51 lines
1.5 KiB
Markdown
51 lines
1.5 KiB
Markdown
---
|
|
title: "[bojemoi] feat(nuclei-feedback): loop Nuclei → Uzi pour exploitation ciblée"
|
|
date: 2026-08-04T00:19:02+02:00
|
|
draft: false
|
|
tags: ["commit", "bojemoi", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 941c732 par grafana-watcher dans bojemoi"
|
|
author: "grafana-watcher"
|
|
---
|
|
|
|
## Commit `941c732`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | bojemoi |
|
|
| **Branch** | `main` |
|
|
| **Author** | grafana-watcher |
|
|
| **Hash** | `941c732235a26dbdb2117e2298b96dda23b3b20d` |
|
|
|
|
|
|
### Description
|
|
|
|
Quand Nuclei trouve des findings critical/high/rce, injecte le host
|
|
dans pentest:uzi_queue avec attack_surface enrichi → Uzi passe de
|
|
~2500 modules génériques à ~10-50 modules ciblés.
|
|
|
|
- pentest_orchestrator/main.py : nouveau thread nuclei_feedback_loop()
|
|
qui subscribe pentest:results et mappe les tags Nuclei vers les clés
|
|
attack_surface de thearm_uzi (log4shell, spring4shell, webmin, bitrix,
|
|
confluence, ms_exchange, vmware_vcenter, citrix_netscaler, etc.)
|
|
- Dockerfile.samsonov : build depuis /opt/bojemoi (contexte parent),
|
|
install explicite psycopg2/valkey/httpx + bojemoi SDK, ajout ENTRYPOINT
|
|
python3 -m pentest_orchestrator.main + PYTHONPATH=/src
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M samsonov/Dockerfile.samsonov
|
|
M samsonov/pentest_orchestrator/main.py
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
samsonov/Dockerfile.samsonov | 18 +++--
|
|
samsonov/pentest_orchestrator/main.py | 146 ++++++++++++++++++++++++++++++++++
|
|
2 files changed, 157 insertions(+), 7 deletions(-)
|
|
```
|