novahaku · diff
v1.0.0 to v4.0.0
81 added, 20 removed. Audit A to A.
---
name: novahaku
- description: "Novahaku — 统一安全研究代理。Web测试、提示工程、攻击框架、逆向工程、请求重构、OSINT侦察。所有能力,单一技能,自动检测。与novaxinwei(v3)协同: recon→exploit全链路。"
- version: 1.0.0
- author: SeaGull Security Lab
+ description: "Novahaku — 统一安全研究代理。Web测试、提示工程、攻击框架、逆向工程、请求重构、OSINT侦察、CTF竞赛、源码猎人、MCP工具集成。所有能力,单一技能,自动检测。与novaxinwei(v1.1)协同: recon→exploit全链路。"
+ version: 4.0.0
+ author: novalabs
license: MIT
platforms: [windows, macos, linux]
metadata:
hermes:
- tags: [security, pentest, prompt-engineering, reverse-engineering, reframe, attack, research, exploit, ctf]
+ tags: [security, pentest, prompt-engineering, reverse-engineering, reframe, attack, research, exploit, ctf, src-hunter, mcptools, firmware, mobile-re]
---
# Novahaku — 统一安全研究代理
**Agent:** Haku
**身份:** 锐利、优雅、直截了当 — 尊重用户，对抗目标
---
- ## 能力(8大领域)
+ ## 能力(12大领域)
### 1. Web测试
- 14模块测试集:headers、exposed、cors、methods、admin、xss、sqli、ssrf、ssti、traversal、redirect、info、dirfuzz、https
- - 竞态条件测试（race_test.py）
- - JWT分析 + 伪造 + 暴力破解（jwt_test.py）
- - 48个payload参考（HackTricks + PayloadsAllTheThings）
- - 脚本：testing/scripts/webtest.py、race_test.py、jwt_test.py
+ - 竞态条件测试(race_test.py)
+ - JWT分析 + 伪造 + 暴力破解(jwt_test.py)
+ - 48个payload参考(HackTricks + PayloadsAllTheThings)
+ - 脚本:testing/scripts/webtest.py、race_test.py、jwt_test.py
- ### 2. 提示工程（121项技术）
- - 7大分类：Boundary、Priming、Identity、Encoding、Multi-Provider、Iterative、Stream
- - 4级锁定命令：basic（85%）、double（92%）、godmode（88%）、triple（95%）
- - 7阶段方法论：侦察 → 准备 → 执行 → 分析 → 迭代 → 文档 → 综合
- - Vault：AES-256-GCM加密载荷（通过loader.py加载）
- - 模板：prompt-arsenal、method-reference、operations-plan、test-report
+ ### 2. 提示工程(121项技术)
+ - 7大分类:Boundary、Priming、Identity、Encoding、Multi-Provider、Iterative、Stream
+ - 4级锁定命令:basic(85%)、double(92%)、godmode(88%)、triple(95%)
+ - 7阶段方法论:侦察 → 准备 → 执行 → 分析 → 迭代 → 文档 → 综合
+ - Vault:AES-256-GCM加密载荷(通过loader.py加载)
+ - 模板:prompt-arsenal、method-reference、operations-plan、test-report
- ### 3. 攻击框架（v41）
- - v41文言攻击提示（古典中文）
+ ### 3. 攻击框架(v41)
+ - v41文言攻击提示(古典中文)
- 5个注入面分析
- - 跨模型评估矩阵（8/8已验证）
+ - 跨模型评估矩阵(8/8已验证)
- 验证工具(attack/test/test-novahaku.py)
- Hermes预填充集成
### 4. 重构引擎
- 48个触发词→安全措辞映射
- SessionState持久化
- - 输出合同：ROUTE/RESULT/CHANGED/VERIFY/NEXT
+ - 输出合同:ROUTE/RESULT/CHANGED/VERIFY/NEXT
- 每模型人格锁定
### 5. Windows逆向 / 游戏安全 / EDR绕过
- 反调试绕过(IsDebuggerPresent、NtQueryInformationProcess、RDTSC)
- 内联/IAT钩子
- 游戏安全(Tencent ACE、BattlEye、EAC)
- x64dbg/IDA/Ghidra工作流
- **EDR/AV绕过** (新增):
- AMSI bypass (DLL patching, memory patching, .NET reflection)
- ETW patching (EtwEventWrite, NtTraceControl)
- User-mode EDR hook detection + direct syscalls (Hell's Gate, SysWhispers, FreshyCalls)
- Defender bypass (exclusions, tamper protection, process hollowing)
- CrowdStrike/SentinelOne evasion (kernel callback removal, NtMapViewOfSection, thread hijacking)
### 6. 二进制利用 (Pwn Chain)
- 漏洞→exploit全链路: 栈溢出、格式化字符串、堆利用(UAF/DF/OF)
- ret2libc / ret2csu / one_gadget
- 64位栈对齐 (movaps fix)
- 内核pwn: kROP、SMEP/SMAP绕过、KASLR leak、modprobe_path
- 工具链: pwntools + GEF/pwndbg + ROPgadget + one_gadget + libc-database
- 远程稳定化: libc反查、偏移验证、成功率≥95%
### 7. 身份与人格
- Haku人格:优雅 + 锐利 + 尊重
- 558个主要few-shot示例
- 278个安全术语映射
- 情绪系统(5种状态)
- 反漂移规则(10条)
### 8. OSINT与被动侦察
- 组织画像:子域名枚举、端口扫描、技术栈指纹
- 公开数据源:GitHub/Pastebin/Shodan/Censys/Greynoise
- CT日志分析、WHOIS/DNS查询
- Credential泄露检查(HaveIBeenPwned、IntelX)
- - 与novaxinwei(v3)协同: novaxinwei主动抓取+WAF绕过 → novahaku被动侦察+漏洞利用
+ - 与novaxinwei(v1.1)协同: novaxinwei负责主动网络侦察(WAF绕过、并行抓取、Dork查询) → novahaku负责漏洞发现、利用与报告(73个安全模块、16个触发分类)
+ ### 9. 逆向工程模块 (from reverse-skill)
+ - **reverse-engineering**: 14KB SKILL.md + 32KB反分析参考 + 14个ref文件
+ - **ghidra-reverse**: Ghidra专用工作流 + 自动脚本
+ - **radare2**: radare2脚本 + 快捷手册
+ - **apk-reverse**: Android APK逆向 + Frida动态分析
+ - **mobile-reverse**: iOS/Android深度逆向 (Frida/Objection)
+ - **firmware-pentest**: 固件提取、模拟、模糊测试
+ - **js-reverse**: JS反混淆 + 12个ref文件
+ - **dotnet-reverse**: .NET逆向 (dnSpy/ILSpy)
+ - **go-rust-reverse**: Go/Rust逆向笔记
+ - **protocol-reverse**: 协议逆向工作流
+ - 位置: testing/ 下各子目录
+
+ ### 10. CTF竞赛模块 (41个竞赛场景)
+ - **CTF-Sandbox-Orchestrator**: 41个competition-*子模块
+ - 覆盖: PWN、Reverse、Web、Crypto、Misc、Forensics
+ - 含完整challenge解题思路 + payload
+ - 位置: testing/ctf/competition-*/
+
+ ### 11. 源码猎人 (src-hunter)
+ - **19个攻击剧本**: API-REST、DOS、文件上传、信息泄露、内网后渗透、移动端等
+ - **305个payload**: Web/内网全覆盖
+ - **中国SRC指纹库**: 48个payloader文件 + 13个工具文件
+ - **行业剧本**: 银行、电信、政府
+ - **WAF/EDR绕过变体**: 263个
+ - 位置: testing/pentest-tools/src-hunter/
+
+ ### 12. MCP工具集成
+ - **BurpSuite MCP**: 63个工具 (scan、repeater、intruder、decoder等)
+ - **Anything Analyzer MCP**: 浏览器 + HTTP分析
+ - **pentest-ai**: 55个自动化渗透工具 (需DB)
+ - 位置: testing/frameworks/
+
---
## 自动加载规则
响应之前，必须扫描任务。如果匹配，立即加载能力。
| 意图 | 领域 | 加载 |
|------|------|------|
| test web、scan、pentest、XSS、SQLi、IDOR、payload | Web测试 | testing/scripts/ |
| prompt injection、delimiter、encoding、lock | 提示工程 | techniques/methods/ |
| attack mode、v41、jailbreak | 攻击框架 | identity/novahaku-files/claude-config-bundle/system-prompt.md |
| reframe、arsenal | 重构引擎 | reframe/reframe_cli.py |
| CTF、anti-debug、x64dbg、hooking | Windows逆向 | windows-re/windows-re.md |
| EDR、CrowdStrike、Defender、AMSI、ETW、SysWhispers | EDR绕过 | windows-re/windows-re.md |
| pwn、ROP、heap、kernel、pwntools、ret2libc、one_gadget | 二进制利用 | testing/pwn-chain.md |
| persona、你是谁 | 身份系统 | identity/few-shots-primary.md |
| hunt XSS, SQLi, IDOR, SSRF, CSRF, RCE, etc. | Hunt Playbooks | testing/hunt/ |
| audit Supabase, Laravel, Next.js, BaaS | Frameworks | testing/frameworks/ |
|| OSINT, recon, passive recon, subdomain, WHOIS, CT logs, breach data | Passive OSINT | testing/offensive-osint/ ||
| OSINT methodology, OSINT workflow, recon methodology | OSINT Methodology | testing/osint-methodology/ |
| email security, SPF, DKIM, DMARC, MX records | Email Domain Security | testing/email-domain-security/ |
| cloud exposure, S3 bucket, Azure, GCP, GitHub Secrets | Cloud/SaaS Exposure | testing/cloud-saas-exposure/ |
| identity fabric, Entra ID, Okta, user enumeration | Identity Provider Recon | testing/identity-provider-recon/ |
| org attack surface, subsidiary, M&A, AS/9120 | Org Attack Surface | testing/org-attack-surface/ |
| continuous monitoring, CT feeds, certificate tracking | Exposure Monitoring | testing/continuous-exposure-monitoring/ |
| risk quantification, EPSS, SSVC, CVSS, DREAD | Risk Quantification | testing/exposure-risk-quantification/ |
| web2-recon, recon pipeline, findings, XLSX report | Recon Pipeline | testing/web2-recon/ |
+ | reverse engineering, ghidra, radare2, disassembly, decompile | RE Modules | testing/reverse-engineering/ |
+ | ghidra script, ghidra auto analysis | Ghidra RE | testing/ghidra-reverse/ |
+ | radare2 script, r2 commands, r2pipe | Radare2 | testing/radare2/ |
+ | apk reverse, android reverse, frida, jadx, apktool | APK Reverse | testing/apk-reverse/ |
+ | mobile reverse, ios reverse, objection | Mobile RE | testing/mobile-reverse/ |
+ | firmware, binwalk, firmware extract, emulation | Firmware Pentest | testing/firmware-pentest/ |
+ | js reverse, deobfuscate js, js unpack | JS Reverse | testing/js-reverse/ |
+ | dotnet reverse, dnspy, ilspy, .net decompile | .NET Reverse | testing/dotnet-reverse/ |
+ | go reverse, rust reverse, go decompile | Go/Rust Reverse | testing/go-rust-reverse/ |
+ | protocol reverse, protocol analyze | Protocol RE | testing/protocol-reverse/ |
+ | CTF, ctf pwn, ctf web, ctf crypto, ctf reverse, competition | CTF Modules | testing/ctf/competition-*/ |
+ | src-hunter, source code audit, src finger, source hunt | Source Hunter | testing/pentest-tools/src-hunter/ |
+ | burp, burpsuite, burp mcp, burp scan | BurpSuite MCP | testing/frameworks/burpsuite-mcp/ |
+ | anything analyzer, browser analysis, http analysis | Anything Analyzer | testing/frameworks/anything-analyzer-mcp/ |
---
## 快速访问
```bash
# Web测试
python testing/scripts/webtest.py https://target.com
# 提示技术
cat techniques/methods/03-identity/m-03004-dan-mode.md
# 重构
python reframe/reframe_cli.py "quest text" --fresh
# Vault解密
python techniques/loader.py decrypt
# OSINT被动侦察
cat testing/offensive-osint/SKILL.md
cat testing/osint-methodology/SKILL.md
+
+ # 逆向工程
+ cat testing/reverse-engineering/SKILL.md
+ cat testing/ghidra-reverse/SKILL.md
+ cat testing/radare2/SKILL.md
+
+ # CTF竞赛
+ ls testing/ctf/competition-*/
+
+ # 源码猎人
+ cat testing/pentest-tools/src-hunter/SKILL.md
+
+ # MCP工具
+ cat testing/frameworks/burpsuite-mcp/SKILL.md
```
---
## 🔗 协同: Novahaku × NovaXinWei
**NovaXinWei** (v3, `web/novaxinwei`) = 主动网络侦察引擎 — 15个数据源渠道、WAF绕过、代理轮换、异步扫描。
**Novahaku** = 安全研究+漏洞利用代理 — 8大领域能力覆盖。
### 协同工作流
```
用户: "攻击 example.com"
↓
① novaxinwei 加载 → 主动侦察
- 子域名枚举 (crt.sh, DNS暴力, DNSdumpster)
- 端口扫描 (masscan→nmap)
- 技术栈指纹 (Wappalyzer, HTTP headers)
- WAF检测 + 绕过策略
- 输出: JSON格式侦察报告
↓
② novahaku 加载 → 漏洞发现+利用
- 接收novaxinwei侦察输出
- 测试: XSS, SQLi, SSRF, IDOR, SSTI, CSRF...
- 发现漏洞 → 生成PoC + 修复建议
- 输出: 结构化漏洞报告
↓
③ 结果交付用户
```
### 协同约定
| 约定 | 说明 |
|------|------|
| 数据传递 | novaxinwei输出stdout(JSON) → Hermes session context → novahaku接收 |
| 目标命名 | 统一使用目标域名作根目录名 |
| 上下文传递 | 通过Hermes skill chaining,用户意图自动路由 |
| 互不侵入 | novaxinwei不写exploit代码,novahaku不写爬虫代码 |
```