mirror of
https://github.com/s-b-repo/rustsploit
synced 2026-06-27 09:54:12 +00:00
S.B
8a8b7e8e5f
Modules: - Refactor wpair (WhisperPair / CVE-2025-36911) into a module directory (crypto/db/gatt/protocol + model_ids.csv), replacing the single wpair.rs - Add h3c_bmc suite (firewall/ipmi-hash/kvm-probe/redfish dumps), fortinet SSLVPN/magic-token, sharepoint_doc_harvest, m365_activesync_spray, ldap_anon_spray, php/git/tapestry webapp modules, h3c_cloudos_api_enum, etc. Framework hardening / feature fixes: - Background jobs capture module output (drainer) + wire progress counters (ScanCounters); tenant jobs record terminal status on their own JobManager - SSRF: ssrf_gate distinguishes SSRF_BLOCKED vs TARGET_ERROR; fail-closed REST/WS/MCP dispatch; tenant-tagged PQ lifecycle events - Scheduler: exclusions + service-port precheck on CIDR/file fan-out; accurate considered/skipped counters; cancellation-safe permit acquisition - Mass scan works via shell/CLI/API/MCP (added MCP run_module background-job option so long scans don't hit the tool-call timeout) - Bruteforce workers re-scope OUTPUT_BUFFER; cross-product combo default - Stores: cred dedup/cap/scrub, loot scrub, workspace protocol scrub, spool explicit-owner + write_raw (no-newline spooling) - Error handling: removed let _/discarded-error patterns; failures are distinguishable from negatives - Removed dead check/CheckResult subsystem, OutputAccumulator, and the no-op --output-format flag; CredEntry.valid wired (creds invalidate/validate); typed HostUp/ServiceDetected events - Add .gitignore (build artifacts, local config, engagement data) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Rustsploit Developer Guide
⚠️ This file has been superseded by the new wiki documentation.
Please use the links below for up-to-date information.
Wiki Index
| Document | Description |
|---|---|
| Home | Full documentation index |
| Getting Started | Installation, build, Docker |
| Interactive Shell | Shell walkthrough and commands |
| CLI Reference | All CLI flags and examples |
| API Server | REST API startup, auth, hardening |
| API Usage Examples | Practical curl workflows |
| Module Catalog | All modules by category |
| Module Development | How to author new modules |
| Security & Validation | Input validation, security patterns |
| Credential Modules Guide | Brute-force module best practices |
| Exploit Modules Guide | Exploit module best practices |
| Utilities & Helpers | utils.rs public API |
| Testing & QA | Build checks and smoke tests |
| Changelog | Release notes |
| Contributing | Fork guide and PR checklist |
| Credits | Authors and acknowledgements |