pentesting 0.7.12 → 0.7.15

package/README.md

@@ -222,29 +222,43 @@ agent.abort();    // Complete stop
 
 ---
 
-## 🐳 Docker Environment
+## 🐳 Docker Toolkit (Auto-Managed)
+
+Pentesting automatically manages a Docker container with 50+ pre-installed tools.
+
+### Automatic Setup
+
+**No manual Docker setup required!** When you run a command that needs tools like `nmap` or `rustscan`:
+
+1. Pentesting checks if tool exists locally
+2. If not, it automatically pulls `agnusdei1207/pentesting-tools:latest`
+3. Starts container `pentesting-tools` with host network
+4. Executes command via `docker exec`
+
+### Manual Docker Control
 
 ```bash
-# Pull pre-built toolkit (50+ tools)
-docker pull agnusdei1207/pentesting-tools:latest
+# Force all commands through Docker
+export PENTESTING_DOCKER=1
 
-# Run with host network (required for target access)
-docker run -d --name pentesting-tools --network host \
-  -v $(pwd)/workspace:/pentest \
-  agnusdei1207/pentesting-tools:latest
+# Use custom container name
+export PENTESTING_CONTAINER=my-pentest-container
 
-# Execute tools
-docker exec -it pentesting-tools nmap -sCV 10.0.0.1
+# Manual pull (optional - auto-pulled on first use)
+docker pull agnusdei1207/pentesting-tools:latest
 ```
 
-### Included Tools
-- **Network**: nmap, rustscan, masscan, netcat
-- **Web**: ffuf, nikto, sqlmap, httpx
-- **Discovery**: subfinder, amass, nuclei
-- **Service**: snmpwalk, nbtscan, hydra, smbclient
-- **AD/Windows**: impacket, crackmapexec
-- **Database**: mysql-client, postgresql-client, redis-tools
-- **Utilities**: curl, wget, jq, python3
+### Included Tools (50+)
+
+| Category | Tools |
+|----------|-------|
+| **Network** | nmap, rustscan, masscan, netcat, tcpdump |
+| **Web** | ffuf, nikto, sqlmap, httpx, whatweb |
+| **Discovery** | subfinder, amass, nuclei, dnsrecon |
+| **Bruteforce** | hydra, hashcat, john |
+| **AD/Windows** | impacket, crackmapexec, smbclient |
+| **Database** | mysql-client, postgresql-client, redis-tools |
+| **Utilities** | curl, wget, jq, python3, go |
 
 ---
 

package/dist/index.js

@@ -1317,8 +1317,10 @@ import { promisify } from "util";
 import * as fs from "fs/promises";
 import * as path from "path";
 var execAsync = promisify(exec);
+var DOCKER_IMAGE = "agnusdei1207/pentesting-tools:latest";
 var DOCKER_CONTAINER = process.env.PENTESTING_CONTAINER || "pentesting-tools";
 var FORCE_DOCKER = process.env.PENTESTING_DOCKER === "1";
+var dockerStarted = false;
 var DOCKER_TOOLS = [
   // Network scanning
   TOOL_NAME.RUSTSCAN,
@@ -1392,14 +1394,37 @@ var DOCKER_TOOLS = [
   TOOL_NAME.CHECK_SUDO,
   TOOL_NAME.FIND_SUID
 ];
-async function isDockerAvailable() {
+async function ensureDockerContainer() {
+  if (dockerStarted) return true;
   try {
-    await execAsync(`docker inspect ${DOCKER_CONTAINER} --format='{{.State.Running}}'`);
+    const { stdout } = await execAsync(`docker inspect ${DOCKER_CONTAINER} --format='{{.State.Running}}'`);
+    if (stdout.trim() === "true") {
+      dockerStarted = true;
+      return true;
+    }
+    await execAsync(`docker start ${DOCKER_CONTAINER}`);
+    dockerStarted = true;
+    console.log(`[Docker] Started container: ${DOCKER_CONTAINER}`);
     return true;
   } catch {
-    return false;
+    try {
+      console.log(`[Docker] Pulling and starting ${DOCKER_IMAGE}...`);
+      await execAsync(`docker run -d --name ${DOCKER_CONTAINER} --network host ${DOCKER_IMAGE}`, {
+        timeout: 12e4
+        // 2 min timeout for pull
+      });
+      dockerStarted = true;
+      console.log(`[Docker] Container ready: ${DOCKER_CONTAINER}`);
+      return true;
+    } catch (err) {
+      console.error(`[Docker] Failed to start container: ${err}`);
+      return false;
+    }
   }
 }
+async function isDockerAvailable() {
+  return await ensureDockerContainer();
+}
 async function commandExists(cmd) {
   try {
     await execAsync(`which ${cmd}`);
@@ -4885,11 +4910,20 @@ Use report_finding tool for important discoveries.
             toolInput,
             riskLevel: risk
           });
-          const decision = await this.approvalManager.requestApproval(
-            toolName,
-            toolInput,
-            `Executing ${toolName} (${risk} risk)`
-          );
+          const decision = await new Promise((resolve) => {
+            const handler = (response2) => {
+              if (response2.requestId === block.id) {
+                this.approvalManager.removeListener("approval_response", handler);
+                if (response2.decision === "approve_always") {
+                  this.approvalManager.autoApprovedTools?.add(toolName);
+                  resolve("approve");
+                } else {
+                  resolve(response2.decision);
+                }
+              }
+            };
+            this.approvalManager.on("approval_response", handler);
+          });
           if (decision === "deny") {
             this.think(THOUGHT_TYPE.STUCK, `Tool denied by user: ${toolName}`);
             this.emit(AGENT_EVENT.TOOL_RESULT, {
@@ -6512,6 +6546,7 @@ var App = ({ autoApprove = false, target }) => {
   const [checkpointCount, setCheckpointCount] = useState(0);
   const [preInputBuffer, setPreInputBuffer] = useState("");
   const [wasInterrupted, setWasInterrupted] = useState(false);
+  const [spinnerHue, setSpinnerHue] = useState(0);
   const [, forceUpdate] = useState(0);
   const [agent] = useState(() => new AutonomousHackingAgent(void 0, { autoApprove }));
   const sessionManager2 = getSessionManager();
@@ -6564,6 +6599,7 @@ var App = ({ autoApprove = false, target }) => {
     startTimeRef.current = Date.now();
     timerRef.current = setInterval(() => {
       setElapsedTime(Math.floor((Date.now() - startTimeRef.current) / 100) / 10);
+      setSpinnerHue((h) => (h + 5) % 360);
     }, 100);
   }, []);
   const stopTimer = useCallback(() => {
@@ -6630,19 +6666,17 @@ var App = ({ autoApprove = false, target }) => {
     };
   }, []);
   useEffect(() => {
-    addMessage(MESSAGE_TYPE.SYSTEM, `
-\u{1F680} /target <ip> \u2192 /start [goal] | /help for commands
-\u26A0\uFE0F  For authorized penetration testing only. Unauthorized use is illegal.`);
+    addMessage(MESSAGE_TYPE.SYSTEM, `/target <ip> \u2192 /start [goal] | /help for commands`);
     if (autoApprove) {
-      addMessage(MESSAGE_TYPE.SYSTEM, "\u26A0\uFE0F  YOLO Mode: Auto-approving all tool executions");
+      addMessage(MESSAGE_TYPE.SYSTEM, "YOLO Mode: Auto-approving all tool executions");
     }
     if (target) {
       agent.setTarget(target);
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Target: ${target}`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `Target: ${target}`);
     }
     onTargetChange((newTarget) => {
       agent.setTarget(newTarget);
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Target \u2192 ${newTarget}`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `Target \u2192 ${newTarget}`);
       forceUpdate((n) => n + 1);
     });
     agent.on(AGENT_EVENT.TARGET_SET, () => {
@@ -6650,6 +6684,9 @@ var App = ({ autoApprove = false, target }) => {
     });
     agent.on(AGENT_EVENT.THOUGHT, (thought) => {
       setCurrentStatus(thought.content.slice(0, 60));
+      if (thought.type === "thinking" || thought.type === "reasoning") {
+        addMessage(MESSAGE_TYPE.SYSTEM, `[${thought.type}] ${thought.content.slice(0, 200)}`);
+      }
       wireLoggerRef.current?.contentPart(thought.content, thought.type === "thinking");
     });
     agent.on(AGENT_EVENT.TOOL_CALL, (data) => {
@@ -6670,12 +6707,12 @@ var App = ({ autoApprove = false, target }) => {
       wireLoggerRef.current?.stepBegin(data.current);
     });
     agent.on(AGENT_EVENT.FINDING, (finding) => {
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} [${finding.severity.toUpperCase()}] ${finding.title}`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `[${finding.severity.toUpperCase()}] ${finding.title}`);
       wireLoggerRef.current?.statusUpdate({ event: "finding", ...finding });
       forceUpdate((n) => n + 1);
     });
     agent.on(AGENT_EVENT.PHASE_CHANGE, (data) => {
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F4CD} Phase: ${data.phaseId}`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `Phase: ${data.phaseId}`);
       wireLoggerRef.current?.statusUpdate({ event: "phase_change", phase: data.phaseId });
       forceUpdate((n) => n + 1);
     });
@@ -6697,7 +6734,7 @@ var App = ({ autoApprove = false, target }) => {
         toolInput: data.toolInput,
         riskLevel: data.riskLevel
       });
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u26A0\uFE0F  APPROVAL NEEDED: ${data.toolName} (${data.riskLevel} risk)`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `APPROVAL NEEDED: ${data.toolName} (${data.riskLevel} risk)`);
       const inputPreview = Object.entries(data.toolInput).slice(0, 2).map(([k, v]) => `${k}=${typeof v === "string" ? v.slice(0, 40) : JSON.stringify(v).slice(0, 40)}`).join(", ");
       if (inputPreview) {
         addMessage(MESSAGE_TYPE.SYSTEM, `   Args: ${inputPreview}`);
@@ -6722,7 +6759,7 @@ var App = ({ autoApprove = false, target }) => {
         toolInput: req.toolInput,
         riskLevel: req.riskLevel
       });
-      addMessage(MESSAGE_TYPE.SYSTEM, `\u26A0\uFE0F  APPROVAL NEEDED: ${req.toolName} (${req.riskLevel} risk)`);
+      addMessage(MESSAGE_TYPE.SYSTEM, `APPROVAL NEEDED: ${req.toolName} (${req.riskLevel} risk)`);
       addMessage(MESSAGE_TYPE.SYSTEM, `   ${req.reason}`);
       addMessage(MESSAGE_TYPE.SYSTEM, "   /y = approve, /n = deny, /ya = always approve");
     });
@@ -6814,7 +6851,7 @@ pentesting v${APP_VERSION}`
             const allTargets = agent.getAllTargets();
             if (allTargets.length === 0) {
               addMessage(MESSAGE_TYPE.SYSTEM, `
-\u{1F3AF} No targets set
+No targets set
 
 Usage:
   /target <domain|ip>       Set primary target
@@ -6827,7 +6864,7 @@ Usage:
               const targetList = allTargets.map(
                 (t) => t === primary ? `  \u2605 ${t} (primary)` : `    ${t}`
               ).join("\n");
-              addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Targets:
+              addMessage(MESSAGE_TYPE.SYSTEM, `Targets:
 ${targetList}`);
             }
             return;
@@ -6852,7 +6889,7 @@ ${targetList}`);
                 const list = targets.map(
                   (t, i) => t === primary ? `  ${i + 1}. \u2605 ${t}` : `  ${i + 1}.   ${t}`
                 ).join("\n");
-                addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Targets (${targets.length}):
+                addMessage(MESSAGE_TYPE.SYSTEM, `Targets (${targets.length}):
 ${list}`);
               }
               break;
@@ -6884,7 +6921,7 @@ ${list}`);
               break;
             default:
               agent.setTarget(subCmd);
-              addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F3AF} Target \u2192 ${subCmd}`);
+              addMessage(MESSAGE_TYPE.SYSTEM, `Target \u2192 ${subCmd}`);
           }
           return;
         case CLI_COMMAND.START:
@@ -6898,7 +6935,7 @@ ${list}`);
             setIsProcessing(true);
             startTimer();
             const allObjective = args.slice(1).join(" ") || "Perform comprehensive penetration testing";
-            addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F680} Starting multi-target attack on ${allTargets.length} targets`);
+            addMessage(MESSAGE_TYPE.SYSTEM, `Starting multi-target attack on ${allTargets.length} targets`);
             for (let i = 0; i < allTargets.length; i++) {
               const currentTarget = allTargets[i];
               if (agent.shouldStop()) {
@@ -6911,7 +6948,7 @@ ${list}`);
               forceUpdate((n) => n + 1);
               try {
                 const session = await sessionManager2.createSession(allObjective, currentTarget);
-                addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F4C1} Session: ${session.id}`);
+                addMessage(MESSAGE_TYPE.SYSTEM, `Session: ${session.id}`);
                 agent.resume();
                 await agent.runAutonomous(allObjective);
               } catch (e) {
@@ -6939,10 +6976,10 @@ ${list}`);
           startTimer();
           const objective = startObjective || "Perform comprehensive penetration testing";
           setCurrentStatus("Initializing...");
-          addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F680} Starting: ${objective}`);
+          addMessage(MESSAGE_TYPE.SYSTEM, `Starting: ${objective}`);
           try {
             const session = await sessionManager2.createSession(objective, agent.getState().target.primary);
-            addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F4C1} Session: ${session.id}`);
+            addMessage(MESSAGE_TYPE.SYSTEM, `Session: ${session.id}`);
             await agent.runAutonomous(objective);
           } catch (e) {
             addMessage(MESSAGE_TYPE.ERROR, e instanceof Error ? e.message : String(e));
@@ -7000,7 +7037,7 @@ ${list}`);
         case "yolo":
           const newYoloState = !approvalManager2.getAutoApprovedTools().length;
           approvalManager2.setYoloMode(newYoloState);
-          addMessage(MESSAGE_TYPE.SYSTEM, newYoloState ? "\u26A0\uFE0F  YOLO mode ON - Auto-approving all tools" : "\u{1F512} YOLO mode OFF - Manual approval required");
+          addMessage(MESSAGE_TYPE.SYSTEM, newYoloState ? "YOLO mode ON - Auto-approving all tools" : "\u{1F512} YOLO mode OFF - Manual approval required");
           return;
         case CLI_COMMAND.CLEAR:
         case "c":
@@ -7054,7 +7091,7 @@ ${list}`);
             const cp = await contextManagerRef.current.checkpoint(description);
             setCheckpointCount((prev) => prev + 1);
             wireLoggerRef.current?.statusUpdate({ action: "checkpoint", id: cp.id });
-            addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F4CD} Checkpoint #${cp.id} created${description ? `: ${description}` : ""}`);
+            addMessage(MESSAGE_TYPE.SYSTEM, `Checkpoint #${cp.id} created${description ? `: ${description}` : ""}`);
           } else {
             addMessage(MESSAGE_TYPE.ERROR, "Context manager not initialized");
           }
@@ -7130,7 +7167,7 @@ ${list}`);
             if (cps.length === 0) {
               addMessage(MESSAGE_TYPE.SYSTEM, "No checkpoints");
             } else {
-              addMessage(MESSAGE_TYPE.SYSTEM, `\u{1F4CD} ${cps.length} Checkpoints:`);
+              addMessage(MESSAGE_TYPE.SYSTEM, `${cps.length} Checkpoints:`);
               cps.forEach((cp) => {
                 const time = new Date(cp.timestamp).toLocaleTimeString();
                 addMessage(MESSAGE_TYPE.SYSTEM, `   #${cp.id} @ ${time} (${cp.messageCount} msgs)${cp.description ? ` - ${cp.description}` : ""}`);
@@ -7338,7 +7375,7 @@ ${list}`);
     } }) }),
     pendingApproval && /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", borderStyle: "round", borderColor: "yellow", paddingX: 1, marginBottom: 1, children: [
       /* @__PURE__ */ jsxs2(Text2, { color: "yellow", bold: true, children: [
-        "\u26A0\uFE0F  APPROVAL NEEDED: ",
+        "APPROVAL NEEDED: ",
         pendingApproval.toolName,
         " (",
         pendingApproval.riskLevel,
@@ -7353,7 +7390,7 @@ ${list}`);
     ] }),
     isProcessing ? /* @__PURE__ */ jsxs2(Box2, { flexDirection: "column", children: [
       /* @__PURE__ */ jsxs2(Box2, { children: [
-        /* @__PURE__ */ jsx2(Text2, { color: THEME.status.running, children: /* @__PURE__ */ jsx2(Spinner, { type: "dots" }) }),
+        /* @__PURE__ */ jsx2(Text2, { color: `hsl(${spinnerHue}, 70%, 60%)`, children: /* @__PURE__ */ jsx2(Spinner, { type: "dots" }) }),
         /* @__PURE__ */ jsxs2(Text2, { color: THEME.text.muted, children: [
           " ",
           currentStatus,
@@ -7365,10 +7402,7 @@ ${list}`);
         ] })
       ] }),
       preInputBuffer && /* @__PURE__ */ jsxs2(Box2, { marginTop: 1, children: [
-        /* @__PURE__ */ jsxs2(Text2, { color: THEME.text.accent, children: [
-          "\u2728 ",
-          preInputBuffer
-        ] }),
+        /* @__PURE__ */ jsx2(Text2, { color: THEME.text.accent, children: preInputBuffer }),
         /* @__PURE__ */ jsx2(Text2, { color: THEME.text.muted, children: "\u258C" })
       ] }),
       /* @__PURE__ */ jsx2(Box2, { marginTop: 1, children: /* @__PURE__ */ jsx2(Text2, { dimColor: true, children: "ESC to interrupt \u2502 Type ahead to queue input" }) })
@@ -7385,7 +7419,7 @@ ${list}`);
         pendingApproval ? "/y /n /ya" : ""
       ].filter((cmd) => cmd && cmd.toLowerCase().includes(input.toLowerCase().slice(1))).slice(0, 5).join("  \u2502  ") }) }),
       /* @__PURE__ */ jsxs2(Box2, { children: [
-        /* @__PURE__ */ jsx2(Text2, { color: mode === "agent" ? THEME.status.success : "yellow", children: mode === "agent" ? "\u2728 " : "$ " }),
+        /* @__PURE__ */ jsx2(Text2, { color: mode === "agent" ? THEME.status.success : "yellow", children: mode === "agent" ? "" : "$ " }),
         /* @__PURE__ */ jsx2(
           TextInput,
           {
@@ -7406,7 +7440,7 @@ ${list}`);
         state.target.discovered.length > 1 && ` (+${state.target.discovered.length - 1})`,
         state.findings.length > 0 && ` \u2502 ${state.findings.length} findings`,
         state.credentials.length > 0 && ` \u2502 ${state.credentials.length} creds`,
-        tokenUsage.total > 0 && ` \u2502 ${(tokenUsage.total / 1e3).toFixed(0)}k`
+        tokenUsage.total > 0 && ` \u2502 ${(tokenUsage.total / 1e3).toFixed(0)}k tok`
       ] }),
       /* @__PURE__ */ jsxs2(Text2, { dimColor: true, children: [
         isProcessing && currentStatus && `${currentStatus.slice(0, 40)} \u2502 `,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.7.12",
+  "version": "0.7.15",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",