mirror of
https://github.com/s-b-repo/rustsploit
synced 2026-06-27 09:54:12 +00:00
S.B
8a8b7e8e5f
Modules: - Refactor wpair (WhisperPair / CVE-2025-36911) into a module directory (crypto/db/gatt/protocol + model_ids.csv), replacing the single wpair.rs - Add h3c_bmc suite (firewall/ipmi-hash/kvm-probe/redfish dumps), fortinet SSLVPN/magic-token, sharepoint_doc_harvest, m365_activesync_spray, ldap_anon_spray, php/git/tapestry webapp modules, h3c_cloudos_api_enum, etc. Framework hardening / feature fixes: - Background jobs capture module output (drainer) + wire progress counters (ScanCounters); tenant jobs record terminal status on their own JobManager - SSRF: ssrf_gate distinguishes SSRF_BLOCKED vs TARGET_ERROR; fail-closed REST/WS/MCP dispatch; tenant-tagged PQ lifecycle events - Scheduler: exclusions + service-port precheck on CIDR/file fan-out; accurate considered/skipped counters; cancellation-safe permit acquisition - Mass scan works via shell/CLI/API/MCP (added MCP run_module background-job option so long scans don't hit the tool-call timeout) - Bruteforce workers re-scope OUTPUT_BUFFER; cross-product combo default - Stores: cred dedup/cap/scrub, loot scrub, workspace protocol scrub, spool explicit-owner + write_raw (no-newline spooling) - Error handling: removed let _/discarded-error patterns; failures are distinguishable from negatives - Removed dead check/CheckResult subsystem, OutputAccumulator, and the no-op --output-format flag; CredEntry.valid wired (creds invalidate/validate); typed HostUp/ServiceDetected events - Add .gitignore (build artifacts, local config, engagement data) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
47 lines
795 B
Plaintext
47 lines
795 B
Plaintext
# Build artifacts
|
|
/target/
|
|
**/__pycache__/
|
|
*.log
|
|
|
|
# Local agent / editor config
|
|
/.claude/
|
|
|
|
# Separate sub-projects / scratch analysis (not part of rustsploit core)
|
|
/arcticalopex/
|
|
/_analysis/
|
|
/addme/
|
|
|
|
# Audit & scratch artifacts
|
|
/AUDIT_FINDINGS.md
|
|
/audit-findings.md
|
|
/_audit_findings.json
|
|
/_audit_summary.txt
|
|
/arcticalopex_audit.md
|
|
/arcticalopex_audit_phase_a_b_d_summary.md
|
|
/arcticalopex_wiring_audit.md
|
|
/rustsploit_audit.md
|
|
/bugs.txt
|
|
/todo.txt
|
|
/test.txt
|
|
|
|
# Engagement data / secrets — NEVER commit
|
|
/creds.txt
|
|
/found_backend2026.csv
|
|
/results.txt
|
|
/results_*.txt
|
|
/hydra_targets_*.txt
|
|
/hydra.restore
|
|
/paused.conf
|
|
/blocklist.conf
|
|
/*.gnmap
|
|
/za-target.txt
|
|
/za_targets_final.txt
|
|
/xneelo
|
|
/xneelo_mapp.txt
|
|
/should_not_exist2.bat
|
|
|
|
# Stray placeholder files
|
|
/src/t
|
|
/src/modules/t
|
|
/src/modules/exploits/t
|