NeuroSploit Files

NeuroSploit v4.0.0

New: Web Console

A browser UI for the same harness — every action spawns the real CLI, nothing is reimplemented.

:::bash
cd neurosploit-rs && cargo build --release
node web/server.js   # → http://localhost:4173

• Setup wizard — Asset → Scope & Auth → Leads → Model & Run → Review.
• Lead board — 435 agents, pick a category or select all/clear all instead of one by one.
• Custom lead — describe what you want tested and Claude (Opus, your subscription) writes a real agent for it.
• Live run view — findings table, progress, and a Generative Attack Path Chaining graph (target → confirmed findings, kill-chain stages, click any node for full detail + PoC).
• Send prompts while it runs — run/whitebox/greybox engagements are driven through a real REPL session, so you can type /status, /continue, or plain language while it's working.
• Auth & Keys — one menu for target auth headers, multi-role IDOR/BOLA/BFLA testing, and per-provider API keys (kept in memory, never on disk).
• Survives a page refresh — a running engagement reattaches instead of resetting.

New: /only in the REPL

Pin exact agent(s) for /run from the interactive session too, not just the CLI's --only flag.

Improved: HTML report

Redesigned to match the Typst PDF's look (violet accent, severity summary, vulnerability table, clean finding cards). Dropped the static attack-chain section — that's now the interactive graph in the web console.

by Joas A Santos & Red Team Leaders