| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| neurosploit-v4.3.0-windows-x64.zip | 2026-10-14 | 6.4 MB | |
| neurosploit-v4.3.0-macos-arm64.tar.gz | 2026-10-14 | 6.2 MB | |
| neurosploit-v4.3.0-macos-x64.tar.gz | 2026-10-14 | 6.5 MB | |
| neurosploit-v4.3.0-linux-x64.tar.gz | 2026-10-14 | 6.8 MB | |
| neurosploit-v4.3.0-linux-arm64.tar.gz | 2026-10-14 | 6.7 MB | |
| README.md | 2026-10-14 | 2.2 kB | |
| v4.3.0 -- graph memory, wire evidence _ web console parity source code.tar.gz | 2026-10-14 | 1.3 MB | |
| v4.3.0 -- graph memory, wire evidence _ web console parity source code.zip | 2026-10-14 | 1.8 MB | |
| Totals: 8 Items | 35.7 MB | 0 | |
NeuroSploit v4.3.0
Autonomous, multi-model penetration-testing harness — Rust, CLI-first.
Highlights
- Attack-graph memory (Neo4j optional) — the run is a typed graph of hosts, services, findings, credentials and impact (web + internal network). It's a phase of the test: checkpoints after recon, at validation, each chaining round and at the end direct agent selection and feed live chains / next moves / a dependency todolist into every prompt. Works without a database (writes
graph/); syncs to Neo4j with--neo4j. - Wire-bound evidence (always on) — every reported exchange is re-sent by the harness through a scope-guarded replay engine and checked against recorded traffic. A claim the wire contradicts cannot stand as confirmed.
- Report redaction (always on) — credentials the agents observe become
$SECRET_nin every human-facing report;findings.jsonand the vault keep raw values for re-testing. - Authorization-matrix validator, shared agent traces, and deterministic per-CWE validators.
Web console
- Attack graph tab (replaces Generative Attack Path Chaining), ordered by kill-chain stage.
- Wire evidence + per-finding Re-test with history + transcript viewer in the finding/traces views.
- Regression vs. the previous run (new / recurring / fixed).
- LLM API key verification on Save, category filter, custom lead from your own system prompt (and removable), GDPR compliance mapping, NeuroSploit logo.
CLI / REPL parity
- New REPL commands
/complianceand/budget; vuln-class focus, compliance and budget now flow from the web too. neurosploit poc <run> --only <id> --jsonfor single-finding re-tests.
Install
# Linux / macOS
curl -fsSL https://raw.githubusercontent.com/JoasASantos/NeuroSploit/main/setup.sh | bash
# Windows (PowerShell)
irm https://raw.githubusercontent.com/JoasASantos/NeuroSploit/main/install.ps1 | iex
The installers now detect and install dependencies and can launch at the end. A prebuilt macOS arm64 binary is attached; other platforms build from source automatically.
Compliance mapping: PCI-DSS, HIPAA, SOC 2, GDPR.