dsh-redteam-mode
Red-team engagement mode: send one target organization name and a planner session runs a five-role execution team (recon, asset triage, vulnerability discovery, exploitation, internal pivot) at up to three concurrent agents, preflight-checking skills and resources and asking once for any missing key or VPS first, guided by a built-in first-run onboarding skill; scoring follows the merged intrusion scoring rules (8 categories / 25 points) with server-side caps, highest-privilege-wins and per-service dedup, and self-registered accounts never score; findings land in a local SQLite fact base with discovery timestamps, shown in a persistent right-side console of 12 tabs (asset mapping with a discovery timeline, agent roster, session/tunnel state, five-stage attack chain, scoring targets, a report that spells out how each score was obtained — actions, exact commands, credential provenance, tunnel build commands — a category-organised POC/EXP knowledge base and a skill library with per-skill usability verdicts); ships 23 native skills, 53 redteam_* tools and one-command self-update.
红队作战模式:只发一个靶标单位名称,主会话指挥五个执行角色(信息收集/资产梳理/漏洞发现/漏洞利用/内网渗透)推进演练,并发上限 3 个,开工前先做技能与资源预检、缺 key 或 VPS 一次性向用户要齐(内置首次使用引导技能);得分严格对齐《突破入侵类得分规则(合并版)》的 8 类 25 项,上限、权限取高只计一次、同一服务只算一次全由服务端判定,自建账号不计分;所有发现落入本机 SQLite 事实库并带发现时间,常驻右侧控制台 12 个页签提供资产测绘(含发现时间线)、智能体名额、会话隧道、五阶段攻击链、得分目标、逐条写明「怎么拿到的」的可复现报告(动作、实际命令、账号密码来源、隧道搭建命令)、按归类组织的跨靶标 POC/EXP 知识库与带可用性判定的技能库;随包 23 个原生技能、53 个 redteam_* 工具与一键自更新。
How to install
dsh plugin add github:Jueze-2019/dsh-redteam-mode/tree/main/packages/redteam-bundle Recommendation signals
Meta
- License
- MIT
- Language
- JavaScript
- GitHub stars
- 9
- mo. downloads
- –
- Last push
- 2026-09-21
- Created
- 2026-09-10
Links
Basic safety check
- Findings
- curated 收录但无 npm 包/安装命令
- Sources
- curated:awesome-dsh-plugin.com
- Topics
- ai-agent, attack-surface, deepseek-harness, penetration-testing, redteam, security-tools, sqlite
Related plugins
dsh-auto-review
PerryLink/dsh-auto-review
Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
dsh-web-startup-auth
GDWhisper/dsh-web-startup-auth
Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.
sofagent
KongFangXun/sofagent/tree/main/engine/dsh-plugins/cordis-plugin-sofagent-audit
Commit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 84 tools. Installable via dsh plugin add.