24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
2.2 KiB
API Reference: Network Penetration Testing Agent
Overview
Automates network penetration testing: host discovery, TCP SYN scanning with service detection, vulnerability scanning with NSE scripts, SMB enumeration, and SSL auditing. For authorized penetration testing only.
Dependencies
| Package | Version | Purpose |
|---|---|---|
| python-nmap | >=0.7.1 | Nmap scan orchestration |
CLI Usage
# Full pentest
python agent.py --target 192.168.1.0/24 --ports 1-10000 --output report.json
# Host discovery only
python agent.py --target 10.0.0.0/24 --discovery-only
Key Functions
host_discovery(target_network)
Discovers live hosts using ARP ping and ICMP echo with TCP ACK probes on common ports.
port_scan(target, ports, scan_type)
Performs TCP SYN scan with service version detection (-sV), OS detection (-O), and banner grabbing.
vulnerability_scan(target, ports)
Runs Nmap vulnerability scripts (vulners, vulscan) to identify CVEs for detected services.
smb_enumeration(target)
Enumerates SMB shares, users, and OS information via Nmap scripts on ports 139/445.
ssl_audit(target, port)
Audits SSL/TLS cipher suites and certificate details using ssl-enum-ciphers and ssl-cert.
dns_enumeration(domain)
Performs DNS subdomain brute-forcing using dns-brute NSE script.
classify_findings(scan_results, vuln_results)
Classifies vulnerabilities by severity (Critical, High, Medium) based on script output analysis.
Nmap Scan Types Used
| Argument | Purpose |
|---|---|
-sn -PE -PA |
Host discovery (ping scan) |
-sS -sV -O |
SYN scan with version and OS detection |
--script=vulners |
CVE vulnerability lookup |
--script=smb-enum-shares |
SMB share enumeration |
--script=ssl-enum-ciphers |
SSL/TLS cipher audit |
--script=dns-brute |
DNS subdomain enumeration |
Output Schema
{
"hosts": [{"ip": "...", "hostname": "..."}],
"services": [{"ip": "...", "services": [{"port": 80, "service": "http"}]}],
"vulnerabilities": [{"host": "...", "severity": "Critical", "details": {...}}],
"summary": {"critical": 3, "high": 12, "medium": 45}
}