mirror of
https://github.com/usestrix/strix.git
synced 2026-11-14 09:01:25 +00:00
cb581bf93d
* feat(sandbox): replace Semgrep with Opengrep and bundle offline rules * fix(sandbox): keep opengrep-rules LICENSE and drop proprietary-licensed rules * feat(sandbox): add Strix rule for GitHub-owned actions not pinned to a commit SHA * chore: bump sandbox image to 1.4.0 (opengrep) * fix(sandbox): resolve the gitleaks release tag without the GitHub API * fix(sandbox): install a pinned, sha256-verified trivy release
65 lines
1.6 KiB
Text
65 lines
1.6 KiB
Text
---
|
|
title: "Terminal"
|
|
description: "Bash shell for running commands and security tools"
|
|
---
|
|
|
|
Strix has access to a persistent bash terminal running inside the Docker sandbox. This gives the agent access to all [pre-installed security tools](/tools/sandbox).
|
|
|
|
## Capabilities
|
|
|
|
| Feature | Description |
|
|
| ----------------- | ---------------------------------------------------------- |
|
|
| Persistent state | Working directory and environment persist between commands |
|
|
| Multiple sessions | Run parallel terminals for concurrent operations |
|
|
| Background jobs | Start long-running processes without blocking |
|
|
| Interactive | Respond to prompts and control running processes |
|
|
|
|
## Common Uses
|
|
|
|
### Running Security Tools
|
|
|
|
```bash
|
|
# Subdomain enumeration
|
|
subfinder -d example.com
|
|
|
|
# Vulnerability scanning
|
|
nuclei -u https://example.com
|
|
|
|
# SQL injection testing
|
|
sqlmap -u "https://example.com/page?id=1"
|
|
```
|
|
|
|
### Code Analysis
|
|
|
|
```bash
|
|
# Fast SAST triage
|
|
opengrep scan --config /opt/opengrep-rules ./src
|
|
|
|
# Structural AST search
|
|
sg scan ./src
|
|
|
|
# Secret detection
|
|
gitleaks detect --source ./
|
|
trufflehog filesystem ./
|
|
|
|
# Supply-chain and misconfiguration checks
|
|
trivy fs ./
|
|
```
|
|
|
|
### Custom Scripts
|
|
|
|
```bash
|
|
# Run Python exploits
|
|
python3 exploit.py
|
|
|
|
# Execute shell scripts
|
|
./test_auth_bypass.sh
|
|
```
|
|
|
|
## Session Management
|
|
|
|
The agent can run multiple terminal sessions concurrently, for example:
|
|
|
|
- Main session for primary testing
|
|
- Secondary session for monitoring
|
|
- Background processes for servers or watchers
|