pentesting 0.5.4 → 0.5.6

package/dist/{auto-update-IDSABTT4.js → auto-update-CVZG3YKL.js}

@@ -8,8 +8,8 @@ import {
   readVersionCache,
   semverTuple,
   writeVersionCache
-} from "./chunk-ZC53SMRU.js";
-import "./chunk-FHPP7RP2.js";
+} from "./chunk-TK3QEEDA.js";
+import "./chunk-CKXQT3ON.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   checkForUpdate,

package/dist/{chunk-FHPP7RP2.js → chunk-CKXQT3ON.js}

@@ -94,6 +94,7 @@ var TOOL_NAME = {
   WRITE_FILE: "write_file",
   LIST_DIRECTORY: "list_directory",
   // Network
+  RUSTSCAN: "rustscan",
   NMAP_SCAN: "nmap_scan",
   TCPDUMP_CAPTURE: "tcpdump_capture",
   // Web

package/dist/{chunk-ZC53SMRU.js → chunk-TK3QEEDA.js}

@@ -1,7 +1,7 @@
 import {
   APP_NAME,
   APP_VERSION
-} from "./chunk-FHPP7RP2.js";
+} from "./chunk-CKXQT3ON.js";
 
 // src/core/update/auto-update.ts
 import { execSync } from "child_process";

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   PHASE_STATUS,
   THOUGHT_TYPE,
   TOOL_NAME
-} from "./chunk-FHPP7RP2.js";
+} from "./chunk-CKXQT3ON.js";
 import {
   __require
 } from "./chunk-3RG5ZIWI.js";
@@ -284,16 +284,46 @@ IMPORTANT:
   }
 ];
 var NETWORK_TOOLS = [
+  {
+    name: TOOL_NAME.RUSTSCAN,
+    description: `Ultra-fast port scanner written in Rust. Use as FIRST scan for quick discovery.
+    
+Rustscan is 10x faster than nmap for port discovery. Strategy:
+1. Run rustscan first to find open ports quickly
+2. Then use nmap with -sV on discovered ports for service detection
+
+BATCH SIZES:
+- 5000: Safe for most networks
+- 10000: Fast, may miss some ports
+- 65535: Full scan, slower but comprehensive`,
+    input_schema: {
+      type: "object",
+      properties: {
+        target: { type: "string", description: "Target IP/hostname/CIDR" },
+        ports: { type: "string", description: 'Port range (e.g., "1-65535" or "22,80,443")' },
+        batch_size: { type: "number", description: "Batch size (default: 5000)" },
+        timeout: { type: "number", description: "Timeout in ms (default: 1500)" },
+        ulimit: { type: "number", description: "File descriptor limit (default: 5000)" },
+        greppable: { type: "boolean", description: "Output in greppable format" },
+        nmap_args: { type: "string", description: 'Additional args to pass to nmap (e.g., "-sV -sC")' }
+      },
+      required: ["target"]
+    }
+  },
   {
     name: TOOL_NAME.NMAP_SCAN,
-    description: `Network scanning with nmap.
+    description: `Network scanning with nmap. Use AFTER rustscan for detailed service detection.
     
+RECOMMENDED WORKFLOW:
+1. rustscan first \u2192 fast port discovery
+2. nmap -sV -sC on discovered ports \u2192 service/version detection
+
 SCAN TYPES:
 - discovery: Host discovery only (-sn)
-- quick: Fast port scan (-F -T4)
-- full: All 65535 ports (-p-)
+- quick: Fast port scan (-F -T4)  
+- full: All 65535 ports (-p-) - USE RUSTSCAN INSTEAD
 - stealth: SYN scan with slow timing (-sS -T2)
-- service: Version detection (-sV -sC)
+- service: Version detection (-sV -sC) - USE ON OPEN PORTS
 - vuln: Vulnerability scripts (--script vuln)
 - udp: UDP scan (-sU --top-ports 100)
 - aggressive: Full aggressive scan (-A)`,
@@ -688,6 +718,7 @@ var execAsync = promisify(exec);
 var DOCKER_CONTAINER = process.env.PENTESTING_CONTAINER || "pentesting-tools";
 var FORCE_DOCKER = process.env.PENTESTING_DOCKER === "1";
 var DOCKER_TOOLS = [
+  "rustscan",
   "nmap",
   "masscan",
   "gobuster",
@@ -788,6 +819,9 @@ async function executeToolCall(toolName, input) {
         );
         break;
       // network scanning
+      case "rustscan":
+        result = await executeRustscan(input);
+        break;
       case "nmap_scan":
         result = await executeNmapScan(input);
         break;
@@ -958,6 +992,35 @@ async function listDirectory(dirPath, recursive = false, hidden = false) {
     return { success: false, output: "", error: error.message, duration: 0 };
   }
 }
+async function executeRustscan(input) {
+  const { target, ports, batch_size, timeout, ulimit, greppable, nmap_args } = input;
+  let cmd = `rustscan -a ${target}`;
+  if (ports) {
+    cmd += ` -p ${ports}`;
+  } else {
+    cmd += ` -r 1-65535`;
+  }
+  if (batch_size) {
+    cmd += ` -b ${batch_size}`;
+  } else {
+    cmd += ` -b 5000`;
+  }
+  if (timeout) {
+    cmd += ` -t ${timeout}`;
+  } else {
+    cmd += ` -t 1500`;
+  }
+  if (ulimit) {
+    cmd += ` -u ${ulimit}`;
+  }
+  if (greppable) {
+    cmd += ` -g`;
+  }
+  if (nmap_args) {
+    cmd += ` -- ${nmap_args}`;
+  }
+  return executeBash(cmd, { timeout: 3e5 });
+}
 async function executeNmapScan(input) {
   const { target, scan_type, ports, scripts, output_file } = input;
   const scanFlags = {
@@ -3232,9 +3295,53 @@ ${prompt}`
   // ===== Target Setting =====
   setTarget(target) {
     this.state.target.primary = target;
+    if (!this.state.target.discovered.includes(target)) {
+      this.state.target.discovered.push(target);
+    }
     this.think(THOUGHT_TYPE.OBSERVATION, `Target Setting: ${target}`);
     this.emit(AGENT_EVENT.TARGET_SET, target);
   }
+  /**
+   * Add a target to the discovered list (multi-target support)
+   */
+  addTarget(target) {
+    if (this.state.target.discovered.includes(target)) {
+      return false;
+    }
+    this.state.target.discovered.push(target);
+    if (!this.state.target.primary) {
+      this.state.target.primary = target;
+    }
+    this.think(THOUGHT_TYPE.OBSERVATION, `Target added: ${target}`);
+    this.emit(AGENT_EVENT.TARGET_SET, { target, action: "added" });
+    return true;
+  }
+  /**
+   * Remove a target from the discovered list
+   */
+  removeTarget(target) {
+    const index = this.state.target.discovered.indexOf(target);
+    if (index === -1) {
+      return false;
+    }
+    this.state.target.discovered.splice(index, 1);
+    if (this.state.target.primary === target) {
+      this.state.target.primary = this.state.target.discovered[0] || "";
+    }
+    this.think(THOUGHT_TYPE.OBSERVATION, `Target removed: ${target}`);
+    this.emit(AGENT_EVENT.TARGET_SET, { target, action: "removed" });
+    return true;
+  }
+  /**
+   * Get all targets (primary + discovered)
+   */
+  getAllTargets() {
+    const targets = [...this.state.target.discovered];
+    if (this.state.target.primary && !targets.includes(this.state.target.primary)) {
+      targets.unshift(this.state.target.primary);
+    }
+    return targets;
+  }
   // ===== Phase Management =====
   getCurrentPhase() {
     return this.state.phases.find((p) => p.id === this.state.currentPhase);
@@ -5240,7 +5347,7 @@ var App = ({ autoApprove = false, target }) => {
         setCheckpointCount(contextManagerRef.current?.getCheckpoints().length || 0);
       }
     });
-    import("./auto-update-IDSABTT4.js").then(({ checkForUpdateAsync, formatUpdateNotification }) => {
+    import("./auto-update-CVZG3YKL.js").then(({ checkForUpdateAsync, formatUpdateNotification }) => {
       checkForUpdateAsync().then((result) => {
         if (result.hasUpdate) {
           const notification = formatUpdateNotification(result);
@@ -5461,7 +5568,8 @@ var App = ({ autoApprove = false, target }) => {
           addMessage(
             MESSAGE_TYPE.SYSTEM,
             `\u2500\u2500 Core \u2500\u2500
-/target <ip>     Set target
+/target [domain|ip]  Set/show targets
+  add <t>  list  rm <t>  set <t>
 /start [goal]    Start autonomous pentest  
 /stop            Stop operation
 /status          Show status report
@@ -5497,11 +5605,76 @@ pentesting v${APP_VERSION}`
           return;
         case CLI_COMMAND.TARGET:
         case "t":
-          if (args[0]) {
-            agent.setTarget(args[0]);
-            addMessage(MESSAGE_TYPE.SYSTEM, `Target \u2192 ${args[0]}`);
-          } else {
-            addMessage(MESSAGE_TYPE.ERROR, "Usage: /target <ip>");
+          const subCmd = args[0]?.toLowerCase();
+          const targetArg = args.slice(1).join(" ") || args[0];
+          if (!subCmd) {
+            const allTargets = agent.getAllTargets();
+            if (allTargets.length === 0) {
+              addMessage(MESSAGE_TYPE.SYSTEM, `
+\u{1F3AF} No targets set
+
+Usage:
+  /target <domain|ip>       Set primary target
+  /target add <target>      Add target to list
+  /target list              Show all targets
+  /target rm <target>       Remove target
+  /target set <target>      Set as primary`);
+            } else {
+              const primary = agent.getState().target.primary;
+              const targetList = allTargets.map(
+                (t) => t === primary ? `  \u2605 ${t} (primary)` : `    ${t}`
+              ).join("\n");
+              addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Targets:
+${targetList}`);
+            }
+            return;
+          }
+          switch (subCmd) {
+            case "add":
+            case "+":
+              if (args[1]) {
+                const added = agent.addTarget(args[1]);
+                addMessage(MESSAGE_TYPE.SYSTEM, added ? `\u2713 Target added: ${args[1]}` : `Already exists: ${args[1]}`);
+              } else {
+                addMessage(MESSAGE_TYPE.ERROR, "Usage: /target add <domain|ip>");
+              }
+              break;
+            case "list":
+            case "ls":
+              const targets = agent.getAllTargets();
+              if (targets.length === 0) {
+                addMessage(MESSAGE_TYPE.SYSTEM, "No targets");
+              } else {
+                const primary = agent.getState().target.primary;
+                const list = targets.map(
+                  (t, i) => t === primary ? `  ${i + 1}. \u2605 ${t}` : `  ${i + 1}.   ${t}`
+                ).join("\n");
+                addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Targets (${targets.length}):
+${list}`);
+              }
+              break;
+            case "rm":
+            case "remove":
+            case "-":
+              if (args[1]) {
+                const removed = agent.removeTarget(args[1]);
+                addMessage(MESSAGE_TYPE.SYSTEM, removed ? `\u2713 Target removed: ${args[1]}` : `Not found: ${args[1]}`);
+              } else {
+                addMessage(MESSAGE_TYPE.ERROR, "Usage: /target rm <domain|ip>");
+              }
+              break;
+            case "set":
+            case "primary":
+              if (args[1]) {
+                agent.setTarget(args[1]);
+                addMessage(MESSAGE_TYPE.SYSTEM, `\u2605 Primary target \u2192 ${args[1]}`);
+              } else {
+                addMessage(MESSAGE_TYPE.ERROR, "Usage: /target set <domain|ip>");
+              }
+              break;
+            default:
+              agent.setTarget(subCmd);
+              addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Target \u2192 ${subCmd}`);
           }
           return;
         case CLI_COMMAND.START:
@@ -5768,7 +5941,7 @@ pentesting v${APP_VERSION}`
           return;
         case "update":
           try {
-            const { checkForUpdate, formatUpdateNotification, doUpdate } = await import("./update-OWR4FHRQ.js");
+            const { checkForUpdate, formatUpdateNotification, doUpdate } = await import("./update-B6HRINH6.js");
             const result = checkForUpdate(true);
             if (result.hasUpdate) {
               const notification = formatUpdateNotification(result);
@@ -5987,12 +6160,14 @@ pentesting v${APP_VERSION}`
         mode === "agent" ? "\u{1F916}" : "$",
         " ",
         state.target.primary || "No target",
+        state.target.discovered.length > 1 && ` (+${state.target.discovered.length - 1})`,
         " \u2502",
         state.findings.length,
         " findings \u2502",
         state.credentials.length,
         " creds \u2502",
-        tokenUsage.total > 0 && `${(tokenUsage.total / 1e3).toFixed(1)}k tokens \u2502`,
+        `${(tokenUsage.total / 1e3).toFixed(1)}k tokens`,
+        " \u2502",
         state.currentPhase !== AGENT_STATUS.IDLE && ` ${state.currentPhase} \u2502`
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [

package/dist/{update-OWR4FHRQ.js → update-B6HRINH6.js}

@@ -8,8 +8,8 @@ import {
   readVersionCache,
   semverTuple,
   writeVersionCache
-} from "./chunk-ZC53SMRU.js";
-import "./chunk-FHPP7RP2.js";
+} from "./chunk-TK3QEEDA.js";
+import "./chunk-CKXQT3ON.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   checkForUpdate,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",