howmp/dsh-pentest
42Last commit Aug 15, 2026
dsh-pentest DSH plugin
dsh-pentest extends DeepSeek Harness with a full penetration testing workflow. It provides a domain model (goals, intents, facts, findings, assets, edges), eight custom tools, and a built-in Web UI with four tabs (exploration flow, vulnerabilities, assets, report). The plugin stores data in a dedicated SQLite database and operates within a single session scope.
How to install the dsh-pentest DSH plugin
dsh plugin --profile web add https://github.com/howmp/dsh-pentest/releases/latest/download/dsh-pentest.tar.gzCopying does not run this command. Review the repository and version before installing the dsh-pentest DSH plugin.
dsh-pentest DSH plugin data source
dsh-pentest DSH plugin snapshot date: Aug 16, 2026
discovered
What the dsh-pentest DSH plugin can do
- Record and track penetration testing goals, intents, facts, and findings with structured fields (e.g., reproducible steps for findings).
- Manage assets with parent-child relationships and view them in list or graph mode.
- Explore the attack chain via a graph visualization (@xyflow/react) with edge labels (spawns, yields, derived_from, proves).
- Generate a Markdown report with copy and save functionality.
- Use deterministic IDs (kind-n) for nodes and edges to enable cross-call references by the model.
Where the dsh-pentest DSH plugin fits
- Conduct authorized penetration tests and maintain a structured record of all steps.
- Track vulnerabilities with severity, description, reproducible steps, and affected assets.
- Reconstruct the attack flow from goals to findings for audit or reporting.
- Manage test assets (e.g., hosts, networks) and their relationships.
- Generate final reports in Markdown format for sharing with stakeholders.
Who the dsh-pentest DSH plugin is for
- Security penetration testers performing authorized assessments.
- Security auditors and compliance teams who need structured evidence.
dsh-pentest DSH plugin limitations
- Data is stored per-session (SQLite database); no cross-session or project continuation without creating a new goal.
- Graph layout is static (pan/zoom only, nodes not draggable).
- Only tested with authorized targets; the `authorization` field is an audit trail, not an access control gate.
- Requires DSH environment with the `web` profile and proper sandbox/deployment constraints.
dsh-pentest DSH plugin: from the repository README
Quoted from the howmp/dsh-pentest README, the upstream source of the dsh-pentest DSH plugin. Copyright remains with the original authors.
面向 [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness)（dsh）的渗透测试模式： 在授权范围内记录目标、探索线索、验证结果、资产与漏洞，并在 Web 中以探索链路、漏洞和资产视图展示。 本目录是自包含 bundle 包（`@howmp/dsh-pentest`）：宿主插件、Web 界面和 sqlite 后端通过包内 `exports` 一同分发。Release 资产可直接由 `dsh plugin add` 安装。 ## 安装 ### 从 Release URL 安装 ```powershell dsh plugin --profile web add https://github.com/howmp/dsh-pentest/releases/latest/download/dsh-pentest.tar.gz ``` ### 或下载后从本地文件安装 ```powershell dsh plugin --profile web add file:C:\path\to\dsh-pentest.tar.gz ``` 重启 dsh 后，在新会话中选择自动注册的「渗透模式」。 ## 界面预览 ### 模式选择  ### 对话与执行  ### 探索链路  ### 漏洞视图  ### 资产视图  ### 测试报告  ## 架构速览 - **领域模型**（`src/dsh-pentest/src/spec.ts`）：storage domain `pentest`（version 2）——`goals` / `intents` / `facts` / `findings` / `assets` / `edges` 六张表。边即链路词汇：`spawns`(goal→intent)、`yields`(intent→fact)、 `derived_from`(fact→intent)、`proves`(intent→finding)，资产关系用 `parent`(asset→asset)。finding 必填 `reproducibleSteps`（至少一条）。 - **确定性 id**（`store.ts`）：节点/边 id 为 `<kind>-<n>`（按会话计数，goal 重置后归零）——工具返回 id 供模型 跨调用引用，会话投影从
Read the full READMEThe repository declares no license. Check with the authors before using it.
dsh-pentest DSH plugin questions
How do I install dsh-pentest?
You can install it via `dsh plugin --profile web add` using the release URL or a local file path. For example: `dsh plugin --profile web add https://github.com/howmp/dsh-pentest/releases/latest/download/dsh-pentest.tar.gz`. After restarting dsh, select the 'Penetration Mode' from the new session.
Can I use dsh-pentest for unauthorized testing?
No. The plugin is designed for authorized penetration testing only. The `pentest_add_goal` tool has an optional `authorization` field to document the authorization, but it is an audit trail, not a technical gate. You must follow your organization's policies and legal requirements.
How do I view the attack flow graph?
After using the pentest tools, open the Web UI of dsh. In the 'Penetration Mode' session, you will see tabs including 'Exploration Flow'. It shows a graph with nodes (goals, intents, facts, findings) and edges labeled with relationships like spawns, yields, derived_from, and proves.
Can I export the test report?
Yes. The 'Report' tab generates a Markdown report. You can copy it to clipboard or save it as a file. The report includes goals, intents, findings, assets, and the attack chain.
Does dsh-pentest support cross-session data persistence?
No. Data is stored per session in a SQLite database (`pentest-sessions.db`). Each session starts fresh. To begin a new engagement, you must call `pentest_add_goal` again. There is no cross-session continuation.