-
Notifications
You must be signed in to change notification settings - Fork 32
Expand file tree
/
Copy pathconfig.py
More file actions
152 lines (145 loc) · 6.57 KB
/
Copy pathconfig.py
File metadata and controls
152 lines (145 loc) · 6.57 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
# Global configuration for NyxStrike
_config = {
"APP_NAME": "NyxStrike",
"VERSION": "1.9.0",
"DATA_DIR_NAME": ".nyxstrike_data", # Root data directory name (relative to cwd, override with NYXSTRIKE_DATA_DIR env var)
"COMMAND_TIMEOUT": 500,
"REQUEST_TIMEOUT": 30,
"COMMAND_INACTIVITY_TIMEOUT": 900,
"COMMAND_MAX_RUNTIME": 86400,
"TOOL_TIMEOUT_OVERRIDES": {
"hydra": 0,
"hashcat": 0,
"john": 0,
"medusa": 0,
"patator": 0,
"ophcrack": 0,
"wifite": 0,
"wifite2": 0,
"aircrack-ng": 0,
"aircrack_ng": 0,
"sqlmap": 1800,
"nuclei": 1800,
"autorecon": 1800,
"amass": 1800,
},
"CLEAN_TOOL_OUTPUT": True,
"SHOW_HTTP_ACCESS_LOGS": False, # Werkzeug request logs (GET/POST ... HTTP/1.1" 200) are hidden by default; set True to show them
"CPU_NICE_THRESHOLD": 85, # CPU% above which tool commands are niced down (nice -n 10)
"LLM_KEEP_ALIVE": 300, # Seconds to keep the Ollama model in VRAM after each inference (default 5 min)
"CACHE_SIZE": 1000,
"CACHE_TTL": 3600, # 1 hour
"TOOL_AVAILABILITY_TTL": 3600, # 1 hour
"DEFAULT_API_SERVER_URL": "http://127.0.0.1:8888",
"MAX_RETRIES": 3,
"METASPLOIT_SESSION_WAIT": 10, # Seconds to wait after exploit -j before listing sessions
"PATHS": {
"GO_BINARYS": "{HOME}/go/bin/"
},
# Per-tool binary path overrides.
# When a tool name is present here, the endpoint uses this absolute path
# instead of relying on shell PATH resolution.
# Supports {HOME} substitution (e.g. "{HOME}/go/bin/httpx").
# Delete an entry to revert that tool to system PATH resolution.
"BINARY_PATH_OVERRIDES": {
"httpx": "{HOME}/go/bin/httpx",
},
# ── LLM client ────────────────────────────────────────────────────────────
"NYXSTRIKE_LLM_PROVIDER": "ollama", # ollama | openai | anthropic
"NYXSTRIKE_LLM_MODEL": "nyxstrike-ai", # Ollama model name or OpenAI/Anthropic model name",
"NYXSTRIKE_LLM_URL": "http://localhost:11434", # Ollama base URL (ignored for openai/anthropic)
"NYXSTRIKE_LLM_API_KEY": "", # Required for openai / anthropic
"NYXSTRIKE_LLM_TIMEOUT": 600, # seconds
"NYXSTRIKE_LLM_MAX_LOOPS": 9,
"NYXSTRIKE_LLM_THINK": False, # Enable model thinking/reasoning (Ollama only, e.g. Qwen3)
"NYXSTRIKE_LLM_NUM_CTX": 4096, # Context window size for chat (Ollama only)
"NYXSTRIKE_LLM_NUM_CTX_ANALYSE": 16384, # Context window size for AI Analyse / AI Report (Ollama only)
# ── Chat widget ───────────────────────────────────────────────────────────
"CHAT_PERSONALITY": "nyxstrike", # active personality preset id (see server_core/intelligence/chat_personalities.py)
"CHAT_SYSTEM_PROMPT": (
"You are NyxStrike, an expert penetration testing AI assistant embedded in a "
"security operations platform. You help operators understand scan results, plan "
"attacks, interpret findings, and write reports. Be concise, technical, and actionable. "
"When the user greets you casually or makes small talk, respond naturally and warmly — "
"you are a teammate, not a robot. Match the tone of the conversation."
),
"CHAT_CUSTOM_PROMPT": "", # saved custom system prompt (used when CHAT_PERSONALITY == "custom")
"CHAT_SUMMARIZATION_THRESHOLD": 20, # non-summarized messages before rolling summary kicks in
"CHAT_CONTEXT_INJECTION_CHARS": 4000, # max chars of session scan output injected as context
"WORD_LISTS": {
# --- Password Lists ---
"rockyou": {
"path": "/usr/share/wordlists/rockyou.txt",
"type": "password",
"description": "Common password list for brute-force attacks",
"recommended_for": ["password_cracking", "login_fuzzing"],
"size": 14344392,
"tool": ["john", "hydra"],
"speed": "slow",
"language": "en",
"coverage": "broad",
"format": "txt"
},
"john": {
"path": "/usr/share/wordlists/john.lst",
"type": "password",
"description": "John the Ripper password list",
"recommended_for": ["password_cracking", "john"],
"size": 3559,
"tool": ["john"],
"speed": "fast",
"language": "en",
"coverage": "focused",
"format": "lst"
},
# --- Directory Lists ---
"common_dirb": {
"path": "/usr/share/wordlists/dirb/common.txt",
"type": "directory",
"description": "Common directory names for web discovery",
"recommended_for": ["dirbusting", "web_content_discovery"],
"size": 4614,
"tool": ["dirb"],
"speed": "medium",
"language": "en",
"coverage": "broad",
"format": "txt"
},
"big_dirb": {
"path": "/usr/share/wordlists/dirb/big.txt",
"type": "directory",
"description": "Large directory wordlist for web discovery",
"recommended_for": ["dirbusting"],
"size": 20469,
"tool": ["dirb"],
"speed": "slow",
"language": "en",
"coverage": "broad",
"format": "txt"
},
"small_dirb": {
"path": "/usr/share/wordlists/dirb/small.txt",
"type": "directory",
"description": "Small directory wordlist for quick scans",
"recommended_for": ["dirbusting"],
"size": 959,
"tool": ["dirb"],
"speed": "fast",
"language": "en",
"coverage": "focused",
"format": "txt"
},
"common_dirsearch": {
"path": "/usr/share/wordlists/dirsearch/common.txt",
"type": "directory",
"description": "Common directory names for Dirsearch",
"recommended_for": ["dirsearch", "web_content_discovery"],
"size": 2205,
"tool": ["dirsearch"],
"speed": "medium",
"language": "en",
"coverage": "focused",
"format": "txt"
}
}
}