8a8b7e8e5f
Sync local dev: new modules + framework hardening & feature fixes
...
Modules:
- Refactor wpair (WhisperPair / CVE-2025-36911) into a module directory
(crypto/db/gatt/protocol + model_ids.csv), replacing the single wpair.rs
- Add h3c_bmc suite (firewall/ipmi-hash/kvm-probe/redfish dumps),
fortinet SSLVPN/magic-token, sharepoint_doc_harvest, m365_activesync_spray,
ldap_anon_spray, php/git/tapestry webapp modules, h3c_cloudos_api_enum, etc.
Framework hardening / feature fixes:
- Background jobs capture module output (drainer) + wire progress counters
(ScanCounters); tenant jobs record terminal status on their own JobManager
- SSRF: ssrf_gate distinguishes SSRF_BLOCKED vs TARGET_ERROR; fail-closed
REST/WS/MCP dispatch; tenant-tagged PQ lifecycle events
- Scheduler: exclusions + service-port precheck on CIDR/file fan-out; accurate
considered/skipped counters; cancellation-safe permit acquisition
- Mass scan works via shell/CLI/API/MCP (added MCP run_module background-job
option so long scans don't hit the tool-call timeout)
- Bruteforce workers re-scope OUTPUT_BUFFER; cross-product combo default
- Stores: cred dedup/cap/scrub, loot scrub, workspace protocol scrub,
spool explicit-owner + write_raw (no-newline spooling)
- Error handling: removed let _/discarded-error patterns; failures are
distinguishable from negatives
- Removed dead check/CheckResult subsystem, OutputAccumulator, and the no-op
--output-format flag; CredEntry.valid wired (creds invalidate/validate);
typed HostUp/ServiceDetected events
- Add .gitignore (build artifacts, local config, engagement data)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-04 16:44:32 +02:00
S.B