dsh-pentester
PTES-based penetration testing plugin with Root-Orchestrator architecture for DeepSeek Harness.
基于 PTES 的渗透测试插件，采用 Root-Orchestrator 架构，用于 DeepSeek Harness。
How to install
dsh plugin add dsh-pentester About
dsh-pentester 面向 DeepSeek Harness 的最小化 Root-Orchestrator PTES 渗透测试插件。 **唯一事实来源是 docs/plan.md**；架构视图见 docs/architecture.md，磁盘布局见 docs/workspace.md，领域术语见 CONTEXT.md。 欢迎提交issues和PR。 详细英文文档见 docs/README.md。 心智模型 User ⇄ DSH Root Session（pentester persona preset） → Root 是唯一 Orchestrator：判断缺口、派发 Delegation、决定推进/回溯阶段 → Root 工具面 5 个：pentester_start / pentester_delegate / pentester_cancel_delegation / pentester_advance_stage / pentester_rollback_stage → pentester_start 是唯一 bootstrap 入口（mode: new | restart） → Root 每次 reasoning 前注入 compact run state（target/branch/stage/delegations） Delegation（并行多个）= 各一个 D…
Recommendation signals
Meta
- License
- NOASSERTION
- Language
- TypeScript
- GitHub stars
- 6
- mo. downloads
- –
- Last push
- 2026-08-28
- Created
- 2026-08-19
Basic safety check
- Findings
- None
- Sources
- curated:awesome-dsh-plugin.com, curated:awesome-dsh-plugin/awesome-dsh-plugin
- Topics
- deepseek-harness, docker, dsh-plugin, dsh-plugins, kali, kali-linux, multi-agent, pentest, pentester, ptes, recon, vulnerability
Related plugins
dsh-permission-rules
PerryLink/dsh-permission-rules
Claude Code-style declarative permission rules: ordered allow/deny/ask YAML rules matching tool names, arguments, workspace paths, and agent identity on the tools/pre-execute waterfall, with full session-log audit, dry-run mode, and hot reload.
dsh-passwords
slywalker2006/dsh-passwords
Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.
dsh-plugin-vetting
truelove-dreamer/dsh-plugin-vetting
Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obfuscation, persistence) and over-privileged path use, transitive-dependency coverage, official-package hash baseline for supply-chain tamper detection, and an optional plugin-tool call gate.
dsh-webui-auth
Yuuz12/dsh-webui-auth
WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.