← Back to list

dsh-redteam-mode

DeepSeek Harness Other Low risk

Red-team engagement mode: send one target organization name and a planner session runs a five-role execution team (recon, asset triage, vulnerability discovery, exploitation, internal pivot) at up to three concurrent agents, preflight-checking skills and resources and asking once for any missing key or VPS first, guided by a built-in first-run onboarding skill; scoring follows the merged intrusion scoring rules (8 categories / 25 points) with server-side caps, highest-privilege-wins and per-service dedup, and self-registered accounts never score; findings land in a local SQLite fact base with discovery timestamps, shown in a persistent right-side console of 12 tabs (asset mapping with a discovery timeline, agent roster, session/tunnel state, five-stage attack chain, scoring targets, a report that spells out how each score was obtained — actions, exact commands, credential provenance, tunnel build commands — a category-organised POC/EXP knowledge base and a skill library with per-skill usability verdicts); ships 23 native skills, 53 redteam_* tools and one-command self-update.

红队作战模式:只发一个靶标单位名称,主会话指挥五个执行角色(信息收集/资产梳理/漏洞发现/漏洞利用/内网渗透)推进演练,并发上限 3 个,开工前先做技能与资源预检、缺 key 或 VPS 一次性向用户要齐(内置首次使用引导技能);得分严格对齐《突破入侵类得分规则(合并版)》的 8 类 25 项,上限、权限取高只计一次、同一服务只算一次全由服务端判定,自建账号不计分;所有发现落入本机 SQLite 事实库并带发现时间,常驻右侧控制台 12 个页签提供资产测绘(含发现时间线)、智能体名额、会话隧道、五阶段攻击链、得分目标、逐条写明「怎么拿到的」的可复现报告(动作、实际命令、账号密码来源、隧道搭建命令)、按归类组织的跨靶标 POC/EXP 知识库与带可用性判定的技能库;随包 23 个原生技能、53 个 redteam_* 工具与一键自更新。

How to install

DeepSeek Harness dsh plugin add github:Jueze-2019/dsh-redteam-mode/tree/main/packages/redteam-bundle

Recommendation signals

52 Tool quality · Based on stars, downloads, maintenance, security and docs
User interest · Adjusted by in-site views, install copies and download clicks
52 Overall
0views
0unique visitors
0install copies
0download clicks
0outbound clicks

Meta

License
MIT
Language
JavaScript
GitHub stars
9
mo. downloads
Last push
2026-09-21
Created
2026-09-10

Links

GitHub ↗ Report issue ↗

Basic safety check

Findings
curated 收录但无 npm 包/安装命令
Sources
curated:awesome-dsh-plugin.com
Topics
ai-agent, attack-surface, deepseek-harness, penetration-testing, redteam, security-tools, sqlite

Related plugins

DeepSeek Harness
Score78

dsh-auto-review

PerryLink/dsh-auto-review

Second-model auto-review on the approval answerer chain: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default.

☆ 192 ↓ 4.9K Other
DeepSeek Harness
Score75

dsh-passwords

slywalker2006/dsh-passwords

Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.

☆ 63 ↓ 5.2K Other
DeepSeek Harness Featured
Score73

dsh-web-startup-auth

GDWhisper/dsh-web-startup-auth

Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.

☆ 47 ↓ 2.8K Other
DeepSeek HarnessMCP Server Featured
Score73

sofagent

KongFangXun/sofagent/tree/main/engine/dsh-plugins/cordis-plugin-sofagent-audit

Commit-time audit harness for AI coding agents: 24 git-diff rules (secrets, out-of-scope edits, prompt injection), HMAC-signed audit trail, snapshot rollback, and an MCP server with 84 tools. Installable via dsh plugin add.

☆ 47 ↓ 2.7K Other