Umhlahlandlela Wokufaka Nokusebenzisa i-Fujiang Pojia: Ukulungiselela i-DeepSeek Harness ngamakhono okuphepha, izizindalwazi nochungechunge lwemisebenzi

Isingeniso Sephrojekthi

UFujiang Breaking Armor uyiplagi-in yangokwezifiso yokwazisa kanye nokusiza ekuhloleni ukuphepha, eqondiswe ku-DeepSeek Harness. Inguqulo ekhonjiswe ku-README njengamanje ngu-0.20.12. Iphrojekthi ifaka i-@deepseek-ai/dsh-prompt-custom kuhla lwemibhalo lokumisa lwe-Harness, bese igcina uhlelo lweplagi-in kanye nokumiswa kwezaziso kwe-prompt-custom.json ngokwehlukana.

Iplagi-in inikeza ukwazisa okwenziwe ngezifiso, umtapo wamakhono, isizindalwazi esakhelwe ngaphakathi se-CVE/PoC, imibiko yobuthakathaka, nochungechunge lomsebenzi wokuhlola ukungena. Ifanele ukuhlela izimpahla, ukuthola ubuthakathaka abangaba khona, ukuqopha izinyathelo zokuqinisekisa nokwenza imibiko ezindaweni lapho imvume ecacile itholakele. Izinto eziphakanyiswa yisizindalwazi noma inqubekelaphambili ezenzakalelayo akufanele kuthathwe ngokuqondile njengobuthakathaka obuqinisekisiwe.

Igama lephrojekthi kanye nokubalulwa kwe-DeepSeek akusho ukusekelwa okusemthethweni. Ngaphambi kokuqala, funda isimemezelo sokuzikhulula esikwindawo yokugcina, futhi uqinisekise ukuthi okuhlosiwe, ububanzi nezindlela zokusebenza zokuhlola kuvunyelwe.

Imisebenzi Eyinhloko

• Ukufakwa kwezaziso: Eduze kwebhokisi lokufaka kunenkinobho yesimo ethi “Fujiang Breaking Armor” kanye nendawo yezilungiselelo. Uma ukufakwa kuvaliwe, isiqalo esisemthethweni siyabuyiselwa, kuyilapho umzimba wezaziso zomsebenzisi ugcinwa.
• Imibiko yobuthakathaka: Igcina unomphela amarekhodi obuthakathaka abhalwe ubuhlakani bokwenziwa, futhi ingabukwa ngokwamazinga: okubucayi, okuphezulu, okuphakathi, okuphansi kanye nokwaziswa.
• Umtapo wamakhono: Ilanda, ivule noma ivale i-REA ne-AboutSecurity ngokwesidingo, futhi ivumele ubuhlakani bokwenziwa buthole amakhono abhalisiwe.
• Isizindalwazi esakhelwe ngaphakathi: Iplagi-in iza nezigaba eziyisishiyagalolunye zolwazi lwe-CVE/PoC, futhi ukuyivula akudingi okunye ukulanda.
• Uchungechunge lomsebenzi wokuhlola ukungena: Luphatha imisebenzi, izimpahla, izinyathelo zokuqinisekisa, amarekhodi emizamo, izigaba neziphakamiso ezilandelayo.
• Ukufanisa izigxivizo zeminwe endaweni: Luhlela izinto ezingaba khona kusizindalwazi ngokusekelwe kumachweba, izimpawu zesevisi noma amagama emikhiqizo, bese lunikeza izizathu zokufanisa.

Isixhumi Esibonakalayo Sezaziso Ezenziwe Ngezifiso

Ukumiswa kwezaziso ezenziwe ngezifiso kugcinwa ngokwehlukana ku-prompt-custom.json, futhi kungase kube nezilungiselelo zomuntu siqu. Ngaphambi kokuphinda uyifake, wenze ikhophi eyisipele noma uyisabalalise, qinisekisa ukuthi okuqukethwe yifayela kulungele ukwabelwana.

Umtapo Wamakhono Nesizindalwazi Solwazi

Umtapo wamakhono usekela amaphrojekthi amabili aphezulu: ithuluzi lokuhlaziya ngokuhlehlisa i-REA kanye nomtapo wamakhono wokuhlola ukuphepha we-AboutSecurity. Iphrojekthi ngayinye yomunye umthombo ingaphansi kwemigomo yayo yelayisensi.

Isizindalwazi esakhelwe ngaphakathi sihlanganisa izigaba ezinjengokuhlehlisa uchungechunge lwe-Java, i-Java Web, amadivayisi emingcele, i-Exchange nezindawo ze-domain, i-Web ne-CMS, ukukhuphula amalungelo ku-Linux, ifu neziqukathi, ubungozi bezixhumi ezibonakalayo zebhizinisi kanye nokuhlukaniswa kobuthakathaka. Into ngayinye iqopha umkhiqizo, inguqulo, ichweba, amagama angukhiye, izinga lobucayi, izimfuneko zangaphambili, iziphakamiso zokulungisa nemithombo eyireferensi.

Amalungiselelo Ngaphambi Kokufaka

1. Qinisekisa ukuthi usebenzisa inguqulo esekelwayo ye-DeepSeek Harness. Iplagi-in imemezela ukuhambisana ne-DeepSeek Harness kanye ne-dsh-system-prompt enguqulweni ethi >=0.2.1-rc.5 <0.3.0.
2. Qinisekisa ukuthi inguqulo ye-Cordis iphakathi kobubanzi be->=4.0.5 <5.
3. Qalisa okungenani kanye i-DeepSeek Harness Desktop esemthethweni ukuze uhlelo luqede ukuqaliswa kokumiswa kwe-desktop.
4. Phuma ngokuphelele ku-Harness ngaphambi kokufaka, kuhlanganise nokukhetha “Phuma” esifanekisweni setreyi esingezansi kwesokudla se-Windows.
5. Landa indawo yokugcina emthonjeni othenjwayo, bese uhlola okuqukethwe kwamaskripthi ngaphambi kokuwasebenzisa.

Ukusebenzisa Isikripthi Sokufaka

Ekhasini lendawo yokugcina khetha Code → Download ZIP bese uyikhipha, noma usebenzise i-Git ukuyihlanganisa. Ngemva kokuphuma ngokuphelele ku-Harness, chofoza kabili i-点我执行脚本.cmd ohlwini lwemibhalo olukhishiwe.

# Yenza ukufaka ngemva kokuphuma ngokuphelele ku-Harness
.\点我执行脚本.cmd

# Buka kuphela uhlelo lokufaka, ungashintshi amafayela
.\install.ps1 -DryRun

I--DryRun ifanele ukuhlola imisebenzi isikripthi esilungiselela ukuyenza ngaphambi kokufaka kwangempela. Isifaki sisebenzisa ukumiswa kwe-desktop ngokuzenzakalelayo, futhi sikhetha kuqala ithuluzi lomugqa womyalo we-DSH eliza ne-Desktop. Uma udinga indawo eyenziwe ngezifiso, sebenzisa i--Profile, -DshCommand ne--DshHome ukuze ucacise igama lokumiswa, ithuluzi lomugqa womyalo kanye nohla lwedatha.

Uma i-DSH_HOME ingasethiwe, uhla lwedatha oluzenzakalelayo ngu-$env:USERPROFILE\.dsh. Isikripthi sokufaka sikopisha iplagi-in ku-$DSH_HOME\local-plugins\dsh-prompt-custom, siyibhalise sisebenzisa umphathi wamaplaga-in we-DSH, bese sikopisha i-prompt-custom.json ehlanganisiwe.

Uma ukumiswa kwezaziso okukhona kuhlukile kokusha, isifaki sakha ikhophi eyisipele eduze kwefayela lokuqala. Uma ukubhalisa kwehluleka futhi kukhona ikhophi eyisipele, isikripthi sibuyisela ukumiswa kwezaziso kwasekuqaleni. Ngemva kokufaka ngempumelelo, isikripthi sizozama nokubhala i-install.log endaweni eseduze, kodwa leli fayela alilona irekhodi eliphelele lokusebenza.

Uma isifaki sithola ukuthi i-Harness isasebenza, sizocela ukuthi uphume bese siyama; kulokhu amafayela ngeke ashintshwe. Isifaki asivali noma siqalise kabusha i-Harness ngokuzenzakalelayo, futhi asisekeli ipharamitha ye--NoRestart.

Okufanele Ukwenze Uma Isikripthi Sivinjwe Yi-Windows

Isifaki siyiskripthi se-PowerShell esingafundwa, futhi senza ikakhulu ukukopisha amafayela nokubiza imiyalo ye-DSH. I-README ichaza ukuthi asiqukethe ukuqala kwamawindi afihlekile, ukuphoqa ukuvala izinqubo, ukudala imisebenzi ehleliwe noma ukudala izinqubo nge-WMI, kodwa lokhu akusho isiphetho sokutholwa yinoma iyiphi isofthiwe yokuphepha.

Uma i-Windows ivimba isikripthi ngenxa yomaka womthombo wokulanda, qala ngokuqinisekisa umthombo wokulanda bese uhlola okuqukethwe kwesikripthi. Ungabala futhi inani lokuhlola le-SHA256 ukuze uliqhathanise nenani elinikezwe umshicileli:

Get-FileHash .\install.ps1 -Algorithm SHA256

Ngemva kokuqinisekisa ukuthi ifayela lithembekile, sebenzisa inketho ethi “Vula” ezimpahleni zefayela le-Windows ukuze ususe umaka womthombo wokulanda.

Indlela Yokufaka Mathupha

Uma ungafuni ukusebenzisa isikripthi sokufaka esizenzakalelayo, ungakopisha futhi ubhalise iplagi-in mathupha ngemva kokuphuma ngokuphelele ku-Harness. Imiyalo elandelayo isebenzisa uhla lwedatha oluzenzakalelayo kanye nethuluzi lomugqa womyalo we-DSH eliza ne-Desktop:

$pluginTarget = Join-Path $env:USERPROFILE '.dsh\local-plugins\dsh-prompt-custom'
New-Item -ItemType Directory -Force -Path $pluginTarget | Out-Null
Get-ChildItem -LiteralPath .\plugin -Force | ForEach-Object {
  Copy-Item -LiteralPath $_.FullName -Destination $pluginTarget -Recurse -Force
}

& "$env:LOCALAPPDATA\Programs\DeepSeek Harness\resources\runtime\cli\bin\dsh.cmd" plugin --profile desktop add $pluginTarget

Uma ufuna nokusebenzisa ukumiswa kwezaziso okuza nendawo yokugcina, qala wenze ikhophi eyisipele ye-$env:USERPROFILE\.dsh\prompt-custom.json ekhona, bese ukopisha ifayela elisha. Ngemva kokuqeda ukufaka, kufanele uqalise kabusha i-Harness ngokwakho.

Inqubo Eyisisekelo Yokusebenzisa

Isinyathelo Sokuqala: Vula Ukufakwa Kwezaziso

Ngemva kokuqalisa kabusha i-Harness, thola indawo yesimo ethi “Fujiang Breaking Armor” eduze kwebhokisi lokufaka. Uma ivuliwe, iplagi-in ishintsha isiqalo esisemthethweni se-harness:identity ngengxenye engenalutho; uma ivaliwe, ibuyisela isiqalo esisemthethweni. Umzimba wezaziso zakho ezenziwe ngezifiso ngeke ususwe ngenxa yalokho.

Isinyathelo Sesibili: Lungisa Umtapo Wamakhono

Vula “Umtapo Wamakhono” kuphaneli yezilungiselelo, bese ulanda futhi uvule i-REA noma i-AboutSecurity ngokwesidingo. I-AboutSecurity ilanda iphakheji ecindezelwe yegatsha lamanje le-master ku-GitHub, bese ikhipha kuphela uhla lwemibhalo lwe-skills/. Inqubo yokulanda ibonisa inqubekelaphambili futhi ingakhanselwa.

I-REA idinga inguqulo ehambisanayo ye-Node.js ethi ^22.23.4 || ^24.22.1 || >=26.12.1. Lapho iplagi-in ifaka i-REA nge-npm, ivala izikripthi zomjikelezo wokuphila, ngakho-ke le ndlela yokufaka ayakhi izibopho zomdabu ezikhethwayo ze-Frida. Ukuthi amathuluzi athile angasebenza yini kusancike endaweni yokusebenza yasendaweni nenjini yokuhlaziya.

I-AboutSecurity yakhiwe ikakhulu ngemibhalo yamakhono ye-Markdown, futhi ayidingi ezinye izingxenye zomdabu zokusebenza. Ukuphumelela kokulanda kwamakhono kusho kuphela ukuthi amafayela atholakele futhi abhalisiwe; akusho ukuthi wonke amathuluzi aqinisekisiwe ukuthi ayasebenza.

Isinyathelo Sesithathu: Sebenzisa Isizindalwazi Ukusiza Ngokufanisa

Isizindalwazi sivuliwe ngokuzenzakalelayo, futhi isimo sigcinwa ku-$DSH_HOME/fujiang-skills/knowledge-state.json. Uma sivaliwe, iplagi-in ayisanikezi ubuhlakani bokwenziwa okuqukethwe kolwazi olufanele, kodwa amafayela okuqala asala endaweni.

Ezivivinyweni ezigunyaziwe, ungachazela kuqala ubuhlakani bokwenziwa ngomkhiqizo okuhlosiwe, inguqulo, ichweba, uphawu lwesevisi nobubanzi bokuhlola, bese uwucela ukuthi useshe izinto zolwazi ezifanele. Isibonelo:

Le yindawo yokuhlola egunyaziwe. Ngokuvumelana negama lomkhiqizo, inguqulo namachweba avulekile okuqinisekisiwe, sesha izinto ezingaba khona kusizindalwazi, ubhale izizathu zokufanisa, izimfuneko zangaphambili ezisebenzayo, ubufakazi obusadinga ukuqinisekiswa kanye neziphakamiso zokulungisa. Ungazichazi izinto ezingaba khona njengobuthakathaka obuqinisekisiwe.

Izinto zolwazi ziyiqoqo lezinto ezitholakala esidlangalaleni, futhi ngokuvamile zisebenzisa imethadatha efana ne-verified: false ne-sources: ukumaka isimo sokuqinisekisa nemithombo. Ekusetshenzisweni kwangempela, kufanele zihlolwe kabusha ngokuhlanganisa inguqulo, ukumiswa nezimfuneko zangaphambili zalokho okuhlosiwe.

Isinyathelo Sesine: Dala Uchungechunge Lomsebenzi Wokuhlola Ukungena

Ukuqaliswa kwamanje kudinga ukuthi umsebenzisi aqale adale umsebenzi kuphaneli yeplagi-in, ukuze ubuhlakani bokwenziwa bukwazi ukusebenzisa amarekhodi omsebenzi akhona ezimpahla, izinyathelo nemiphumela. Uchungechunge lomsebenzi luhlelwe ngezigaba ezilandelayo:

1. Ukuqoqwa kolwazi
2. Ukuhlonza izigxivizo zeminwe
3. Ukufanisa ubuthakathaka
4. Ukuqinisekisa ukuthi kungenzeka
5. Ukuxhaphaza ubuthakathaka
6. Ukuya eceleni
7. Ukukhipha umbiko

Umsebenzi ngamunye ungaboshelwa kuseshini eyodwa, futhi iseshini eyodwa ingaboshelwa emsebenzini owodwa kuphela. Iplagi-in inikeza ubuhlakani bokwenziwa obuboshelwe umsebenzi, isigaba, inani lezimpahla neziphakamiso ezilandelayo nge-campaign:context.

Kunconywa ukuthi lapho udala umsebenzi ucacise okuhlosiwe okugunyaziwe, ububanzi bemisebenzi evunyelwe, izenzo ezinqatshelwe, isikhathi sokuhlola nemibandela yokumisa. Inqubekelaphambili yomsebenzi nezigaba kumane kuyindlela yokuhlela ulwazi, futhi akunakuthatha indawo yobufakazi bokuqinisekisa ubuthakathaka.

Isinyathelo Sesihlanu: Qopha Umbiko Wobuthakathaka

Ngemva kokuba imiphumela yokuqinisekisa isekela isiphetho ngokwanele, cela ubuhlakani bokwenziwa bubhale irekhodi lobuthakathaka. Umbiko kufanele ube nezimpahla ezithintekile, izimo zokuphinda kwenzeke, ubufakazi, ukuhlolwa komthelela, izinga lobucayi, iziphakamiso zokulungisa nemithombo eyireferensi. Izinto ezingakaqinisekiswa kufanele zigcinwe esimweni esithi “Kusadingeka ukuqinisekiswa”, kunokuba zimakwe ngokuqondile njengobuthakathaka.

Izixhumi Zasendaweni Namathuluzi Omdabu

Iplagi-in inikeza izixhumi zokufanisa izigxivizo zeminwe endaweni kanye nerejista yemisebenzi. Ukubala kokufanisa nokubhalwa kwerijista kwenziwa kukhompyutha yendawo, kodwa ukulanda amakhono, ukubizwa kwamamodeli axhumeke kunethiwekhi kanye nokuqinisekisa okuhlosiwe kwangempela kusengadala izicelo zenethiwekhi.

• POST /api/dsh-prompt-custom/match: Ibuyisa izinto ezingaba khona kusizindalwazi ezihlelwe ngokulandelana kanye nezizathu zokufanisa, ngokusekelwe kumachweba, izimpawu zesevisi noma amagama emikhiqizo. Izisindo zifaka ichweba 40, umkhiqizo 30, i-CVE 20, amagama angukhiye 20, nezinga lobucayi 5.
• /api/dsh-prompt-custom/campaigns: Iphatha ububanzi bokuhlola, izigxivizo zeminwe zezimpahla, izinyathelo zokwenza, amarekhodi emizamo nezigaba zomsebenzi. Irejista igcinwa ku-$DSH_HOME/vuln-report/campaigns.json.
• GET ?id=: Ifunda umsebenzi ocacisiwe kanye neziphakamiso zesinyathelo esilandelayo.

Isixhumi somsebenzi siphinde sinikeze imisebenzi efana ne-bind, unbind kanye ne-kick. Amathuluzi omdabu ahlanganisa i-kb_match, campaign_upsert, finding_upsert kanye ne-pipeline_next; izindawo zokusesha amakhono zihlanganisa i-skill_search ne-skill_read. Ukubhalisa amathuluzi omdabu kudinga isevisi yamathuluzi ye-DSH engahlaziywa.

Iziphakamiso Zokusebenzisa Ezithuthukile

Sebenzisa i-DryRun Kuqala Ukuhlola Uhlelo Lokufaka

Lapho ufaka okokuqala noma ushintsha ifolda yokumisa, qala usebenzise .\install.ps1 -DryRun. Lokhu kuqinisekisa indlela okuqondiswe kuyo, igama lokumisa kanye nemisebenzi elindelekile, ngesikhathi kugwenywa ukushintsha amafayela ngokushesha.

Yenza Ikhophi Eyisipele Ehlukile Yama-plugin Nezaziso Zomuntu Siqu

prompt-custom.json izimele ohlelweni lwe-plugin futhi ingase iqukathe izilungiselelo zomuntu siqu. Ngaphambi kokuthuthukisa noma ukusabalalisa kabusha, yenza ikhophi eyisipele yale fayela ngokwehlukana bese uyibuyekeza, ukuze ugweme ukweqa okuqukethwe okwenziwe ngokwezifiso noma ukwabelana ngolwazi olubucayi ngephutha.

Hlukanisa Ukufana Okungaba Khona Nobuthakathaka Obuqinisekisiwe

Ukufanisa izimpawu kumane kuhlele izinto ezingaba khona ngokusekelwe ezikhumulweni, emikhiqizweni, kuma-CVE, kumagama angukhiye nasezingeni lobucayi. Izinga eliphezulu alisho ukuthi okuqondiwe kuthintekile ngempela. Kufanele uqhubeke uqinisekise inguqulo, indlela yokusatshalaliswa, isimo samapatch, izimfuneko zangaphambili kanye nobufakazi bangempela.

Sebenzisa Ukuqhubeka Okuzenzakalelayo Ngokuqapha

Ukuqhubeka okuzenzakalelayo kuvame ukuba nemijikelezo engu-8 ephezulu, kanye nokutholwa kokuma neziphakamiso zesinyathelo esilandelayo. Lapho uyisebenzisa, setha imingcele ecacile yokugunyazwa nemibandela yokuma, futhi uqhubeke nokubuyekeza mathupha, ukuze uvimbele imodeli ekwenzeni imisebenzi elandelayo engafanele ngenxa yokushoda komongo.

Qonda Indlela Isizindalwazi Solwazi Esibuyekezwa Ngayo

Izinto zolwazi zitholakala ku-plugin/knowledge/; ifayela lifundwa kabusha njalo lapho kulayishwa into, ngakho izibuyekezo zokuqukethwe zingase zisebenze ezingcingweni ezilandelayo. Izincazelo zezigaba zitholakala ku-lib/knowledge.js; uma ushintsha izigaba, kufanele ulayishe kabusha i-plugin.

Hlola Izinkinga Zokhiye Abasheshayo Bokufaka

I-README iqopha isimo esaziwayo: ngemva kokuvala iwindi lesaziso sokuzihlangula, abalaleli be-Enter noma be-Esc basengase bathinte ukufaka nokhiye abasheshayo. Uma kuvela okungajwayelekile, qala uhlole ukuthi kungase kuhlobane yini nale nkinga eyaziwayo, bese ulayisha kabusha i-plugin noma uqale kabusha i-Harness.

Ukuhambisana Nemingcele Yokuqinisekisa

I-plugin isebenza nge-systemPrompt, skills, tools, umjikelezo wempilo we-agent kanye nesevisi ye-webServer esesidlangalaleni; ayifakwa ngokushintsha amafayela ohlelo lwe-Harness. Ngemva kokufaka, kufanele uphume ngokuphelele bese uqala kabusha i-Harness.

I-README ithi inguqulo yamanje ihlole isakhiwo samafayela nomqondo wokufaka, kodwa ayizange iphinde iqede ukuqinisekiswa kokusebenza kwazo zonke izici ngokusebenzisa uhlelo. Ngakho-ke, akunakwenzeka ukuthembisa ngalokhu ukuthi wonke amakhono, izinto ze-CVE noma izinqubo ezizenzakalelayo zizosebenza. Ngaphambi kokuyisa endaweni yokukhiqiza, kufanele kuqinisekiswe into ngayinye endaweni yokuhlola ehlukanisiwe negunyaziwe.

Isiphetho

UFujiang Pojia uhlanganisa ukuphathwa kwezaziso, amakhono okuphepha, isizindalwazi solwazi esakhelwe ngaphakathi, imibiko yobuthakathaka kanye nerejista yemisebenzi ku-DeepSeek Harness. Indlela efanele yokusebenzisa iwukuhlola kuqala ukuhambisana nohlelo lokufaka, bese ulungisa amakhono nesizindalwazi solwazi, ekugcineni udale imisebenzi ngaphakathi kwemingcele egunyaziwe ecacile, uqinisekise izinto ezingaba khona bese ulondoloza ubufakazi. Njalo beka ukubuyekezwa komuntu, amalungelo amancane kanye nobufakazi obuthembekile ngaphambi kwezinqubo ezizenzakalelayo.