View Issue Details

IDProjectCategoryView StatusLast Update
0009910Kali LinuxNew Tool Requestspublic2026-10-21 10:01
Reportersurzvtrash Assigned To 
PrioritynormalSeverityminorReproducibilityhave not tried
Status newResolutionopen 
Summary0009910: Headless security-research orchestration harness packaged for Kali Linux
Description

== SHORT BLURB ==
Headless security-research orchestration harness packaged for Kali Linux: 150+ security tools indexed into a searchable vector registry, driven by an operator-supplied LLM through armed scope gates, with target data never leaving the operator's hardware. Full Debian packaging, 8 man pages, 118-test suite, GPL-3.
== SOURCE REPOSITORY ==
https://github.com/Surzal-kali/dadeb

== LONG DESCRIPTION ==
daharness is a headless orchestration harness for authorized security research. It grew from one design constraint: during engagements, operator and target data must stay on the operator's hardware. The harness therefore ships no conversation model and no cloud dependencies -- the operator supplies the driving LLM (via Open WebUI, MCP clients, or an API gateway) and the embeddings provider (Ollama-native or any OpenAI-compatible embedding endpoint). Its role is the ops and safety layer: it indexes, routes, gates, and records.

A registry of security tools is indexed into a Chroma vector store, so an operator's model discovers the right tool by intent instead of by menu. Every call passes a scope gate that binds execution to the engagement's authorized targets via rules-of-engagement manifests. Findings persist to a structured findings database; per-operator scratch and session stores stay identity-bound. Chroma runs as a supervised sidecar of the daemon and memory stays namespaced and local.

The project ships as a proper Kali Linux system package: FHS-compliant layout, systemd units, six CLI entry points (daharness, daharness-repl, daharness-kernel, daharness-index, daharness-pg, daharness-chroma), and eight roff man pages including a dedicated safety(7) page documenting the abuse boundary and egress posture.

== TECH FACT SHEET ==

  • Version: 0.1.0+pkg10 (Debian package, kali series)
  • Core: Python, ~3,900 LOC / 10 modules
  • Tests: 118 tests / 12 files, runnable on source AND deb lanes
  • Binaries: daharness, -repl, -kernel, -index, -pg, -chroma
  • Docs: 8 man pages (5x man1, 1x man5, 2x man7 incl. safety)
  • Registry: 150+ tools; 213 indexed on the packaged build
  • License: GPL-3.0-or-later
  • Validation: VM round trips incl. purge + reinstall, all green

== PACKAGING EXTRA DETAILS & DEFECT RESOLUTION ==
Ten packaging iterations across two days were validated by full virtual-machine round trips (install, operator onboarding, live use, purge, reinstall). The following packaging defects were uncovered and successfully fixed in pkg10:

  • Fixed pytest 9 cache directory usage error on the deb lane by redirecting cache to a per-user temp dir, resolving 22 latent packaging-only failures.
  • Resolved ghost-UID ownership issues where state under /var/lib/daharness was left orphaned after a purge; a reinstall now correctly re-mints identity and repairs ownership.
  • Fixed silent sidecar death for Chroma; it now runs as a supervised daemon sidecar that is readiness-checked and adopted properly.
  • Resolved boot-window and cleanup race conditions regarding process-remnant handling (msfrpcd detach flags and ZAP crash orphans).

Activities

surzvtrash

surzvtrash

2026-10-21 10:01

reporter   ~0022096

the original developer repository (which is probably outdated but the commit history is rich with proof i've maintained this project for some time) is https://github.com/Surzal-kali/daharness.git

Issue History

Date Modified Username Field Change
2026-10-21 10:00 surzvtrash New Issue
2026-10-21 10:01 surzvtrash Note Added: 0022096