mirror of
https://github.com/usestrix/strix.git
synced 2026-08-20 18:38:57 +02:00
Ahmed Allam
8169e177de
Skills and the agent system prompt referenced external CLIs that are not present in containers/Dockerfile, which could lead the agent to invoke missing binaries. Replace them with installed equivalents: - asset_discovery: drop amass/cero and the projectdiscovery tools that are not installed (tlsx/dnsx/asnmap/mapcidr/uncover); rewrite around the installed subfinder/httpx/naabu plus curl+jq (crt.sh), openssl s_client, dig, and whois. Stop claiming the full projectdiscovery suite is available. - subdomain_takeover: replace dnsx with dig in the pipeline example. - weak_password_detection: drop hydra/cewl/patator; use ffuf for web logins and nmap NSE *-brute scripts for services; fix dead /usr/share/wordlists and /usr/share/seclists paths (nothing ships by default -> download to /home/pentester/tools/wordlists at runtime). - system_prompt: replace msfconsole with sqlmap in the interactive-process example. active_directory skill is left as-is: it already ships an explicit install block for its tools.