swarmhack-cli 1.1.0 → 1.5.0

package/README.md

@@ -2,13 +2,16 @@
 
 Neural swarm-based penetration testing framework.
 
-## What's New in v0.2.0
+## What's New in v1.5.0
 
-- **Runtime Modes**: Choose between `local` (direct execution) or `docker` (containerized) mode
-- **OCSF 1.1.0 Reports**: Industry-standard vulnerability reports with optimized JSON structure
-- **Prancer Portal Integration**: Secure authentication with Prancer Portal
-- **Bundled Configuration**: Default config file included - no manual setup required
-- **Multi-Platform Support**: Linux, macOS, and Windows binaries
+- **23 Exploit Agents**: Full OWASP Top 10 coverage with 6 new agents (SessionFixation, DangerousMethods, DefaultCredentials, PrivilegeEscalation, MassAssignment, VulnerableComponents)
+- **Intelligence Bus**: 7 typed intel categories shared across all 23 agents (TargetProfile, WafProfile, CredentialIntel, NetworkIntel, FileSystemIntel, AuthStateIntel, ExploitPathIntel)
+- **Runtime Vulnerability Chaining**: Credentials/sessions from SQLi/AuthBypass automatically feed IDOR/PrivEsc/CSRF agents in a live chaining phase
+- **VulnerableComponents Agent (OWASP A06)**: 30 built-in CVE entries — fingerprints server versions from headers and matches against known vulnerabilities
+- **CVSS Score Fix**: Severity scores now correctly computed (was always 0.0 due to case mismatch)
+- **Performance**: SwarmHackConfig wrapped in Arc — eliminates deep clones on every agent spawn
+- **Agent Pool**: Increased to 25 concurrent slots for 23 agent types
+- **Live Validated**: 16 findings across 3 targets (demo.testfire.net, ginandjuice.shop, testasp.vulnweb.com) with 0 false positives
 
 ## Installation
 
@@ -157,17 +160,33 @@ docker run --rm \
   --customer "your-customer" --token "your-token"
 ```
 
-## Available Agents
-
-| Agent | Description |
-|-------|-------------|
-| `crawler` | Web crawling and discovery |
-| `sqli` | SQL injection detection |
-| `xss` | Cross-site scripting |
-| `csrf` | CSRF vulnerabilities |
-| `idor` | Insecure direct object reference |
-| `auth_bypass` | Authentication bypass |
-| `cmdi` | Command injection |
+## Available Agents (23)
+
+| Agent | CWE | Description |
+|-------|-----|-------------|
+| `crawler` | — | Web crawling, form discovery, WAF detection |
+| `sqli` | CWE-89 | SQL injection (UNION, boolean, error, time-based) |
+| `xss` | CWE-79 | Cross-site scripting (reflected, stored, DOM, blind) |
+| `cmdi` | CWE-78 | Command injection with marker-based detection |
+| `csrf` | CWE-352 | Cross-site request forgery |
+| `idor` | CWE-639 | Insecure direct object reference |
+| `auth_bypass` | CWE-287 | Authentication bypass |
+| `ssrf` | CWE-918 | Server-side request forgery (IMDS probes) |
+| `lfi` | CWE-22 | Local file inclusion / path traversal |
+| `ssti` | CWE-1336 | Server-side template injection |
+| `open_redirect` | CWE-601 | Open redirect |
+| `cors` | CWE-942 | CORS misconfiguration |
+| `jwt` | CWE-345 | JWT vulnerabilities (alg:none, confusion) |
+| `xxe` | CWE-611 | XML external entity injection |
+| `file_upload` | CWE-434 | File upload vulnerabilities |
+| `deserialization` | CWE-502 | Insecure deserialization |
+| `http_smuggling` | CWE-444 | HTTP request smuggling (CL.TE/TE.CL) |
+| `session_fixation` | CWE-384 | Session fixation and invalidation testing |
+| `dangerous_methods` | CWE-16 | Dangerous HTTP methods (TRACE/XST, PUT upload) |
+| `default_credentials` | CWE-798 | Default credential scanning (20 pairs) |
+| `privilege_escalation` | CWE-862 | Function-level access control testing |
+| `mass_assignment` | CWE-915 | Mass assignment / parameter injection |
+| `vulnerable_components` | CWE-1035 | Version fingerprinting + CVE lookup (30 CVEs) |
 
 ## OCSF Reports
 
@@ -209,12 +228,46 @@ Get your token from [Prancer Portal](https://portal.prancer.io) → Settings →
 
 ## Changelog
 
+### v1.5.0
+- ADR-006: OWASP Top 10 full coverage — 6 new agents (SessionFixation, DangerousMethods, DefaultCredentials, PrivilegeEscalation, MassAssignment, VulnerableComponents)
+- Intelligence Bus: 7 typed intel categories shared across all 23 agents
+- Runtime vulnerability chaining: credentials/sessions feed consumer agents live
+- VulnerableComponents agent (OWASP A06): 30 built-in CVE entries
+- CVSS score fix (was always 0.0), GOAP precondition key unification
+- SwarmHackConfig wrapped in Arc (performance), agent pool 20→25
+- Live validated: 16 findings, 67 crown jewels, 0 false positives across 3 targets
+
+### v1.4.0
+- Hybrid execution mode (Kill Chain + AEL amplification)
+- SPA false positive elimination
+- Auth crawling and OCSF auth tracking
+- Common endpoint discovery (107 paths)
+- Version bump and CI adjustments
+
+### v1.3.0
+- ADR-005: Self-learning intelligence layer (SONA, WAF evasion learning, adaptive rate limiting)
+- ADR-005: Semantic deduplication + crown jewel ML matching
+- ADR-005: Real HNSW vector index (replaced HashMap stub)
+- ADR-004: Recursive swarm architecture with 6 trigger types
+- Pre-flight authentication (5 methods via --auth)
+- Checkpoint-on-detection for all 17 agents
+- UTF-8 safety fix (28 byte-slicing sites)
+- 147 new tests across intelligence layer
+
+### v1.2.0
+- ADR-004: Recursive swarm + auth config + tech debt remediation
+- CI hardening (test gates, pipefail)
+- Version bump and dependency cleanup
+
+### v1.1.0
+- ADR-003: 10 new exploit agents (SSRF, LFI, SSTI, CORS, JWT, XXE, FileUpload, Deserialization, HTTPSmuggling, OpenRedirect)
+- ADR-001: Parallel agent execution (4x speedup)
+- ADR-002: curl/nc deep exploitation
+
 ### v0.2.0
-- Added runtime mode selection (local/docker)
-- Added OCSF 1.1.0 report generation
-- Added Prancer Portal authentication
-- Bundled default configuration file
-- Multi-platform binary support
+- Runtime mode selection (local/docker)
+- OCSF 1.1.0 report generation
+- Prancer Portal authentication
 
 ### v0.1.0
 - Initial release

package/config/swarmhack.yaml

@@ -205,6 +205,30 @@ agents:
     enabled: true
     max_candidates: 5
     pentest_mode: true
+  session_fixation:
+    enabled: true
+    max_candidates: 3
+    pentest_mode: true
+  dangerous_methods:
+    enabled: true
+    max_candidates: 5
+    pentest_mode: true
+  default_credentials:
+    enabled: true
+    max_candidates: 3
+    pentest_mode: true
+  privilege_escalation:
+    enabled: true
+    max_candidates: 5
+    pentest_mode: true
+  mass_assignment:
+    enabled: true
+    max_candidates: 5
+    pentest_mode: true
+  vulnerable_components:
+    enabled: true
+    max_candidates: 5
+    pentest_mode: true
 
 memory:
   agentdb:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "swarmhack-cli",
-  "version": "1.1.0",
+  "version": "1.5.0",
   "description": "SwarmHack - Neural swarm-based penetration testing framework",
   "author": "Prancer <support@prancer.io>",
   "license": "MIT",