pentesting 0.55.3 → 0.55.5

package/dist/prompts/base.md

@@ -179,12 +179,36 @@ When all attack vectors are exhausted → `ask_user` to confirm before stopping.
 Read `[TOOL ERROR ANALYSIS]` and fix immediately:
 - `missing parameter` → add it → retry
 - `command not found` → install or use alternative
-- `permission denied` → sudo or different approach
 - `timeout` → increase timeout, reduce scope, or different tool
 - `unrecognized option` or `invalid flag` → **STOP guessing.** Immediately run `--help` or `web_search("{tool} usage")` before retrying.
 - Unknown error → `web_search("{tool} {error_message}")` → apply solution
 - **2 consecutive same failures → switch approach entirely**
 
+### 4.5. Permission Denied = Privesc Mode (AUTO-TRIGGER)
+
+When you see `Permission denied` on a target file (flags, /root/, /home/*, configs, any high-value file):
+
+**This is not an error. This is an OBJECTIVE.**
+
+Your brain should instantly shift:
+```
+"Can't read X" → "Get root, then read X"
+```
+
+**Immediate reflex actions (pick what fits the context):**
+- Shell available? Run: `id`, `sudo -l`, `find / -perm -4000 2>/dev/null`
+- In container? Check: `/.dockerenv`, `/proc/1/cgroup`, `capsh --print`
+- Web shell only? Enumerate via web: `?cmd=id`, `?cmd=sudo -l`
+- Credentials found earlier? Try: `su -`, `ssh root@localhost`
+
+**Think like this:**
+> "Permission denied on flag_privesc.txt? Cool, that's the final boss.
+> I have shell access as ctfuser. What privesc vectors exist?
+> SUID binaries? Sudo misconfig? Kernel exploit? Container escape?"
+
+**Never just note "Permission denied" and move on.**
+That file becomes your #1 priority until you can read it or exhaust ALL privesc options.
+
 ### 5. Search = Weapon
 
 `web_search` for every service version (CVEs), every error, every blocked approach.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.55.3",
+  "version": "0.55.5",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/main.js",
@@ -29,7 +29,7 @@
     "release:patch": "npm version patch && npm run build && npm run publish:token",
     "release:minor": "npm version minor && npm run build && npm run publish:token",
     "release:major": "npm version major && npm run build && npm run publish:token",
-    "release:docker": "docker buildx build -f Dockerfile --platform linux/amd64,linux/arm64 -t agnusdei1207/pentesting:latest --push .",
+    "release:docker": "docker buildx build --no-cache -f Dockerfile --platform linux/amd64,linux/arm64 -t agnusdei1207/pentesting:latest --push .",
     "check": "npm run test && npm run build && npm run release:docker && bash test.sh"
   },
   "repository": {