mirror of
https://github.com/s-b-repo/rustsploit
synced 2026-06-27 09:54:12 +00:00
S.B
8a8b7e8e5f
Modules: - Refactor wpair (WhisperPair / CVE-2025-36911) into a module directory (crypto/db/gatt/protocol + model_ids.csv), replacing the single wpair.rs - Add h3c_bmc suite (firewall/ipmi-hash/kvm-probe/redfish dumps), fortinet SSLVPN/magic-token, sharepoint_doc_harvest, m365_activesync_spray, ldap_anon_spray, php/git/tapestry webapp modules, h3c_cloudos_api_enum, etc. Framework hardening / feature fixes: - Background jobs capture module output (drainer) + wire progress counters (ScanCounters); tenant jobs record terminal status on their own JobManager - SSRF: ssrf_gate distinguishes SSRF_BLOCKED vs TARGET_ERROR; fail-closed REST/WS/MCP dispatch; tenant-tagged PQ lifecycle events - Scheduler: exclusions + service-port precheck on CIDR/file fan-out; accurate considered/skipped counters; cancellation-safe permit acquisition - Mass scan works via shell/CLI/API/MCP (added MCP run_module background-job option so long scans don't hit the tool-call timeout) - Bruteforce workers re-scope OUTPUT_BUFFER; cross-product combo default - Stores: cred dedup/cap/scrub, loot scrub, workspace protocol scrub, spool explicit-owner + write_raw (no-newline spooling) - Error handling: removed let _/discarded-error patterns; failures are distinguishable from negatives - Removed dead check/CheckResult subsystem, OutputAccumulator, and the no-op --output-format flag; CredEntry.valid wired (creds invalidate/validate); typed HostUp/ServiceDetected events - Add .gitignore (build artifacts, local config, engagement data) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
3.0 KiB
3.0 KiB
Rustsploit Wiki
Welcome to the Rustsploit documentation hub. Use the links below to navigate to the relevant guide.
⚠️ Rustsploit is intended for authorized security testing and research only. Always obtain explicit written permission before targeting any system you do not own.
📖 Documentation Index
| Document | Description |
|---|---|
| Getting Started | Installation, build, quick-start, Docker deployment |
| Interactive Shell | Shell walkthrough, command palette, chaining, shortcuts |
| CLI Reference | Command-line flags, non-shell usage, output formats |
| API Server | WebSocket API, PQ encryption, endpoints, rate limiting |
| API Usage Examples | Practical curl workflows, request/response samples |
| Module Catalog | Live registry export — auto-generated by rustsploit --gen-module-catalog from the inventory |
| Module Development | How to author new modules — Module trait, lifecycle hooks, scheduler, rate limiter |
| Legacy / Migration Status | Pre-v0.5.0 code paths kept on purpose, in-flight migrations, audit findings ledger |
| Security & Validation | Input validation constants, security patterns, honeypot detection |
| Credential Modules Guide | Best practices for credential modules — creds_helper, source port, timeout passthrough |
| Exploit Modules Guide | Best practices for exploit modules — mass scan compat, batch guards, target-specific files |
| Fast Pair / WhisperPair Guide | Bluetooth Fast Pair exploitation (CVE-2025-36911) — ECDH Key-Based Pairing, anti-spoofing key sourcing, conformance tests, hardware runbook |
| Utilities & Helpers | Network wrappers, creds_helper, exploit_helper, source port binding, cfg_prompt_* |
| Bad Patterns | Banned code patterns — 95+ regex checks for panics, error swallowing, network bypasses |
| Testing & QA | Build checks (0 errors, 0 warnings), smoke tests, wordlist validation |
| Changelog | Release notes and version history (current: v0.5.0) |
| Contributing | Fork guide, PR checklist, code style |
| Credits | Authors, acknowledgements, legal notice |
| Future Features | Roadmap and completed features (plugins, metadata, global options, etc.) |
| About Me | Information about the author |
| Donation | Ways to support the project |
Quick Navigation
- New user? → Start with Getting Started
- Writing a module? → See Module Development
- Using the API? → See API Server + API Usage Examples
- Running from CLI? → See CLI Reference