Releases: SecDev-Lab/wish
Releases · SecDev-Lab/wish
Release v0.7.0a1
PyPI Packages
This release includes the following packages on PyPI:
- wish-sh - Main meta package
- wish-cli - CLI interface
- wish-ai - AI capabilities
- wish-core - Core functionality
- wish-models - Data models
- wish-knowledge - Knowledge base
- wish-tools - Pentesting tools
- wish-c2 - C2 integration
Installation
pip install wish-sh==0.7.0a1Changelog
Added
Changed
Fixed
Removed
Release v0.7.0
PyPI Packages
This release includes the following packages on PyPI:
- wish-sh - Main meta package
- wish-cli - CLI interface
- wish-ai - AI capabilities
- wish-core - Core functionality
- wish-models - Data models
- wish-knowledge - Knowledge base
- wish-tools - Pentesting tools
- wish-c2 - C2 integration
Installation
pip install wish-sh==0.7.0Changelog
Added
Changed
- Complete rewrite with modern UI / architecture and improved AI integration
Fixed
Removed
Release v0.6.28
Added
- Added support for multiple command generation:
- Added ability to generate and return multiple command suggestions
- Added DEFAULT_TIMEOUT_SEC constant (60 seconds) for default command timeout
- Added strict validation to ensure all commands have timeout values set
Changed
- Refactored command generation system to support multiple commands:
- Changed GeneratedCommand class to use CommandInput objects instead of raw strings
- Updated GraphState to track multiple command candidates
- Modified result_formatter.py to process all command candidates
- Improved error handling with explicit exceptions instead of fallback commands
- Renamed generate_command to generate_commands throughout the codebase
Fixed
- Fixed timeout handling in command generation:
- Added proper timeout value validation in multiple components
- Ensured consistent timeout handling across the command generation pipeline
- Added assertions to fail fast when timeout values are missing
Removed
- Removed fallback command generation in error cases:
- Removed silent error handling in favor of explicit exceptions
- Removed automatic fallback to echo commands in error scenarios
Release v0.6.27
Added
- Added LLM-based variable replacement to command_modifier.py:
- Added variable replacement prompt for $RHOST, $TARGET_IP, and $LHOST variables
- Added robust context extraction for target and attacker information
- Added strict validation with assertions to fail fast when required values are missing
Changed
- Refactored variable replacement logic:
- Moved variable replacement from bash.py to command_modifier.py
- Enhanced RapidPen/rapidpen-act/app.py to include target and attacker information in context
- Improved error handling with explicit assertions for required environment variables
Fixed
Removed
- Removed _replace_variables method from bash.py:
- Removed direct variable replacement in command execution
- Removed related tests in test_bash_backend.py
- Consolidated variable replacement in command generation phase for better separation of concerns
Release v0.6.26
Added
Changed
Fixed
- Fixed test failures in wish-command-execution:
- Added missing
timeout_secparameter toexecute_commandmethod calls in test_bash_backend.py - Added
timeout_secparameter toexecute_commandmethod calls in test_command_executor.py - Updated
test_execute_commandsto useCommandInputobjects instead of string list
- Added missing
Removed
Release v0.6.25
Added
Changed
Fixed
- env names
Removed
Release v0.6.24
Added
Changed
Fixed
Removed
Release v0.6.23
Added
Changed
Fixed
Removed
- Fixed run_id prefix issue in wish-tools.
Release v0.6.22
Added
Changed
Fixed
- Fixed run_id prefix issue in wish-tools:
- Modified
post_step_tracefunction to add "Run-" prefix to run_id when sending API requests - Ensured consistency between implementation and test expectations
- Fixed failing tests in both unit and integration test suites
- Modified
Removed
Release v0.6.21
Added
Changed
Fixed
- Fixed error "'UtcDatetime' object has no attribute 'timestamp'" in step trace:
- Modified
_add_step_tracemethod inwish-command-execution/backend/bash.pyto use existing__sub__method - Used
timedelta.total_seconds()to calculate execution time instead of direct timestamp access - Improved code robustness by leveraging standard datetime operations
- Modified