing",
     description: "SMB, NFS, FTP and shared resource security.",
-    promptPath: join6(__dirname2, "file-sharing/prompt.md")
+    promptPath: join6(__dirname3, "file-sharing/prompt.md")
   },
   [SERVICE_CATEGORIES.CLOUD]: {
     id: SERVICE_CATEGORIES.CLOUD,
     name: "Cloud Infrastructure",
     description: "AWS, Azure, and GCP security and misconfiguration.",
-    promptPath: join6(__dirname2, "cloud/prompt.md")
+    promptPath: join6(__dirname3, "cloud/prompt.md")
   },
   [SERVICE_CATEGORIES.CONTAINER]: {
     id: SERVICE_CATEGORIES.CONTAINER,
     name: "Container Systems",
     description: "Docker and Kubernetes security testing.",
-    promptPath: join6(__dirname2, "container/prompt.md")
+    promptPath: join6(__dirname3, "container/prompt.md")
   },
   [SERVICE_CATEGORIES.API]: {
     id: SERVICE_CATEGORIES.API,
     name: "API Security",
     description: "REST, GraphQL, and SOAP API security testing.",
-    promptPath: join6(__dirname2, "api/prompt.md")
+    promptPath: join6(__dirname3, "api/prompt.md")
   },
   [SERVICE_CATEGORIES.WIRELESS]: {
     id: SERVICE_CATEGORIES.WIRELESS,
     name: "Wireless Networks",
     description: "WiFi and Bluetooth security testing.",
-    promptPath: join6(__dirname2, "wireless/prompt.md")
+    promptPath: join6(__dirname3, "wireless/prompt.md")
   },
   [SERVICE_CATEGORIES.ICS]: {
     id: SERVICE_CATEGORIES.ICS,
     name: "Industrial Systems",
     description: "Critical infrastructure - Modbus, DNP3, ENIP.",
-    promptPath: join6(__dirname2, "ics/prompt.md")
+    promptPath: join6(__dirname3, "ics/prompt.md")
   }
 };
 
@@ -6681,10 +6728,77 @@ function logLLM(message, data) {
 }
 
 // src/engine/orchestrator/orchestrator.ts
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath4 } from "url";
 import { dirname as dirname4, join as join7 } from "path";
-var __filename2 = fileURLToPath3(import.meta.url);
-var __dirname3 = dirname4(__filename2);
+var __filename3 = fileURLToPath4(import.meta.url);
+var __dirname4 = dirname4(__filename3);
+
+// src/engine/state-persistence.ts
+import { writeFileSync as writeFileSync5, readFileSync as readFileSync3, existsSync as existsSync5, readdirSync, statSync } from "fs";
+import { join as join8, basename } from "path";
+function saveState(state) {
+  const sessionsDir = WORKSPACE.SESSIONS;
+  ensureDirExists(sessionsDir);
+  const snapshot = {
+    version: 1,
+    savedAt: Date.now(),
+    engagement: state.getEngagement(),
+    targets: Array.from(state.getTargets().entries()).map(([key, value]) => ({ key, value })),
+    findings: state.getFindings(),
+    loot: state.getLoot(),
+    todo: state.getTodo(),
+    actionLog: state.getRecentActions(9999),
+    currentPhase: state.getPhase(),
+    missionSummary: state.getMissionSummary(),
+    missionChecklist: state.getMissionChecklist()
+  };
+  const sessionId = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const sessionFile = join8(sessionsDir, `${sessionId}.json`);
+  writeFileSync5(sessionFile, JSON.stringify(snapshot, null, 2), "utf-8");
+  const latestFile = join8(sessionsDir, "latest.json");
+  writeFileSync5(latestFile, JSON.stringify(snapshot, null, 2), "utf-8");
+  return sessionFile;
+}
+function loadState(state) {
+  const latestFile = join8(WORKSPACE.SESSIONS, "latest.json");
+  if (!existsSync5(latestFile)) {
+    return false;
+  }
+  try {
+    const raw = readFileSync3(latestFile, "utf-8");
+    const snapshot = JSON.parse(raw);
+    if (snapshot.version !== 1) {
+      console.warn(`[StatePersistence] Unknown snapshot version: ${snapshot.version}`);
+      return false;
+    }
+    if (snapshot.engagement) {
+      state.setEngagement(snapshot.engagement);
+    }
+    for (const { value } of snapshot.targets) {
+      state.addTarget(value);
+    }
+    for (const finding of snapshot.findings) {
+      state.addFinding(finding);
+    }
+    for (const loot of snapshot.loot) {
+      state.addLoot(loot);
+    }
+    for (const item of snapshot.todo) {
+      state.addTodo(item.content, item.priority);
+    }
+    state.setPhase(snapshot.currentPhase);
+    if (snapshot.missionSummary) {
+      state.setMissionSummary(snapshot.missionSummary);
+    }
+    if (snapshot.missionChecklist?.length > 0) {
+      state.addMissionChecklistItems(snapshot.missionChecklist.map((c) => c.text));
+    }
+    return true;
+  } catch (err) {
+    console.warn(`[StatePersistence] Failed to load state: ${err}`);
+    return false;
+  }
+}
 
 // src/agents/core-agent.ts
 var CoreAgent = class _CoreAgent {
@@ -7213,9 +7327,9 @@ Please decide how to handle this error and continue.`;
 };
 
 // src/agents/prompt-builder.ts
-import { readFileSync as readFileSync3, existsSync as existsSync5 } from "fs";
-import { join as join8, dirname as dirname5 } from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
+import { readFileSync as readFileSync4, existsSync as existsSync6 } from "fs";
+import { join as join9, dirname as dirname5 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
 
 // src/shared/constants/prompts.ts
 var PROMPT_PATHS = {
@@ -7268,9 +7382,9 @@ var INITIAL_TASKS = {
 };
 
 // src/agents/prompt-builder.ts
-var __dirname4 = dirname5(fileURLToPath4(import.meta.url));
-var PROMPTS_DIR = join8(__dirname4, "prompts");
-var TECHNIQUES_DIR = join8(PROMPTS_DIR, PROMPT_PATHS.TECHNIQUES_DIR);
+var __dirname5 = dirname5(fileURLToPath5(import.meta.url));
+var PROMPTS_DIR = join9(__dirname5, "prompts");
+var TECHNIQUES_DIR = join9(PROMPTS_DIR, PROMPT_PATHS.TECHNIQUES_DIR);
 var { AGENT_FILES } = PROMPT_PATHS;
 var PHASE_PROMPT_MAP = {
   // Direct mappings — phase has its own prompt file
@@ -7346,8 +7460,8 @@ var PromptBuilder = class {
    * Load a prompt file from src/agents/prompts/
    */
   loadPromptFile(filename) {
-    const path2 = join8(PROMPTS_DIR, filename);
-    return existsSync5(path2) ? readFileSync3(path2, PROMPT_CONFIG.ENCODING) : "";
+    const path3 = join9(PROMPTS_DIR, filename);
+    return existsSync6(path3) ? readFileSync4(path3, PROMPT_CONFIG.ENCODING) : "";
   }
   /**
    * Load phase-specific prompt.
@@ -7390,15 +7504,15 @@ ${content}
    * use web_search to look up specific attack techniques on demand.
    */
   loadPhaseRelevantTechniques(phase) {
-    if (!existsSync5(TECHNIQUES_DIR)) return "";
+    if (!existsSync6(TECHNIQUES_DIR)) return "";
     const relevantTechniques = PHASE_TECHNIQUE_MAP[phase] || [];
     if (relevantTechniques.length === 0) return "";
     const fragments = [];
     for (const technique of relevantTechniques) {
-      const filePath = join8(TECHNIQUES_DIR, `${technique}.md`);
+      const filePath = join9(TECHNIQUES_DIR, `${technique}.md`);
       try {
-        if (!existsSync5(filePath)) continue;
-        const content = readFileSync3(filePath, PROMPT_CONFIG.ENCODING);
+        if (!existsSync6(filePath)) continue;
+        const content = readFileSync4(filePath, PROMPT_CONFIG.ENCODING);
         if (content) {
           fragments.push(`<technique-reference category="${technique}">
 ${content}
@@ -7454,6 +7568,10 @@ var MainAgent = class extends CoreAgent {
       const result2 = await this.run(userInput, this.getCurrentPrompt());
       return result2.output;
     } finally {
+      try {
+        saveState(this.state);
+      } catch {
+      }
       await cleanupAllProcesses();
     }
   }
@@ -7472,10 +7590,28 @@ var MainAgent = class extends CoreAgent {
   }
   // ─── Internal Helpers ────────────────────────────────────────
   initializeTask() {
+    try {
+      ensureDirExists(WORKSPACE.ROOT);
+    } catch {
+    }
     if (this.state.getTodo().length === 0) {
       this.state.addTodo(INITIAL_TASKS.RECON, PRIORITIES.HIGH);
     }
   }
+  /**
+   * Load previous session state from .pentesting/sessions/latest.json
+   * @returns true if a previous session was restored
+   */
+  loadPreviousSession() {
+    return loadState(this.state);
+  }
+  /**
+   * Manually save current state to .pentesting/sessions/
+   * @returns Path to the saved session file
+   */
+  saveCurrentState() {
+    return saveState(this.state);
+  }
   getCurrentPrompt() {
     const phase = this.state.getPhase() || PHASES.RECON;
     return this.promptBuilder.build(this.userInput, phase);
@@ -8028,7 +8164,7 @@ var useAgentEvents = (agent, eventsRef, state) => {
           isPassword,
           inputType: request.type,
           context: request.context,
-          optional: request.optional,
+          optional: request.isOptional,
           options: request.options,
           resolve
         });
@@ -8123,7 +8259,7 @@ function buildCredentialPrompt(request) {
     displayPrompt = `${displayPrompt}
 Context: ${request.context}`;
   }
-  if (request.optional) {
+  if (request.isOptional) {
     displayPrompt += " (optional - press Enter to skip)";
   }
   if (request.options && request.options.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.21.9",
+  "version": "0.21.11",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/main.js",