dsh-pentester: A PTES Pentest Orchestration Plugin for DeepSeek Harness

What Does It Do?

dsh-pentester is a DSH plugin for DeepSeek Harness that implements PTES penetration testing with a Root-Orchestrator pattern. It solves the problem of fragmented pentest workflows and opaque stage progression, making DSH the single orchestrator that delegates parallel sub-agents for recon, exploitation, and reporting. Core capabilities include stage management, delegation control, Docker toolbox integration, and result aggregation, suitable for authorized security assessments.

Core Features

• Root-Orchestrator orchestration: the Root session acts as the sole decision-maker, identifying gaps, dispatching delegations, and deciding stage advancement or rollback.
• Stage management: supports the full PTES flow with advance/rollback tools to control stage topology.
• Parallel delegations: each delegation maps to a continuable child session; workers only execute container commands and write results to result.md.
• Docker toolbox: interacts with the Docker daemon via dockerode, supporting remote daemons and image whitelists.
• Multiple AgentProfiles: includes 7 specialized agents (impact, recon, reporting, threat-model, validation, vulnerability, web).
• Data panel and reports: provides dashboards, timeline topology, and stage output views, automatically merging sub-agent results into reports.

How to Use This Plugin?

After enabling the plugin in DSH, start a new or resumed session with pentester_start (mode: new | restart), and the Root injects run state. Use pentester_delegate to create delegations; sub-agents execute and update result.md. To adjust, cancel with pentester_cancel_delegation or switch stages with advance/rollback. Docker connection can be configured in the settings page, supporting local sockets or remote daemons.