@howmp/dsh-pentest
DSH 渗透测试模式:以探索链路记录目标、线索、资产与漏洞,并在 Web 中可视化展示。
77 results
DSH 渗透测试模式:以探索链路记录目标、线索、资产与漏洞,并在 Web 中可视化展示。
DSH redteam security research modes and runtime plugins, managed from one settings page: deploy the nine presets, install, update and uninstall the seventeen runtime plugins for the current profile.
Sandbox-first automatic permission policy for DeepSeek Harness
Remote access & authentication for the DeepSeek Harness web UI: login gate, MFA (TOTP), signed session cookies, role-based access, in-browser directory picker, account management settings. Fully localized (zh/en).
A read-only mirror for installed DeepSeek Harness plugins: capability inventory with evidence, cross-plugin conflicts, a diff of what changed since the last scan, and an upgrade preflight that tells you which profiles still boot on a newer DSH
FormatForge for DeepSeek Harness: forge any file format (pdf/docx/xlsx/pptx/eml/toml/...) into AI-readable structured data. v1.0.0 (PRODUCTION-READY, protocol frozen): 协议冻结(v1.x 向后兼容)+ v0.14.0 全部 7 项 P0+P1 + 5 项 audit 修复(4 bug + 1 性能)。测试基线 567 passed。Thin
DSH local security audit tool: read-only scans of config, credential metadata, plugin provenance, session structure and network exposure; redacted, reproducible, locatable risk reports
Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.
DSH 原生多平台调研流水线插件:harvest_scout(多平台发现)/harvest_deep_research(深度研报)/harvest_extract(穿透抓取)/harvest_verify(交叉验证)/harvest_audit(可信度审计)。源于自研 omni-scope 方法论,自包含。
Multi-user authentication gateway plugin for the DSH Web GUI
Bidirectional bridge between Hermes Agent and DeepSeek Harness. Hermes dispatches focused tasks via JSON-RPC over POST /mcp/collab (one-shot or continuable, nonce-bound amend, secret-bound consult reply); DSH lets you continue Hermes sessions as native DS
Tensorlake sandbox execution providers for DeepSeek Harness
Agentic Control Plane for DeepSeek Harness — check every tool call against your policies before it runs, and keep a durable record of what was allowed and why.
DSH 社区插件生态指南 + 两个审计工具:注册「dsh-community-plugins」skill,让每个会话都知道如何发现、评估、安装社区插件;注册离线工具 dsh_plugin_audit,把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建;注册联网工具 dsh_plugin_inspect,在安装前下载 tarball、校验 integrity、在临时目录里审计后删除,不安装、不执行 lifecycle 脚本。只提供方法与事实,不推荐任何第三方插件或市场。轻量:纯 JavaScript、单一依赖、无构建步骤。
CC-style auto mode for DeepSeek Harness: deterministic deny/allow rules + pre-execute gate + model-agnostic two-stage classifier. Two-state (allow/reject) classifier since 0.8.0. TypeScript rewrite merging dsh-auto-mode v0.4.1 with Nuo-cl/dsh-auto-mode native integration.
DSH tool-call compatibility: strips sandbox_permissions/justification from tool-call arguments for third-party models (GPT etc.), and lets the user skip possibly-stuck tool calls with an LLM-facing notice.
Fail-closed microsandbox microVM provider and model-facing guest tools
DSH compatibility plugin that treats redundant non-escalating sandbox permission fields as a no-op
Audit deepseek-harness (DSH) plugins before install, guard them at runtime. Static verdict + pre-install audit protocol; supply-chain checks (typosquat, OSV); exfiltration & ransomware detection, honeypot canaries, integrity baseline. Alarm-only; blocks confirmed destructive ops.
DeepSeek Harness 的 Docker 容器沙箱部署级插件(与 dsh-plugin-vm-sandbox 全能力对齐):39 个 docker_* 模型工具、快照/回滚、文件传输、端口转发、后台任务、审计、共享/配额/回收、网络策略、多容器并行执行与华丽原生 UI。无需 OrbStack,Linux/Windows/macOS 均可使用。
DeepSeek Harness plugin for SecurStack security scans, policy checks, doctor diagnostics, and JSON CLI results.
Blaxel sandbox execution plugin for DeepSeek Harness (DSH)
AI approval answerer using the unified ctx.llm route with fail-closed local policy checks
Agent-decided approvals for DeepSeek Harness: a workspace-write base permission mode where an independent approval subagent judges every sandbox escalation (risky operations are rejected), with a configurable approval model and a per-session audit trail in the conversation window's 审批 tab.