Commit Graph
556 Commits
Author SHA1 Message Date
RuoJi6 cd7fee59a3 Merge pull request #43 from RuoJi6/fix/issues-34-38
fix: 修复发现返回导航(#34)与情报内容搜索及查看对话(#38)
2026-10-25 18:29:01 -07:00
RuoJi6 9ac503ba59 Merge pull request #31 from RuoJi6/codex/remove-flag-prompts
移除 Agent 提示词中的 flag 表述
2026-10-25 18:28:46 -07:00
RuoJi6 2305057861 Merge pull request #46 from RuoJi6/feat/findings-repeater
feat: 发现页新增类似 Burp Repeater 的请求重放功能 (#42)
2026-10-25 18:27:18 -07:00
RuoJi6 f42468030d Merge pull request #36 from jubeater/fix/emudhra-ca-distrust-upstream
fix: Go 升级至 1.26.10 以拦截泄露的 eMudhra 中间 CA / bump Go to 1.26.10 for the eMudhra CA distrust
2026-10-25 18:26:53 -07:00
RuoJi6 32d732bdfa fix: Repeater 一次性传输取消阶段超时并回收空闲连接,错误时不重复显示(Codex gpt-6.1-sol)(#42) 2026-10-25 00:02:43 +08:00
RuoJi6 91d2fe456c fix: Repeater 直连拨号改由请求超时控制,补充 DNS 重绑定与 HTTP/2 测试(Codex gpt-6.1-sol)(#42) 2026-10-24 23:42:30 +08:00
RuoJi6 5e908e9f39 fix: 按 Grok 复审修复 Repeater 发送竞态、二进制正文预填、弹窗布局与代理测试(Codex gpt-6.1-sol)(#42) 2026-10-24 23:17:45 +08:00
RuoJi6 ddfdc36787 fix: 按 Grok 评审修复 Repeater 录制代理地址、数字主机 SSRF、Cookie 合并等问题(Codex gpt-6.1-sol)(#42) 2026-10-24 22:46:37 +08:00
RuoJi6 1847b8adb1 feat: 发现页新增类似 Burp Repeater 的请求重放功能(Codex 重写)(#42)
Code authored by Codex CLI (gpt-6.1-sol/gpt-6-astra/gpt-6-sol/gpt-5.6-sol sessions, final: gpt-6-astra).
2026-10-24 22:26:22 +08:00
RuoJi6 f9cf38c16c revert: 回退手写的 Repeater 实现,准备由 Codex 按新规则重写 (#42) 2026-10-24 21:17:55 +08:00
RuoJi6 341caa5e1f feat: 发现页新增类似 Burp Repeater 的请求重放功能 (#42)
在发现详情的关联流量区提供 Repeater:可从流量证据一键预填,或空白编辑
方法/URL/头/体后由服务端代发请求并展示原始响应,便于人工验证与报告撰写。

- POST /api/repeater/send:复用 recording/global 代理出口
- 直连路径拨号层拦截环回/链路本地/元数据;字面敏感 IP 在 URL 预检拒绝
- 会话内历史(前端内存);跨主机重定向拒绝
2026-10-23 19:22:51 +08:00
RuoJi6 0a327328f3 fix: 修复发现返回导航(#34)与情报内容搜索及查看对话(#38)
- #34: 任务发现页进入漏洞报告详情后,「←返回」回到该任务的发现页
  (/function/tasks/detail?id=<task>&tab=findings),而非全局发现列表。
  任务自身的 FindingCaseList 与原始上报列表「详情」链接均携带 context_task。
- #38: 情报搜索除标题/上报者外,同时匹配内容(content)与来源证据(evidence)。
- #38: 修复「查看对话」点击无反应:任务详情页标签切换同步写入 URL 的 tab 参数,
  使跳转 tab=sessions&session=... 时能正确切换到会话并打开对应会话。

Closes #34
Closes #38
2026-10-23 18:09:55 +08:00
jubeaterandClaude Opus 5.5 526afeebdb fix: Go 升级至 1.26.10 以拦截泄露的 eMudhra 中间 CA / bump Go to 1.26.10 for the eMudhra CA distrust
Eight eMudhra intermediate CAs were compromised
(https://emudhra.we-have-a-problem.com/). Go 1.26.10 is the patched
release; CI builds with the version in go.mod via go-version-file.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-21 14:42:41 -04:00
ji ruo b855370e1b Remove flag references from agent prompts 2026-10-21 09:22:52 +08:00
RuoJi6 620ca5d96c Merge pull request #26 from RuoJi6/codex/task-intelligence
feat: 新增可选的任务情报自动记录与查看
v0.3.23
2026-10-20 13:23:26 +08:00
RuoJi6 0007bba3c1 Merge pull request #27 from RuoJi6/codex/review-default-retries
fix: 默认审查重试 3 次并收紧任务备注列
2026-10-20 13:23:00 +08:00
ji ruo 123b9dcd61 fix: polish credential traffic cards and support copying over HTTP 2026-10-20 13:12:51 +08:00
ji ruo 851e3f99ed feat: add optional credential processing with dependent switches and traffic evidence 2026-10-20 13:01:03 +08:00
ji ruo 7c2efbc1ca fix: link intelligence conversation column directly to sessions 2026-10-20 12:19:40 +08:00
ji ruo a00e58a9bd fix: navigate intelligence to source sessions and related assets 2026-10-20 12:13:07 +08:00
ji ruo fb8c3cb6f4 fix: wrap intelligence table text and distinguish category colors 2026-10-20 11:43:24 +08:00
ji ruo bd787f8883 fix: display task intelligence content directly 2026-10-20 11:35:38 +08:00
ji ruo 14f3f1a805 fix(web): shrink empty remark columns in task lists 2026-10-20 11:31:05 +08:00
ji ruo ed7eda5e0c fix(intercept): default judge failure retries to three 2026-10-20 11:25:04 +08:00
ji ruo d70dd15e11 feat: add optional task intelligence recording and views 2026-10-20 11:16:04 +08:00
RuoJi6 e66789633a Merge pull request #25 from RuoJi6/codex/default-judge-failure-ask
fix(intercept): 模型失败默认转人工审批
2026-10-20 10:33:25 +08:00
ji ruo b2373b2b76 fix(intercept): default model failure policy to human approval 2026-10-20 10:31:06 +08:00
RuoJi6 b97472f992 Merge pull request #22 from RuoJi6/codex/fix-scheduled-task-manual-start
fix: 任务页手动启动不再被计划窗口立即暂停
2026-10-19 16:22:35 +08:00
ji ruo 093b2bd367 fix: preserve manual task starts outside schedule windows 2026-10-19 15:09:17 +08:00
ji ruo 79027eaf1d fix(demo): retry production version metadata verification 2026-10-19 10:18:34 +08:00
RuoJi6 36043c0ac1 Merge pull request #19 from RuoJi6/codex/task-remarks
feat: 支持任务与计划任务行内编辑备注
v0.3.22
2026-10-19 10:04:38 +08:00
ji ruo de7a668b32 feat: align list editors with name hover actions 2026-10-19 09:58:32 +08:00
ji ruo bdf0e68644 style: align schedule IDs with task list 2026-10-19 09:29:48 +08:00
ji ruo 316889f76a feat: add inline remarks for tasks and schedules 2026-10-19 09:17:59 +08:00
zabcxky-123andzabcxky-123 6c940f4403 fix: avoid skipping calendar windows that open after startup (#16)
Co-authored-by: zabcxky-123 <[email protected]>
2026-10-19 08:57:50 +08:00
r00t f5c99f4866 fix(skills): normalize API paths on Windows (#18) 2026-10-19 08:50:06 +08:00
RuoJi6 4bec88fc7f Merge pull request #14 from RuoJi6/codex/online-update-proxy
feat: 在线更新支持独立可选代理与统一设置界面
2026-10-19 08:43:41 +08:00
ji ruo 9d8598c91b docs(demo): link to the maintained production demo 2026-10-15 15:57:59 +08:00
ji ruo d2ff24d1af fix(demo): configure production domains through the project API 2026-10-15 15:55:50 +08:00
ji ruo 53d9f0d5d1 fix(demo): bind domain within the configured Vercel team 2026-10-15 15:50:43 +08:00
RuoJi6 db371be93c feat(demo): deploy published releases to Vercel (#15) 2026-10-15 15:47:03 +08:00
ji ruo 6a3d39e969 feat: add optional proxy for online updates 2026-10-15 15:44:55 +08:00
RuoJi6 e94a7d472b Merge pull request #13 from RuoJi6/codex/fix-llm-strict-rate-limit
fix: enforce strict LLM HTTP request rate limits
v0.3.21
2026-10-15 15:04:54 +08:00
RuoJi6 5f3a92a1f1 Merge pull request #12 from RuoJi6/codex/issue-7-approval-retry
fix: 支持模型审批失败重试
2026-10-15 15:04:45 +08:00
ji ruo 36eb5c5e89 fix: fill approval prompt editor card height 2026-10-15 14:58:51 +08:00
ji ruo bfc5e6236e fix: enforce strict LLM HTTP request rate limits 2026-10-15 14:53:33 +08:00
ji ruo d2e7e3a8a7 fix: add configurable model approval retries 2026-10-15 14:45:08 +08:00
RuoJi6 23446606a4 Merge pull request #9 from RuoJi6/codex/fix-http-packet-copy
fix: 保留 HTTP 报文选中复制时的空行
2026-10-13 17:35:03 +08:00
ji ruo b9b137dc91 fix: preserve blank lines when copying HTTP packets 2026-10-13 17:30:44 +08:00
RuoJi6 bd0ba56c82 Merge pull request #8 from RuoJi6/codex/fix-task-finding-counts
fix: 修复文件夹归并后任务列表等级数量显示为零
2026-10-13 16:10:12 +08:00