mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
67 lines
2.2 KiB
Markdown
67 lines
2.2 KiB
Markdown
# API Reference: Network Penetration Testing Agent
|
|
|
|
## Overview
|
|
|
|
Automates network penetration testing: host discovery, TCP SYN scanning with service detection, vulnerability scanning with NSE scripts, SMB enumeration, and SSL auditing. For authorized penetration testing only.
|
|
|
|
## Dependencies
|
|
|
|
| Package | Version | Purpose |
|
|
|---------|---------|---------|
|
|
| python-nmap | >=0.7.1 | Nmap scan orchestration |
|
|
|
|
## CLI Usage
|
|
|
|
```bash
|
|
# Full pentest
|
|
python agent.py --target 192.168.1.0/24 --ports 1-10000 --output report.json
|
|
|
|
# Host discovery only
|
|
python agent.py --target 10.0.0.0/24 --discovery-only
|
|
```
|
|
|
|
## Key Functions
|
|
|
|
### `host_discovery(target_network)`
|
|
Discovers live hosts using ARP ping and ICMP echo with TCP ACK probes on common ports.
|
|
|
|
### `port_scan(target, ports, scan_type)`
|
|
Performs TCP SYN scan with service version detection (`-sV`), OS detection (`-O`), and banner grabbing.
|
|
|
|
### `vulnerability_scan(target, ports)`
|
|
Runs Nmap vulnerability scripts (`vulners`, `vulscan`) to identify CVEs for detected services.
|
|
|
|
### `smb_enumeration(target)`
|
|
Enumerates SMB shares, users, and OS information via Nmap scripts on ports 139/445.
|
|
|
|
### `ssl_audit(target, port)`
|
|
Audits SSL/TLS cipher suites and certificate details using `ssl-enum-ciphers` and `ssl-cert`.
|
|
|
|
### `dns_enumeration(domain)`
|
|
Performs DNS subdomain brute-forcing using `dns-brute` NSE script.
|
|
|
|
### `classify_findings(scan_results, vuln_results)`
|
|
Classifies vulnerabilities by severity (Critical, High, Medium) based on script output analysis.
|
|
|
|
## Nmap Scan Types Used
|
|
|
|
| Argument | Purpose |
|
|
|----------|---------|
|
|
| `-sn -PE -PA` | Host discovery (ping scan) |
|
|
| `-sS -sV -O` | SYN scan with version and OS detection |
|
|
| `--script=vulners` | CVE vulnerability lookup |
|
|
| `--script=smb-enum-shares` | SMB share enumeration |
|
|
| `--script=ssl-enum-ciphers` | SSL/TLS cipher audit |
|
|
| `--script=dns-brute` | DNS subdomain enumeration |
|
|
|
|
## Output Schema
|
|
|
|
```json
|
|
{
|
|
"hosts": [{"ip": "...", "hostname": "..."}],
|
|
"services": [{"ip": "...", "services": [{"port": 80, "service": "http"}]}],
|
|
"vulnerabilities": [{"host": "...", "severity": "Critical", "details": {...}}],
|
|
"summary": {"critical": 3, "high": 12, "medium": 45}
|
|
}
|
|
```
|