Plugin directory / Developer / dsh-pentester
dsh-pentester
Unverified fb0sh
What it does
A plugin in the Developer category for DeepSeek Harness.
Unverified — not yet verified
A plugin in the Developer category for DeepSeek Harness. Not yet verified — install and test it yourself.
“Unverified” means our automated CI has not yet installed this plugin. Feature descriptions and version compatibility are the author’s claims. This is not a security audit and not an endorsement of third-party code.
README
dsh-pentester
面向 DeepSeek Harness 的最小化 Root-Orchestrator PTES 渗透测试插件。
唯一事实来源是 docs/plan.md；架构视图见 docs/architecture.md，磁盘布局见 docs/workspace.md，领域术语见 CONTEXT.md。
心智模型
User ⇄ DSH Root Session（pentester persona preset）
→ Root 是唯一 Orchestrator：判断缺口、派发 Delegation、决定推进/回溯阶段
→ Root 工具面 4 个：pentester_delegate / pentester_cancel_delegation /
pentester_advance_stage / pentester_rollback_stage
→ Root 每次 reasoning 前注入 compact run state（target/branch/stage/delegations）
Delegation（并行多个）= 各一个 DSH child session（AgentProfile + 不可变 task_prompt）
→ Worker 工具只有 pentester_container_exec（dockerode；Root 不可见）
→ Worker 写完 result.md 即完成任务（完成标志）；缺失 → failed
Deliverable = 文件（workspace/stages/<NN>-<stage>/delegations/D-00N/）
准备
安装deepseek harness
npm install -g @deepseek-ai/dsh
准备docker镜像
docker pull fb0sh/dsh-pentester-kali:1.0.0
安装
# npm 源
dsh plugin --profile web add [email protected]
# github 源
dsh plugin --profile web add github:fb0sh/dsh-pentester
安装后需要重启dsh
布局
| 目录/文件 | 职责 |
|---|---|
src/ |
model/stages/profiles/store、workspace/git、dsh/delegations/tools/worker-tools、docker/（host/connection/images/runtime）、rpc/settings-store、index |
src/ui/client/ |
Settings 的 “Pentester Config” 页（Tab：Docker Engine） |
agents/*/profile.yml |
7 个 AgentProfile（systemPrompt/skills/mcpServers） |
docker/ |
Toolbox Dockerfile（kali 等，镜像白名单来源） |
presets/pentester/ |
Root persona preset + run-state.mjs（工具面限制 + 动态状态注入） |
开发
pnpm run check # typecheck + build（含 client bundle）
pnpm test # node --test
Docker host 优先级：Settings（settings.json）> 插件配置 > 本地 socket 自动发现 > DOCKER_HOST > 默认 socket。本地 Docker 用 bind mount（host workspace == 容器 /workspace）；远程 daemon 用共享 volume，阶段边界才做 mirror sync。
Install
Install the catalog once, then DeepSeek Harness can find and install any plugin from this site automatically:
dsh plugin add dshbase-catalogThen say "install dsh-pentester for me" — your agent finds it in the directory and installs it. Docs: dshbase-catalog · verified packs.
This plugin is GitHub source (not published to npm) — install it straight from the repo:
Web profile:
dsh plugin --profile web add github:fb0sh/dsh-pentesterHeadless (CLI) profile:
dsh plugin --profile headless add github:fb0sh/dsh-pentesterTest report
Not yet L3-verified — see failure note below if we already ran it.
Note: No failure note yet — queued or not yet run. Browse all pending failures →
Share this badge
Drop this badge into your README — it links back here and updates automatically when our test status changes:
[](https://dshbase.com/plugins/dsh-pentester/)<a href="https://dshbase.com/plugins/dsh-pentester/"><img src="https://dshbase.com/badges/dsh-pentester.svg" alt="dshbase listed"></a>