94899781d3
Framework hardening: retry-then-continue, panic fixes, WS/MCP bug fixes, no-swallow sweep + loud error surfacing; docs + release notes
...
Hardening (non-module framework files):
- Retry-then-continue: bounded per-host retry on transient failures across all 4
mass-scan fan-outs; '10 errors -> abort sweep' softened to warn-and-continue
- Crash fixes: shell completer char-boundary guard; unreachable! -> bail!
- WS oversize-frame desync fixed (was bricking the PQ AEAD ratchet); MCP tenant
job list/kill, out-of-range port, non-string option now correct/errored
- No silent error swallowing: swept framework files, every dropped error now
bound + surfaced (warn for logged-only/data-loss, debug for already-propagated
or aggregated per-host); removed _ => {} and Err(_)/|_| discards
Docs + release: README + docs/ updated for the release; RELEASE_NOTES.txt
section 6d added; new RELEASE_GITHUB.txt (GitHub release body).
Build: 0 errors, 0 warnings, 40/40 targeted tests green.
2026-06-13 02:29:12 +02:00
05cfdc6d22
Ports (rmcp MCP SDK, Recog, JARM/JA3, SecLists) + mass-scan fixes + HTTP pooling + per-run output auto-save
...
Ports:
- MCP server migrated to official rmcp SDK (v1.7); all 29 tools/7 resources preserved
- Recog (Rapid7) fingerprint engine + DBs, wired into service_scanner
- JARM + JA3/JA3S TLS fingerprinting (tls_fingerprint) + jarm_scan module
- SecLists checksum-pinned wordlist catalog
Fixes / features:
- Full-internet sweep host-cap consistency
- Pre-config confirm-before-harvest + ModuleCtx.prompt_only mode; service_scanner
batch-mode output gating
- HTTP client connection-pool reuse (cached) + bounded pool_idle_timeout
- show options: +scan_order/exclusions/target_rps/module_rps
- NEW: per-run output auto-save to ~/.rustsploit/loot/<module> <time> results.txt
(append mode, all stdout+stderr; src/results_sink.rs)
- docs: drop stale check()/CheckResult + build.rs references
- assorted module additions + tommy interactive guide
Build: restore Cargo.lock (clean clone was unbuildable without it: transitive
cookie/time conflict). Working dir: clean build (0 warnings), 40/40 tests green.
2026-06-13 01:28:52 +02:00
8a8b7e8e5f
Sync local dev: new modules + framework hardening & feature fixes
...
Modules:
- Refactor wpair (WhisperPair / CVE-2025-36911) into a module directory
(crypto/db/gatt/protocol + model_ids.csv), replacing the single wpair.rs
- Add h3c_bmc suite (firewall/ipmi-hash/kvm-probe/redfish dumps),
fortinet SSLVPN/magic-token, sharepoint_doc_harvest, m365_activesync_spray,
ldap_anon_spray, php/git/tapestry webapp modules, h3c_cloudos_api_enum, etc.
Framework hardening / feature fixes:
- Background jobs capture module output (drainer) + wire progress counters
(ScanCounters); tenant jobs record terminal status on their own JobManager
- SSRF: ssrf_gate distinguishes SSRF_BLOCKED vs TARGET_ERROR; fail-closed
REST/WS/MCP dispatch; tenant-tagged PQ lifecycle events
- Scheduler: exclusions + service-port precheck on CIDR/file fan-out; accurate
considered/skipped counters; cancellation-safe permit acquisition
- Mass scan works via shell/CLI/API/MCP (added MCP run_module background-job
option so long scans don't hit the tool-call timeout)
- Bruteforce workers re-scope OUTPUT_BUFFER; cross-product combo default
- Stores: cred dedup/cap/scrub, loot scrub, workspace protocol scrub,
spool explicit-owner + write_raw (no-newline spooling)
- Error handling: removed let _/discarded-error patterns; failures are
distinguishable from negatives
- Removed dead check/CheckResult subsystem, OutputAccumulator, and the no-op
--output-format flag; CredEntry.valid wired (creds invalidate/validate);
typed HostUp/ServiceDetected events
- Add .gitignore (build artifacts, local config, engagement data)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-04 16:44:32 +02:00
f229c3bd6c
major restructure and future proofin
2026-05-24 20:08:19 +02:00
61816e04ab
majot fixes
2026-05-10 20:28:09 +02:00
c10eabe496
update and other bug fixes check changelog
2026-05-04 23:18:34 +02:00
c9b3d331e7
major update read changelog
2026-04-21 17:01:52 +02:00
bb964cc062
massived updates and fixe
2026-04-13 23:06:31 +02:00
cdaea5221e
Update Getting-Started.md
2026-04-13 14:37:27 +02:00
64414efcf8
Update Getting-Started.md
2026-04-13 14:34:37 +02:00
1fbcf6d4b5
Update Getting-Started.md
2026-04-13 14:34:18 +02:00
61863cc301
bug fixes
2026-04-08 00:38:29 +02:00
906808f392
bug patching
2026-04-07 15:30:18 +02:00
8b69bb6234
detailed improvement
...
more info will be in change log
2026-04-07 01:26:05 +02:00
f51d7c111b
unifying more stuff and new docs
...
adding unify support for api and prompt usage and improving. also adding some preformance improvements new documentations and improvement
2026-03-24 16:17:10 +02:00
fb9ae7f3c2
api migrations and migration from legacy stuff and fixing shiz
...
migrated away from free rdp lots of improvements there and created native libs feel free to use native libs but contribute if you improve please add more wider api support and cli and shell payload mutator for api endpoint going to do that for payloads gens and other stuff later and im also planning some more bug changes and improvement check the api template
2026-03-19 17:35:15 +02:00
ce6e4f7e35
updating api
2026-02-17 10:48:07 +02:00
6d69e14982
Update readme.md
2026-02-13 02:33:37 +02:00
120832102e
Update readme with DoS testing enhancements and new exploits
...
Enhanced DoS testing features and added new exploit modules. Updated documentation for clarity on optimizations and exclusions.
2026-02-13 02:32:40 +02:00
1b50556331
Update readme with new features and enhancements
2026-02-04 14:49:54 +02:00
566372adae
Update readme.md
2026-01-26 10:09:43 +02:00
7c17a96ba4
Update readme.md
2026-01-23 14:34:33 +02:00
a014f9e485
Document command chaining feature
...
Add section on command chaining in the shell.
2026-01-16 22:35:40 +02:00
1a53215512
Update readme.md
2026-01-05 07:26:59 +02:00
c26a0f116c
Update readme.md
2025-12-07 20:16:08 +02:00
cb053d5be3
Update readme.md
2025-11-28 22:27:50 +02:00
d4dd665efd
Add files via upload
2025-11-12 18:21:23 +02:00
a5b6261101
Delete docs directory
2025-11-12 18:21:04 +02:00
6eba62971c
Rename doc.md to readme.md
2025-05-22 15:25:36 +02:00
b7a0274944
Update doc.md
2025-04-23 13:36:47 +02:00
af71c827c7
Update doc.md
2025-04-23 13:31:58 +02:00
2d9989e735
Update doc.md
2025-04-23 13:23:57 +02:00
b77f60a9c5
Update doc.md
2025-04-16 15:12:38 +02:00
632cab6a26
Update doc.md
2025-04-10 23:10:48 +02:00
0ac87b3e49
Update doc.md
2025-04-10 23:10:10 +02:00
c43b1e1ae3
Create doc.md
2025-04-10 23:08:28 +02:00
s-b-repo