pentesting 0.40.6 → 0.40.7

package/dist/main.js

@@ -306,7 +306,7 @@ var ORPHAN_PROCESS_NAMES = [
 
 // src/shared/constants/agent.ts
 var APP_NAME = "Pentest AI";
-var APP_VERSION = "0.40.6";
+var APP_VERSION = "0.40.7";
 var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
 var LLM_ROLES = {
   SYSTEM: "system",
@@ -2128,7 +2128,8 @@ var StateSerializer = class {
       if (important.length > 0) {
         lines.push(`  Important Findings:`);
         for (const f of important.slice(0, DISPLAY_LIMITS.FINDING_PREVIEW)) {
-          lines.push(`    [${f.severity.toUpperCase()}] ${f.title} (${f.category || "general"})`);
+          const tactic = f.attackPattern ? ` [ATT&CK:${f.attackPattern}]` : "";
+          lines.push(`    [${f.severity.toUpperCase()}] ${f.title} (${f.category || "general"})${tactic}`);
         }
       }
     }
@@ -4515,11 +4516,12 @@ Detail: ${detail}
   },
   {
     name: TOOL_NAMES.ADD_FINDING,
-    description: "Add a security finding",
+    description: "Add a security finding. Always include attackPattern for MITRE ATT&CK mapping.",
     parameters: {
       title: { type: "string", description: "Finding title" },
-      severity: { type: "string", description: "Severity" },
-      affected: { type: "array", items: { type: "string" }, description: "Affected host:port" }
+      severity: { type: "string", description: "Severity: critical, high, medium, low, info" },
+      affected: { type: "array", items: { type: "string" }, description: "Affected host:port" },
+      attackPattern: { type: "string", description: "MITRE ATT&CK tactic: initial_access, execution, persistence, privilege_escalation, defense_evasion, credential_access, discovery, lateral_movement, collection, exfiltration, command_and_control, impact" }
     },
     required: ["title", "severity"],
     execute: async (p) => {
@@ -4537,7 +4539,8 @@ Detail: ${detail}
         evidence,
         isVerified: validation.isVerified,
         remediation: "",
-        foundAt: Date.now()
+        foundAt: Date.now(),
+        ...p.attackPattern ? { attackPattern: p.attackPattern } : {}
       });
       const hasExploit = validation.isVerified;
       const target = affected[0] || "unknown";
@@ -11715,7 +11718,7 @@ var App = ({ autoApprove = false, target }) => {
           break;
         }
         addMessage("system", `--- ${findings.length} Findings ---`);
-        findings.forEach((f) => addMessage("system", `[${f.severity}] ${f.title}`));
+        findings.forEach((f) => addMessage("system", `[${f.severity}] ${f.title}${f.attackPattern ? ` (ATT&CK: ${f.attackPattern})` : ""}`));
         break;
       case UI_COMMANDS.ASSETS:
       case UI_COMMANDS.ASSETS_SHORT:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.40.6",
+  "version": "0.40.7",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/main.js",