mirror of https://github.com/SHOGGOTH-SECTOR/sica-fondt.git synced 2026-08-01 16:40:24 +00:00

Consolidate 22 sibling repos into layered organism structure

Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):

- brain/        LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
                dispatch, A51 channels, and the OSINT cluster
- knowledge/    LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
                MITRE ATT&CK data
- reference/    defensive threat-reference (C3, shhbruh doc) + AdaYaml parser

License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.

Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.

https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c

2026-06-10 06:53:01 +00:00

2.2 KiB

Raw Blame History

API Reference: Forced Browsing Authentication Bypass Agent

Overview

Tests web applications for unprotected endpoints, authentication bypass via HTTP methods and path normalization, and exposed sensitive files. For authorized penetration testing only.

Dependencies

Package	Version	Purpose
requests	>=2.28	HTTP requests to target endpoints

CLI Usage

# Test common admin paths
python agent.py --target https://target.example.com --admin-paths --session-cookie <token>

# Test with custom wordlist
python agent.py --target https://target.example.com --wordlist /path/to/wordlist.txt

Arguments

Argument	Required	Description
`--target`	Yes	Target base URL
`--wordlist`	No	Path to directory/file wordlist
`--session-cookie`	No	Valid session cookie for authenticated comparison
`--admin-paths`	No	Use built-in common admin path list
`--output`	No	Output file (default: `forced_browsing_report.json`)

Key Functions

`test_endpoint(base_url, path, session_cookie)`

Tests an endpoint with and without authentication, comparing response status and size to detect auth bypass.

`enumerate_directories(base_url, wordlist, session_cookie)`

Iterates through wordlist paths, recording responses with status 200, 301, 302, or 403.

`test_http_method_bypass(base_url, path)`

Tests GET, POST, PUT, DELETE, PATCH, OPTIONS, HEAD on protected endpoints to find method-based bypasses.

`test_path_traversal_bypass(base_url, path)`

Tests URL normalization variants (case changes, path traversal, encoding, semicolons) against protected paths.

`check_sensitive_files(base_url)`

Checks for exposed .env, .git, backup files, and configuration files.

`generate_report(findings, method_results, sensitive_files)`

Compiles all findings into a structured JSON pentest report.

Output Schema

{
  "total_endpoints_found": 15,
  "auth_bypass_candidates": [{"path": "/admin", "unauth_status": 200}],
  "accessible_without_auth": [...],
  "http_method_bypass": {"/admin": {"GET": 403, "PUT": 200}},
  "sensitive_files_exposed": [{"path": ".env", "size": 1024}]
}

2.2 KiB Raw Blame History