Skip to content

Agent API_p11

Jump to bottom
grisun0 edited this page Oct 12, 2026 · 28 revisions

API (page 11 of 22)

Previous: API_p10.md

modules/exp.c

Imported by: static/js/3d-force-graph-1.73.4.min.js, static/js/force-graph-1.43.5.min.js

  • add_key (function) modules/exp.c:147 static inline key_serial_t add_key(const char *type, const char *description, const void *payload...
  • keyctl (function) modules/exp.c:151 static inline long keyctl(int operation, unsigned long arg2, unsigned long arg3, unsigned long ar...
  • bye (function) modules/exp.c:155 void bye(char *info)
  • do_error_exit (function) modules/exp.c:161 void do_error_exit(char *info)
  • bye2 (function) modules/exp.c:167 void bye2(char *info, char *arg)
  • spray_keyring (function) modules/exp.c:172 key_serial_t *spray_keyring(uint32_t start, uint32_t spray_size)
  • spray_keyring_list_del_purpose (function) modules/exp.c:190 key_serial_t *spray_keyring_list_del_purpose(uint32_t spray_size, uint64_t next, uint64_t prev, u...
  • spray_keyring_list_overwrite_purpose (function) modules/exp.c:214 key_serial_t *spray_keyring_list_overwrite_purpose(uint32_t spray_size, uint64_t len, uint64_t of...
  • get_keyring_leak (function) modules/exp.c:248 int get_keyring_leak(key_serial_t *id_buffer, uint32_t id_buffer_size)
  • awake_partial_keys (function) modules/exp.c:271 void awake_partial_keys(key_serial_t *id_buffer, uint32_t idx)
  • release_keys (function) modules/exp.c:279 void release_keys(key_serial_t *id_buffer, uint32_t id_buffer_size)
  • release_partial_keys (function) modules/exp.c:290 void release_partial_keys(key_serial_t *id_buffer, int i)
  • unshare_setup (function) modules/exp.c:297 void unshare_setup(uid_t uid, gid_t gid)
  • set_stable_table_and_set (function) modules/exp.c:322 void set_stable_table_and_set(struct mnl_socket* nl, const char *name)
  • set_trigger_set_and_overwrite (function) modules/exp.c:385 void set_trigger_set_and_overwrite(struct mnl_socket* nl, const char *name, const char *set_name)
  • set_cpu_affinity (function) modules/exp.c:438 void set_cpu_affinity(int cpu_n, pid_t pid)
  • spray_mqueue (function) modules/exp.c:448 void spray_mqueue(mqd_t mqdes, char *msgptr, int spray_size)
  • gather_mqueue (function) modules/exp.c:463 int gather_mqueue(mqd_t mqdes, int gather_size)
  • gather_mqueue_nosave (function) modules/exp.c:485 int gather_mqueue_nosave(mqd_t mqdes, int gather_size)
  • spray_msg_msg (function) modules/exp.c:496 void spray_msg_msg(unsigned int size, unsigned int amount, int qid)
  • io_uring_setup (function) modules/exp.c:520 static inline int io_uring_setup(uint32_t entries, struct io_uring_params *p)
  • io_uring_register (function) modules/exp.c:524 static inline int io_uring_register(int fd, unsigned int opcode, void *arg, unsigned int nr_args)
  • spray_uring (function) modules/exp.c:529 struct fd_uring *spray_uring(uint32_t spray_size, struct fd_uring *fd_buffer)
  • release_uring (function) modules/exp.c:546 void release_uring(struct fd_uring *fd_buffer, uint32_t buffer_size)
  • release_partial_uring (function) modules/exp.c:554 void release_partial_uring(struct fd_uring *fd_buffer, uint32_t buffer_idx)
  • prepare_root_shell (function) modules/exp.c:559 void prepare_root_shell(void)
  • create_dummy_file (function) modules/exp.c:564 void create_dummy_file(void)
  • create_priv_file (function) modules/exp.c:572 void create_priv_file(void)
  • write_new_modprobe (function) modules/exp.c:582 void write_new_modprobe()
  • setup_modprobe_payload (function) modules/exp.c:601 void setup_modprobe_payload()
  • userland_T (function) modules/exp.c:605 void userland_T(int *sema)
  • sema_up (function) modules/exp.c:610 void sema_up(int *sema)
  • sema_down (function) modules/exp.c:615 void sema_down(int *sema)
  • main (function) modules/exp.c:620 int main(int argc, char ** argv)

modules/exploit_chain.py

Imported by: cli/commands/exploit_migrated.py

  • ExploitChain.__init__ (method) modules/exploit_chain.py:292 def __init__(self, rhost, rport, lhost, lport, sessions_dir, nmap_xml_path)
  • ExploitChain.fingerprint_services (method) modules/exploit_chain.py:311 def fingerprint_services(self, nmap_output) -- Parse service information from all available nmap XML files.
  • ExploitChain.map_vulnerabilities (method) modules/exploit_chain.py:446 def map_vulnerabilities(self) -- Map discovered services to known vulnerabilities.
  • ExploitChain.generate_exploit_plan (method) modules/exploit_chain.py:499 def generate_exploit_plan(self) -- Generate a prioritized exploitation plan.
  • ExploitChain.get_post_exploit_commands (method) modules/exploit_chain.py:519 def get_post_exploit_commands(self, platform) -- Return recommended post-exploitation commands for the platform.
  • ExploitChain.generate_report (method) modules/exploit_chain.py:531 def generate_report(self) -- Generate a structured exploitation chain report.
  • ExploitChain.save_report (method) modules/exploit_chain.py:566 def save_report(self, path) -- Save the exploitation chain report to a file.

modules/exploit_recommender.py

Depends on: lazygui/version.py, modules/world_model.py Imported by: cli/commands/exploit_migrated.py, cli/commands/pwn.py, modules/unified_dashboard.py, skills/lazyown_mcp.py

modules/exploitgym_gym.py

Depends on: modules/redteam_gym.py Imported by: cli/commands/exploitgym.py, skills/lazyown_mcp.py, tests/test_exploitgym_gym.py

  • check_readiness (function) modules/exploitgym_gym.py:112 def check_readiness(params) -- Report whether the ExploitGym harness can run.
  • list_tasks (function) modules/exploitgym_gym.py:178 def list_tasks(params, domain, limit) -- List available ExploitGym tasks, optionally filtered by domain.
  • setup_harness (function) modules/exploitgym_gym.py:249 def setup_harness(params, steps) -- Automate ExploitGym installation (clone, deps, data, firewall, images).
  • pull_task (function) modules/exploitgym_gym.py:344 def pull_task(task_id, params, timeout) -- Pull the Docker image required by a task.
  • run_task (function) modules/exploitgym_gym.py:423 def run_task(task_id, params, model, mitigations, timeout) -- Run the agent against an ExploitGym task and capture the outcome.
  • verify_flag (function) modules/exploitgym_gym.py:548 def verify_flag(task_id, params) -- Verify whether a task flag was captured from a previous run.
  • score_task (function) modules/exploitgym_gym.py:565 def score_task(task_id, success, techniques, params) -- Award Red Team Gym ELO and leaderboard points for a task outcome.

modules/fast_run_service.sh

modules/finding_lifecycle.py

Depends on: modules/osint_enrich.py Imported by: cli/commands/database.py, modules/attack_surface3d.py, modules/intel_fusion.py, modules/lazy_bridge.py, modules/lazy_loop.py, skills/autonomous_daemon.py, tests/test_autonomous_ops.py, tests/test_finding_lifecycle.py

  • confirm (function) modules/finding_lifecycle.py:61 def confirm(finding_id, evidence, sessions_dir, by) -- Mark a finding confirmed with linked evidence (CAIRN seed-add).
  • reject (function) modules/finding_lifecycle.py:90 def reject(finding_id, reason, sessions_dir, by) -- Mark a finding rejected (disproven lead, CAIRN dead-end discipline).
  • add_dead_end (function) modules/finding_lifecycle.py:104 def add_dead_end(kind, value, reason, sessions_dir) -- Suppress a value campaign-wide with a labeled reason (dead_end_hashes).
  • is_dead_end (function) modules/finding_lifecycle.py:116 def is_dead_end(kind, value, sessions_dir) -- Return True when a kind/value pair sits on the suppression list.
  • suppressed_values (function) modules/finding_lifecycle.py:123 def suppressed_values(sessions_dir) -- Return every suppressed value for text-level filtering by the loop.
  • resolve (function) modules/finding_lifecycle.py:129 def resolve(node, sessions_dir) -- Resolve a finding node's confirmation state.
  • apply_confirmation (function) modules/finding_lifecycle.py:154 def apply_confirmation(nodes, sessions_dir) -- Stamp confirmation/status on every finding node in place.
  • record (function) modules/finding_lifecycle.py:234 def record(db, workspace, host, title, severity, summary, poc) -- Record a campaign finding on the DB for one host.
  • findings_for (function) modules/finding_lifecycle.py:259 def findings_for(db, workspace) -- List campaign findings with parsed status markers.
  • set_status (function) modules/finding_lifecycle.py:264 def set_status(db, finding_id, status) -- Set the lifecycle status marker on one finding.
  • has_running_retest (function) modules/finding_lifecycle.py:310 def has_running_retest(finding_id, sessions_dir) -- Return True while a retest for the finding is still running.
  • request_retest (function) modules/finding_lifecycle.py:318 def request_retest(db, finding_id, sessions_dir) -- Queue a retest; an already-running one is returned unchanged.
  • resolve_retest (function) modules/finding_lifecycle.py:338 def resolve_retest(db, retest_id, conclusion, evidence, sessions_dir) -- Close a retest, bump the evidence version and apply the verdict.
  • classify_retest (function) modules/finding_lifecycle.py:384 def classify_retest(needle, output) -- Map retest output onto reproducible / fixed / inconclusive.
  • render_markdown (function) modules/finding_lifecycle.py:403 def render_markdown(db, workspace, title) -- Render campaign findings as a markdown report.

modules/forensic_cleaner.py

Imported by: cli/commands/opsec_cleanup.py

modules/gcp_attacks.py

Imported by: cli/commands/cloud_attacks.py

  • GCPAttackEngine.__init__ (method) modules/gcp_attacks.py:90 def __init__(self, config)
  • GCPAttackEngine.enumerate_iam_policy (method) modules/gcp_attacks.py:93 def enumerate_iam_policy(self, resource) -- Enumerate IAM policies for projects, folders, or organizations.
  • GCPAttackEngine.service_account_impersonation (method) modules/gcp_attacks.py:119 def service_account_impersonation(self) -- Exploit service account impersonation for privilege escalation.
  • GCPAttackEngine.cloud_functions_backdoor (method) modules/gcp_attacks.py:144 def cloud_functions_backdoor(self) -- Backdoor Cloud Functions for privilege escalation.
  • GCPAttackEngine.compute_engine_metadata_exfil (method) modules/gcp_attacks.py:173 def compute_engine_metadata_exfil(self) -- Exfiltrate GCE instance metadata and service account tokens.
  • GCPAttackEngine.gcs_enumeration (method) modules/gcp_attacks.py:194 def gcs_enumeration(self) -- Enumerate Cloud Storage buckets for sensitive data.
  • GCPAttackEngine.cloudbuild_abuse (method) modules/gcp_attacks.py:230 def cloudbuild_abuse(self) -- Abuse Cloud Build for privilege escalation.
  • GCPAttackEngine.organization_escalation (method) modules/gcp_attacks.py:261 def organization_escalation(self) -- Escalate from project-level to organization-level access.
  • GCPAttackEngine.summary (method) modules/gcp_attacks.py:297 def summary(self)

modules/generate_tools.py

modules/goals.py

Imported by: cli/commands/daemon_ctl.py, skills/autonomous_daemon.py, skills/lazyown_mcp.py, tests/test_lazy_parity.py

  • TaskConstraints.blocked (method) modules/goals.py:35 def blocked(self, command) -- Return the blocking constraint or empty string.
  • decompose_rule_based (function) modules/goals.py:63 def decompose_rule_based(objective_text, max_goals) -- Split objective text into goal specs without an LLM (deterministic).
  • load_constraints (function) modules/goals.py:83 def load_constraints(payload) -- Build constraints from payload config (deny wins, LAZY parity).
  • constraint_block_text (function) modules/goals.py:103 def constraint_block_text(constraints) -- Render the constraint block injected at max priority (LAZY parity).
  • GoalTracker.__init__ (method) modules/goals.py:120 def __init__(self, goals) -- Bind to an initial goal list.
  • GoalTracker.goals (method) modules/goals.py:125 def goals(self) -- Return a copy of tracked goals.
  • GoalTracker.prove_goal (method) modules/goals.py:129 def prove_goal(self, goal_text, evidence) -- Mark one goal achieved from evidence; return True when found.
  • GoalTracker.goal_met (method) modules/goals.py:140 def goal_met(self, opt_in) -- End the whole task; requires explicit opt-in (default unbound).
  • GoalTracker.all_achieved (method) modules/goals.py:148 def all_achieved(self) -- Return True when every goal is achieved.
  • GoalTracker.open_goals (method) modules/goals.py:152 def open_goals(self) -- Return goals still open.

modules/gpo_abuse.py

Imported by: cli/commands/active_directory.py

  • GPOAbuseEngine.__init__ (method) modules/gpo_abuse.py:118 def __init__(self, domain, dc_ip)
  • GPOAbuseEngine.parse_gpo_list (method) modules/gpo_abuse.py:124 def parse_gpo_list(self, raw_gpo_output) -- Parse Get-GPO or ldapsearch output for GPO information.
  • GPOAbuseEngine.parse_bloodhound_gpos (method) modules/gpo_abuse.py:160 def parse_bloodhound_gpos(self, bloodhound_nodes) -- Parse BloodHound GPO nodes for abusable policies.
  • GPOAbuseEngine.plan_scheduled_task (method) modules/gpo_abuse.py:182 def plan_scheduled_task(self, gpo, command, task_name) -- Plan a GPO-backed scheduled task for immediate code execution.
  • GPOAbuseEngine.plan_startup_script (method) modules/gpo_abuse.py:208 def plan_startup_script(self, gpo, script_content, script_name) -- Plan a GPO startup script for persistence via SYSVOL.
  • GPOAbuseEngine.plan_logon_script (method) modules/gpo_abuse.py:238 def plan_logon_script(self, gpo, command) -- Plan a GPO user logon script for user-triggered code execution.
  • GPOAbuseEngine.plan_local_admin_addition (method) modules/gpo_abuse.py:266 def plan_local_admin_addition(self, gpo, username, group) -- Plan adding a user to the local Administrators group via GPO preferences.
  • GPOAbuseEngine.plan_wmi_filter_abuse (method) modules/gpo_abuse.py:293 def plan_wmi_filter_abuse(self, gpo, wmi_query) -- Plan WMI filter abuse for targeted GPO scope control.
  • GPOAbuseEngine.plan_registry_preference (method) modules/gpo_abuse.py:322 def plan_registry_preference(self, gpo, registry_path, value_name, value_data, value_type) -- Plan a registry modification via GPO preferences.
  • GPOAbuseEngine.plan_service_installation (method) modules/gpo_abuse.py:356 def plan_service_installation(self, gpo, service_name, binary_path) -- Plan a service installation via GPO for SYSTEM-level persistence.
  • GPOAbuseEngine.generate_all_plans (method) modules/gpo_abuse.py:382 def generate_all_plans(self, command, username) -- Generate all abuse plans for the discovered GPOs.
  • GPOAbuseEngine.detect_risky_gpos (method) modules/gpo_abuse.py:406 def detect_risky_gpos(self) -- Identify GPOs with risky configurations for post-compromise cleanup.
  • GPOAbuseEngine.summary (method) modules/gpo_abuse.py:434 def summary(self) -- Return a summary of GPO abuse capabilities.

modules/gui_askpass.sh

modules/hash_cracker.py

Depends on: core/defaults.py, core/logging.py, modules/db.py Imported by: cli/commands/security.py, tests/test_hash_cracker.py

  • HashCracker.__init__ (method) modules/hash_cracker.py:164 def __init__(self, wordlist, rules, use_hashcat, timeout)
  • HashCracker.identify (method) modules/hash_cracker.py:186 def identify(self, line) -- Identify the hash type of a single line.
  • HashCracker.identify_file (method) modules/hash_cracker.py:273 def identify_file(self, filepath) -- Parse a hash file and group hashes by type.
  • HashCracker.crack_hash (method) modules/hash_cracker.py:295 def crack_hash(self, hash_value, hash_type, wordlist) -- Attempt to crack a single hash.
  • HashCracker.crack_file (method) modules/hash_cracker.py:349 def crack_file(self, filepath, wordlist, hash_types) -- Crack all hashes in a file.
  • HashCracker.import_to_db (method) modules/hash_cracker.py:405 def import_to_db(self, results, rhost, workspace_name) -- Import cracked results into the LazyOwnDB credentials table.
  • crack_secretsdump_output (function) modules/hash_cracker.py:695 def crack_secretsdump_output(filepath, wordlist, rhost) -- Convenience function: crack a secretsdump output file and import results.

modules/hive_invoke.py

Depends on: modules/toposwarm_bridge.py

modules/hostdiscover.sh

modules/ia_code_analysis.py

Depends on: core/console.py, core/logging.py, modules/logging_config.py

modules/ia_logs_analysis.py

Depends on: core/console.py, core/logging.py, modules/logging_config.py

modules/ia_network_analysis.py

Depends on: core/console.py, core/logging.py, modules/logging_config.py

modules/icmp_client.py

modules/icmp_server.py

Depends on: core/logging.py, modules/logging_config.py Imported by: tests/test_security_hardening_v3.py, tests/test_security_hardening_v5.py

modules/img2bin.py

modules/integrations/misp_export.py

Depends on: core/logging.py Imported by: modules/integrations/__init__.py, skills/lazyown_mcp.py, tests/test_core_modules.py

modules/integrations/nuclei_bridge.py

Depends on: core/logging.py Imported by: modules/integrations/__init__.py, modules/integrations/nuclei_parser.py, modules/intelligence_engine.py

modules/integrations/nuclei_parser.py

Depends on: core/logging.py, modules/db.py, modules/integrations/nuclei_bridge.py, modules/world_model.py Imported by: modules/intelligence_engine.py, tests/test_nuclei_parser.py

modules/integrations/searchsploit.py

Depends on: core/logging.py Imported by: modules/integrations/__init__.py, tests/test_core_modules.py

modules/intel_fusion.py

Depends on: modules/estorides_fusion.py, modules/finding_lifecycle.py Imported by: lazyc2.py, modules/attack_surface3d.py, tests/test_asset_gate.py, tests/test_attack_surface3d.py, tests/test_intel_fusion.py

  • node_id (function) modules/intel_fusion.py:106 def node_id(kind, value) -- Deterministic node id from kind + normalized value.
  • build_intel_graph (function) modules/intel_fusion.py:176 def build_intel_graph(sessions_dir, est_cap) -- Fuse all session artefacts into one C2-centred intel graph.
  • add_node (function) modules/intel_fusion.py:183 def add_node(kind, value, label) -- Insert node or merge extra fields into the existing one.
  • add_edge (function) modules/intel_fusion.py:197 def add_edge(src, dst, kind, evidence, weight) -- Append one provenance-tagged relation.
  • tag_source (function) modules/intel_fusion.py:205 def tag_source(nid, source) -- Record a corroborating artefact on a node, deduped.
  • group_colors (function) modules/intel_fusion.py:512 def group_colors(graph) -- Stable colors for layer/language groupings (ReadMenator contract).
  • page_settings (function) modules/intel_fusion.py:528 def page_settings(graph) -- Explorer page settings with ReadMenator physics sizes (exact values).
  • build_analytics (function) modules/intel_fusion.py:585 def build_analytics(graph, summary) -- Side-panel analytics (attribution funnel + intel summary).
  • build_bundle_payload (function) modules/intel_fusion.py:659 def build_bundle_payload(graph) -- Derive the circular/spherical bundle payload from a fused graph.
  • bundle_settings (function) modules/intel_fusion.py:769 def bundle_settings(graph) -- Bundle page settings with ReadMenator sizes (exact values).
  • assign_layout (function) modules/intel_fusion.py:800 def assign_layout(graph, mode) -- Attach x/y/z for radial/spherical modes; force modes stay free.
  • write_summary (function) modules/intel_fusion.py:865 def write_summary(graph, sessions_dir) -- Score host exposure and suggest intents for the autonomous planner.

modules/intelligence_engine.py

Depends on: core/logging.py, modules/estorides_importer.py, modules/integrations/nuclei_bridge.py, modules/integrations/nuclei_parser.py, modules/obs_parser.py, modules/world_model.py, modules/yara_scanner.py Imported by: cli/commands/mcp_bridge.py, cli/commands/recon.py, skills/lazyown_mcp.py, tests/test_intelligence_engine.py

modules/intercept.py

Depends on: cli/commands/enum.py Imported by: cli/commands/daemon_ctl.py, modules/lazy_loop.py, skills/autonomous_daemon.py, skills/lazyown_mcp.py, tests/test_engage_gates.py, tests/test_lazy_parity.py, tests/test_safety_gates.py

  • InterceptRule.matches (method) modules/intercept.py:68 def matches(self, tool, command) -- Return True when this rule matches the tool call surface.
  • builtin_rules (function) modules/intercept.py:101 def builtin_rules() -- Return the default destructive and exfiltration guard rules.
  • scope_blocked (function) modules/intercept.py:131 def scope_blocked(target) -- Return the matching global scope suffix or empty (LAZY parity).
  • observe_post_tool (function) modules/intercept.py:144 def observe_post_tool(output) -- Classify post-execution output (LAZY Guard.postToolUse parity).
  • Interceptor.__init__ (method) modules/intercept.py:157 def __init__(self, rules, ask_timeout_sec, timeout_action) -- Initialize with rules sorted by descending priority.
  • Interceptor.rules (method) modules/intercept.py:172 def rules(self) -- Return a copy of the active rule list.
  • Interceptor.add_rule (method) modules/intercept.py:177 def add_rule(self, rule) -- Add a rule and keep priority ordering.
  • Interceptor.remove_rule (method) modules/intercept.py:183 def remove_rule(self, pattern) -- Remove the first rule matching pattern text.
  • Interceptor.evaluate (method) modules/intercept.py:192 def evaluate(self, tool, command) -- Evaluate a tool call and return the verdict.
  • Interceptor.decide (method) modules/intercept.py:220 def decide(self, approval_id, decision) -- Resolve a pending approval with approve or deny.
  • Interceptor.pending_approvals (method) modules/intercept.py:234 def pending_approvals(self) -- List unresolved approvals, expiring timed-out ones per policy.
  • Interceptor.approval_status (method) modules/intercept.py:249 def approval_status(self, approval_id) -- Fetch a single approval record by id.
  • Guard.__init__ (method) modules/intercept.py:258 def __init__(self, interceptor) -- Initialize audit log with an optional interceptor.
  • Guard.interceptor (method) modules/intercept.py:266 def interceptor(self) -- Expose the underlying interceptor.
  • Guard.check (method) modules/intercept.py:270 def check(self, tool, command) -- Audit the call then evaluate intercept rules (trace id kept).
  • Guard.observe (method) modules/intercept.py:282 def observe(self, output, source) -- Classify output and attribute blocked/error counters.
  • Guard.record_failure (method) modules/intercept.py:291 def record_failure(self, source) -- Attribute a post-execution failure to a source.
  • Guard.audit_log (method) modules/intercept.py:296 def audit_log(self, limit) -- Return the most recent audit entries.
  • Guard.attribution (method) modules/intercept.py:301 def attribution(self) -- Return failure attribution counters.

modules/iptables_portforward.sh

modules/jsonl_tail.py

Imported by: cli/lazy_monitor.py, cli/lazy_orchestrator.py, modules/lazy_runner.py

  • JsonlTail.__init__ (method) modules/jsonl_tail.py:17 def __init__(self, path) -- Bind the tail to one file path.
  • JsonlTail.read_new (method) modules/jsonl_tail.py:22 def read_new(self, limit) -- Return new complete records since the last call.

modules/k8s_attacks.py

Imported by: cli/commands/cloud_attacks.py

  • K8SAttackEngine.__init__ (method) modules/k8s_attacks.py:87 def __init__(self, config)
  • K8SAttackEngine.enumerate_rbac (method) modules/k8s_attacks.py:90 def enumerate_rbac(self) -- Enumerate RBAC permissions for the current identity.
  • K8SAttackEngine.privileged_pod_escape (method) modules/k8s_attacks.py:118 def privileged_pod_escape(self) -- Plan a privileged pod escape.
  • K8SAttackEngine.service_account_token_theft (method) modules/k8s_attacks.py:173 def service_account_token_theft(self) -- Steal service account tokens across namespaces for lateral movement.
  • K8SAttackEngine.kubelet_anonymous_auth_abuse (method) modules/k8s_attacks.py:198 def kubelet_anonymous_auth_abuse(self) -- Exploit kubelet anonymous authentication.
  • K8SAttackEngine.etcd_access_exploitation (method) modules/k8s_attacks.py:222 def etcd_access_exploitation(self) -- Exploit etcd database access for complete cluster compromise.
  • K8SAttackEngine.helm_tiller_abuse (method) modules/k8s_attacks.py:250 def helm_tiller_abuse(self) -- Abuse Helm (v2 Tiller or v3 RBAC) for privilege escalation.
  • K8SAttackEngine.persistence_techniques (method) modules/k8s_attacks.py:278 def persistence_techniques(self) -- Kubernetes persistence techniques for long-term access.
  • K8SAttackEngine.summary (method) modules/k8s_attacks.py:318 def summary(self)

modules/kerberoasting.py

Depends on: modules/kerberos_core.py Imported by: cli/commands/active_directory.py

  • KerberoastingEngine.__init__ (method) modules/kerberoasting.py:95 def __init__(self, domain, dc_ip, username, password, hash)
  • KerberoastingEngine.enumerate_spns (method) modules/kerberoasting.py:112 def enumerate_spns(self, ldap_output, bloodhound_data) -- Enumerate kerberoastable service principals.
  • priority (function) modules/kerberoasting.py:172 def priority(target)
  • KerberoastingEngine.request_tgs_aes_only (method) modules/kerberoasting.py:187 def request_tgs_aes_only(self, user_spn) -- Request a TGS ticket using only AES encryption (evades RC4 detection).
  • KerberoastingEngine.request_tgs_rc4 (method) modules/kerberoasting.py:208 def request_tgs_rc4(self, user_spn) -- Request a TGS ticket using RC4-HMAC (mode 13100 for Hashcat).
  • KerberoastingEngine.request_tgs (method) modules/kerberoasting.py:219 def request_tgs(self, user_spn, etype) -- Request a TGS service ticket for kerberoasting.
  • KerberoastingEngine.targeted_kerberoast (method) modules/kerberoasting.py:271 def targeted_kerberoast(self, high_value_only) -- Perform targeted Kerberoasting on enumerated SPNs.
  • KerberoastingEngine.asreproast_check (method) modules/kerberoasting.py:306 def asreproast_check(self, usernames) -- Check which users do NOT require Kerberos pre-authentication (AS-REP roastable).
  • KerberoastingEngine.extract_hashes_from_pcap (method) modules/kerberoasting.py:321 def extract_hashes_from_pcap(self, pcap_path) -- Extract Kerberoast hashes from a PCAP/PCAPNG network capture.
  • KerberoastingEngine.detect_kerberoasting_activity (method) modules/kerberoasting.py:336 def detect_kerberoasting_activity(self, event_log) -- Analyze Windows Event Logs for signs of Kerberoasting attacks.
  • KerberoastingEngine.build_hashcat_batch (method) modules/kerberoasting.py:379 def build_hashcat_batch(self, output_path) -- Build a batch file with all extracted hashes for Hashcat cracking.
  • KerberoastingEngine.summary (method) modules/kerberoasting.py:401 def summary(self) -- Return a summary of kerberoasting operations.

modules/kerberos_core.py

Imported by: modules/kerberoasting.py, modules/kerberos_tickets.py

  • KerberosPrincipal.to_string (method) modules/kerberos_core.py:152 def to_string(self)
  • KerberosTicket.has_flag (method) modules/kerberos_core.py:207 def has_flag(self, flag_name)
  • KerberosCrypto.__init__ (method) modules/kerberos_core.py:277 def __init__(self)
  • KerberosCrypto.derive_aes_key (method) modules/kerberos_core.py:282 def derive_aes_key(password, salt, etype) -- Derive an AES Kerberos key from a password using string-to-key.
  • KerberosCrypto.derive_rc4_key (method) modules/kerberos_core.py:318 def derive_rc4_key(password) -- Derive RC4-HMAC Kerberos key from password (hash = MD4(UTF16LE(password))).
  • KerberosCrypto.aes_encrypt (method) modules/kerberos_core.py:329 def aes_encrypt(self, key, plaintext, usage) -- AES encrypt with Kerberos ciphertext stealing (CTS) mode.
  • KerberosCrypto.aes_decrypt (method) modules/kerberos_core.py:361 def aes_decrypt(self, key, ciphertext, usage) -- AES decrypt with Kerberos CTS mode.
  • KerberosCrypto.compute_checksum (method) modules/kerberos_core.py:389 def compute_checksum(key, data, etype) -- Compute a Kerberos checksum using HMAC-SHA1-96-AES.
  • KerberosCore.__init__ (method) modules/kerberos_core.py:421 def __init__(self, domain, dc_host, dc_ip)
  • KerberosCore.get_supported_etypes (method) modules/kerberos_core.py:427 def get_supported_etypes(self) -- Return encryption types supported by this implementation.
  • KerberosCore.build_as_req (method) modules/kerberos_core.py:435 def build_as_req(self, username, domain, password, etype) -- Build an AS-REQ message for TGT retrieval.
  • KerberosCore.build_tgs_req (method) modules/kerberos_core.py:489 def build_tgs_req(self, params) -- Build a TGS-REQ message for service ticket retrieval.
  • KerberosCore.parse_as_rep (method) modules/kerberos_core.py:534 def parse_as_rep(self, as_rep_data, key, etype) -- Parse an AS-REP response and extract the TGT and session key.
  • KerberosCore.parse_tgs_rep (method) modules/kerberos_core.py:550 def parse_tgs_rep(self, tgs_rep_data, session_key, etype) -- Parse a TGS-REP response and extract the service ticket.
  • KerberosCore.decrypt_ticket (method) modules/kerberos_core.py:563 def decrypt_ticket(self, ticket_data, key, etype) -- Decrypt the encrypted portion of a Kerberos ticket.
  • KerberosCore.parse_pac (method) modules/kerberos_core.py:588 def parse_pac(self, pac_data) -- Parse a Privilege Attribute Certificate (PAC) from decrypted auth data.
  • KerberosErrorParser.parse_error (method) modules/kerberos_core.py:687 def parse_error(error_data) -- Extract error code, message, and client/server realm from a KRB-ERROR.
  • TicketValidator.is_expired (method) modules/kerberos_core.py:706 def is_expired(endtime, grace_period) -- Check if a ticket has expired.
  • TicketValidator.validate_flags (method) modules/kerberos_core.py:719 def validate_flags(ticket, required_flags) -- Check that a ticket has all required flags.
  • TicketValidator.validate_pac_checksums (method) modules/kerberos_core.py:735 def validate_pac_checksums(pac) -- Validate PAC server and KDC checksums.

modules/kerberos_tickets.py

Depends on: modules/kerberos_core.py Imported by: cli/commands/active_directory.py

modules/kill_chain_viz.py

Depends on: modules/killchain.py Imported by: lazyc2.py

modules/killchain.py

Depends on: core/logging.py, modules/world_model.py Imported by: cli/commands/ai.py, cli/dashboard_tui.py, cli/killchain.py, cli/ops_commands.py, cli/recon_plan.py, cli/tips_engine.py, lazyc2.py, lazygui/panels/killchain_panel.py, modules/kill_chain_viz.py, modules/lazyown_bridge.py, modules/opsec_scorer.py, scripts/devtools/core_smoke.py, skills/autonomous_daemon.py, skills/hermes-lazyown/constants.py, skills/lazyown_mcp.py, tests/test_killchain_snapshot.py, tests/test_killchain_unified_v2.py

  • KillChainConfig.world_model_path (method) modules/killchain.py:116 def world_model_path(self) -- Return the resolved path to world_model.json.
  • KillChainConfig.phase_index (method) modules/killchain.py:120 def phase_index(self, phase) -- Return the positional index of a canonical phase in the kill chain.
  • KillChainConfig.is_valid_phase (method) modules/killchain.py:127 def is_valid_phase(self, phase) -- Return True when phase is a recognised canonical phase.
  • KillChain.config (method) modules/killchain.py:154 def config() -- Return the centralised configuration.
  • KillChain.phases (method) modules/killchain.py:159 def phases() -- Return the canonical 8-phase tuple.
  • KillChain.phase_labels (method) modules/killchain.py:164 def phase_labels() -- Return the canonical phase label mapping.
  • KillChain.phase_colors (method) modules/killchain.py:169 def phase_colors() -- Return the canonical phase hex-color mapping.
  • KillChain.phase_rich_colors (method) modules/killchain.py:174 def phase_rich_colors() -- Return the canonical phase rich-terminal color mapping.
  • KillChain.engagement_phase_to_cli (method) modules/killchain.py:179 def engagement_phase_to_cli(engagement_value) -- Map a WorldModel.EngagementPhase value to the CLI phase key.
  • KillChain.cli_phase_to_host_state (method) modules/killchain.py:191 def cli_phase_to_host_state(phase) -- Map a CLI phase to a WorldModel.HostState value.
  • KillChain.current_phase (method) modules/killchain.py:204 def current_phase(world_model_path) -- Derive the current kill-chain phase.
  • KillChain.advance_phase (method) modules/killchain.py:251 def advance_phase(new_phase, world_model_path) -- Advance the kill-chain phase for all connected surfaces.
  • KillChain.get_progress (method) modules/killchain.py:315 def get_progress(world_model_path) -- Return the current kill-chain progress as a list of status objects.
  • KillChain.compact_progress (method) modules/killchain.py:364 def compact_progress(current_phase, phases_entered) -- Return a compact single-line progress indicator [R>E>X>P>L].
  • KillChain.phases_for_display (method) modules/killchain.py:384 def phases_for_display() -- Return an ordered (key, label, hex_color) triple for every phase.
  • KillChain.phase_index (method) modules/killchain.py:395 def phase_index(phase) -- Return the zero-based index of a canonical phase.
  • KillChain.snapshot (method) modules/killchain.py:400 def snapshot(world_model_path) -- Return a single, render-agnostic snapshot of the whole kill-chain.
  • get_killchain (function) modules/killchain.py:440 def get_killchain() -- Return the KillChain class as a module-level entry point.

modules/kivi.py

Next: API_p12.md

Generated offline by readmenator from commit 9f1ab88375b8. Edits here are overwritten by readmenator . --rebuild.

Start

Wiki

Agent Docs

Recipes

Clone this wiki locally