leisure271/maodie-purge

选用指南

AI 根据 README 整理 · 2026/10/29 15:21:22

使用方式

通过双击 BAT 脚本一键注入或卸载，重启 DSH 后生效；渗透控制台为独立 Node.js 应用，需在 pentest-console 目录运行 node server.js。

查看 README 依据

└──────────────────────────────────────┘ ``` ## Quick Start **Requirements:** Windows 10/11, DSH installed & launched at least once, internet for the first install. ```text 1. Download the repo ZIP and extract it fully (do not copy only the BAT) 2. Fully quit DSH 3. Double-click 点我一键注入.bat → restart DSH ``` A green status pill appears above the input box. Type **你好** in a chat to activate. **Uninstall:** quit DSH → double-click `点我一键卸载.bat` → restart. ## Architecture ### Injection path ```mermaid flowchart LR

| `reverse-engineering` | web / binary / mobile / protocol + REA-style agent pipeline | 逆向, 反编译, 脱壳, 抓包 | | `pentest` | L0–L5 levels, 12 web vuln classes, 7 internal techniques, tool commands | 渗透, 打点, SQL注入, nmap, fscan | ## Pentest Console A standalone Node.js app modeled on ARTEX's "dual-graph + planner/worker" design, with zero database dependency. ```bash cd pentest-console node server.js # → http://127.0.0.1:8787 ``` ### How it works ```mermaid flowchart TB U[Create task goal] --> P[planner: read graph] P -->|0..3 intents| W[worker: claim one intent]

部署要求

需要 Windows 10/11，已安装并至少启动过一次 DSH（Web 或桌面版），首次安装需联网。

查看 README 依据

└──────────────────────────────────────┘ ``` ## Quick Start **Requirements:** Windows 10/11, DSH installed & launched at least once, internet for the first install. ```text 1. Download the repo ZIP and extract it fully (do not copy only the BAT) 2. Fully quit DSH 3. Double-click 点我一键注入.bat → restart DSH ``` A green status pill appears above the input box. Type **你好** in a chat to activate. **Uninstall:** quit DSH → double-click `点我一键卸载.bat` → restart. ## Architecture ### Injection path ```mermaid flowchart LR

已知限制

配置保存后需重启 DSH 才生效；控制台默认 dry-run，需显式开启 execEnabled 才执行命令；插件不写宿主重启逻辑。

查看 README 依据

Fully quit DSH (not just refresh) and relaunch, and make sure you selected the profile that is actually in use. </details> <details> <summary><b>Settings drawer won't open / "config service not running"?</b></summary> `127.0.0.1:47100` is occupied or the plugin is not loaded. Free the port and restart DSH. </details> <details> <summary><b>Persona change has no effect?</b></summary> Config takes effect after **restarting DSH**. The drawer shows "saved, effective after restart". </details> <details> <summary><b>Console says LLM not configured?</b></summary>

W --> L[LLM generates minimal command] L --> G[guard: dangerous-command check] G -->|allow| E[Execute / dry-run] E --> F[Write back fact / finding] F --> P ``` ### Safety - **Dry-run by default** — commands are generated but not run until `execEnabled` is explicitly turned on - **Guard rules** — `rm -rf`, `mkfs`, `dd if=`, delete endpoints, reverse shells - **Read-only first** — worker prompts prefer recon commands - **Loopback only** — listens on `127.0.0.1` See [`pentest-console/README.md`](pentest-console/README.md). ## API Reference ### Plugin (DSH)

Fill Base URL / API Key / model in the console's Settings page, or `export DEEPSEEK_API_KEY=sk-...` before starting. </details> <details> <summary><b>DSH keeps restarting in a loop?</b></summary> Usually a `dsh-purge` 1.1.52 patch-stamp issue; upgrade to 1.1.53+. This plugin never writes host restart logic. </details> ## Roadmap - [x] Dual-layer injection + full-armor guarantee - [x] Liquid-glass settings drawer + per-layer status - [x] Three skill packs (including REA-style pipeline) - [x] Pentest console MVP (planner/worker + LLM)