Skip to content

Vulnerator AI 1.2.0

Choose a tag to compare

View all tags
@irraz irraz released this 16 Oct 09:36
· 71 commits to master since this release
v1.2.0
f6cc4ab

What's new

Curated pentest CLIs baked into the Kali image. The base kali-rolling image is minimal and shipped none of the tools the skills assume. The image now bakes in a curated set so the web-pentest and recon skills work out of the box: nmap, whatweb, nuclei, ffuf, sqlmap, gobuster, impacket-scripts (invoked as impacket-*, e.g. impacket-secretsdump), and bloodhound.py (bloodhound-python). Not the full kali-linux-headless metapackage — curated to keep the image reasonably sized.

Reproducible lab target (OWASP Juice Shop). Documented quickstart to bring the stack up with a deliberately-vulnerable target on the internal network:

docker compose -f docker-compose.yml -f docker-compose.target.yml up -d --build

Hermes reaches it as http://juice-shop:3000; it is not exposed to the host.

Fixed / polish

  • Startup now warns (non-fatal) when OLLAMA_BASE_URL is set but OLLAMA_MODEL is empty, instead of silently pointing the profile default model name at the Ollama endpoint.
  • Added a regression test for the OpenRouter-vs-Ollama provider-selection startup logic.

Default behavior (OpenRouter, no OLLAMA_BASE_URL) is unchanged.

Full Changelog: v1.1.0...v1.2.0

Assets 2
Loading