ji ruo
b0a29236f8
feat: improve finding reports and evidence exports
2026-10-29 01:25:32 +08:00
ji ruo
fe939800d9
Merge remote-tracking branch 'origin/codex/finding-reproduction'
...
# Conflicts:
# web/src/app/(main)/function/findings/detail/page.tsx
2026-10-28 18:51:43 +08:00
ji ruo
252e83f13c
Merge remote-tracking branch 'origin/codex/packet-highlighting'
...
# Conflicts:
# web/src/components/http-code-block.tsx
# web/src/components/repeater/repeater-editor.tsx
# web/src/components/repeater/repeater-text-pane.tsx
2026-10-28 18:17:18 +08:00
ji ruo
b71c757055
Merge remote-tracking branch 'origin/codex/repeater-burp-layout'
2026-10-28 18:14:51 +08:00
ji ruo
e8572a18d2
feat: add structured finding reproduction screenshots
2026-10-28 18:08:12 +08:00
ji ruo
3c6070a8d8
feat(web): highlight HTTP packets consistently
2026-10-28 15:43:24 +08:00
ji ruo
76c76eefa9
feat(repeater): redesign request replay workspace
2026-10-28 13:37:17 +08:00
ji ruo
404c4bb248
feat: add finding side question panel
2026-10-28 13:17:38 +08:00
zabcxky-123
1aeaf57734
fix(web): allow changing findings page size
2026-10-27 14:51:10 +08:00
RuoJi6
dc2e0e84a8
feat: edit full HTTP requests and manage replay drafts in bulk
2026-10-26 01:54:33 -07:00
RuoJi6
853a4da57a
feat: improve request replay editor and import captured traffic
2026-10-26 01:09:06 -07:00
RuoJi6
2f42baf8a1
fix: support Repeater workspace over HTTP LAN origins
2026-10-25 22:22:24 -07:00
ARTEX Bot
eb5d826f79
fix(web): keep in-flight Repeater sends and UTF-16 storage budget
...
Per-tab send generations survive editor remounts; closed tabs drop
results; previous responses stay until replacement. localStorage
eviction uses a 4MiB UTF-16 budget with retry toast on quota failure.
2026-10-26 11:16:22 +08:00
ARTEX Bot
b495d58315
feat(web): Burp-style sidebar Repeater workspace
...
Add /function/repeater with groups, tabs, rename/close, Host header
shortcut, and localStorage persistence. Findings "送入/打开 Repeater"
now seed a workspace tab and navigate; remove the old Dialog.
2026-10-26 10:48:19 +08:00
RuoJi6
3a4c66d41f
Merge pull request #48 from RuoJi6/feat/finding-dedup-1-2-3
...
feat(findings): 降低重复确认噪音——分组疑似重复建议、候选打分排序、放宽归并验收(方案1+2+3)
2026-10-25 18:37:16 -07:00
RuoJi6
e03bd5c244
Merge pull request #44 from RuoJi6/feat/notes-and-worker-count
...
feat: 任务/模板备注展示与 Worker 运行数量配置
2026-10-25 18:29:16 -07:00
RuoJi6
cd7fee59a3
Merge pull request #43 from RuoJi6/fix/issues-34-38
...
fix: 修复发现返回导航(#34 )与情报内容搜索及查看对话(#38 )
2026-10-25 18:29:01 -07:00
RuoJi6
32d732bdfa
fix: Repeater 一次性传输取消阶段超时并回收空闲连接,错误时不重复显示(Codex gpt-6.1-sol)( #42 )
2026-10-25 00:02:43 +08:00
RuoJi6
5e908e9f39
fix: 按 Grok 复审修复 Repeater 发送竞态、二进制正文预填、弹窗布局与代理测试(Codex gpt-6.1-sol)( #42 )
2026-10-24 23:17:45 +08:00
RuoJi6
5b342f9f78
fix(findings): address Grok review r1 (Codex gpt-6-astra)
...
Authored by Codex CLI (gpt-6-astra, reasoning high) after 3 gpt-6.1-sol
capacity failures. Scope sweep aggregates per suggestion, veto only kept
suggestion members on exclusion, refresh finding-case tool schemas on existing
DBs, clarify weak tier wording, keep card state across reloads, filter stale
exclusions, always reload after confirm, guard task-switch toasts.
2026-10-24 22:47:16 +08:00
RuoJi6
ddfdc36787
fix: 按 Grok 评审修复 Repeater 录制代理地址、数字主机 SSRF、Cookie 合并等问题(Codex gpt-6.1-sol)( #42 )
2026-10-24 22:46:37 +08:00
RuoJi6
313bac538a
fix: 应用模板时将备注与 Worker 数纳入覆盖确认(Codex gpt-6.1-sol)
2026-10-24 22:44:06 +08:00
RuoJi6
2bd7953313
fix: mock/前端 Worker 与备注校验对齐后端(Codex gpt-6-astra)
2026-10-24 22:31:54 +08:00
RuoJi6
1847b8adb1
feat: 发现页新增类似 Burp Repeater 的请求重放功能(Codex 重写)( #42 )
...
Code authored by Codex CLI (gpt-6.1-sol/gpt-6-astra/gpt-6-sol/gpt-5.6-sol sessions, final: gpt-6-astra).
2026-10-24 22:26:22 +08:00
RuoJi6
2e6ceddf95
fix: 按评审补齐 mock 校验、Worker 上限保护与测试(Codex gpt-6-sol)
2026-10-24 22:08:35 +08:00
RuoJi6
09e90b4170
feat(findings): grouped duplicate suggestions, ranked candidates, relaxed merged acceptance (Codex rewrite)
...
Authored entirely by Codex CLI (codex exec, reasoning effort high), one session
resumed across capacity fallbacks:
- gpt-6.1-sol (schema + initial db work, stopped at capacity)
- gpt-6-astra (db/server/agent/frontend, stopped at capacity)
- gpt-6-sol (remaining items, tests, fixes; stopped at capacity after final checks)
Schemes 1+2+3: prompt/acceptance (2..20, evidenced differences justify
independent, merged no longer blocked by unified report), group suggestions with
member table, superset reuse/subset superseded, veto-aware reject/exclusion,
anchor re-anchoring trigger, sweep after merge/reject/remove, frontend group card
with stale-response guard, candidate scoring with tier/hit_reasons/strong_total.
2026-10-24 21:55:45 +08:00
RuoJi6
a1dc362bae
feat: 任务/模板备注展示与 Worker 运行数量配置(Codex gpt-6-astra 重写)
2026-10-24 21:46:03 +08:00
RuoJi6
f9cf38c16c
revert: 回退手写的 Repeater 实现,准备由 Codex 按新规则重写 ( #42 )
2026-10-24 21:17:55 +08:00
RuoJi6
ba3025d04f
chore: 还原 PR #44 手写实现,准备由 Codex 按新规则重写
2026-10-24 21:17:17 +08:00
RuoJi6
b0d6ad5d76
revert(findings): reset dedup files to origin/main before Codex rewrite
...
Pure git restore (git checkout origin/main -- <files>) so the scheme 1+2+3
implementation can be re-authored entirely by Codex. No hand-written code.
2026-10-24 21:09:20 +08:00
RuoJi6
0c346a7c0a
fix(findings): address Grok review — keep folders mergeable after group reject, re-anchor groups on finding delete, guard stale suggestion list writes
2026-10-24 20:48:35 +08:00
RuoJi6
00ec84d14e
feat(findings): reduce duplicate-confirmation noise with grouped suggestions and ranked candidates
...
- Prompt: evidenced endpoint/handler/param differences justify independent; suggest only with concrete shared points
- Review acceptance: merged no longer blocked by unified report
- Suggestions: 2..N member groups, one-click group confirm with per-member exclusion, related cards cleared
- Candidates: score/tier/hit_reasons ranking, low-score kept paginated
2026-10-24 20:01:37 +08:00
RuoJi6
341caa5e1f
feat: 发现页新增类似 Burp Repeater 的请求重放功能 ( #42 )
...
在发现详情的关联流量区提供 Repeater:可从流量证据一键预填,或空白编辑
方法/URL/头/体后由服务端代发请求并展示原始响应,便于人工验证与报告撰写。
- POST /api/repeater/send:复用 recording/global 代理出口
- 直连路径拨号层拦截环回/链路本地/元数据;字面敏感 IP 在 URL 预检拒绝
- 会话内历史(前端内存);跨主机重定向拒绝
2026-10-23 19:22:51 +08:00
RuoJi6
45d4e4e67b
feat: 任务/模板备注展示与 Worker 运行数量配置
...
- 新建任务可填写备注;详情页头部展示备注(列表原有 RemarkEditor 保留)
- 任务模板支持备注与 Worker 数量,应用/另存为模板时同步带入
- 新建任务高级设置与模板均可单独设置 Worker 运行数量(0=回落全局默认)
- schema/API/引擎贯通:tasks.worker_count、task_templates.remark/worker_count
2026-10-23 19:01:21 +08:00
RuoJi6
0a327328f3
fix: 修复发现返回导航( #34 )与情报内容搜索及查看对话( #38 )
...
- #34 : 任务发现页进入漏洞报告详情后,「←返回」回到该任务的发现页
(/function/tasks/detail?id=<task>&tab=findings),而非全局发现列表。
任务自身的 FindingCaseList 与原始上报列表「详情」链接均携带 context_task。
- #38 : 情报搜索除标题/上报者外,同时匹配内容(content)与来源证据(evidence)。
- #38 : 修复「查看对话」点击无反应:任务详情页标签切换同步写入 URL 的 tab 参数,
使跳转 tab=sessions&session=... 时能正确切换到会话并打开对应会话。
Closes #34
Closes #38
2026-10-23 18:09:55 +08:00
RuoJi6
620ca5d96c
Merge pull request #26 from RuoJi6/codex/task-intelligence
...
feat: 新增可选的任务情报自动记录与查看
2026-10-20 13:23:26 +08:00
ji ruo
123b9dcd61
fix: polish credential traffic cards and support copying over HTTP
2026-10-20 13:12:51 +08:00
ji ruo
851e3f99ed
feat: add optional credential processing with dependent switches and traffic evidence
2026-10-20 13:01:03 +08:00
ji ruo
7c2efbc1ca
fix: link intelligence conversation column directly to sessions
2026-10-20 12:19:40 +08:00
ji ruo
a00e58a9bd
fix: navigate intelligence to source sessions and related assets
2026-10-20 12:13:07 +08:00
ji ruo
fb8c3cb6f4
fix: wrap intelligence table text and distinguish category colors
2026-10-20 11:43:24 +08:00
ji ruo
bd787f8883
fix: display task intelligence content directly
2026-10-20 11:35:38 +08:00
ji ruo
14f3f1a805
fix(web): shrink empty remark columns in task lists
2026-10-20 11:31:05 +08:00
ji ruo
d70dd15e11
feat: add optional task intelligence recording and views
2026-10-20 11:16:04 +08:00
ji ruo
de7a668b32
feat: align list editors with name hover actions
2026-10-19 09:58:32 +08:00
ji ruo
316889f76a
feat: add inline remarks for tasks and schedules
2026-10-19 09:17:59 +08:00
ji ruo
b9b137dc91
fix: preserve blank lines when copying HTTP packets
2026-10-13 17:30:44 +08:00
ji ruo
6aa0c56d81
fix: improve static script review and default to model judgement
2026-10-13 14:08:00 +08:00
ji ruo
139e997ba8
fix: remove empty approval detail space
2026-10-12 19:58:40 +08:00
ji ruo
dc72b5b4a9
feat: configure incomplete script review path
2026-10-12 18:01:49 +08:00