Feat/webshell bridge - #88

Open

wuchulonly wants to merge 677 commits into

chainreactors:devfrom

wuchulonly:feat/webshell-bridge

This pull request is big! We're only showing the most recent 250 commits

Commits on Nov 19, 2025

fix：obverse
h3zh1
committed
fc50df6

Commits on Nov 23, 2025

feat: add GetGroups and GetSchemas localrpc
M09Ic
committed
4e8b846
feat: support media
h3zh1
committed
255a2a6
feat: support media
h3zh1
committed
025ec01
fix: saas logic 、tls panic
h3zh1
committed
3d34ea0
fix: opsec
h3zh1
committed
14d1336
feat: update IoM-go
h3zh1
committed
21976ce

Commits on Nov 25, 2025

chore: update sac process
h3zh1
committed
2f24a6d
chore: check mcp health
h3zh1
committed
b410e6e

Commits on Nov 26, 2025

fix: tls cert、checkDockerSource
h3zh1
committed
b9ce77a
feat: update proto
h3zh1
committed
d26e703

Commits on Nov 27, 2025

fix: update install.sh
h3zh1
committed
a7d2b24

Commits on Nov 28, 2025

chore: build、mcp
h3zh1
committed
bff85e7

Commits on Nov 30, 2025

fix: checkalive
h3zh1
committed
33e7ec0

Commits on Dec 10, 2025

feat: impl bind mode
M09Ic
committed
1fb0a9c

Commits on Dec 23, 2025

fix: misc improve
h3zh1
committed
22e5327
feat: support common request
h3zh1
committed
8a01589
feat: support mutant
h3zh1
committed
f6da539

Commits on Dec 28, 2025

fix: mv config logic
h3zh1
committed
4aeac51

Commits on Dec 29, 2025

fix: mutant cmd
h3zh1
committed
be08fdf

Commits on Jan 4, 2026

chore: misc
h3zh1
committed
79cf9d4

Commits on Jan 7, 2026

chore: support srdi type
h3zh1
committed
cffcdf9

Commits on Jan 11, 2026

feat: impl ExecuteModule
M09Ic
committed
948885c
fix: double print task status
M09Ic
committed
7c1298b
chore: remove CommonRequest
M09Ic
committed
71e16c0
chore: allow null expect
M09Ic
committed
dbebf9a

Commits on Jan 24, 2026

fix: listener, cert parsing, and logging
h3zh1
committed
8ec50e3
docs: update README
h3zh1
committed
26a7a64
feat(wizard): grouped commands and huh integration
h3zh1
committed
282aadc
feat(readline): fish-style inline suggestion
h3zh1
committed
a8e6696
feat(tui): update
h3zh1
committed
831ef1b

Commits on Jan 26, 2026

fix: rem
h3zh1
committed
3ee54fb

Commits on Feb 2, 2026

fix: update go.mod
h3zh1
committed
2b1de54

Commits on Feb 5, 2026

fix: docker build status (#86)
Ar3h
authored
1a7a893
fix: complete
h3zh1
committed
e9cc19e
fix(readline): guard TrimSuffix panic #53
h3zh1
committed
9f86a0f
fix(console): reset cobra/carapace completion state #44
h3zh1
committed
1013a6d
fix: rem flag compatibility
h3zh1
committed
a12fd78

Commits on Feb 6, 2026

chore: config validate
h3zh1
committed
6dc716f
fix: avoid readline spin when stdin is not a TTY
h3zh1
committed
45ccff9

Commits on Feb 7, 2026

Update README.md
Axion-K
authored
3040c42
fix: cobra examples and command argument/flag consistency
h3zh1
committed
bed7727

Commits on Feb 8, 2026

fix: CryptoConn.Read() buffer overflow causing persistent connection failure
h3zh1
committed
d2e5866

Commits on Feb 9, 2026

fix: tls info
h3zh1
committed
4686aca

Commits on Feb 11, 2026

feat: support multiple embedded plugins and update goreleaser
h3zh1
committed
180bff3

Commits on Feb 12, 2026

fix: movefile
h3zh1
authored
64b919a
fix: multiple embedded plugins
h3zh1
committed
92c396a

Commits on Feb 13, 2026

fix: correct community submodule path for multi-plugin structure
h3zh1
committed
46ff3ef
fix: prevent Task.Close panic from double close on DoneCh

M09Ic
and
claude
committed
aaea292
fix: add SafeGo panic recovery for all goroutines and convert pipelinesCh to sync.Map

M09Ic
and
claude
committed
e075e16
fix: add sync.RWMutex to concurrent maps (Listener.Pipelines, Pipelines, Website, clients)

M09Ic
and
claude
committed
2970925
fix(notify): fix UpdateNotifyConfig
h3zh1
committed
f376cf4
refactor(auth): simplify to pure fingerprint auth, remove UPN and over-engineering
h3zh1
committed
854028b
chore(readline): cherry-pick bug fixes and perf optimizations from upstream
h3zh1
committed
c6959c6
fix: Download
h3zh1
committed
527de06
feat(deps)!: upgrade dependencies and bump go to 1.24.13
h3zh1
committed
0676148
chore: remove tui package
h3zh1
committed
499285f
feat: support context delete
h3zh1
committed
6e289c2
feat(tui): auto-fit column widths based on cell content
h3zh1
committed
29da0ed
chore: github action
h3zh1
committed
db8530c

Commits on Feb 17, 2026

fix: kv table
h3zh1
committed
be96df5

Commits on Feb 20, 2026

feat: quickstart
h3zh1
committed
d9750d4
feat(mal): support zip format for mal install
h3zh1
committed
788dbaf

Commits on Feb 22, 2026

Commits on Feb 23, 2026

Commits on Feb 24, 2026

feat(profile): disk-based config persistence and build input flag redesign
h3zh1
committed
d28df28
chore: update IoM-go submodule for Profile proto changes
h3zh1
committed
91e83f8
chore: update community submodule
h3zh1
committed
9783ee5
feat(profile): add profile show command for detailed config viewing
h3zh1
committed
df2ca1a
feat: update IoM-go
h3zh1
committed
ca0ae05
chore(ci): update nightly release notes for dev branch
h3zh1
committed
aca685a
fix(localrpc): return task-bound output and update IoM-go timeout
h3zh1
committed
2bec4d9

Commits on Feb 25, 2026

fix(plugin): sync Long/Example from plugin.Command to cobra.Command
h3zh1
committed
5823930
feat: update mal-intl
h3zh1
committed
592c7bb

Commits on Feb 26, 2026

feat(notify): support lark webhook signature verification
h3zh1
committed
d3c736a
fix: genlua
h3zh1
committed
fad6f6f
chore: column name
h3zh1
committed
06db015

Commits on Mar 3, 2026

fix: taskschd_create
h3zh1
committed
a3fd7c9

Commits on Mar 5, 2026

feat(db): add PostgreSQL support
h3zh1
committed
4ff523b
feat: implement keepalive module
h3zh1
committed
77fd91d
feat: implement patch build mode
h3zh1
committed
cbf19f1
refactor(pty): streaming mode
h3zh1
committed
1ba0355
feat(filesystem): add touch command support
h3zh1
committed
7fbf27e

Commits on Mar 6, 2026

fix(website): support offline content changes
h3zh1
committed
2786f9e
fix(db): handle PostgreSQL FK constraints for nullable string fields
h3zh1
committed
cec0b4d

Commits on Mar 7, 2026

fix: simplify SessionLogin
h3zh1
committed
1bd2699
chore: add argument completions for keepalive
h3zh1
committed
22a0181
feat: update tui
h3zh1
committed
29a09f8
fix(rpc): avoid copying website pipeline proto locks
h3zh1
committed
ab39919

Commits on Mar 9, 2026

feat: update build
h3zh1
committed
843d941

Commits on Mar 10, 2026

fix: security hardening, bug fixes, and code cleanup
h3zh1
committed
20af15a

Commits on Mar 12, 2026

feat: update rem args
h3zh1
committed
dde4b8a
fix(pipeline): prevent duplicate entries in pipeline list
h3zh1
committed
e1593af
fix: close file handles before removing source in MoveFile on Windows

M09Ic
and
claude
committed
a182466
feat: add CustomPipeline support, fix session Timer nil crash, improve exec output format

M09Ic
and
claude
committed
c129760
docs: add session refactor documentation and edge case tests

M09Ic
and
claude
committed
fc6ac99
refactor: replace BuildConfig.lib with output_type, support pulse --shellcode and --lib
h3zh1
committed
58be68e
feat: add CLAUDE.md、AGENT.md
h3zh1
committed
88e2a38
feat: update IoM-go
h3zh1
committed
2310cd4
feat: CLAUDE.md、AGENTS.md
h3zh1
committed
0491f34
fix: resolve Pipeline_Custom undefined errors
h3zh1
committed
ab46a97
feat: run quickstart automatically when config file does not exist
h3zh1
committed
ac12f90
refactor: move ai-config into config ai subcommand
h3zh1
committed
59cadd5
fix: clear stale completion display before redrawing
h3zh1
committed
d072f6f
feat: enable usage-hint-always to show command usage below input
h3zh1
committed
c681285
fix: show usage hint for commands with single-word Use field
h3zh1
committed
bc16820

Commits on Mar 13, 2026

refactor: unify event-driven client state synchronization

M09Ic
and
claude
committed
f3a1570
fix: hide pipe and upload commands when no matching modules exist

M09Ic
and
claude
committed
2ce6f67
fix: notify client on Sleep change, clean up dead code

M09Ic
and
claude
committed
b5d160a
refactor: unify db layer with query builders, remove dead code

M09Ic
and
claude
committed
de01c4a
Fix pipeline config round-trip and trim unused implanttypes helpers
M09Ic
committed
524cd01
test: expand config coverage
M09Ic
committed
66561f6
feat(agent): add skill command and improve LLM event rendering

M09Ic
and
claude
committed
df460bd
feat: UX improvements — Starship prompt, session fixes, completer safety

M09Ic
and
claude
committed
9a0bc34
feat: prompt-safe async log output and unified ❯ prompt

M09Ic
and
claude
committed
7e53a98
refactor: move ai-config under config subcommand, add merge-update for github/notify

M09Ic
and
claude
committed
190298e
fix: skip console start when stdin is not a terminal, validate MCP content-type

M09Ic
and
claude
committed
e519a9c
feat: add agent commands (skill/tapping/poison) with streaming module support

M09Ic
and
claude
committed
0187928
feat(skill): add builtin skills and embedded resource discovery

M09Ic
and
claude
committed
eafa464
fix: merge IoM-go submodule and fix proto lock copy warning

M09Ic
and
claude
committed
6596d96
refactor guarded runtime handling
M09Ic
committed
02e15a5
fix: prevent goroutine hangs from blocking channel operations

M09Ic
and
claude
committed
686fbb1
test: add control plane integration coverage
M09Ic
committed
f44aaac
docs: add testing regression records
M09Ic
committed
d6b8646
test: add command conformance coverage
M09Ic
committed
2d49f19
test: extend control plane command coverage
M09Ic
committed
30fcea2
feat: add bridge agent module with LLM provider proxy and ReAct agent tests

M09Ic
and
claude
committed
4403992

Commits on Mar 14, 2026

test: harden extension armory and mal tests
M09Ic
committed
092d598
fix: non-interactive client command handling
M09Ic
committed
269ebf2
test: harden module management regression tests
M09Ic
committed
f021afd
test: add mock implant task lifecycle coverage
M09Ic
committed
6d92e12
fix: code review issues in context propagation, command removal, and concurrency

M09Ic
and
claude
committed
71a4325
refactor: improve non-interactive client execution
M09Ic
committed
e6290a5
test: align implant e2e harness with runtime behavior
M09Ic
committed
d10c67c
chore(ci): add core_race job and document commit convention

M09Ic
and
claude
committed
765cd59
fix(helper): harden embed path resolution and cross-platform path handling

M09Ic
and
claude
committed
092ccfd
docs: add implant E2E testing guide, agent proposal, and pipeline docs

M09Ic
and
claude
committed
d8b78fd
fix: MvConfig
h3zh1
committed
6a81f6c

Commits on Mar 16, 2026

feat(task): add CancelTask method to consolidate task cancellation logic

M09Ic
and
claude
committed
b785a6a
fix(addon): refresh session state before rebuilding addon commands

M09Ic
and
claude
committed
ee1ab8a
refactor(switch): restructure switch command with pipeline-based target building

M09Ic
and
claude
committed
cd88c91
refactor(context): synchronous sync, input validation, and improved RPC handling

M09Ic
and
claude
committed
2b9ccbe
test(testsupport): expand recorder and control plane test infrastructure

M09Ic
and
claude
committed
87e58fc
test: add unit and integration tests across client command packages

M09Ic
and
claude
committed
d6af17e
test(server): expand mock implant and real implant e2e test harness

M09Ic
and
claude
committed
4352974
docs: update test documentation and IoM-go submodule reference

M09Ic
and
claude
committed
638cca8
chore(ci): add mock_implant job for mock implant e2e tests

M09Ic
and
claude
committed
48b6fe4
fix(ci): parallelize all jobs and skip missing root config in test

M09Ic
and
claude
committed
9521099
fix(ci): commit root config.yaml with sanitized defaults

M09Ic
and
claude
committed
507636d
chore: update IoM-go submodule to fix recursive checkout

M09Ic
and
claude
committed
153cbf4
fix: cross-platform test compatibility for Switch proto and file paths

M09Ic
and
claude
committed
ceaeb76
fix: cross-platform path handling in mock filesystem and download

M09Ic
and
claude
committed
8b5aeae
fix(rpc): delegate REM pipelines from generic Start/Stop/DeletePipeline to dedicated handlers
h3zh1
committed
818e1a8
refactor(quickstart): replace multi-page wizard with single-page tabbed form
h3zh1
committed
4f2b782
feat(prompt): starship-style prompt layout and GetSessionCount RPC
h3zh1
committed
48c3bfc
fix: cross-platform path handling in mock filesystem and download

M09Ic
and
claude
committed
dd7b983
chore: sync IoM-go submodule with GetSessionCount RPC

M09Ic
and
claude
committed
288c400
fix: prevent race in waitModuleRequest when fast responses arrive

M09Ic
and
claude
committed
e082a20
feat(rem): dynamic polling interval reconfiguration
h3zh1
committed
1264238
fix(rem): register accept-path agents in pivot and isolate per-pipeline tracking
h3zh1
committed
62b7529
feat(rem): auto-resolve pipeline from agent-id in rem update interval
h3zh1
committed
16b9f88
feat(cli): add daemon mode for headless runtimes
h3zh1
committed
3b432c0

Commits on Mar 17, 2026

fix(core): resolve 7 runtime bugs found by new unit and integration tests

M09Ic
and
claude
committed
57fbaaa
fix(rpc): clean up listener state on stream disconnect

M09Ic
and
claude
committed
1179ccc
fix(core): harden against deadlock, panic, and race conditions

M09Ic
and
claude
committed
96f15b1
test(listener): add website E2E tests with real HTTP server verification

M09Ic
and
claude
committed
6043cb8
fix(listener): return 404 for missing website content and guard Content-Type

M09Ic
and
claude
committed
ffa0b05
test(website): add full E2E tests from client command to HTTP response

M09Ic
and
claude
committed
c5ae30c
feat(client): integrate terminal multiplexer with seamless UX
M09Ic
committed
cfe0865
feat(website): add HTTP Basic Auth support with per-path and per-site granularity

M09Ic
and
claude
committed
cbc9b66
feat(secure): add HMAC-SHA256 signature to key exchange requests

M09Ic
and
claude
committed
56b2873
feat(test): add real implant secure key exchange E2E test

M09Ic
and
claude
committed
ce337d9
chore: sync tui submodule with mouse click support

M09Ic
and
claude
committed
80d3340
refactor(client): rename --mux flag to --tui

M09Ic
and
claude
committed
05ec213
chore: sync tui submodule with mouse wheel forwarding

M09Ic
and
claude
committed
32d4160
chore: sync tui submodule with dead pane cleanup and scroll fix

M09Ic
and
claude
committed
1cd47fd
chore: sync tui submodule with scrollback viewport

M09Ic
and
claude
committed
3d58f20
fix(listener): align Reconfigure usage with current message API
h3zh1
committed
b7d4a16
test(listener): harden pipeline and auth edge cases
h3zh1
committed
4b02b61
test(rpc): add request guard coverage
h3zh1
committed
a42285c
test(client-db): harden pipeline command and session helpers
h3zh1
committed
7f47d77
test(utils): harden helper edge cases
h3zh1
committed
20b3efe

Commits on Mar 18, 2026

fix(client): handle short session ids and resolve session prefixes
h3zh1
committed
1702e86
fix(core): clean listener ctrl state and guard event formatting
h3zh1
committed
e17fa1b
fix(rpc): propagate rem control failures
h3zh1
committed
66f4e0a
fix(listener): make pipeline close idempotent
h3zh1
committed
0efa4df
fix(client): guard task event handling against nil events
h3zh1
committed
540a0d4
fix(rpc): validate file transfer requests
h3zh1
committed
ff47980
fix(rpc): validate website requests
h3zh1
committed
aeeca34
fix(client): make event hook dispatch safe
h3zh1
committed
e8c4087
fix(rpc): validate module requests and responses
h3zh1
committed
a1240dc
fix(rpc): correct download chunk counting
h3zh1
committed
6b3706d
fix(rpc): finalize resumed downloads safely
h3zh1
committed
67e205a
fix(rpc): initialize website content map for hot updates
h3zh1
committed
28e4acf
refactor(rpc): split missing request field errors
h3zh1
committed
3dddaeb
feat(mcp): upgrade mcp-go from v0.25.0 to v0.45.0
h3zh1
committed
64b22cb
feat(pivot): add created_at timestamp to pivot context
h3zh1
committed
be2bf1e
chore: bump external/tui submodule to 440943f
h3zh1
committed
8f2f3ee
fix(mcp): unify executeCommand with task-wait logic from LocalRPC
h3zh1
committed
3b69ca4
fix(plugin): auto-generate Use field with positional argument hints
h3zh1
committed
5628c51
docs(community): bump submodule with help text for all mal commands
h3zh1
committed
4deb4fa

Commits on Mar 19, 2026

feat(tls): add mTLS support for pipeline TCP listener with explicit config flag

M09Ic
and
claude
committed
229fd77
docs(skills): rewrite all skills in English and fix cross-file references

M09Ic
and
claude
committed
7065b5c
feat(skill): add iom-pentest Claude Code skill for automated penetration testing
h3zh1
committed
8c45d2a
refactor: quickstart
h3zh1
committed
f894f96
fix(db): SQLite migrator compatibility for idempotent AutoMigrate
h3zh1
committed
ed8e71e
fix(db): add schema check completion log on successful AutoMigrate
h3zh1
committed
b513de4
feat(log): daily log rotation with gzip compression and 180-day retention
h3zh1
committed
1dab12e
feat(mcp): add search_commands tool for fuzzy command discovery

M09Ic
and
claude
committed
3613343
chore: update localrpc.proto
M09Ic
committed
d96db9e
feat(config): unify config UI with subcommands and add status command

M09Ic
and
claude
committed
1e1e33b

Commits on Mar 20, 2026

feat(localrpc): implement StreamCommand with EventHook-based streaming

M09Ic
and
claude
committed
1c2c66b

Commits on Mar 22, 2026

Commits on Mar 23, 2026

refactor(pipeline): reuse MaleficParser, extract runtimeErrorHandler, simplify bootstrap

M09Ic
and
claude
committed
3afd34e