Skip to content

Vulnerator AI 1.5.0

Choose a tag to compare

@irraz irraz released this 18 Oct 19:04
· 43 commits to master since this release

What's new in 1.5.0

πŸ–₯️ Hermes web dashboard

Built-in browser UI on :9119 with Vulnerator-AI custom skin β€” dark red/green cyber theme, block ASCII banner, OODA spinner verbs.

πŸ§ͺ Practice labs

  • labs/looney-tunables-ctf β€” CVE-2023-4911 glibc 2.37 LPE (pentest + ctf modes)
  • labs/pinguinazo-ssti β€” Flask SSTI β†’ reverse shell β†’ sudo java β†’ root (inspired by dockerlabs.es)

πŸ“‹ Pentest report skill v0.3

Two-layer reports: report_gen.py structured base + LLM narrative enrichment + standalone HTML with Vulnerator-AI visual theme.

🧠 SOUL.md improvements

  • Engagement modes: mode: pentest (stops at evidence) vs mode: ctf/redteam (full compromise)
  • Evidence discipline and tightened 3-step no-progress counter
  • ORIENT always reloads finding store (read_findings)
  • Structured todo_list OODA template
  • Reverse shell guidance via kali_exec
  • Container environment awareness

🌐 Landing web

CRT boot screen with lens effect, Whisper-synced karaoke, audio controls, VULNERATOR! flash, scroll animations, screenshot lightbox, CTF + pentest sample reports.

πŸ”§ Config

  • todo toolset enabled for OODA state tracking
  • display.skin: vulnerator activates custom skin
  • HERMES_DASHBOARD=1 publishes dashboard on :9119