pentesting 0.56.5 → 0.56.7

package/dist/main.js

@@ -439,7 +439,7 @@ function wrapCommandForTor(command) {
   }
   if (/\bnmap\b/.test(command)) {
     let nmapCmd = command;
-    nmapCmd = nmapCmd.replace(/\s-s[SA]\b/g, " -sT");
+    nmapCmd = nmapCmd.replace(/\s-s[SAXFN]\b/g, " -sT");
     if (!/\s-Pn\b/.test(nmapCmd)) {
       nmapCmd = nmapCmd.replace(/\bnmap\b/, "nmap -Pn");
     }
@@ -711,7 +711,7 @@ var INPUT_PROMPT_PATTERNS = [
 
 // src/shared/constants/agent.ts
 var APP_NAME = "Pentest AI";
-var APP_VERSION = "0.56.5";
+var APP_VERSION = "0.56.7";
 var APP_DESCRIPTION = "Autonomous Penetration Testing AI Agent";
 var LLM_ROLES = {
   SYSTEM: "system",
@@ -4011,6 +4011,17 @@ async function executeCommandOnce(command, options = {}) {
     const inputHandler = getInputHandler();
     const timeout = options.timeout ?? TOOL_TIMEOUTS.DEFAULT_COMMAND;
     const safeCommand = injectCurlMaxTime(command, CURL_MAX_TIME_SEC);
+    const torLeak = checkTorLeakRisk(safeCommand);
+    if (!torLeak.safe) {
+      resolve({
+        success: false,
+        output: "",
+        error: `\u{1F6D1} TOR IP LEAK BLOCKED
+Reason: ${torLeak.reason}
+Suggestion: ${torLeak.suggestion}`
+      });
+      return;
+    }
     eventEmitter?.({
       type: COMMAND_EVENT_TYPES.COMMAND_START,
       message: `Executing: ${safeCommand.slice(0, DISPLAY_LIMITS.COMMAND_PREVIEW)}${safeCommand.length > DISPLAY_LIMITS.COMMAND_PREVIEW ? "..." : ""}`
@@ -8982,9 +8993,14 @@ Combine with packet_sniff to capture intercepted traffic.`,
     } else {
       cmd = NETWORK_COMMANDS.ARP_SPOOF.replace("${duration}", duration.toString()).replace("${ifaceFlag}", ifaceFlag).replace("${target}", target).replace("${gateway}", gateway);
     }
-    const proc = startBackgroundProcess(cmd, {
-      description: `ARP spoof: ${target} <-> ${gateway}`
-    });
+    let proc;
+    try {
+      proc = startBackgroundProcess(cmd, {
+        description: `ARP spoof: ${target} <-> ${gateway}`
+      });
+    } catch (err) {
+      return { success: false, output: "", error: `Failed to start ARP spoof: ${err}` };
+    }
     await new Promise((r) => setTimeout(r, (duration + NETWORK_CONFIG.WAIT_BUFFER_SECONDS) * 1e3));
     const output = getProcessOutput(proc.id);
     await stopBackgroundProcess(proc.id);
@@ -9127,9 +9143,14 @@ ${spoofIp}	*.${domain}
 `);
     const ifaceFlag = iface ? `-i ${iface}` : "";
     const cmd = NETWORK_COMMANDS.DNS_SPOOF.replace("${duration}", duration.toString()).replace("${ifaceFlag}", ifaceFlag).replace("${hostsFile}", hostsFile);
-    const proc = startBackgroundProcess(cmd, {
-      description: `DNS spoof: ${domain} -> ${spoofIp}`
-    });
+    let proc;
+    try {
+      proc = startBackgroundProcess(cmd, {
+        description: `DNS spoof: ${domain} -> ${spoofIp}`
+      });
+    } catch (err) {
+      return { success: false, output: "", error: `Failed to start DNS spoof: ${err}` };
+    }
     await new Promise((r) => setTimeout(r, (duration + NETWORK_CONFIG.WAIT_BUFFER_SECONDS) * 1e3));
     const output = getProcessOutput(proc.id);
     await stopBackgroundProcess(proc.id);
@@ -9181,9 +9202,14 @@ Combine with arp_spoof for transparent proxying.`,
     const modeFlag = mode === "transparent" ? "--mode transparent" : "";
     const filterFlag = targetHost ? `-f "~d ${targetHost}"` : "";
     cmd = NETWORK_COMMANDS.MITM_DUMP.replace("${duration}", duration.toString()).replace("${port}", port.toString()).replace("${outputFile}", outputFile).replace("${sslFlag}", sslFlag).replace("${modeFlag}", modeFlag).replace("${filter}", filterFlag);
-    const proc = startBackgroundProcess(cmd, {
-      description: `MitM proxy on port ${port}`
-    });
+    let proc;
+    try {
+      proc = startBackgroundProcess(cmd, {
+        description: `MitM proxy on port ${port}`
+      });
+    } catch (err) {
+      return { success: false, output: "", error: `Failed to start MitM proxy: ${err}` };
+    }
     await new Promise((r) => setTimeout(r, (duration + NETWORK_CONFIG.WAIT_BUFFER_SECONDS) * 1e3));
     const procOutput = getProcessOutput(proc.id);
     await stopBackgroundProcess(proc.id);
@@ -9253,9 +9279,14 @@ This is a high-level tool that combines tcpdump capture with protocol analysis.`
       }
     }
     const captureCmd = `timeout ${duration}s sudo tcpdump -i ${iface} -w ${outputFile} "${bpfFilter}"`;
-    const proc = startBackgroundProcess(captureCmd, {
-      description: `Traffic intercept on ${target}`
-    });
+    let proc;
+    try {
+      proc = startBackgroundProcess(captureCmd, {
+        description: `Traffic intercept on ${target}`
+      });
+    } catch (err) {
+      return { success: false, output: "", error: `Failed to start traffic intercept: ${err}` };
+    }
     await new Promise((r) => setTimeout(r, (duration + NETWORK_CONFIG.WAIT_BUFFER_SECONDS) * 1e3));
     await stopBackgroundProcess(proc.id);
     let output = `Traffic Interception Report

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.56.5",
+  "version": "0.56.7",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/main.js",