Skip to content

Agent API_p2

Jump to bottom
grisun0 edited this page Oct 16, 2026 · 22 revisions

API (page 2 of 23)

Previous: API.md

cli/commands/cred_migrated.py

Depends on: cli/commands/_base.py, core/defaults.py, utils.py Imported by: tests/test_credentials_rotation.py

  • CredMigratedCommandSet.do_createhash (method) cli/commands/cred_migrated.py:62 def do_createhash(self, line) -- Creates a hash.txt file in the sessions directory with the specified hash value and analyzes it using...
  • CredMigratedCommandSet.do_createcredentials (method) cli/commands/cred_migrated.py:116 def do_createcredentials(self, line) -- Creates a credentials.txt file in the sessions directory with the specified username and password.
  • CredMigratedCommandSet.do_cred (method) cli/commands/cred_migrated.py:164 def do_cred(self, line) -- Display the credentials stored in the credentials.txt file and copy the password to the clipboard.
  • CredMigratedCommandSet.do_searchhash (method) cli/commands/cred_migrated.py:217 def do_searchhash(self, line) -- Helps to find hash types in Hashcat by searching through its help output.
  • CredMigratedCommandSet.do_smalldic (method) cli/commands/cred_migrated.py:253 def do_smalldic(self, list) -- Handles the creation of temporary files for users and passwords based on a small dictionary.
  • CredMigratedCommandSet.do_dacledit (method) cli/commands/cred_migrated.py:291 def do_dacledit(self, line) -- Execute the dacledit.py command for a specific user or all users listed in the users.txt file.
  • CredMigratedCommandSet.do_generatedic (method) cli/commands/cred_migrated.py:361 def do_generatedic(self, line) -- Generates a wordlist based on a target name and a list of characters, with various combinations.
  • single_combo (function) cli/commands/cred_migrated.py:386 def single_combo(name, characters, file, total, flag) -- Generates single character combinations with the target name.
  • double_combo (function) cli/commands/cred_migrated.py:409 def double_combo(name, characters, file, total, flag) -- Generates double character combinations with the target name.
  • triple_combo (function) cli/commands/cred_migrated.py:433 def triple_combo(name, characters, file, total, flag) -- Generates triple character combinations with the target name.
  • fourth_combo (function) cli/commands/cred_migrated.py:458 def fourth_combo(name, characters, file, total, flag) -- Generates fourth character combinations with the target name.
  • fifth_combo (function) cli/commands/cred_migrated.py:484 def fifth_combo(name, characters, file, total, flag) -- Generates fifth character combinations with the target name.
  • sixth_combo (function) cli/commands/cred_migrated.py:511 def sixth_combo(name, characters, file, total, flag) -- Generates sixth character combinations with the target name, adding uppercase characters.
  • intercalate_combo (function) cli/commands/cred_migrated.py:536 def intercalate_combo(name, characters, file, total, flag) -- Generates combinations of the target name and character list, intercalating uppercase and lowercase characters.
  • alternate_case (function) cli/commands/cred_migrated.py:552 def alternate_case(s) -- Helper function to alternate the case of characters in a string.
  • expand_regex (function) cli/commands/cred_migrated.py:568 def expand_regex(regex) -- Expands a regular expression into a list of characters.
  • CredMigratedCommandSet.do_createmail (method) cli/commands/cred_migrated.py:626 def do_createmail(self, line) -- Generate email permutations based on a full name and self.params['domain'], then save them to a file.
  • CredMigratedCommandSet.do_passwordspray (method) cli/commands/cred_migrated.py:674 def do_passwordspray(self, line) -- Perform password spraying using crackmapexec with the provided parameters.
  • CredMigratedCommandSet.do_addusers (method) cli/commands/cred_migrated.py:706 def do_addusers(self, line) -- Opens or creates the users.txt file in the sessions directory for editing using nano.
  • CredMigratedCommandSet.do_passtightvnc (method) cli/commands/cred_migrated.py:728 def do_passtightvnc(self, line) -- Decrypts TightVNC passwords using Metasploit.
  • CredMigratedCommandSet.do_transform (method) cli/commands/cred_migrated.py:775 def do_transform(self, line) -- Transforms the input string based on user-defined casing style.
  • CredMigratedCommandSet.do_username_anarchy (method) cli/commands/cred_migrated.py:803 def do_username_anarchy(self, line) -- Generate usernames using the username-anarchy tool based on user input.
  • CredMigratedCommandSet.do_john2keepas (method) cli/commands/cred_migrated.py:904 def do_john2keepas(self, line) -- List all .kdbx files in the 'sessions' directory, let the user select one, and run the command `sudo keepass2john...
  • CredMigratedCommandSet.do_keepass (method) cli/commands/cred_migrated.py:953 def do_keepass(self, line) -- Open a .kdbx file and print the titles and contents of all entries.
  • CredMigratedCommandSet.do_crack_cisco_7_password (method) cli/commands/cred_migrated.py:1017 def do_crack_cisco_7_password(self, line) -- Crack a Cisco Type 7 password hash and display the plaintext.
  • CredMigratedCommandSet.do_cubespraying (method) cli/commands/cred_migrated.py:1039 def do_cubespraying(self, line) -- Command cubespraying: Automates the installation and usage of CubeSpraying for performing credential spraying attacks.
  • CredMigratedCommandSet.do_john2zip (method) cli/commands/cred_migrated.py:1101 def do_john2zip(self, line) -- List all .zip files in the 'sessions' directory, let the user select one, and run the command `zip2john...
  • CredMigratedCommandSet.do_createusers_and_hashs (method) cli/commands/cred_migrated.py:1162 def do_createusers_and_hashs(self, line) -- Command createusers_and_hashs: Extracts usernames and hashes from a dump file.
  • CredMigratedCommandSet.do_refill_password (method) cli/commands/cred_migrated.py:1205 def do_refill_password(self, line) -- Generate a list of possible passwords by filling each asterisk in the input with user-specified characters.
  • CredMigratedCommandSet.do_rocky (method) cli/commands/cred_migrated.py:1241 def do_rocky(self, line) -- Reduces a wordlist based on the specified password length.
  • CredMigratedCommandSet.do_adsso_spray (method) cli/commands/cred_migrated.py:1277 def do_adsso_spray(self, line) -- Performs a password spray attack on Azure Active Directory Seamless Single Sign-On (SSO) using a specified list of...

cli/commands/crystal_ball.py

Depends on: cli/commands/_base.py, modules/privesc_predictor.py, utils.py

  • CrystalBallCommandSet.do_crystal_ball (method) cli/commands/crystal_ball.py:27 def do_crystal_ball(self, line) -- Analyze linpeas/winpeas output and rank privesc vectors with exact commands.
  • CrystalBallCommandSet.do_privesc_suggest (method) cli/commands/crystal_ball.py:110 def do_privesc_suggest(self, line) -- Quick alias for crystal_ball --auto.

cli/commands/daemon_ctl.py

Depends on: cli/commands/_base.py, modules/goals.py, modules/intercept.py, skills/daemon_control.py, utils.py Imported by: tests/test_daemon_ctl_command_set.py

  • DaemonControlCommandSet.do_daemon_mode (method) cli/commands/daemon_ctl.py:24 def do_daemon_mode(self, line) -- Switch the autonomous daemon between auto, approval and paused modes.
  • DaemonControlCommandSet.do_daemon_pause (method) cli/commands/daemon_ctl.py:63 def do_daemon_pause(self, line) -- Pause the autonomous daemon before its next step.
  • DaemonControlCommandSet.do_daemon_resume (method) cli/commands/daemon_ctl.py:82 def do_daemon_resume(self, line) -- Resume the autonomous daemon (switch mode to auto).
  • DaemonControlCommandSet.do_daemon_veto (method) cli/commands/daemon_ctl.py:97 def do_daemon_veto(self, line) -- Add or clear vetoed command first-tokens for the autonomous daemon.
  • DaemonControlCommandSet.do_daemon_focus (method) cli/commands/daemon_ctl.py:141 def do_daemon_focus(self, line) -- Restrict the autonomous daemon to a set of focus targets.
  • DaemonControlCommandSet.do_daemon_approve (method) cli/commands/daemon_ctl.py:175 def do_daemon_approve(self, line) -- Approve or veto the daemon's currently-pending action.
  • DaemonControlCommandSet.do_gatecheck (method) cli/commands/daemon_ctl.py:224 def do_gatecheck(self, line) -- Dry-run the safety gate against one command line.

cli/commands/database.py

Depends on: cli/commands/_base.py, modules/db.py, modules/finding_lifecycle.py, skills/autonomous_daemon.py, utils.py

  • DatabaseCommandSet.do_db_init (method) cli/commands/database.py:57 def do_db_init(self, line) -- Initialize the database (creates schema if not exists).
  • DatabaseCommandSet.do_db_workspace (method) cli/commands/database.py:75 def do_db_workspace(self, line) -- Manage workspaces (list, create, switch, delete).
  • DatabaseCommandSet.do_db_hosts (method) cli/commands/database.py:124 def do_db_hosts(self, line) -- List or add hosts in the active workspace.
  • DatabaseCommandSet.do_db_services (method) cli/commands/database.py:185 def do_db_services(self, line) -- List all services in the active workspace.
  • DatabaseCommandSet.do_db_vulns (method) cli/commands/database.py:213 def do_db_vulns(self, line) -- List or add vulnerabilities.
  • DatabaseCommandSet.do_retest (method) cli/commands/database.py:267 def do_retest(self, line) -- Re-verify a finding in an isolated session (LAZY retester).
  • DatabaseCommandSet.do_db_creds (method) cli/commands/database.py:349 def do_db_creds(self, line) -- List or add credentials.
  • DatabaseCommandSet.do_db_loot (method) cli/commands/database.py:393 def do_db_loot(self, line) -- List or add loot items.
  • DatabaseCommandSet.do_db_notes (method) cli/commands/database.py:433 def do_db_notes(self, line) -- List or add notes.
  • DatabaseCommandSet.do_db_import (method) cli/commands/database.py:471 def do_db_import(self, line) -- Import scan results into the database.
  • DatabaseCommandSet.do_db_export (method) cli/commands/database.py:509 def do_db_export(self, line) -- Export database table to CSV.
  • DatabaseCommandSet.do_db_status (method) cli/commands/database.py:543 def do_db_status(self, line) -- Show entity counts for the active workspace.
  • shlex_split (function) cli/commands/database.py:560 def shlex_split(text) -- Split text like shlex.split but handle empty strings gracefully.

cli/commands/defaults.py

Depends on: cli/assign.py, cli/commands/_base.py, core/config.py, core/defaults.py, utils.py

  • DefaultsCommandSet.do_defaults (method) cli/commands/defaults.py:45 def do_defaults(self, line) -- Show or override build-time defaults (TOML + payload.json).

cli/commands/demo.py

Depends on: cli/commands/_base.py, utils.py

  • DemoCommandSet.do_demo (method) cli/commands/demo.py:29 def do_demo(self, line) -- Run the end-to-end demo: MCP registration, session init, recommend, scan.

cli/commands/diagnostics.py

Depends on: cli/commands/_base.py Imported by: tests/test_cli_command_sets.py

  • DiagnosticsCommandSet.do_sys_runtime (method) cli/commands/diagnostics.py:30 def do_sys_runtime(self, _statement) -- Print interpreter, platform and core LazyOwn paths.
  • DiagnosticsCommandSet.do_sys_payload_keys (method) cli/commands/diagnostics.py:41 def do_sys_payload_keys(self, _statement) -- List the keys currently present in the parent shell's payload.

cli/commands/dns_exfil.py

Depends on: cli/commands/_base.py, modules/backdoor/server.c, modules/dns_beacon.py, utils.py

cli/commands/dpapi.py

Depends on: cli/commands/_base.py, modules/dpapi_harvester.py, utils.py

  • DPAPICommandSet.do_dpapi_harvest (method) cli/commands/dpapi.py:30 def do_dpapi_harvest(self, line) -- Harvest all DPAPI-protected credentials from the local machine.
  • DPAPICommandSet.do_dpapi_masterkeys (method) cli/commands/dpapi.py:66 def do_dpapi_masterkeys(self, line) -- List and extract DPAPI master keys.
  • DPAPICommandSet.do_dpapi_blob (method) cli/commands/dpapi.py:113 def do_dpapi_blob(self, line) -- Decrypt a DPAPI blob offline.

cli/commands/edr_detect.py

Depends on: cli/commands/_base.py, modules/edr_detector.py, utils.py

  • EDRDetectCommandSet.do_edr_detect (method) cli/commands/edr_detect.py:34 def do_edr_detect(self, line) -- Detect EDR/AV products on the target.
  • EDRDetectCommandSet.do_edr_profile (method) cli/commands/edr_detect.py:84 def do_edr_profile(self, line) -- Generate an evasion profile based on detected EDR.
  • EDRDetectCommandSet.do_edr_script (method) cli/commands/edr_detect.py:140 def do_edr_script(self, line) -- Generate a PowerShell EDR detection script.

cli/commands/encoding.py

Depends on: cli/commands/_base.py, utils.py Imported by: tests/test_encoding_command_set.py

  • EncodingCommandSet.do_urlencode (method) cli/commands/encoding.py:37 def do_urlencode(self, line) -- Encode a string for URL.
  • EncodingCommandSet.do_urldecode (method) cli/commands/encoding.py:66 def do_urldecode(self, line) -- Decode a URL-encoded string.
  • EncodingCommandSet.do_encode (method) cli/commands/encoding.py:95 def do_encode(self, line) -- Encodes a string using the specified shift value and substitution key.
  • EncodingCommandSet.do_decode (method) cli/commands/encoding.py:135 def do_decode(self, line) -- Decode a string using the specified shift value and substitution key.
  • EncodingCommandSet.do_rot (method) cli/commands/encoding.py:173 def do_rot(self, line) -- Apply a ROT (rotation) substitution cipher to the given string.
  • EncodingCommandSet.do_rotf (method) cli/commands/encoding.py:213 def do_rotf(self, line) -- Apply a ROT (rotation) substitution cipher to the given extension.
  • EncodingCommandSet.do_encoderpayload (method) cli/commands/encoding.py:259 def do_encoderpayload(self, line) -- Applies various obfuscations to a given command line string to create multiple obfuscated versions.
  • double_base64_encode (function) cli/commands/encoding.py:281 def double_base64_encode(cmd) -- Perform double Base64 encoding on the given command.
  • apply_obfuscations (function) cli/commands/encoding.py:309 def apply_obfuscations(cmd) -- Generate a list of obfuscated commands based on the given input command.
  • EncodingCommandSet.do_base64encode (method) cli/commands/encoding.py:361 def do_base64encode(self, line) -- Encodes a given string into Base64 format.
  • EncodingCommandSet.do_base64decode (method) cli/commands/encoding.py:389 def do_base64decode(self, line) -- Decodes a Base64 encoded string.
  • EncodingCommandSet.do_encodewinbase64 (method) cli/commands/encoding.py:420 def do_encodewinbase64(self, line) -- Encodes a given payload into a Base64 encoded string suitable for Windows PowerShell execution.
  • EncodingCommandSet.do_ip2hex (method) cli/commands/encoding.py:483 def do_ip2hex(self, line) -- Convert an IPv4 address into its hexadecimal representation.
  • EncodingCommandSet.do_hex_to_plaintext (method) cli/commands/encoding.py:509 def do_hex_to_plaintext(self, line) -- Converts hexadecimal data from a file to plain text.

cli/commands/enum.py

Depends on: cli/commands/_base.py, core/validators.py, utils.py Imported by: cli/graph_overlay.py, cli/palette_command.py, cli/scope_guard.py, core/errors.py, core/payload_schema.py, lazyc2/blueprints/auth.py, lazyc2/security/command_allowlist.py, lazygui/services/backend.py, lazygui/services/models.py, modules/bof_registry.py, modules/c2_profile_engine.py, modules/event_bus.py, modules/intercept.py, modules/lazy_rbac.py, modules/obs_parser.py, modules/operation.py, modules/opsec_scorer.py, modules/sleep_obfuscation.py, modules/socks_proxy.py, modules/world_model.py, skills/claude_md_orchestrator/models.py, skills/lazyown_hooks.py, skills/lazyown_permissions.py, skills/lazyown_policy.py

  • EnumCommandSet.do_smbclient (method) cli/commands/enum.py:38 def do_smbclient(self, line) -- Interacts with SMB shares using the smbclient command to perform the following operations:
  • EnumCommandSet.do_smbclient_impacket (method) cli/commands/enum.py:108 def do_smbclient_impacket(self, line) -- Interacts with SMB shares using the smbclient command to perform the following operations:
  • EnumCommandSet.do_smbclient_py (method) cli/commands/enum.py:178 def do_smbclient_py(self, line) -- Interacts with SMB shares using the smbclient.py command to perform the following operations:
  • EnumCommandSet.do_smbmap (method) cli/commands/enum.py:225 def do_smbmap(self, line) -- smbmap -H 10.10.10.3 [OPTIONS] Uses the smbmap tool to interact with SMB shares on a remote host:
  • EnumCommandSet.do_getnpusers (method) cli/commands/enum.py:345 def do_getnpusers(self, line) -- sudo impacket-GetNPUsers mist.htb/ -no-pass -usersfile sessions/users.txt Executes the impacket-GetNPUsers command...
  • EnumCommandSet.do_psexec (method) cli/commands/enum.py:390 def do_psexec(self, line) -- Executes the Impacket PSExec tool to attempt remote execution on the specified target.
  • EnumCommandSet.do_psexec_py (method) cli/commands/enum.py:446 def do_psexec_py(self, line) -- Executes the Impacket PSExec tool to attempt remote execution on the specified target.
  • EnumCommandSet.do_rpcdump (method) cli/commands/enum.py:502 def do_rpcdump(self, line) -- Executes the rpcdump.py script to dump RPC services from a target host.
  • EnumCommandSet.do_enum4linux (method) cli/commands/enum.py:528 def do_enum4linux(self, line) -- Performs enumeration of information from a target Linux/Unix system using enum4linux.
  • EnumCommandSet.do_rpcclient (method) cli/commands/enum.py:558 def do_rpcclient(self, line) -- Executes the rpcclient command to interact with a remote Windows system over RPC (Remote Procedure Call) using...

cli/commands/estorides.py

Depends on: cli/commands/_base.py, modules/estorides_importer.py, utils.py

  • EstoridesCommandSet.do_estorides_seed (method) cli/commands/estorides.py:73 def do_estorides_seed(self, line) -- Feed LazyOwn hosts/domains into Estorides for passive OSINT discovery.
  • EstoridesCommandSet.do_estorides_import (method) cli/commands/estorides.py:189 def do_estorides_import(self, line) -- Import Estorides-discovered entities into LazyOwn database and scope.
  • EstoridesCommandSet.do_estorides_loop (method) cli/commands/estorides.py:337 def do_estorides_loop(self, line) -- Run the bidirectional Estorides <-> LazyOwn feedback loop.
  • EstoridesCommandSet.do_estorides_surface (method) cli/commands/estorides.py:441 def do_estorides_surface(self, line) -- Show the combined active + passive attack surface.

cli/commands/evasive_payload.py

Depends on: cli/commands/_base.py, modules/evasion_engine.py, modules/evasive_payloads.py, utils.py

  • EvasivePayloadCommandSet.do_evasive_payload (method) cli/commands/evasive_payload.py:255 def do_evasive_payload(self, line) -- Generate an evasive payload with automatic AV/EDR bypass.
  • EvasivePayloadCommandSet.do_mutate_shellcode (method) cli/commands/evasive_payload.py:307 def do_mutate_shellcode(self, line) -- Apply polymorphic mutation to shellcode for signature evasion.
  • EvasivePayloadCommandSet.do_detect_edr (method) cli/commands/evasive_payload.py:360 def do_detect_edr(self, line) -- Generate commands to detect EDR/AV on the target.
  • EvasivePayloadCommandSet.do_evasive (method) cli/commands/evasive_payload.py:415 def do_evasive(self, line) -- Generate detection-evading payloads with multiple obfuscation strategies.
  • EvasivePayloadCommandSet.do_evasion (method) cli/commands/evasive_payload.py:533 def do_evasion(self, line) -- Generate and manage C2 evasion profiles.

cli/commands/exfiltration.py

Depends on: cli/commands/_base.py, cli/commands/cloud.py, core/crypto.py, core/hardening.py, utils.py

  • ExfiltrationCommandSet.do_encrypt (method) cli/commands/exfiltration.py:334 def do_encrypt(self, line) -- Encrypt a file with XOR using a caller-supplied key.
  • ExfiltrationCommandSet.do_decrypt (method) cli/commands/exfiltration.py:361 def do_decrypt(self, line) -- Decrypt an XOR-encrypted file using the matching key.
  • ExfiltrationCommandSet.do_evilwinrm (method) cli/commands/exfiltration.py:389 def do_evilwinrm(self, line) -- Drive Evil-WinRM through password, hash or kerberos-only auth.
  • ExfiltrationCommandSet.do_secretsdump (method) cli/commands/exfiltration.py:460 def do_secretsdump(self, line) -- Run impacket-secretsdump for SAM, credentials, or NTDS payloads.
  • ExfiltrationCommandSet.do_getuserspns (method) cli/commands/exfiltration.py:534 def do_getuserspns(self, line) -- Run impacket-GetUserSPNs to request roastable service tickets.
  • ExfiltrationCommandSet.do_gitdumper (method) cli/commands/exfiltration.py:568 def do_gitdumper(self, line) -- Install git-dumper if missing and pull a remote .git tree.
  • ExfiltrationCommandSet.do_evidence (method) cli/commands/exfiltration.py:593 def do_evidence(self, line) -- Encode the sessions/ tree into a video file or decode one back.
  • ExfiltrationCommandSet.do_getadusers (method) cli/commands/exfiltration.py:673 def do_getadusers(self, line) -- Run impacket-GetADUsers to enumerate AD accounts on the DC.
  • ExfiltrationCommandSet.do_adgetpass (method) cli/commands/exfiltration.py:734 def do_adgetpass(self, line) -- Generate a PowerShell script to extract Azure AD Connect credentials.
  • ExfiltrationCommandSet.do_samdump2 (method) cli/commands/exfiltration.py:799 def do_samdump2(self, line) -- Run samdump2 against sessions/SYSTEM and sessions/SAM.
  • ExfiltrationCommandSet.do_reg_py (method) cli/commands/exfiltration.py:824 def do_reg_py(self, line) -- Query a remote registry hive with impacket-reg.py over hash auth.
  • ExfiltrationCommandSet.do_unzip (method) cli/commands/exfiltration.py:851 def do_unzip(self, line) -- Extract a zip archive located under sessions/.
  • ExfiltrationCommandSet.do_getnthash_py (method) cli/commands/exfiltration.py:873 def do_getnthash_py(self, line) -- Recover the NT hash from a Kerberos U2U TGS via PKINITtools.
  • ExfiltrationCommandSet.do_upload_gofile (method) cli/commands/exfiltration.py:905 def do_upload_gofile(self, line) -- Upload a file from sessions/ to Gofile via its HTTP API.
  • ExfiltrationCommandSet.do_rsync (method) cli/commands/exfiltration.py:967 def do_rsync(self, line) -- Push the sessions/ tree to rhost over SCP with sshpass.
  • ExfiltrationCommandSet.do_gmsadumper (method) cli/commands/exfiltration.py:1004 def do_gmsadumper(self, line) -- Run gMSADumper to read gMSA password blobs visible to the user.
  • ExfiltrationCommandSet.do_dploot (method) cli/commands/exfiltration.py:1043 def do_dploot(self, line) -- Run dploot to loot DPAPI-protected secrets.
  • ExfiltrationCommandSet.download_file_from_c2 (method) cli/commands/exfiltration.py:1125 def download_file_from_c2(self, file_name, clientid) -- Download a file from the C2 implant upload queue.
  • ExfiltrationCommandSet.do_download_c2 (method) cli/commands/exfiltration.py:1164 def do_download_c2(self, line) -- Download a file from the C2 implant via the upload command.
  • ExfiltrationCommandSet.do_exfil_s3 (method) cli/commands/exfiltration.py:1181 def do_exfil_s3(self, line) -- Upload a file to an AWS S3 bucket.
  • ExfiltrationCommandSet.do_exfil_telegram (method) cli/commands/exfiltration.py:1226 def do_exfil_telegram(self, line) -- Exfiltrate a file via Telegram Bot API.
  • ExfiltrationCommandSet.do_exfil_discord (method) cli/commands/exfiltration.py:1271 def do_exfil_discord(self, line) -- Exfiltrate a file via Discord webhook.
  • ExfiltrationCommandSet.do_exfil_gcs (method) cli/commands/exfiltration.py:1314 def do_exfil_gcs(self, line) -- Upload a file to Google Cloud Storage.
  • ExfiltrationCommandSet.do_exfil_dns (method) cli/commands/exfiltration.py:1356 def do_exfil_dns(self, line) -- Exfiltrate data via DNS tunneling.
  • ExfiltrationCommandSet.do_exfil_http (method) cli/commands/exfiltration.py:1415 def do_exfil_http(self, line) -- Exfiltrate a file via HTTP POST to a controlled server.
  • ExfiltrationCommandSet.do_exfil_auto (method) cli/commands/exfiltration.py:1485 def do_exfil_auto(self, line) -- Auto-detect flags and sensitive files, then exfiltrate.
  • ExfiltrationCommandSet.do_stage (method) cli/commands/exfiltration.py:1543 def do_stage(self, line) -- Stage data for exfiltration: compress, encrypt, and split.

cli/commands/exploit.py

Depends on: cli/commands/_base.py, modules/categories.py, utils.py

  • ExploitCommandSet.do_sqlmap (method) cli/commands/exploit.py:39 def do_sqlmap(self, line) -- Runs SQLMap against the target URL for SQL injection testing.
  • ExploitCommandSet.do_lazypwn (method) cli/commands/exploit.py:64 def do_lazypwn(self, line) -- Executes the LazyPwn automated exploitation script.
  • ExploitCommandSet.do_rev (method) cli/commands/exploit.py:69 def do_rev(self, line) -- Copies a reverse shell one-liner to the clipboard.
  • ExploitCommandSet.do_commix (method) cli/commands/exploit.py:86 def do_commix(self, line) -- Runs commix for command injection testing.
  • ExploitCommandSet.do_download_exploit (method) cli/commands/exploit.py:105 def do_download_exploit(self, line) -- Downloads and sets up an exploit, optionally serving via HTTP.
  • ExploitCommandSet.do_img2cookie (method) cli/commands/exploit.py:126 def do_img2cookie(self, line) -- Generates an XSS payload that steals cookies via an image tag.
  • ExploitCommandSet.do_wrapper (method) cli/commands/exploit.py:150 def do_wrapper(self, line) -- Copies LFI php-wrapper payloads to the clipboard.
  • ExploitCommandSet.do_kusa (method) cli/commands/exploit.py:168 def do_kusa(self, line) -- Runs the Kusanagi payload generator.
  • ExploitCommandSet.do_ticketer (method) cli/commands/exploit.py:178 def do_ticketer(self, line) -- Runs Impacket ticketer for golden/silver ticket creation.
  • ExploitCommandSet.do_www (method) cli/commands/exploit.py:192 def do_www(self, line) -- Starts a simple HTTP server on the configured port to serve payloads.

cli/commands/exploit_migrated.py

Depends on: cli/commands/_base.py, core/autonomous.py, modules/adcs_attacks.py, modules/exploit_chain.py, modules/exploit_recommender.py, modules/world_model.py, utils.py Imported by: tests/test_lazy_runner.py

  • ExploitMigratedCommandSet.do_cp (method) cli/commands/exploit_migrated.py:43 def do_cp(self, line) -- Copies a file from the ExploitDB directory to the sessions directory.
  • ExploitMigratedCommandSet.do_createcookie (method) cli/commands/exploit_migrated.py:84 def do_createcookie(self, line) -- Creates a cookie.txt file in the sessions directory with the specified cookie value.
  • ExploitMigratedCommandSet.do_py3ttyup (method) cli/commands/exploit_migrated.py:128 def do_py3ttyup(self, line) -- Copies a Python reverse shell command to the clipboard.
  • ExploitMigratedCommandSet.do_pyautomate (method) cli/commands/exploit_migrated.py:164 def do_pyautomate(self, line) -- Automates the execution of pwntomate tools on XML configuration files.
  • ExploitMigratedCommandSet.do_winbase64payload (method) cli/commands/exploit_migrated.py:215 def do_winbase64payload(self, line) -- Creates a base64 encoded payload specifically for Windows to execute a PowerShell command or download a file using...
  • ExploitMigratedCommandSet.do_createdll (method) cli/commands/exploit_migrated.py:344 def do_createdll(self, line) -- Create a Windows DLL file using MinGW-w64 or a Blazor DLL for Linux.
  • ExploitMigratedCommandSet.do_seo (method) cli/commands/exploit_migrated.py:402 def do_seo(self, line) -- Performs a web seo fingerprinting scan using lazyseo.py.
  • ExploitMigratedCommandSet.do_padbuster (method) cli/commands/exploit_migrated.py:437 def do_padbuster(self, line) -- Execute the PadBuster command for padding oracle attacks.
  • ExploitMigratedCommandSet.do_cacti_exploit (method) cli/commands/exploit_migrated.py:483 def do_cacti_exploit(self, line) -- Automates the exploitation of the Cacti version 1.2.26 vulnerability using the multi/http/cacti_package_import_rce...
  • setup_handler (function) cli/commands/exploit_migrated.py:513 def setup_handler(config_file, lhost, lport) -- Sets up a Metasploit multi/handler exploit configuration in the provided config file.
  • cacti_exploit (function) cli/commands/exploit_migrated.py:536 def cacti_exploit(config_file, host) -- Configures an exploit for the Cacti Package Import Remote Code Execution vulnerability in the provided config file.
  • ExploitMigratedCommandSet.do_shellshock (method) cli/commands/exploit_migrated.py:568 def do_shellshock(self, line) -- Executes a Shellshock attack against a target.
  • ExploitMigratedCommandSet.do_powerserver (method) cli/commands/exploit_migrated.py:630 def do_powerserver(self, line) -- This function generates a PowerShell script that retrieves reverse shell over http on a Windows system.
  • ExploitMigratedCommandSet.do_sqli (method) cli/commands/exploit_migrated.py:693 def do_sqli(self, line) -- Asks the user for the URL, database, table, and columns, and then executes the Python script 'modules/lazybsqli.py'...
  • ExploitMigratedCommandSet.do_sharpshooter (method) cli/commands/exploit_migrated.py:724 def do_sharpshooter(self, line) -- Executes a payload creation framework for the retrieval and execution of arbitrary CSharp source code.
  • ExploitMigratedCommandSet.do_shellfire (method) cli/commands/exploit_migrated.py:768 def do_shellfire(self, line) -- Runs Shellfire with various options and allows generating payloads.
  • ExploitMigratedCommandSet.do_downloader (method) cli/commands/exploit_migrated.py:892 def do_downloader(self, line) -- Generate a downloader command for files in the sessions directory.
  • ExploitMigratedCommandSet.do_eternal (method) cli/commands/exploit_migrated.py:972 def do_eternal(self, line) -- Automates the EternalBlue (MS17-010) exploitation process using Metasploit.
  • ExploitMigratedCommandSet.do_rejetto_hfs_exec (method) cli/commands/exploit_migrated.py:1016 def do_rejetto_hfs_exec(self, line) -- HttpFileServer version 2.3.
  • ExploitMigratedCommandSet.do_ms08_067_netapi (method) cli/commands/exploit_migrated.py:1053 def do_ms08_067_netapi(self, line) -- SMB CVE-2008-4250.
  • ExploitMigratedCommandSet.do_xss (method) cli/commands/exploit_migrated.py:1090 def do_xss(self, line) -- Executes the XSS (Cross-Site Scripting) vulnerability testing procedure using user-defined parameters and...
  • ExploitMigratedCommandSet.do_template_helper_serializer (method) cli/commands/exploit_migrated.py:1135 def do_template_helper_serializer(self, line) -- Handles the creation and serialization of a template helper.
  • ExploitMigratedCommandSet.do_xsstrike (method) cli/commands/exploit_migrated.py:1179 def do_xsstrike(self, line) -- Command xsstrike: Installs and runs XSStrike for finding XSS vulnerabilities.
  • ExploitMigratedCommandSet.do_sireprat (method) cli/commands/exploit_migrated.py:1247 def do_sireprat(self, line) -- Command sireprat: Automates the setup and usage of SirepRAT to perform various attacks on a Windows IoT Core device.
  • ExploitMigratedCommandSet.do_upload_bypass (method) cli/commands/exploit_migrated.py:1359 def do_upload_bypass(self, line) -- Command upload_bypass: Automates the installation and execution of Upload_Bypass for performing file upload bypass...
  • ExploitMigratedCommandSet.do_pywhisker (method) cli/commands/exploit_migrated.py:1420 def do_pywhisker(self, line) -- Executes the pyWhisker tool for manipulating the msDS-KeyCredentialLink attribute of a target user or computer.
  • ExploitMigratedCommandSet.do_owneredit (method) cli/commands/exploit_migrated.py:1470 def do_owneredit(self, line) -- Executes the Impacket owneredit tool for manipulating ownership of Active Directory objects.
  • ExploitMigratedCommandSet.do_gettgtpkinit_py (method) cli/commands/exploit_migrated.py:1516 def do_gettgtpkinit_py(self, line) -- Executes the gettgtpkinit.py tool from PKINITtools to request a TGT using Kerberos PKINIT with a PFX or PEM certificate.
  • ExploitMigratedCommandSet.do_gets4uticket_py (method) cli/commands/exploit_migrated.py:1567 def do_gets4uticket_py(self, line) -- Executes the gets4uticket.py tool from PKINITtools to request an S4U2Self service ticket using Kerberos.
  • ExploitMigratedCommandSet.do_aclpwn_py (method) cli/commands/exploit_migrated.py:1614 def do_aclpwn_py(self, line) -- Executes the aclpwn.py tool to find and exploit ACL paths for privilege escalation in an Active Directory environment.
  • ExploitMigratedCommandSet.do_addspn_py (method) cli/commands/exploit_migrated.py:1662 def do_addspn_py(self, line) -- Executes the addspn.py tool to manage Service Principal Names (SPNs) on Active Directory accounts via LDAP.
  • ExploitMigratedCommandSet.do_printerbug_py (method) cli/commands/exploit_migrated.py:1706 def do_printerbug_py(self, line) -- Executes the printerbug.py tool to trigger the SpoolService bug via RPC backconnect.
  • ExploitMigratedCommandSet.do_krbrelayx_py (method) cli/commands/exploit_migrated.py:1760 def do_krbrelayx_py(self, line) -- Executes the krbrelayx.py tool for Kerberos relaying or unconstrained delegation abuse.
  • ExploitMigratedCommandSet.do_autoblody (method) cli/commands/exploit_migrated.py:1805 def do_autoblody(self, line) -- Executes the autobloody tool for automating Active Directory privilege escalation paths.
  • ExploitMigratedCommandSet.do_unicode_WAFbypass (method) cli/commands/exploit_migrated.py:1869 def do_unicode_WAFbypass(self, line) -- We open a Netcat listener on port 443 and attempt to exploit NodeJS deserialization by sending the following...
  • ExploitMigratedCommandSet.do_sqli_mssql_test (method) cli/commands/exploit_migrated.py:1924 def do_sqli_mssql_test(self, line) -- Initiates a reverse MSSQL shell by starting an HTTP server to handle incoming connections and exfiltrate data.
  • ExploitMigratedCommandSet.do_pyoracle2 (method) cli/commands/exploit_migrated.py:1962 def do_pyoracle2(self, line) -- Executes the pyOracle2 tool for performing padding oracle attacks.
  • ExploitMigratedCommandSet.do_lfi (method) cli/commands/exploit_migrated.py:2044 def do_lfi(self, line) -- Exploits a potential Local File Inclusion (LFI) vulnerability by crafting and sending HTTP GET requests to a...
  • ExploitMigratedCommandSet.do_greatSCT (method) cli/commands/exploit_migrated.py:2086 def do_greatSCT(self, line) -- Executes the GreatSCT tool for generating payloads that bypass antivirus and application whitelisting solutions.
  • ExploitMigratedCommandSet.do_sqsh (method) cli/commands/exploit_migrated.py:2131 def do_sqsh(self, line) -- Executes the Impacket sqsh tool for manipulating ownership of Active Directory objects.
  • ExploitMigratedCommandSet.do_jwt_tool (method) cli/commands/exploit_migrated.py:2176 def do_jwt_tool(self, line) -- Uses the jwt_tool to analyze, tamper, or exploit JSON Web Tokens (JWTs).
  • ExploitMigratedCommandSet.do_filtering (method) cli/commands/exploit_migrated.py:2220 def do_filtering(self, line) -- Applies various filtering techniques to the given command line by modifying each character or word appropriately.
  • ExploitMigratedCommandSet.do_lol (method) cli/commands/exploit_migrated.py:2246 def do_lol(self, line) -- Exploits a target by injecting a malicious payload and collecting admin information.
  • ExploitMigratedCommandSet.do_utf (method) cli/commands/exploit_migrated.py:2331 def do_utf(self, line) -- Encode a given payload into UTF-16 escape sequences.
  • ExploitMigratedCommandSet.do_digdug (method) cli/commands/exploit_migrated.py:2375 def do_digdug(self, line) -- Executes Dig Dug to inflate the size of an executable file, leveraging pre-configured settings and interactive input...
  • ExploitMigratedCommandSet.do_sshexploit (method) cli/commands/exploit_migrated.py:2433 def do_sshexploit(self, line) -- Exploits OpenSSH vulnerability CVE-2023-38408 via the PKCS#11 feature of the ssh-agent.
  • ExploitMigratedCommandSet.do_excelntdonut (method) cli/commands/exploit_migrated.py:2502 def do_excelntdonut(self, line) -- Generates an Excel 4.0 (XLM) macro from a provided C# source file using EXCELntDonut.
  • ExploitMigratedCommandSet.do_ntpdate (method) cli/commands/exploit_migrated.py:2558 def do_ntpdate(self, line) -- Synchronizes the system clock with a specified NTP server.
  • ExploitMigratedCommandSet.do_adcs_check (method) cli/commands/exploit_migrated.py:2582 def do_adcs_check(self, line) -- Check Active Directory Certificate Services for ESC1-ESC8 vulnerabilities.
  • ExploitMigratedCommandSet.do_chain (method) cli/commands/exploit_migrated.py:2641 def do_chain(self, line) -- Run autonomous exploitation chain: recon -> vuln -> exploit -> post-exploit.
  • ExploitMigratedCommandSet.do_exploit_recommend (method) cli/commands/exploit_migrated.py:2738 def do_exploit_recommend(self, line) -- AI-powered exploit recommendation — matches discovered services to CVEs.

cli/commands/exploitgym.py

Depends on: cli/commands/_base.py, modules/exploitgym_gym.py, utils.py Imported by: tests/test_exploitgym_gym.py

  • ExploitGymCommandSet.do_exploitgym (method) cli/commands/exploitgym.py:43 def do_exploitgym(self, line) -- ExploitGym — real-world exploit benchmark via containerised tasks.

cli/commands/help_ui.py

Depends on: cli/aliases.py, cli/assign.py, cli/command_explorer.py, cli/commands/_base.py, cli/config_status.py, cli/contextual_help.py, cli/doctor.py, cli/engagement_hooks.py, cli/ops_commands.py, cli/tui_theme.py, cli/tutorial.py, cli/wizard.py, cli/wizard_scope.py, core/config.py, core/console.py, modules/world_model.py, utils.py Imported by: tests/test_help_ui_command_set.py

  • HelpUiCommandSet.do_wizard (method) cli/commands/help_ui.py:36 def do_wizard(self, line) -- Guided first-run setup wizard — configure rhost, lhost, domain, wordlists and more.
  • HelpUiCommandSet.do_tutorial (method) cli/commands/help_ui.py:151 def do_tutorial(self, line) -- Interactive tutorial that walks you through the golden path.
  • HelpUiCommandSet.do_help_phase (method) cli/commands/help_ui.py:175 def do_help_phase(self, line) -- List all commands for a given kill-chain phase.
  • HelpUiCommandSet.do_help_status (method) cli/commands/help_ui.py:208 def do_help_status(self, line) -- Show which session requirements are met (rhost, creds, domain, OS).
  • HelpUiCommandSet.do_ctx_help (method) cli/commands/help_ui.py:221 def do_ctx_help(self, line) -- Show contextual help for a command: description, phase, requirements, tips.
  • HelpUiCommandSet.do_ctx (method) cli/commands/help_ui.py:242 def do_ctx(self, line) -- Print a single-line operator context: rhost, lhost, domain, phase, os, creds.
  • HelpUiCommandSet.do_command_explorer (method) cli/commands/help_ui.py:254 def do_command_explorer(self, line) -- Interactive command explorer organized by goals and phases.
  • HelpUiCommandSet.do_config_status (method) cli/commands/help_ui.py:287 def do_config_status(self, line) -- Show configuration status grouped by category with set/missing indicators.
  • HelpUiCommandSet.do_tui_theme (method) cli/commands/help_ui.py:308 def do_tui_theme(self, line) -- Switch the TUI colour theme used by the splash and styled output.
  • HelpUiCommandSet.do_doctor (method) cli/commands/help_ui.py:334 def do_doctor(self, line) -- Preflight environment health check — verify the install is ready.
  • HelpUiCommandSet.do_karma (method) cli/commands/help_ui.py:369 def do_karma(self, line) -- Show ELO score, karma rank and exploration progress for this operator.
  • HelpUiCommandSet.do_tgrep (method) cli/commands/help_ui.py:404 def do_tgrep(self, line) -- Search across all previous command outputs and session logs.
  • HelpUiCommandSet.do_phase (method) cli/commands/help_ui.py:421 def do_phase(self, line) -- Get or set the current kill-chain phase.
  • HelpUiCommandSet.do_killchain (method) cli/commands/help_ui.py:455 def do_killchain(self, line) -- Show the unified kill-chain progress and control auto-refresh.

cli/commands/infra.py

Depends on: cli/commands/_base.py, cli/confirm.py, utils.py Imported by: tests/test_bdd_infra_range_report.py, tests/test_infra_disposable.py

  • InfraCommandSet.do_infra (method) cli/commands/infra.py:136 def do_infra(self, line) -- Manage disposable C2 infrastructure.

cli/commands/lab.py

Depends on: cli/commands/_base.py, utils.py Imported by: tests/test_bdd_infra_range_report.py, tests/test_infra_disposable.py

cli/commands/lateral.py

Depends on: cli/commands/_base.py, modules/categories.py, utils.py

  • LateralMovementCommandSet.do_socat (method) cli/commands/lateral.py:31 def do_socat(self, line) -- Run socat for port forwarding.
  • LateralMovementCommandSet.do_chisel (method) cli/commands/lateral.py:43 def do_chisel(self, line) -- Run chisel for quick tunneling.
  • LateralMovementCommandSet.do_set_proxychains (method) cli/commands/lateral.py:59 def do_set_proxychains(self, line) -- Configure proxychains for the current session.
  • LateralMovementCommandSet.do_ngrok (method) cli/commands/lateral.py:72 def do_ngrok(self, line) -- Start ngrok tunnel.
  • LateralMovementCommandSet.do_ligolo (method) cli/commands/lateral.py:79 def do_ligolo(self, line) -- Run Ligolo-ng for advanced pivoting.
  • LateralMovementCommandSet.do_nc (method) cli/commands/lateral.py:91 def do_nc(self, line) -- Netcat listener or connect.
  • LateralMovementCommandSet.do_wmiexec (method) cli/commands/lateral.py:106 def do_wmiexec(self, line) -- Execute commands via WMI.
  • LateralMovementCommandSet.do_ssh (method) cli/commands/lateral.py:114 def do_ssh(self, line) -- SSH to a remote host (custom port).

cli/commands/lateral_migrated.py

Depends on: cli/commands/_base.py, core/hardening.py, modules/domain_dominance.py, utils.py

  • LateralMigratedCommandSet.do_vpn (method) cli/commands/lateral_migrated.py:29 def do_vpn(self, line) -- Connect to a VPN by selecting from available .ovpn files.
  • LateralMigratedCommandSet.do_id_rsa (method) cli/commands/lateral_migrated.py:101 def do_id_rsa(self, line) -- Create an SSH private key file and connect to a remote host using SSH.
  • LateralMigratedCommandSet.do_sshd (method) cli/commands/lateral_migrated.py:172 def do_sshd(self, line) -- Starts the SSH service and displays its status.
  • LateralMigratedCommandSet.do_wifipass (method) cli/commands/lateral_migrated.py:199 def do_wifipass(self, line) -- This function generates a PowerShell script that retrieves saved Wi-Fi passwords on a Windows system.
  • LateralMigratedCommandSet.do_bloodyAD (method) cli/commands/lateral_migrated.py:229 def do_bloodyAD(self, line) -- Execute the bloodyAD.py command for a specific user or all users listed in the users.txt file.
  • LateralMigratedCommandSet.do_getTGT (method) cli/commands/lateral_migrated.py:321 def do_getTGT(self, line) -- Requests a Ticket Granting Ticket (TGT) using the Impacket tool with provided credentials.
  • LateralMigratedCommandSet.do_tord (method) cli/commands/lateral_migrated.py:369 def do_tord(self, line) -- Execute the tor.sh script with the specified port or default to port 80 if no port is provided.
  • LateralMigratedCommandSet.do_shadowsocks (method) cli/commands/lateral_migrated.py:404 def do_shadowsocks(self, line) -- Execute the Shadowsocks tool to create a secure tunnel for network traffic.
  • LateralMigratedCommandSet.do_rnc (method) cli/commands/lateral_migrated.py:477 def do_rnc(self, line) -- Runs nc with rlwrap the specified port for listening.
  • LateralMigratedCommandSet.do_gospherus (method) cli/commands/lateral_migrated.py:543 def do_gospherus(self, line) -- Command gospherus: Clones and uses the Gopherus tool to generate gopher payloads for various services.
  • LateralMigratedCommandSet.do_mssqlcli (method) cli/commands/lateral_migrated.py:613 def do_mssqlcli(self, line) -- Attempts to connect to an MSSQL server using the mssqlclient.py tool with Windows authentication.
  • LateralMigratedCommandSet.do_penelope (method) cli/commands/lateral_migrated.py:666 def do_penelope(self, line) -- Command penelope: Installs and runs Penelope for handling reverse and bind shells.
  • LateralMigratedCommandSet.do_stormbreaker (method) cli/commands/lateral_migrated.py:777 def do_stormbreaker(self, line) -- Command stormbreaker: Automates the installation and usage of Storm-Breaker for performing various network attacks.
  • LateralMigratedCommandSet.do_regeorg (method) cli/commands/lateral_migrated.py:823 def do_regeorg(self, line) -- Executes the reGeorg tool for HTTP(s) tunneling through a SOCKS proxy.
  • LateralMigratedCommandSet.do_targetedKerberoas (method) cli/commands/lateral_migrated.py:871 def do_targetedKerberoas(self, line) -- Executes the targetedKerberoast tool for extracting Kerberos service tickets.
  • LateralMigratedCommandSet.do_dcomexec (method) cli/commands/lateral_migrated.py:931 def do_dcomexec(self, line) -- Executes the Impacket dcomexec tool to run commands on a remote system using DCOM.
  • LateralMigratedCommandSet.do_upload_c2 (method) cli/commands/lateral_migrated.py:1002 def do_upload_c2(self, line) -- upload command in the client using the C2 to upload a file
  • LateralMigratedCommandSet.do_wmiexecpro (method) cli/commands/lateral_migrated.py:1031 def do_wmiexecpro(self, line) -- Executes wmiexec-pro with various options for WMI operations.
  • install_wmiexecpro (function) cli/commands/lateral_migrated.py:1070 def install_wmiexecpro()
  • LateralMigratedCommandSet.do_lateral_mov_lin (method) cli/commands/lateral_migrated.py:1247 def do_lateral_mov_lin(self, line) -- Perform lateral movement by downloading and installing LazyOwn on a remote Linux machine.
  • LateralMigratedCommandSet.do_addcli (method) cli/commands/lateral_migrated.py:1302 def do_addcli(self, line) -- Add a client to execute c2 commands
  • LateralMigratedCommandSet.do_dominion (method) cli/commands/lateral_migrated.py:1317 def do_dominion(self, line) -- Execute a fully automated Active Directory domain takeover.

cli/commands/lazyloop.py

Depends on: cli/commands/_base.py, cli/lazy_monitor.py, cli/lazy_orchestrator.py, modules/lazy_bridge.py, modules/lazy_engine.py, modules/lazy_mentions.py, utils.py Imported by: tests/test_lazy_orchestrator.py, tests/test_lazy_runner.py

  • LazyQueueCommandSet.do_lazy_sync (method) cli/commands/lazyloop.py:36 def do_lazy_sync(self, line) -- Run bidirectional LAZY sync into world model and objectives.
  • LazyQueueCommandSet.do_lazy_intents (method) cli/commands/lazyloop.py:51 def do_lazy_intents(self, line) -- List engine intents for a task, optionally filtered by state.
  • LazyQueueCommandSet.do_lazy_delete (method) cli/commands/lazyloop.py:71 def do_lazy_delete(self, line) -- Delete an engine intent; soft keeps outputs, hard cascades.
  • LazyQueueCommandSet.do_lazy_findings (method) cli/commands/lazyloop.py:110 def do_lazy_findings(self, line) -- List engine findings for a task, optionally filtered by status.
  • LazyQueueCommandSet.do_lazy_verdict (method) cli/commands/lazyloop.py:132 def do_lazy_verdict(self, line) -- Record a manual retest verdict on an engine finding.
  • LazyQueueCommandSet.do_lazy_mention (method) cli/commands/lazyloop.py:155 def do_lazy_mention(self, line) -- Search @ mention candidates with scroll pagination.
  • LazyQueueCommandSet.do_lazy_approve (method) cli/commands/lazyloop.py:190 def do_lazy_approve(self, line) -- List engine guard reviews filtered by decision and source.
  • LazyQueueCommandSet.do_lazy_fleet (method) cli/commands/lazyloop.py:212 def do_lazy_fleet(self, line) -- Cross-task fleet: list | graph | findings | traces [query] | node | pause |...
  • LazyQueueCommandSet.do_lazy_orchestrator (method) cli/commands/lazyloop.py:277 def do_lazy_orchestrator(self, line) -- Admin console for the loop (Textual TUI).
  • LazyQueueCommandSet.do_lazy_view (method) cli/commands/lazyloop.py:301 def do_lazy_view(self, line) -- Attach the live worker monitor to a task (or the newest task).

cli/commands/lazyops.py

Depends on: cli/commands/_base.py, core/process.py, modules/__init__.py, modules/auto_registry.py, modules/custom_tools.py, modules/lazy_agent.py, modules/lazy_cli_bridge.py, modules/lazy_engine.py, modules/lazy_installer.py, modules/lazy_proxy.py, modules/lazy_roles.py, modules/lazy_runner.py, modules/lazy_sandbox.py, modules/lazy_skill_mirror.py, modules/lazy_skills.py, modules/orchestrator_config.py, modules/selfupdate.py, modules/traffic_recorder.py, utils.py Imported by: tests/test_asset_gate.py, tests/test_lazy_agent.py, tests/test_lazy_engine.py, tests/test_lazy_runner.py

  • LazyCommandSet.do_lazy_dispatch (method) cli/commands/lazyops.py:88 def do_lazy_dispatch(self, line) -- Dispatch one detached task to an external agent: opencode|hermes [--in DIR] [--resume S] [--max-turns N]...
  • LazyCommandSet.do_lazy_task (method) cli/commands/lazyops.py:147 def do_lazy_task(self, line) -- Create/list/show/pause/resume/delete/spawn/queue/limit/drain tasks.
  • LazyCommandSet.do_lazy_graph (method) cli/commands/lazyops.py:269 def do_lazy_graph(self, line) -- Show planner-facing graph overview.
  • LazyCommandSet.do_lazy_context (method) cli/commands/lazyops.py:298 def do_lazy_context(self, line) -- Render the bounded prompt context the planner/worker LLMs receive.
  • LazyCommandSet.do_lazy_skill (method) cli/commands/lazyops.py:319 def do_lazy_skill(self, line) -- Skills: list|show |preview|inject <name...>|clear|auto on|off|mirror [name]|register-hermes.
  • LazyCommandSet.do_lazy_workspace (method) cli/commands/lazyops.py:403 def do_lazy_workspace(self, line) -- Confined workspace files: list [path]|read |write |mkdir |rm |path.
  • LazyCommandSet.do_lazy_selfupdate (method) cli/commands/lazyops.py:456 def do_lazy_selfupdate(self, line) -- Self-update: check [--branch B]|apply [--yes] [--branch B].
  • LazyCommandSet.do_lazy_planner (method) cli/commands/lazyops.py:484 def do_lazy_planner(self, line) -- Run one planner wakeup (emits 0..N intents).
  • LazyCommandSet.do_lazy_frontier (method) cli/commands/lazyops.py:503 def do_lazy_frontier(self, line) -- Show pending intent queue.
  • LazyCommandSet.do_lazy_worker (method) cli/commands/lazyops.py:515 def do_lazy_worker(self, line) -- Claim ONE intent and execute it with real tools.
  • LazyCommandSet.do_lazy_trace (method) cli/commands/lazyops.py:555 def do_lazy_trace(self, line) -- Worker trace exchange.
  • LazyCommandSet.do_lazy_broadcast (method) cli/commands/lazyops.py:608 def do_lazy_broadcast(self, line) -- Exploration timeline.
  • LazyCommandSet.do_lazy_hint (method) cli/commands/lazyops.py:643 def do_lazy_hint(self, line) -- Inject steering hint.
  • LazyCommandSet.do_lazy_intent (method) cli/commands/lazyops.py:655 def do_lazy_intent(self, line) -- Inject high-priority intent.
  • LazyCommandSet.do_lazy_intent_delete (method) cli/commands/lazyops.py:680 def do_lazy_intent_delete(self, line) -- Delete an intent.
  • LazyCommandSet.do_lazy_goal (method) cli/commands/lazyops.py:723 def do_lazy_goal(self, line) -- Goals: list|set <t1;t2>|edit |delete |prove |met .
  • LazyCommandSet.do_lazy_constraint (method) cli/commands/lazyops.py:762 def do_lazy_constraint(self, line) -- Constraints: add <allow|deny> | list.
  • LazyCommandSet.do_lazy_scope (method) cli/commands/lazyops.py:780 def do_lazy_scope(self, line) -- Scope: add [reason] | list.
  • LazyCommandSet.do_lazy_todo (method) cli/commands/lazyops.py:798 def do_lazy_todo(self, line) -- Serial chain todos: add | done | list.
  • LazyCommandSet.do_lazy_asset (method) cli/commands/lazyops.py:820 def do_lazy_asset(self, line) -- Assets: add | list [kind] | scoped [--kind K] | coverage | untested.
  • LazyCommandSet.do_lazy_enrich (method) cli/commands/lazyops.py:861 def do_lazy_enrich(self, line) -- Enrich asset with DNS/HTTP.
  • LazyCommandSet.do_lazy_traffic (method) cli/commands/lazyops.py:873 def do_lazy_traffic(self, line) -- Traffic: list|search |search-host [--port P]|get |body |blob [--part req|resp]...
  • LazyCommandSet.do_lazy_guard (method) cli/commands/lazyops.py:1094 def do_lazy_guard(self, line) -- Guard gate: check | rule-add <allow|ask|deny> [reason] | rule-del

    | judge on|off [--fail...

  • LazyCommandSet.do_lazy_finding (method) cli/commands/lazyops.py:1195 def do_lazy_finding(self, line) -- Findings: list [--full] [--limit N]|report :: |status |update |context .
  • LazyCommandSet.do_lazy_retest (method) cli/commands/lazyops.py:1260 def do_lazy_retest(self, line) -- Retest finding to reproduced/fixed/inconclusive.
  • LazyCommandSet.do_lazy_steer (method) cli/commands/lazyops.py:1279 def do_lazy_steer(self, line) -- Mid-run correction.
  • LazyCommandSet.do_lazy_kill (method) cli/commands/lazyops.py:1291 def do_lazy_kill(self, line) -- Terminate running intent.
  • LazyCommandSet.do_lazy_pause (method) cli/commands/lazyops.py:1303 def do_lazy_pause(self, line) -- Pause task loops.
  • LazyCommandSet.do_lazy_resume (method) cli/commands/lazyops.py:1313 def do_lazy_resume(self, line) -- Resume paused task.
  • LazyCommandSet.do_lazy_report (method) cli/commands/lazyops.py:1323 def do_lazy_report(self, line) -- Export severity-ranked report.
  • LazyCommandSet.do_lazy_runtime (method) cli/commands/lazyops.py:1340 def do_lazy_runtime(self, line) -- Show/set loop runtime: budgets, deadline, abort cause, heartbeat, settlement text.
  • LazyCommandSet.do_lazy_payload_keys (method) cli/commands/lazyops.py:1387 def do_lazy_payload_keys(self, line) -- Show worker tool defaults injected into every probe.
  • LazyCommandSet.do_lazy_fact (method) cli/commands/lazyops.py:1399 def do_lazy_fact(self, line) -- Facts: list [query] [--hot|--cold]|add .
  • LazyCommandSet.do_lazy_node (method) cli/commands/lazyops.py:1427 def do_lazy_node(self, line) -- Full node detail.
  • LazyCommandSet.do_lazy_evidence (method) cli/commands/lazyops.py:1447 def do_lazy_evidence(self, line) -- Evidence vault and frozen package.
  • LazyCommandSet.do_lazy_ask (method) cli/commands/lazyops.py:1514 def do_lazy_ask(self, line) -- Bounded side question over task context.
  • run_command (function) cli/commands/lazyops.py:1545 def run_command(command) -- Execute one shell command or LazyOwn verb and return its output.
  • list_tasks (function) cli/commands/lazyops.py:1567 def list_tasks() -- List every task with status, intents, facts and findings.
  • task_graph (function) cli/commands/lazyops.py:1571 def task_graph(task) -- Graph overview of one task (defaults to the active task).
  • task_findings (function) cli/commands/lazyops.py:1575 def task_findings(task) -- Findings of one task with severity, status and report size.
  • campaign_sitrep (function) cli/commands/lazyops.py:1579 def campaign_sitrep() -- Campaign summary: tasks, findings and phase counters.
  • add_hint (function) cli/commands/lazyops.py:1592 def add_hint(text) -- Inject an operator hint into the active task planner.
  • steer_intent (function) cli/commands/lazyops.py:1599 def steer_intent(intent, message) -- Send a mid-run course correction to a running intent.
  • LazyCommandSet.do_lazy_agent (method) cli/commands/lazyops.py:1668 def do_lazy_agent(self, line) -- Main agent with full tool calling (native backend or opencode).
  • LazyCommandSet.do_lazy_company (method) cli/commands/lazyops.py:1769 def do_lazy_company(self, line) -- Company scope: add [scope]|list|match .
  • LazyCommandSet.do_lazy_tool (method) cli/commands/lazyops.py:1791 def do_lazy_tool(self, line) -- Tool catalog: list [agent]|bind|unbind |custom-add <command|script|http> [--desc D]...
  • LazyCommandSet.do_lazy_verb (method) cli/commands/lazyops.py:1863 def do_lazy_verb(self, line) -- Loop verb admin: list [--phase P] [--q Q]|enable|disable |add --keywords K [--phase P] [--no-target]...
  • LazyCommandSet.do_lazy_stage (method) cli/commands/lazyops.py:1961 def do_lazy_stage(self, line) -- Loop stage admin: list|enable|disable |reset.
  • LazyCommandSet.do_lazy_addon (method) cli/commands/lazyops.py:1989 def do_lazy_addon(self, line) -- Addon trigger runner: list [service]|run [--target T].
  • LazyCommandSet.do_lazy_notify (method) cli/commands/lazyops.py:2071 def do_lazy_notify(self, line) -- Notify channels: list|add <log|webhook|file|slack|email> [--min S] [--to a] [--from f] [--user u] [--pass...
  • LazyCommandSet.do_lazy_trigger (method) cli/commands/lazyops.py:2119 def do_lazy_trigger(self, line) -- Scheduler triggers: list|add [every_sec]|remove |addons|sync.
  • LazyCommandSet.do_lazy_llm (method) cli/commands/lazyops.py:2178 def do_lazy_llm(self, line) -- LLM chain: list|add [model] [--priority N]|priority |remove |usage|health|context [N]|record...
  • LazyCommandSet.do_lazy_compact (method) cli/commands/lazyops.py:2315 def do_lazy_compact(self, line) -- Compaction: minor|major [--threshold N]|unfolded [--limit N]|overview|noa|expand .
  • LazyCommandSet.do_lazy_status (method) cli/commands/lazyops.py:2387 def do_lazy_status(self, line) -- Full task status.
  • LazyCommandSet.do_lazy_overview (method) cli/commands/lazyops.py:2411 def do_lazy_overview(self, line) -- Alias of lazy_graph.
  • LazyCommandSet.do_lazy_archive (method) cli/commands/lazyops.py:2416 def do_lazy_archive(self, line) -- Task snapshots: save [--task T]|list|stats|restore .
  • LazyCommandSet.do_lazy_template (method) cli/commands/lazyops.py:2447 def do_lazy_template(self, line) -- Goal templates: list|add |use |remove .
  • LazyCommandSet.do_lazy_category (method) cli/commands/lazyops.py:2478 def do_lazy_category(self, line) -- Task labels: set [--task T]|list [name].
  • LazyCommandSet.do_lazy_chat (method) cli/commands/lazyops.py:2499 def do_lazy_chat(self, line) -- Task conversation: say |log|clear|sessions.
  • LazyCommandSet.do_lazy_scheduler (method) cli/commands/lazyops.py:2532 def do_lazy_scheduler(self, line) -- Scheduler state: show|run.
  • LazyCommandSet.do_lazy_gate (method) cli/commands/lazyops.py:2559 def do_lazy_gate(self, line) -- Asset gate: list|check |block-add [note]|block-del |allow-add ...
  • LazyCommandSet.do_lazy_loop (method) cli/commands/lazyops.py:2604 def do_lazy_loop(self, line) -- Run the single orchestrator: auto-invokes scope/asset/enrich/planner/frontier/worker/guard/traffic/finding/retest/com...
  • LazyCommandSet.do_lazy_sandbox (method) cli/commands/lazyops.py:2624 def do_lazy_sandbox(self, line) -- Per-task Docker sandbox: status [--task T]|up --task T [--image I]|down --task T|build|exec --task T <verb...>.
  • LazyCommandSet.do_lazy_install (method) cli/commands/lazyops.py:2687 def do_lazy_install(self, line) -- Capability installer: [--dry-run]|on|off|list.

cli/commands/marketplace.py

Depends on: cli/commands/_base.py, cli/marketplace_config.py, cli/plugin_tiers.py, modules/module_registry.py, utils.py

  • MarketplaceCommandSet.do_marketplace (method) cli/commands/marketplace.py:104 def do_marketplace(self, line) -- Discover and install community plugins, addons, and tools.
  • MarketplaceCommandSet.do_marketplace_config (method) cli/commands/marketplace.py:426 def do_marketplace_config(self, line) -- Interactive marketplace manager (curses TUI).

cli/commands/mcp_bridge.py

Depends on: cli/aliases.py, cli/commands/_base.py, core/autonomous.py, core/config.py, modules/intelligence_engine.py, modules/lazy_runner.py, modules/playbook_engine.py, modules/session_rag.py, modules/threat_model.py, modules/world_model.py, skills/lazyown_facts.py, skills/lazyown_parquet_db.py, utils.py Imported by: tests/test_cli_assign.py, tests/test_loop_auto_orchestrator.py

  • McpBridgeCommandSet.do_auto_populate (method) cli/commands/mcp_bridge.py:151 def do_auto_populate(self, args) -- Parse the latest nmap XML scan and auto-populate payload context.
  • McpBridgeCommandSet.do_facts_show (method) cli/commands/mcp_bridge.py:261 def do_facts_show(self, args) -- Show structured facts extracted from nmap scans and tool output.
  • McpBridgeCommandSet.do_rag_query (method) cli/commands/mcp_bridge.py:286 def do_rag_query(self, args) -- Semantic search over session artefacts (scans, logs, notes).
  • McpBridgeCommandSet.do_parquet_query (method) cli/commands/mcp_bridge.py:316 def do_parquet_query(self, args) -- Query the parquet knowledge bases (GTFOBins, LOLBas, ATT&CK, sessions).
  • McpBridgeCommandSet.do_threat_model (method) cli/commands/mcp_bridge.py:378 def do_threat_model(self, args) -- Build or inspect the threat model derived from session events.
  • McpBridgeCommandSet.do_playbook_run (method) cli/commands/mcp_bridge.py:431 def do_playbook_run(self, args) -- Execute a generated YAML playbook step by step through the shell.
  • McpBridgeCommandSet.do_auto_loop (method) cli/commands/mcp_bridge.py:489 def do_auto_loop(self, line) -- Run a goal through the single lazy orchestrator (auto_loop == lazy_loop).
  • McpBridgeCommandSet.do_session_state (method) cli/commands/mcp_bridge.py:523 def do_session_state(self, line) -- Alias of sitrep kept for MCP verb parity (lazyown_session_state).
  • McpBridgeCommandSet.do_campaign_sitrep (method) cli/commands/mcp_bridge.py:528 def do_campaign_sitrep(self, line) -- Alias of sitrep kept for MCP verb parity (lazyown_campaign_sitrep).
  • McpBridgeCommandSet.do_timeline (method) cli/commands/mcp_bridge.py:533 def do_timeline(self, line) -- Alias of timeline_browser kept for MCP verb parity (lazyown_timeline).

cli/commands/misc_migrated.py

Depends on: cli/aliases.py, cli/assign.py, cli/autosuggest.py, cli/banner_config.py, cli/command_chain.py, cli/commands/_base.py, cli/dashboard_tui.py, cli/exploration.py, cli/exploration_view.py, cli/graph_advisor.py, cli/graph_overlay.py, cli/ops_commands.py, cli/palette.py, cli/palette_command.py, cli/palette_overlay.py, cli/reactive_hints.py, cli/recommendation.py, cli/recommendation_signals.py, cli/sessions_browser.py, cli/show.py, cli/timeline_browser.py, cli/toast_bus.py, cli/wizard.py, core/config.py, core/console.py, core/process.py, core/safe_exec.py, modules/lazy_loop.py, modules/module_registry.py, modules/payload_factory.py, utils.py Imported by: tests/test_auto_crypto.py, tests/test_daemon_ctl_command_set.py, tests/test_encoding_command_set.py, tests/test_help_ui_command_set.py, tests/test_nethelpers_command_set.py, tests/test_session_ops_command_set.py, tests/test_shellsys_command_set.py

  • MiscMigratedCommandSet.do_notify (method) cli/commands/misc_migrated.py:92 def do_notify(self, arg) -- Command to trigger a toastr-like notification.
  • MiscMigratedCommandSet.do_EOF (method) cli/commands/misc_migrated.py:111 def do_EOF(self, line) -- Handle the end-of-file (EOF) condition.
  • MiscMigratedCommandSet.do_palette (method) cli/commands/misc_migrated.py:179 def do_palette(self, line) -- Browse the operator command catalogue grouped by kill-chain phase.
  • MiscMigratedCommandSet.do_graph_search (method) cli/commands/misc_migrated.py:204 def do_graph_search(self, line) -- Fuzzy search the graphify knowledge graph for nodes by label.
  • MiscMigratedCommandSet.do_neighbors (method) cli/commands/misc_migrated.py:232 def do_neighbors(self, line) -- Show graph neighbors of a node or command from the graphify graph.
  • MiscMigratedCommandSet.do_god_nodes (method) cli/commands/misc_migrated.py:259 def do_god_nodes(self, line) -- Show the most-connected nodes ("god nodes") from the graph.
  • MiscMigratedCommandSet.do_suggest_next (method) cli/commands/misc_migrated.py:278 def do_suggest_next(self, line) -- Suggest next commands by walking the graph from recent activity.
  • MiscMigratedCommandSet.do_recommend_next (method) cli/commands/misc_migrated.py:404 def do_recommend_next(self, line) -- Recommend the next action via the unified recommendation engine.
  • MiscMigratedCommandSet.do_explore (method) cli/commands/misc_migrated.py:458 def do_explore(self, line) -- Show exploration coverage and addon/tool suggestions per service.
  • MiscMigratedCommandSet.do_prev (method) cli/commands/misc_migrated.py:489 def do_prev(self, line) -- Show prerequisite commands for a verb (the chain's prev arrow).
  • MiscMigratedCommandSet.do_dashboard (method) cli/commands/misc_migrated.py:526 def do_dashboard(self, line) -- Launch the full-screen LazyOwn operator dashboard (Textual TUI).
  • MiscMigratedCommandSet.do_palette_k (method) cli/commands/misc_migrated.py:561 def do_palette_k(self, line) -- Open the fuzzy Command-K palette overlay.
  • MiscMigratedCommandSet.do_browse (method) cli/commands/misc_migrated.py:590 def do_browse(self, line) -- Open the sessions/ TUI browser.
  • MiscMigratedCommandSet.do_timeline_browser (method) cli/commands/misc_migrated.py:612 def do_timeline_browser(self, line) -- Open the timeline scrubber over the session report CSV.
  • MiscMigratedCommandSet.do_graph_overlay (method) cli/commands/misc_migrated.py:631 def do_graph_overlay(self, line) -- Open the graph overlay over the graphify knowledge graph.
  • MiscMigratedCommandSet.do_toast_clear (method) cli/commands/misc_migrated.py:651 def do_toast_clear(self, line) -- Mark every pending toast event as seen without printing them.
  • MiscMigratedCommandSet.do_exit (method) cli/commands/misc_migrated.py:671 def do_exit(self, arg) -- Exit the command line interface.
  • MiscMigratedCommandSet.do_banner (method) cli/commands/misc_migrated.py:744 def do_banner(self, line) -- Show the banner
  • MiscMigratedCommandSet.do_config_banner (method) cli/commands/misc_migrated.py:754 def do_config_banner(self, line) -- Open a Powerlevel10k-style wizard to toggle prompt segments.
  • MiscMigratedCommandSet.do_aliass (method) cli/commands/misc_migrated.py:798 def do_aliass(self, line) -- Prints all configured aliases and their associated commands.
  • MiscMigratedCommandSet.do_graph (method) cli/commands/misc_migrated.py:826 def do_graph(self, line) -- Generates a graph from JSON payload files containing URL, RHOST, and RPORT.
  • MiscMigratedCommandSet.do_h (method) cli/commands/misc_migrated.py:886 def do_h(self, arg) -- Open a new window within a tmux session using the LazyOwn RedTeam Framework.
  • MiscMigratedCommandSet.do_v (method) cli/commands/misc_migrated.py:932 def do_v(self, arg) -- Open a new window within a tmux session using the LazyOwn RedTeam Framework.
  • MiscMigratedCommandSet.do_links (method) cli/commands/misc_migrated.py:978 def do_links(self, line) -- Displays a list of useful links and allows the user to select and copy a link to the clipboard.
  • MiscMigratedCommandSet.do_news (method) cli/commands/misc_migrated.py:1041 def do_news(self, line) -- Show the Hacker News in the terminal.
  • MiscMigratedCommandSet.do_check_update (method) cli/commands/misc_migrated.py:1054 def do_check_update(self, line) -- Checks for updates by comparing the local version with the remote version.
  • MiscMigratedCommandSet.do_addalias (method) cli/commands/misc_migrated.py:1099 def do_addalias(self, arglist) -- Add a new alias with support for placeholders like {rhost}, {lhost}, {lport}, etc.
  • MiscMigratedCommandSet.do_listaliases (method) cli/commands/misc_migrated.py:1151 def do_listaliases(self, _) -- List all available aliases.

cli/commands/mobile_macos.py

Depends on: cli/commands/_base.py, core/process.py, core/validators.py, utils.py

  • MobileMacOSCommandSet.do_android_enum (method) cli/commands/mobile_macos.py:103 def do_android_enum(self, line) -- Enumerate an Android device connected via ADB.
  • MobileMacOSCommandSet.do_android_apk (method) cli/commands/mobile_macos.py:171 def do_android_apk(self, line) -- Generate a malicious APK with reverse shell payload.
  • MobileMacOSCommandSet.do_macos_persist (method) cli/commands/mobile_macos.py:216 def do_macos_persist(self, line) -- Generate macOS persistence via LaunchAgent.
  • MobileMacOSCommandSet.do_macos_keychain (method) cli/commands/mobile_macos.py:274 def do_macos_keychain(self, line) -- Extract secrets from the macOS Keychain.
  • MobileMacOSCommandSet.do_macos_tcc (method) cli/commands/mobile_macos.py:323 def do_macos_tcc(self, line) -- Generate macOS TCC (Transparency, Consent, Control) bypass.
  • is_binary_present (function) cli/commands/mobile_macos.py:374 def is_binary_present(name) -- Check if a binary is available on PATH, delegates to core.

cli/commands/module_manager.py

Depends on: cli/commands/_base.py, modules/module_registry.py, utils.py

cli/commands/nethelpers.py

Depends on: cli/commands/_base.py, core/hardening.py, utils.py Imported by: tests/test_nethelpers_command_set.py

  • NetworkHelpersCommandSet.do_ip (method) cli/commands/nethelpers.py:38 def do_ip(self, line) -- Displays IP addresses of network interfaces and copies the IP address from the tun0 interface to the clipboard.
  • NetworkHelpersCommandSet.do_ipp (method) cli/commands/nethelpers.py:120 def do_ipp(self, line) -- Displays IP addresses of network interfaces and prints the IP address from the tun0 interface.
  • NetworkHelpersCommandSet.do_rhost (method) cli/commands/nethelpers.py:201 def do_rhost(self, line) -- Copies the remote host (self.params['rhost']) to the clipboard and updates the command prompt.
  • NetworkHelpersCommandSet.do_rrhost (method) cli/commands/nethelpers.py:254 def do_rrhost(self, line) -- Updates the command prompt to include the remote host (self.params['rhost']) and current working directory.
  • NetworkHelpersCommandSet.do_addhosts (method) cli/commands/nethelpers.py:295 def do_addhosts(self, line) -- Adds an entry to the /etc/hosts file, mapping an IP address to a domain name.
  • NetworkHelpersCommandSet.do_ip2asn (method) cli/commands/nethelpers.py:319 def do_ip2asn(self, line) -- Command to get ASN for a given IP address.
  • NetworkHelpersCommandSet.do_ignorearp (method) cli/commands/nethelpers.py:348 def do_ignorearp(self, line) -- Configures the system to ignore ARP requests by setting a kernel parameter.
  • NetworkHelpersCommandSet.do_ignoreicmp (method) cli/commands/nethelpers.py:383 def do_ignoreicmp(self, line) -- Configures the system to ignore ICMP echo requests by setting a kernel parameter.
  • NetworkHelpersCommandSet.do_acknowledgearp (method) cli/commands/nethelpers.py:418 def do_acknowledgearp(self, line) -- Configures the system to acknowledge ARP requests by setting a kernel parameter.
  • NetworkHelpersCommandSet.do_acknowledgeicmp (method) cli/commands/nethelpers.py:453 def do_acknowledgeicmp(self, line) -- Configures the system to respond to ICMP echo requests by setting a kernel parameter.

cli/commands/opsec_cleanup.py

Depends on: cli/commands/_base.py, modules/forensic_cleaner.py, modules/log_tamper.py, modules/memory_cleaner.py, modules/network_opsec.py, modules/opsec_scorer.py, modules/timestomper.py

  • OpsecCleanupCommandSet.do_opsec_score (method) cli/commands/opsec_cleanup.py:25 def do_opsec_score(self, line) -- Real-time OPSEC risk assessment with contextual action gating (v2).
  • OpsecCleanupCommandSet.do_log_tamper (method) cli/commands/opsec_cleanup.py:97 def do_log_tamper(self, line) -- Cross-platform log clearing commands.
  • OpsecCleanupCommandSet.do_forensic_clean (method) cli/commands/opsec_cleanup.py:162 def do_forensic_clean(self, line) -- Clean forensic artifacts — Prefetch, Shimcache, Amcache, Jump Lists, etc.
  • OpsecCleanupCommandSet.do_timestomp (method) cli/commands/opsec_cleanup.py:219 def do_timestomp(self, line) -- Manipulate file MACB timestamps to evade forensic timeline analysis.
  • OpsecCleanupCommandSet.do_memory_clean (method) cli/commands/opsec_cleanup.py:288 def do_memory_clean(self, line) -- Clean memory artifacts — Kerberos tickets, clipboard, env vars, credentials.
  • OpsecCleanupCommandSet.do_network_opsec (method) cli/commands/opsec_cleanup.py:342 def do_network_opsec(self, line) -- Network OPSEC — proxy chains, DoH, canary detection, traffic analysis.
  • OpsecCleanupCommandSet.do_auditd_disable (method) cli/commands/opsec_cleanup.py:445 def do_auditd_disable(self, line) -- Generate commands to disable Linux auditd.
  • OpsecCleanupCommandSet.do_sysmon_disable (method) cli/commands/opsec_cleanup.py:468 def do_sysmon_disable(self, line) -- Generate commands to disable Windows Sysmon.

Next: API_p3.md

Generated offline by readmenator from commit bb49626e7e46. Edits here are overwritten by readmenator . --rebuild.

Start

Wiki

Agent Docs

Recipes

Clone this wiki locally