pentesting 0.7.0 → 0.7.2

package/dist/index.js

@@ -1299,41 +1299,77 @@ var execAsync = promisify(exec);
 var DOCKER_CONTAINER = process.env.PENTESTING_CONTAINER || "pentesting-tools";
 var FORCE_DOCKER = process.env.PENTESTING_DOCKER === "1";
 var DOCKER_TOOLS = [
-  "rustscan",
-  "nmap",
-  "masscan",
-  "gobuster",
-  "ffuf",
-  "nikto",
-  "sqlmap",
-  "dirb",
-  "hydra",
-  "john",
-  "hashcat",
-  "medusa",
-  "searchsploit",
-  "msfconsole",
-  "msfvenom",
-  "tshark",
-  "tcpdump",
-  "ngrep",
-  "chisel",
-  "proxychains",
-  "evil-winrm",
-  "binwalk",
-  "foremost",
-  "steghide",
-  "exiftool",
-  "volatility3",
-  "gdb",
-  "radare2",
-  "r2",
-  "subfinder",
-  "httpx",
-  "nuclei",
-  "impacket-psexec",
-  "impacket-wmiexec",
-  "impacket-smbexec"
+  // Network scanning
+  TOOL_NAME.RUSTSCAN,
+  TOOL_NAME.NMAP_SCAN,
+  TOOL_NAME.MASSCAN,
+  TOOL_NAME.TCPDUMP_CAPTURE,
+  TOOL_NAME.PING,
+  TOOL_NAME.TRACEROUTE,
+  TOOL_NAME.NETCAT,
+  // DNS & Subdomain
+  TOOL_NAME.DIG,
+  TOOL_NAME.HOST,
+  TOOL_NAME.NSLOOKUP,
+  TOOL_NAME.WHOIS,
+  TOOL_NAME.SUBFINDER,
+  TOOL_NAME.AMASS,
+  TOOL_NAME.DNSENUM,
+  TOOL_NAME.ZONE_TRANSFER,
+  // Service Enumeration
+  TOOL_NAME.SNMP_WALK,
+  TOOL_NAME.SNMP_CHECK,
+  TOOL_NAME.ONESIXTYONE,
+  TOOL_NAME.FTP_ENUM,
+  TOOL_NAME.FTP_ANON,
+  TOOL_NAME.NBTSCAN,
+  TOOL_NAME.RPC_INFO,
+  TOOL_NAME.SHOWMOUNT,
+  TOOL_NAME.TELNET,
+  // Web tools
+  TOOL_NAME.FFUF,
+  TOOL_NAME.FEROXBUSTER,
+  TOOL_NAME.WHATWEB,
+  TOOL_NAME.HTTPX,
+  TOOL_NAME.NUCLEI,
+  TOOL_NAME.NIKTO,
+  TOOL_NAME.DIRECTORY_BRUTEFORCE,
+  TOOL_NAME.SQL_INJECTION,
+  TOOL_NAME.WAYBACKURLS,
+  // Windows/SMB/AD
+  TOOL_NAME.SMB_ENUM,
+  TOOL_NAME.ENUM4LINUX,
+  TOOL_NAME.CRACKMAPEXEC,
+  TOOL_NAME.SMBCLIENT,
+  TOOL_NAME.RPCCLIENT,
+  TOOL_NAME.WINRM,
+  TOOL_NAME.RDP_CHECK,
+  TOOL_NAME.LDAP_SEARCH,
+  TOOL_NAME.KERBRUTE,
+  TOOL_NAME.BLOODHOUND,
+  // Database
+  TOOL_NAME.MSSQL_CLIENT,
+  TOOL_NAME.MYSQL_CLIENT,
+  TOOL_NAME.PSQL_CLIENT,
+  TOOL_NAME.REDIS_CLI,
+  TOOL_NAME.MONGO_CLIENT,
+  // Bruteforce
+  TOOL_NAME.HYDRA,
+  TOOL_NAME.BRUTEFORCE_LOGIN,
+  TOOL_NAME.CRACK_HASH,
+  // Exploitation
+  TOOL_NAME.SEARCHSPLOIT,
+  TOOL_NAME.METASPLOIT,
+  TOOL_NAME.GENERATE_PAYLOAD,
+  // Post-exploitation
+  TOOL_NAME.SETUP_TUNNEL,
+  TOOL_NAME.LATERAL_MOVEMENT,
+  TOOL_NAME.REVERSE_SHELL,
+  TOOL_NAME.DUMP_CREDENTIALS,
+  // Privesc
+  TOOL_NAME.RUN_PRIVESC_ENUM,
+  TOOL_NAME.CHECK_SUDO,
+  TOOL_NAME.FIND_SUID
 ];
 async function isDockerAvailable() {
   try {
@@ -1372,27 +1408,27 @@ async function executeToolCall(toolName, input) {
     let result;
     switch (toolName) {
       // system tool
-      case "bash":
+      case TOOL_NAME.BASH:
         result = await executeBash(input.command, {
           timeout: input.timeout || 6e4,
           background: input.background
         });
         break;
-      case "read_file":
+      case TOOL_NAME.READ_FILE:
         result = await readFile2(
           input.path,
           input.start_line,
           input.end_line
         );
         break;
-      case "write_file":
+      case TOOL_NAME.WRITE_FILE:
         result = await writeFile2(
           input.path,
           input.content,
           input.overwrite
         );
         break;
-      case "list_directory":
+      case TOOL_NAME.LIST_DIRECTORY:
         result = await listDirectory(
           input.path,
           input.recursive,
@@ -1400,147 +1436,147 @@ async function executeToolCall(toolName, input) {
         );
         break;
       // network scanning
-      case "rustscan":
+      case TOOL_NAME.RUSTSCAN:
         result = await executeRustscan(input);
         break;
-      case "nmap_scan":
+      case TOOL_NAME.NMAP_SCAN:
         result = await executeNmapScan(input);
         break;
-      case "tcpdump_capture":
+      case TOOL_NAME.TCPDUMP_CAPTURE:
         result = await executeTcpdump(input);
         break;
       // Web Tools
-      case "web_request":
+      case TOOL_NAME.WEB_REQUEST:
         result = await executeWebRequest(input);
         break;
-      case "directory_bruteforce":
+      case TOOL_NAME.DIRECTORY_BRUTEFORCE:
         result = await executeDirBruteforce(input);
         break;
-      case "sql_injection":
+      case TOOL_NAME.SQL_INJECTION:
         result = await executeSqlmap(input);
         break;
-      case "browser_automation":
+      case TOOL_NAME.BROWSER_AUTOMATION:
         result = await executeBrowserAutomation(input);
         break;
       // Exploitation Tools
-      case "searchsploit":
+      case TOOL_NAME.SEARCHSPLOIT:
         result = await executeSearchsploit(input);
         break;
-      case "metasploit":
+      case TOOL_NAME.METASPLOIT:
         result = await executeMetasploit(input);
         break;
-      case "generate_payload":
+      case TOOL_NAME.GENERATE_PAYLOAD:
         result = await generatePayload(input);
         break;
       // Credential Tools
-      case "bruteforce_login":
+      case TOOL_NAME.BRUTEFORCE_LOGIN:
         result = await executeBruteforce(input);
         break;
-      case "crack_hash":
+      case TOOL_NAME.CRACK_HASH:
         result = await executeCrackHash(input);
         break;
       // permission escalation
-      case "run_privesc_enum":
+      case TOOL_NAME.RUN_PRIVESC_ENUM:
         result = await executePrivescEnum(input);
         break;
-      case "check_sudo":
+      case TOOL_NAME.CHECK_SUDO:
         result = await checkSudo(input);
         break;
-      case "find_suid":
+      case TOOL_NAME.FIND_SUID:
         result = await findSuid(input);
         break;
       // Post-Exploitation
-      case "setup_tunnel":
+      case TOOL_NAME.SETUP_TUNNEL:
         result = await setupTunnel(input);
         break;
-      case "dump_credentials":
+      case TOOL_NAME.DUMP_CREDENTIALS:
         result = await dumpCredentials(input);
         break;
-      case "lateral_movement":
+      case TOOL_NAME.LATERAL_MOVEMENT:
         result = await executeLateralMovement(input);
         break;
       // Windows / SMB / AD Tools
-      case "netcat":
+      case TOOL_NAME.NETCAT:
         result = await executeNetcat(input);
         break;
-      case "smb_enum":
+      case TOOL_NAME.SMB_ENUM:
         result = await executeSmbEnum(input);
         break;
-      case "enum4linux":
+      case TOOL_NAME.ENUM4LINUX:
         result = await executeEnum4linux(input);
         break;
-      case "crackmapexec":
+      case TOOL_NAME.CRACKMAPEXEC:
         result = await executeCrackmapexec(input);
         break;
-      case "smbclient":
+      case TOOL_NAME.SMBCLIENT:
         result = await executeSmbclient(input);
         break;
-      case "rpcclient":
+      case TOOL_NAME.RPCCLIENT:
         result = await executeRpcclient(input);
         break;
-      case "winrm":
+      case TOOL_NAME.WINRM:
         result = await executeWinrm(input);
         break;
-      case "rdp_check":
+      case TOOL_NAME.RDP_CHECK:
         result = await executeRdpCheck(input);
         break;
-      case "ldap_search":
+      case TOOL_NAME.LDAP_SEARCH:
         result = await executeLdapSearch(input);
         break;
-      case "kerbrute":
+      case TOOL_NAME.KERBRUTE:
         result = await executeKerbrute(input);
         break;
-      case "bloodhound":
+      case TOOL_NAME.BLOODHOUND:
         result = await executeBloodhound(input);
         break;
-      case "mssql_client":
+      case TOOL_NAME.MSSQL_CLIENT:
         result = await executeMssqlClient(input);
         break;
-      case "mysql_client":
+      case TOOL_NAME.MYSQL_CLIENT:
         result = await executeMysqlClient(input);
         break;
-      case "reverse_shell":
+      case TOOL_NAME.REVERSE_SHELL:
         result = await executeReverseShell(input);
         break;
       // Service Enumeration Tools
-      case "zone_transfer":
+      case TOOL_NAME.ZONE_TRANSFER:
         result = await executeZoneTransfer(input);
         break;
-      case "snmp_walk":
+      case TOOL_NAME.SNMP_WALK:
         result = await executeSnmpWalk(input);
         break;
-      case "snmp_check":
+      case TOOL_NAME.SNMP_CHECK:
         result = await executeSnmpCheck(input);
         break;
-      case "onesixtyone":
+      case TOOL_NAME.ONESIXTYONE:
         result = await executeOnesixtyone(input);
         break;
-      case "ftp_enum":
+      case TOOL_NAME.FTP_ENUM:
         result = await executeFtpEnum(input);
         break;
-      case "ftp_anon":
+      case TOOL_NAME.FTP_ANON:
         result = await executeFtpAnon(input);
         break;
-      case "nbtscan":
+      case TOOL_NAME.NBTSCAN:
         result = await executeNbtscan(input);
         break;
-      case "rpc_info":
+      case TOOL_NAME.RPC_INFO:
         result = await executeRpcInfo(input);
         break;
-      case "showmount":
+      case TOOL_NAME.SHOWMOUNT:
         result = await executeShowmount(input);
         break;
-      case "telnet":
+      case TOOL_NAME.TELNET:
         result = await executeTelnet(input);
         break;
-      case "hydra":
+      case TOOL_NAME.HYDRA:
         result = await executeHydra(input);
         break;
       // report
-      case "report_finding":
+      case TOOL_NAME.REPORT_FINDING:
         result = await reportFinding(input);
         break;
-      case "take_screenshot":
+      case TOOL_NAME.TAKE_SCREENSHOT:
         result = await takeScreenshot(input);
         break;
       default:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",