pentesting 0.6.0 → 0.6.1

package/dist/{auto-update-QFDCCKMW.js → auto-update-23RX6SWZ.js}

@@ -8,8 +8,8 @@ import {
   readVersionCache,
   semverTuple,
   writeVersionCache
-} from "./chunk-LP7NNB7C.js";
-import "./chunk-CJOLRYUP.js";
+} from "./chunk-6MCOPWPF.js";
+import "./chunk-6RVVWSNN.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   checkForUpdate,

package/dist/{chunk-LP7NNB7C.js → chunk-6MCOPWPF.js}

@@ -1,7 +1,7 @@
 import {
   APP_NAME,
   APP_VERSION
-} from "./chunk-CJOLRYUP.js";
+} from "./chunk-6RVVWSNN.js";
 
 // src/core/update/auto-update.ts
 import { execSync } from "child_process";

package/dist/{chunk-CJOLRYUP.js → chunk-6RVVWSNN.js}

@@ -93,11 +93,30 @@ var TOOL_NAME = {
   READ_FILE: "read_file",
   WRITE_FILE: "write_file",
   LIST_DIRECTORY: "list_directory",
-  // Network - Basic
+  // Network - Basic Connectivity
+  PING: "ping",
+  TRACEROUTE: "traceroute",
   RUSTSCAN: "rustscan",
   NMAP_SCAN: "nmap_scan",
+  MASSCAN: "masscan",
   TCPDUMP_CAPTURE: "tcpdump_capture",
   NETCAT: "netcat",
+  // DNS & Subdomain
+  DIG: "dig",
+  HOST: "host",
+  NSLOOKUP: "nslookup",
+  WHOIS: "whois",
+  SUBFINDER: "subfinder",
+  AMASS: "amass",
+  DNSENUM: "dnsenum",
+  // Web Recon & Tech Identification
+  WHATWEB: "whatweb",
+  HTTPX: "httpx",
+  NUCLEI: "nuclei",
+  NIKTO: "nikto",
+  FFUF: "ffuf",
+  FEROXBUSTER: "feroxbuster",
+  WAYBACKURLS: "waybackurls",
   // Windows/SMB/AD
   SMB_ENUM: "smb_enum",
   ENUM4LINUX: "enum4linux",
@@ -109,9 +128,12 @@ var TOOL_NAME = {
   LDAP_SEARCH: "ldap_search",
   KERBRUTE: "kerbrute",
   BLOODHOUND: "bloodhound",
-  // Database
+  // Database Clients  
   MSSQL_CLIENT: "mssql_client",
   MYSQL_CLIENT: "mysql_client",
+  PSQL_CLIENT: "psql_client",
+  REDIS_CLI: "redis_cli",
+  MONGO_CLIENT: "mongo_client",
   // Web
   WEB_REQUEST: "web_request",
   DIRECTORY_BRUTEFORCE: "directory_bruteforce",

package/dist/index.js

@@ -15,7 +15,7 @@ import {
   PHASE_STATUS,
   THOUGHT_TYPE,
   TOOL_NAME
-} from "./chunk-CJOLRYUP.js";
+} from "./chunk-6RVVWSNN.js";
 import {
   __require
 } from "./chunk-3RG5ZIWI.js";
@@ -2303,23 +2303,124 @@ var HIGH_RISK_PATTERNS = [
   /meterpreter/i,
   /mimikatz/i
 ];
+var LOW_RISK_TOOLS = [
+  "ping",
+  "traceroute",
+  "tracert",
+  "mtr",
+  "dig",
+  "host",
+  "nslookup",
+  "whois",
+  "dnsenum",
+  "curl",
+  "wget",
+  "httpx",
+  "whatweb",
+  "rustscan",
+  "nmap_scan",
+  "nmap",
+  "masscan",
+  "subfinder",
+  "amass",
+  "assetfinder",
+  "ffuf",
+  "gobuster",
+  "feroxbuster",
+  "dirsearch",
+  "smbclient",
+  "rpcclient",
+  "enum4linux",
+  "ldapsearch",
+  "netcat",
+  "nc",
+  "telnet",
+  "ftp",
+  "read_file",
+  "list_directory",
+  "cat",
+  "ls",
+  "find",
+  "grep",
+  "searchsploit",
+  "nikto",
+  "nuclei",
+  "web_request",
+  "directory_bruteforce"
+];
+var LOW_RISK_PATTERNS = [
+  /^ping\s/i,
+  /^traceroute\s/i,
+  /^tracert\s/i,
+  /^mtr\s/i,
+  /^dig\s/i,
+  /^host\s/i,
+  /^nslookup\s/i,
+  /^whois\s/i,
+  /^curl\s/i,
+  /^wget\s/i,
+  /^nmap\s/i,
+  /^rustscan\s/i,
+  /^masscan\s/i,
+  /^subfinder/i,
+  /^amass\s/i,
+  /^ffuf\s/i,
+  /^gobuster\s/i,
+  /^feroxbuster\s/i,
+  /^whatweb\s/i,
+  /^httpx\s/i,
+  /^nikto\s/i,
+  /^nuclei\s/i,
+  /^smbclient\s/i,
+  /^rpcclient\s/i,
+  /^enum4linux\s/i,
+  /^ldapsearch\s/i,
+  /^crackmapexec\s.*--shares/i,
+  /^crackmapexec\s.*--users/i,
+  /^searchsploit\s/i,
+  /^cat\s/i,
+  /^ls\s/i,
+  /^find\s/i,
+  /^grep\s/i,
+  /^head\s/i,
+  /^tail\s/i,
+  /^file\s/i,
+  /^strings\s/i,
+  /^netstat/i,
+  /^ss\s/i,
+  /^arp\s/i,
+  /^ip\s+a/i,
+  /^ifconfig/i,
+  /^id$/i,
+  /^whoami$/i,
+  /^uname/i,
+  /^hostname/i,
+  /^pwd$/i,
+  /^env$/i,
+  /^echo\s/i
+];
 function assessRisk(toolName, toolInput) {
   const inputStr = JSON.stringify(toolInput).toLowerCase();
+  const command = toolInput.command || "";
   for (const pattern of HIGH_RISK_PATTERNS) {
-    if (pattern.test(inputStr)) {
+    if (pattern.test(inputStr) || pattern.test(command)) {
       return "critical";
     }
   }
-  if (CRITICAL_TOOLS.includes(toolName)) {
-    return "high";
+  if (LOW_RISK_TOOLS.includes(toolName)) {
+    return "low";
   }
-  if (toolName.includes("script") || toolName.includes("exec")) {
-    return "medium";
+  if (toolName === "bash" && command) {
+    for (const pattern of LOW_RISK_PATTERNS) {
+      if (pattern.test(command.trim())) {
+        return "low";
+      }
+    }
   }
-  if (toolName.includes("scan") || toolName.includes("request")) {
-    return "medium";
+  if (CRITICAL_TOOLS.includes(toolName)) {
+    return "high";
   }
-  return "low";
+  return "medium";
 }
 function generateRequestId() {
   return `approval_${Date.now()}_${Math.random().toString(36).substring(2, 8)}`;
@@ -5951,7 +6052,7 @@ var App = ({ autoApprove = false, target }) => {
         setCheckpointCount(contextManagerRef.current?.getCheckpoints().length || 0);
       }
     });
-    import("./auto-update-QFDCCKMW.js").then(({ checkForUpdateAsync, formatUpdateNotification }) => {
+    import("./auto-update-23RX6SWZ.js").then(({ checkForUpdateAsync, formatUpdateNotification }) => {
       checkForUpdateAsync().then((result) => {
         if (result.hasUpdate) {
           const notification = formatUpdateNotification(result);
@@ -6545,7 +6646,7 @@ ${list}`);
           return;
         case "update":
           try {
-            const { checkForUpdate, formatUpdateNotification, doUpdate } = await import("./update-OI7M5ERV.js");
+            const { checkForUpdate, formatUpdateNotification, doUpdate } = await import("./update-6I3E5PSP.js");
             const result = checkForUpdate(true);
             if (result.hasUpdate) {
               const notification = formatUpdateNotification(result);

package/dist/{update-OI7M5ERV.js → update-6I3E5PSP.js}

@@ -8,8 +8,8 @@ import {
   readVersionCache,
   semverTuple,
   writeVersionCache
-} from "./chunk-LP7NNB7C.js";
-import "./chunk-CJOLRYUP.js";
+} from "./chunk-6MCOPWPF.js";
+import "./chunk-6RVVWSNN.js";
 import "./chunk-3RG5ZIWI.js";
 export {
   checkForUpdate,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",