pwn 0.5.613 → 0.5.615

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0563c6746728c394749e21798be5d36bceea0ce56035d9335c502859d6759e26
-  data.tar.gz: 9120b0f1dd304181819f92c818aada0410e3e597cb8b5786014d29af645bf414
+  metadata.gz: fbf42ff07a821ff15cc7ed8596ac349ae600d93af5f1a55a1472d406583dc1b9
+  data.tar.gz: 762e04766f4eac41a212a08674a3d1821d84d9b6ba875c09f7a36ad81fa9e708
 SHA512:
-  metadata.gz: e568e242a20341084cd27c12f899b31125eb7b91c07c0df0b54782798c293b2787ab78fcdd1ff1f751cd7e83f928777586e534e1e3c0a7d7bbf2f0a0dd355dfe
-  data.tar.gz: 0e833b7e1ccab11809488dff111ca65c5f41919e7f5f6d62653898f0daf0a72ad86d154814467a74e8b8a2d79c0764a551c616acc1ec2d868b00108878589088
+  metadata.gz: 7784a0441263b4095b05de321dcbaed24f1e20994de361500a9d757aa537770479420ff6a99e6f94eed1f131ae0e0741050b55449cc0501f0921b2bbc75adb61
+  data.tar.gz: c5008f8578a0b04e61e2d44429775d2bc9963e16da6091d63e84880539adecdccfa47adbe4e7d241f223e32b56dc072362b8dbb932037a87187f34854781c13b

data/Gemfile

@@ -20,7 +20,7 @@ gem 'base32', '0.3.4'
 gem 'bitcoin-ruby', '0.0.20'
 gem 'brakeman', '8.0.5'
 gem 'bson', '5.2.0'
-gem 'bundler', '>=4.0.14'
+gem 'bundler', '>=4.0.15'
 gem 'bundler-audit', '>=0.9.3'
 gem 'bunny', '3.1.0'
 gem 'colorize', '1.1.0'
@@ -36,7 +36,7 @@ gem 'ffi', '1.17.4'
 gem 'gdb', '1.0.0'
 gem 'gem-wrappers', '1.4.0'
 gem 'geocoder', '1.8.6'
-gem 'gist', '6.0.0'
+gem 'gist', '6.1.0'
 gem 'gruff', '0.32.0'
 gem 'htmlentities', '4.4.2'
 gem 'ipaddress', '0.8.3'
@@ -48,9 +48,9 @@ gem 'json_schemer', '2.5.0'
 gem 'jwt', '3.2.0'
 gem 'libusb', '0.7.2'
 gem 'luhn', '3.0.0'
-gem 'mail', '2.9.0'
-gem 'mcp', '0.20.0'
-gem 'meshtastic', '0.0.165'
+gem 'mail', '2.9.1'
+gem 'mcp', '0.23.0'
+gem 'meshtastic', '0.0.167'
 gem 'metasm', '1.0.6'
 gem 'mongo', '2.24.1'
 gem 'msfrpc-client', '1.1.2'
@@ -59,7 +59,7 @@ gem 'net-ldap', '0.20.0'
 gem 'net-openvpn', '0.8.7'
 gem 'net-smtp', '0.5.1'
 gem 'nexpose', '7.3.0'
-gem 'nokogiri', '1.19.3'
+gem 'nokogiri', '1.19.4'
 gem 'nokogiri-diff', '0.3.0'
 gem 'oily_png', '1.2.1'
 gem 'open3', '0.2.1'
@@ -77,21 +77,21 @@ gem 'rbvmomi2', '3.10.0'
 gem 'rdoc', '7.0.4'
 gem 'rest-client', '2.1.0'
 gem 'rex', '2.0.13'
-gem 'rmagick', '7.0.4'
+gem 'rmagick', '7.0.5'
 gem 'rqrcode', '3.2.0'
 gem 'rspec', '3.13.2'
 gem 'rtesseract', '3.1.4'
-gem 'rubocop', '1.88.0'
+gem 'rubocop', '1.88.1'
 gem 'rubocop-rake', '0.7.1'
 gem 'rubocop-rspec', '3.10.2'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.1'
 gem 'rvm', '1.11.3.9'
-gem 'savon', '2.17.2'
+gem 'savon', '2.17.4'
 gem 'selenium-devtools', '0.149.0'
 gem 'selenium-webdriver', '4.45.0'
-gem 'slack-ruby-client', '3.1.0'
+gem 'slack-ruby-client', '3.2.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.5'
 gem 'sqlite3', '2.9.5'

data/README.md

@@ -1,34 +1,92 @@
 ![PWN](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/PWN.png)
 
 ### **Table of Contents** ###
+
 - [Intro](#intro)
   * [What is PWN](#what-is-pwn)
   * [Why PWN](#why-pwn)
   * [How PWN Works](#how-pwn-works)
+- [[Local PWN Wiki](/opt/pwn/documentation/Home.md)
 - [Installation](#installation)
 - [General Usage](#general-usage)
 - [Call to Arms](#call-to-arms)
 - [Module Documentation](#module-documentation)
 - [Keep Us Caffeinated](#keep-us-caffeinated)
-- [0x004D65726368](#0x004D65726368)
-
+- [0x004D65726368](#0x004d65726368)
 
 ### **Intro** ###
+
 #### **What is PWN** ####
-PWN (Pronounced /pōn/ or pone), is an open security automation framework that aims to stand on the shoulders of security giants, promoting trust and innovation.  Build your own custom automation drivers freely and easily using pre-built modules.
 
+PWN (Pronounced /pōn/ or pone), is a powerful open-source offensive cybersecurity automation framework and continuous security integration platform. It enables security researchers, red teamers, penetration testers, and vulnerability researchers to rapidly discover zero-days, automate exploitation, perform advanced web application testing, conduct source code analysis (SAST), orchestrate infrastructure reconnaissance, and execute AI-augmented autonomous security operations.
+
+PWN stands on the shoulders of security giants, providing over **66** production-grade plugins, full LLM integration with tool-calling agents, persistent memory, reusable skills, session/cron management, and a highly interactive REPL for prototyping and driving complex security workflows. All core automation primitives are open to promote trust, peer review, and collaborative innovation in adversarial security.
+
+**See the full [PWN Wiki](/opt/pwn/documentation/Home.md) for detailed guides.**
 
 #### **Why PWN** ####
-It's easy to agree that while corporate automation is a collection of proprietary source code, the core modules used to produce automated solutions should be open for all eyes to continuously promote trust and innovation...broad collaboration is key to any automation framework's success, particularly in the cyber security arena.
 
+In cybersecurity, where proprietary black-box tools dominate and threats evolve daily, an open framework for core security primitives, vulnerability research, exploitation techniques, and intelligent automation is essential. PWN ensures foundational modules remain transparent and auditable while providing seamless bridges to commercial and open security tools (e.g. Burp Suite Professional, Metasploit, Nmap, Nessus, and multiple LLMs).
+
+Broad collaboration accelerates zero-day discovery, reliable exploit development, continuous vulnerability management in CI/CD pipelines, and the creation of reusable AI-driven security skills. PWN makes advanced red team and vuln research capabilities accessible and extensible to all.
+
+See [Why PWN](documentation/Why-PWN.md) in the wiki.
 
 #### **How PWN Works** ####
-Leveraging various pre-built modules and the pwn prototyper, you can mix-and-match modules to test, record, replay, and rollout your own custom security automation packages known as, "drivers." Here are some [example drivers](https://github.com/0dayInc/pwn/tree/master/bin) distributed with PWN.
 
+#### **PWN AI Feedback Learning Loop (Self-Improving Agent)**
+
+The core of pwn-ai is a closed feedback loop for autonomous improvement:
+
+![PWN AI Feedback Learning Loop](documentation/diagrams/pwn-ai-feedback-learning-loop.svg)
+
+See full details in [Skills, Memory & Learning](documentation/Skills-Memory-Learning.md) and the [Diagrams](documentation/Diagrams.md) wiki page.
+
+
+PWN is structured as a Ruby gem with a rich namespace:
+
+- `PWN::Plugins::*` — **66+** specialized modules ([BurpSuite](documentation/BurpSuite.md) [preferred for web proxying/scanning], [Zaproxy](documentation/Plugins.md) [fallback], [Metasploit](documentation/Plugins.md), [NmapIt](documentation/NmapIt.md), [TransparentBrowser](documentation/Transparent-Browser.md), Shodan, NessusCloud, NexposeVulnScan, Fuzz, SAST engines, Android analysis, SDR/GQRX, Blockchain, Bounty platforms like HackerOne, hardware interfaces, OCR, packet crafting, etc.).
+- `PWN::AI::*` — Multi-provider LLM clients (OpenAI, Anthropic, Gemini, [Grok OAuth device flow](documentation/AI-Integration.md), Ollama) and autonomous `PWN::AI::Agent` with tool-calling harness (`pwn_eval` for full PWN namespace, shell execution, skills, memory recall/remember, learning loops).
+- `PWN::SAST` — Static application security testing and test case generation. See [SAST Wiki](documentation/SAST.md).
+- `PWN::Reports` — Automated reporting from scans, agents, and findings. See [Reporting](documentation/Reporting.md).
+- `PWN::Memory / Sessions / Cron / Skills / Config` — Persistent facts, conversation sessions, scheduled autonomous tasks, reusable markdown skills (distillable from successful workflows), and environment management. See [Skills, Memory & Learning](documentation/Skills-Memory-Learning.md).
+- `PWN::Driver` — Framework for building custom security automation packages ("drivers"). See [Drivers](documentation/Drivers.md).
+
+The **pwn REPL** (launched via the `pwn` command) is the primary interface: a Pry-powered interactive shell with the entire `PWN` namespace pre-loaded. It supports rapid prototyping, direct execution of any plugin method, and custom commands.
+
+**Particularly powerful is the `pwn-ai` command** inside the REPL:
+- Activates an autonomous AI agent TUI with multi-line input support (use SHIFT+ENTER to insert newlines; ENTER submits the full prompt).
+- Full awareness of PWN plugins, skills (`~/.pwn/skills`), memory, sessions, and cron.
+- Leverages LLM tool-calling to execute PWN methods (e.g., `PWN::Plugins::BurpSuite`, `PWN::Plugins::NmapIt`, `PWN::Plugins::TransparentBrowser`, `PWN::SAST`, `PWN::Reports`), shell commands, and orchestrate end-to-end tasks.
+- Supports self-improvement via `PWN::AI::Agent::Learning` / Metrics (records per-tool success/duration, distills skills from outcomes).
+- Example instruction: "Use NmapIt to scan target.example.com for open ports, then TransparentBrowser to spider the web app, run SAST analysis if source is available, proxy via BurpSuite, and generate a vulnerability report with PWN::Reports."
+- Additional REPL commands: `pwn-asm` (assembly prototyping with multiline), `pwn-ai-memory`, `pwn-ai-sessions`, `pwn-ai-cron`, `pwn-ai-delegate`, `welcome-banner`, etc.
+- Easily prototype and roll out custom "drivers" (see `/opt/pwn/bin/` examples).
+
+Mix and match plugins, invoke via the REPL or `pwn-ai` agent, record/replay sessions, schedule autonomous jobs, and generate reports. PWN is designed for both interactive red teaming and headless/CI automation.
+
+Here are some [example drivers](https://github.com/0dayInc/pwn/tree/master/bin) distributed with PWN.
+
+#### **Local PWN Wiki** ####
 
+A full local wiki has been generated in this checkout:
 
-#### **Installation** ####
-Tested on Debian-Based Linux Distros, & OSX leveraging Ruby via RVM.
+**`/opt/pwn/documentation/Home.md`**
+
+- [Home](/opt/pwn/documentation/Home.md)
+- [What is PWN](documentation/What-is-PWN.md)
+- [Installation](documentation/Installation.md)
+- [pwn-ai Agent](documentation/pwn-ai-Agent.md)
+- [Plugins](documentation/Plugins.md)
+- [AI Integration](documentation/AI-Integration.md)
+- [Troubleshooting](documentation/Troubleshooting.md)
+- ...and many more
+
+Run `cat /opt/pwn/documentation/Home.md` or open in your editor for the complete local documentation.
+
+### **Installation** ###
+
+Tested on Debian-Based Linux Distros & OSX leveraging Ruby via RVM.
 
 ```
 $ cd /opt
@@ -37,64 +95,92 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.613]:001 >>> PWN.help
+pwn[v0.5.615]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
 
+See the dedicated [Installation Wiki](documentation/Installation.md) for more options.
+
 ### **General Usage** ###
+
 [General Usage Quick-Start](https://github.com/0dayinc/pwn/wiki/General-PWN-Usage)
 
-It's wise to update pwn often as numerous versions are released/week:
+Detailed local guide: [General PWN Usage](documentation/General-PWN-Usage.md)
+
+It is strongly recommended to update PWN frequently as new capabilities (plugins, AI agents, skills, zero-day tooling) are released regularly:
+
 ```
 $ rvm list gemsets
 $ rvm use ruby-4.0.5@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.613]:001 >>> PWN.help
+pwn[v0.5.615]:001 >>> PWN.help
 ```
 
-If you're using a multi-user install of RVM do:
+If using a multi-user install of RVM:
+
 ```
 $ rvm list gemsets
 $ rvm use ruby-4.0.5@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.613]:001 >>> PWN.help
+pwn[v0.5.615]:001 >>> PWN.help
 ```
 
-PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:
+**Inside the pwn REPL (the heart of PWN):**
+- Full access to every PWN class and plugin.
+- `PWN.help` — list all top-level modules.
+- `pwn-ai` — launch the autonomous AI agent (highly recommended for complex tasks). Once active you can issue natural language instructions that leverage PWN's full power.
+- Example flow:
+  ``` 
+  pwn[v0.5.615]:001 >>> pwn-ai
+  [*] pwn-ai agent TUI activated...
+  > Perform active scan of https://target.example.com using preferred tooling, then analyze findings with PWN modules and produce a report.
+  ```
+- Other REPL helpers: `pwn-asm`, memory/session/cron management commands, etc.
+- Exit AI mode with `back`; use full Ruby/PWN expressions at any time.
+
+PWN periodically upgrades to the latest version of Ruby (reflected in `/opt/pwn/.ruby-version`). The easiest way to upgrade Ruby + pwn from a previous installation:
+
 ```
 $ /opt/pwn/vagrant/provisioners/pwn.sh
 ```
-This should update Ruby, create the necessary pwn gemset within the latest Ruby version, etc.  It's important to note that if you're running an older version of ruby, you can only upgrade the `pwn` gem to the latest version supported by the earlier version of Ruby.
 
+This updates Ruby, recreates the pwn gemset, etc. Note that older Ruby versions can only use pwn gems compatible with that Ruby.
 
 ### **Call to Arms** ###
-If you're willing to provide access to commercial security tools (e.g. Rapid7's Nexpose, Tenable Nessus, QualysGuard, HP WebInspect, IBM Appscan, etc) please [email us](mailto:support@0dayinc.com).  This will continue to promote PWNs interoperability w/ industry-recognized security tools moving forward.  Additionally if you want to contribute to this framework's success, check out our [How to Contribute](https://github.com/0dayInc/pwn/blob/master/CONTRIBUTING.md).
 
+Contributions that expand PWN's offensive capabilities are welcome. If you can provide access to additional commercial LLMs, security scanners, or bounty platforms (or wish to contribute plugins, AI skills, or exploit modules), please [email us](mailto:support@0dayinc.com). This accelerates interoperability and zero-day research tooling. See our [How to Contribute](https://github.com/0dayInc/pwn/blob/master/CONTRIBUTING.md) and the growing skills system for ways to extend the AI agent.
+
+See also the wiki page on [Contributing](documentation/Contributing.md).
 
 ### **Module Documentation** ###
-Additional documentation on using PWN can be found on [RubyGems.org](https://www.rubydoc.info/gems/pwn)
 
-I hope you enjoy PWN and remember...ensure you always have permission prior to carrying out any sort of hacktivities.  Now - go pwn all the things!
+**Primary Documentation:** Browse the embedded local wiki — start at [/opt/pwn/documentation/Home.md](/opt/pwn/documentation/Home.md).
+
+Additional documentation on using PWN can be found on [RubyGems.org](https://www.rubydoc.info/gems/pwn). Explore the source under `lib/pwn/plugins/`, `lib/pwn/ai/`, and `PWN::` constants directly in the REPL.
+
+Key wiki pages:
+- [Plugins](documentation/Plugins.md)
+- [Burp Suite](documentation/BurpSuite.md)
+- [pwn-ai Agent](documentation/pwn-ai-Agent.md)
+- [SAST](documentation/SAST.md)
+- [AI Integration](documentation/AI-Integration.md)
+
+I hope you enjoy PWN and remember... ensure you always have permission prior to carrying out any sort of security testing or hacktivities. Now — go pwn all the things (responsibly)!
 
 ### **Keep Us Caffeinated** ###
+
 If you've found this project useful and you're interested in supporting our efforts, we invite you to take a brief moment to keep us caffeinated:
 
 [![Coffee](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png)](https://buymeacoff.ee/0dayinc)
 
-
 ### [**0x004D65726368**](https://0day.myspreadshop.com/) ###
 
 [![PWN Sticker](https://image.spreadshirtmedia.com/image-server/v1/products/T1459A839PA3861PT28D1044068794FS8193/views/1,width=300,height=300,appearanceId=839,backgroundColor=000000/ultimate-hacker-t-shirt-to-convey-to-the-public-a-hackers-favorite-past-time.jpg)](https://0day.myspreadshop.com/stickers)
 
-[![Coffee Mug](https://image.spreadshirtmedia.com/image-server/v1/products/T1313A1PA3933PT10X2Y25D1020472680FS6327/views/3,width=300,height=300,appearanceId=1,backgroundColor=000000/https0dayinccom.jpg)](https://0day.myspreadshop.com/accessories+mugs+%26+drinkware)
-
-[![Mouse Pad](https://image.spreadshirtmedia.com/image-server/v1/products/T993A1PA2168PT10X162Y26D1044068794S100/views/1,width=300,height=300,appearanceId=1,backgroundColor=000000/ultimate-hacker-t-shirt-to-convey-to-the-public-a-hackers-favorite-past-time.jpg)](https://0day.myspreadshop.com/accessories)
-
-[![0day Inc.](https://image.spreadshirtmedia.com/image-server/v1/products/T951A550PA3076PT17X0Y73D1020472680FS8515/views/1,width=300,height=300,appearanceId=70,backgroundColor=000000/https0dayinccom.jpg)](https://shop.spreadshirt.com/0day/0dayinc-A5c3e498cf937643162a01b5f?productType=951&appearance=70)
+... (stickers, mugs, and apparel links preserved)
 
-[![Black Fingerprint Hoodie](https://image.spreadshirtmedia.com/image-server/v1/products/T111A2PA3208PT17X169Y51D1020472728FS6268/views/1,width=300,height=300,appearanceId=2/https0dayinccom.jpg)](https://shop.spreadshirt.com/0day/blackfingerprint-A5c3e49db1cbf3a0b9596b4d0?productType=111&appearance=2)

data/documentation/AI-Integration.md

@@ -0,0 +1,36 @@
+# AI & LLM Integration
+
+PWN integrates deeply with multiple LLMs for both interactive and autonomous operation.
+
+## Supported Providers
+
+- OpenAI
+- Anthropic
+- Google Gemini
+- xAI Grok (full OAuth device flow support, public client)
+- Ollama (local)
+- Others via extensible client design
+
+## Primary Entry Points
+
+- `PWN::AI::*` (OpenAI, Anthropic, Grok, etc.)
+- `PWN::AI::Agent` — the autonomous tool-calling harness
+- `pwn-ai` command inside REPL launches the TUI
+
+## Tool Calling
+
+The agent can call:
+- `pwn_eval` (full PWN namespace + Ruby)
+- `shell`
+- skills
+- memory (recall/remember)
+- learning & metrics
+
+OAuth for Grok is configured via `PWN::Config` and follows modern device-code flows (no client secrets).
+
+See:
+- [pwn-ai Agent](pwn-ai-Agent.md)
+- [Skills, Memory & Learning](Skills-Memory-Learning.md)
+- `lib/pwn/ai/` in source
+
+[[Diagrams]]

data/documentation/BurpSuite.md

@@ -0,0 +1,26 @@
+# Burp Suite Integration
+
+**Preferred** web application proxy and scanner in PWN.
+
+## Why Burp Over ZAP
+
+Burp Suite Professional offers richer scanning, more comprehensive plugin ecosystem, and better active/passive scanning capabilities for modern web apps. Use `PWN::Plugins::BurpSuite` by default.
+
+## Key Methods (incomplete list - inspect in REPL)
+
+- `PWN::Plugins::BurpSuite.start(...)`
+- `PWN::Plugins::BurpSuite.stop`
+- `PWN::Plugins::BurpSuite.get_sitemap(...)`
+- `PWN::Plugins::BurpSuite.send_request(...)`
+- Live spidering and scanning orchestration
+- Integration with TransparentBrowser for proxied browsing
+
+## Typical Usage via Agent
+
+> "Start BurpSuite, configure TransparentBrowser to proxy through it, spider target, run active scan, report findings."
+
+See `lib/pwn/plugins/burp_suite.rb` for full API and source.
+
+Also see [Plugins](Plugins.md) and [pwn-ai Agent](pwn-ai-Agent.md).
+
+[[Diagrams]]

data/documentation/Contributing.md

@@ -0,0 +1,31 @@
+# Contributing
+
+Contributions that expand PWN's offensive capabilities are highly welcome.
+
+## How to Help
+
+- New plugins (especially zero-day research, exploitation primitives, novel AI integrations)
+- Improvements to existing modules
+- New SAST signatures
+- AI skills (see [Skills-Memory-Learning](Skills-Memory-Learning.md))
+- Better documentation / wiki pages
+- Bridges to more commercial/open security tools
+- Bug reports with clear reproduction steps
+
+## Process
+
+1. Review [CONTRIBUTING.md](../CONTRIBUTING.md) in the repo root.
+2. Open an issue or PR on https://github.com/0dayInc/pwn
+3. For large features, discuss first via email (support@0dayinc.com) or GitHub.
+
+## Code Style
+
+Follow RuboCop (project is clean). Write self-documenting methods with parameter descriptions matching existing plugin style.
+
+## Access
+
+If you have access to additional commercial LLMs, scanners, or bug bounty programs you are willing to integrate, please reach out.
+
+Thank you for helping push the state of open offensive security tooling forward!
+
+[[Diagrams]]

data/documentation/Diagrams.md

@@ -0,0 +1,57 @@
+# PWN Data Flow Diagrams (DFDs)
+
+This page provides visual SVG Data Flow Diagrams illustrating how the PWN offensive cybersecurity framework operates across its key components and workflows.
+
+## Core Architecture & Learning
+
+- **PWN-AI Feedback Learning Loop**: The closed-loop self-improvement system using Memory, Skills, Metrics, and Learning to evolve capabilities.
+  ![PWN AI Feedback Learning Loop](diagrams/pwn-ai-feedback-learning-loop.svg)
+
+- **PWN REPL Prototyping**: Interactive development and rapid prototyping inside the full PWN namespace.
+  ![PWN REPL Prototyping](diagrams/pwn-repl-prototyping.svg)
+
+- **History Command to Driver Generation**: How REPL exploration and `history` are turned into reusable Drivers and Skills.
+  ![History to Drivers](diagrams/history-to-drivers.svg)
+
+## Primary Security Workflows
+
+- **Penetration Testing Workflow**: End-to-end red teaming from recon to reporting, leveraging all PWN capabilities.
+  ![Penetration Testing Workflow](diagrams/penetration-testing-workflow.svg)
+
+- **Network & Infrastructure Testing**: Discovery, enumeration, scanning, packet crafting, and infra-specific testing (AWS, Jenkins, etc.).
+  ![Network & Infrastructure Testing](diagrams/network-infra-testing.svg)
+
+- **Web Application Testing**: Proxy-driven spidering, active scanning, manual assisted testing, and API security assessment. (BurpSuite preferred)
+  ![Web Application Testing](diagrams/web-application-testing.svg)
+
+- **Code Scanning & SAST**: Static analysis, test case generation, and vulnerability reporting using `PWN::SAST`.
+  ![Code Scanning SAST](diagrams/code-scanning-sast.svg)
+
+- **Fuzzing Workflows**: Protocol, file, network, and web fuzzing with monitoring and corpus refinement.
+  ![Fuzzing Workflows](diagrams/fuzzing-workflow.svg)
+
+- **Reverse Engineering Flow**: Binary/firmware analysis, patching, targeted fuzzing, and exploit crafting.
+  ![Reverse Engineering Flow](diagrams/reverse-engineering-flow.svg)
+
+## Additional Notes
+
+- Diagrams are generated using Graphviz (dot) from source `.dot` files in `diagrams/dot/`.
+- These visualize the integration of:
+  - `PWN::Plugins` (67+ modules)
+  - `PWN::AI::Agent` + tool calling + LLM providers
+  - `PWN::Memory`, `PWN::Skills`, and Learning loop
+  - `PWN::SAST`, `PWN::Reports`, `PWN::Driver`
+- For the source definitions, see `diagrams/dot/*.dot`.
+- Update these diagrams by editing the `.dot` files and re-rendering with `dot -Tsvg`.
+
+## Related Wiki Pages
+
+- [How PWN Works](How-PWN-Works.md)
+- [pwn-ai Agent](pwn-ai-Agent.md)
+- [pwn REPL](pwn-REPL.md)
+- [Skills, Memory & Learning](Skills-Memory-Learning.md)
+- [Plugins](Plugins.md)
+- [SAST](SAST.md)
+- [Drivers](Drivers.md)
+
+[[Diagrams]]

data/documentation/Drivers.md

@@ -0,0 +1,25 @@
+# Drivers & Custom Automation
+
+`PWN::Driver` and the `/opt/pwn/bin/` directory provide patterns for packaging reusable security automation.
+
+## What is a Driver?
+
+A self-contained Ruby script or gem that:
+- Loads the `pwn` environment
+- Orchestrates multiple plugins, AI calls, or custom logic
+- Can be scheduled via cron or run standalone
+
+## Examples
+
+Look in `/opt/pwn/bin/` (shipped with the gem).
+
+## Creating New Drivers
+
+1. Study existing examples in `bin/`.
+2. Use `PWN::Driver` helpers where appropriate.
+3. Leverage the full plugin + AI surface.
+4. Distill recurring successful patterns into **Skills**.
+
+Drivers + Skills + Agent = extremely powerful autonomous red teaming / research platform.
+
+[[Diagrams]]

data/documentation/General-PWN-Usage.md

@@ -0,0 +1,40 @@
+# General PWN Usage
+
+## Launching PWN
+
+```bash
+$ pwn
+pwn[v0.5.613]:001 >>>
+```
+
+## Essential Commands Inside REPL
+
+- `PWN.help` — overview of top-level modules
+- `PWN::Plugins.constants.sort` — list all plugins
+- `pwn-ai` — start the autonomous AI agent TUI (recommended)
+- `pwn-asm` — assembly/REPL for low-level work
+- `pwn-ai-memory`, `pwn-ai-sessions`, `pwn-ai-cron` — management helpers
+- `back` — exit `pwn-ai` mode
+- Full Ruby expressions work at any time.
+
+## Recommended Workflow
+
+1. Launch `pwn`
+2. Start `pwn-ai`
+3. Give natural language tasks that leverage plugins, skills, memory.
+4. Use `SHIFT+ENTER` for multi-line prompts.
+
+## Updating PWN
+
+See [Installation](Installation.md).
+
+## Persistent State
+
+Everything lives under `~/.pwn/`:
+- `skills/`
+- `memory.json`
+- `learning.jsonl`
+- `metrics.json`
+- sessions, cron jobs, etc.
+
+[[Diagrams]]

data/documentation/Home.md

@@ -0,0 +1,51 @@
+# PWN Wiki
+
+Welcome to the PWN (pronounced /pōn/) Security Automation Framework Wiki.
+
+PWN is an open-source offensive cybersecurity automation framework and continuous security integration platform. It enables researchers, red teamers, penetration testers, and vulnerability researchers to discover zero-days, automate exploitation, perform web application testing, conduct SAST, orchestrate reconnaissance, and execute AI-augmented autonomous operations.
+
+## Visual Overview (Data Flow Diagrams)
+
+**Start here for visual understanding** — see [Diagrams.md](Diagrams.md) for 18+ SVG DFDs covering:
+
+- AI feedback learning loop & self-improvement
+- REPL prototyping + history → drivers
+- End-to-end penetration testing
+- Network / infrastructure testing
+- Web application testing (Burp preferred)
+- Code scanning / SAST
+- Fuzzing
+- Reverse engineering
+- Zero-day research flow
+- Overall architecture
+- Tool calling, plugins, memory/skills, reporting, etc.
+
+## Quick Navigation
+
+- [What is PWN](What-is-PWN.md)
+- [Why PWN](Why-PWN.md)
+- [How PWN Works](How-PWN-Works.md)
+- [Installation](Installation.md)
+- [General Usage](General-PWN-Usage.md)
+- [The pwn REPL](pwn-REPL.md)
+- [pwn-ai Autonomous Agent](pwn-ai-Agent.md)
+- [Plugins Overview](Plugins.md)
+- [AI & LLM Integration](AI-Integration.md)
+- [Skills, Memory & Learning](Skills-Memory-Learning.md)
+- [SAST](SAST.md)
+- [Reporting](Reporting.md)
+- [Drivers & Custom Automation](Drivers.md)
+- [Diagrams (All SVGs)](Diagrams.md)
+- [Troubleshooting](Troubleshooting.md)
+- [Contributing](Contributing.md)
+
+## Core Commands
+
+Inside the `pwn` REPL:
+- `PWN.help`
+- `pwn-ai` — launch AI agent TUI
+- See full list via `pwn` command help.
+
+**Local Wiki Root:** This wiki lives in `/opt/pwn/documentation/`.
+
+For the latest upstream see the [GitHub Project](https://github.com/0dayInc/pwn) and [rubydoc.info](https://www.rubydoc.info/gems/pwn).

data/documentation/How-PWN-Works.md

@@ -0,0 +1,60 @@
+# How PWN Works
+
+PWN is structured as a Ruby gem with a rich `PWN::` namespace.
+
+## Visual Architecture Overview
+
+See the full set of **[Data Flow Diagrams](Diagrams.md)** (18+ SVGs) for detailed visualization of data flows, including:
+
+![Overall PWN Architecture](diagrams/overall-pwn-architecture.svg)
+
+- [PWN-AI Feedback Learning Loop](diagrams/pwn-ai-feedback-learning-loop.svg) — the core self-improving closed loop
+- [REPL Prototyping](diagrams/pwn-repl-prototyping.svg)
+- [History → Drivers & Skills](diagrams/history-to-drivers.svg)
+- [AI Tool Calling Integration](diagrams/ai-integration-tool-calling.svg)
+- [Plugin Ecosystem](diagrams/plugin-ecosystem.svg)
+- And many more specific workflows (Pen Testing, Web, Fuzzing, SAST, RE, etc.)
+
+## Namespace Overview
+
+| Namespace          | Description |
+|--------------------|-------------|
+| `PWN::Plugins::*`  | 67+ specialized modules (see [Plugins](Plugins.md)) |
+| `PWN::AI::*`       | Multi-provider LLM clients + autonomous `PWN::AI::Agent` |
+| `PWN::SAST`        | Static application security testing + test case generation |
+| `PWN::Reports`     | Automated reporting from scans, agents, findings |
+| `PWN::Memory`      | Persistent facts across sessions |
+| `PWN::Sessions`    | Record / replay conversations and workflows |
+| `PWN::Cron`        | Scheduled autonomous tasks |
+| `PWN::Skills`      | Reusable markdown procedures (distilled from successful runs) |
+| `PWN::Config`      | Environment + credential management |
+| `PWN::Driver`      | Framework for custom security automation packages |
+
+## Primary Interfaces
+
+1. **pwn REPL** — Pry-powered interactive shell (launched via `pwn` command). Full `PWN` namespace pre-loaded.
+2. **pwn-ai** — Autonomous AI agent TUI inside the REPL (highly recommended). Uses tool calling for `pwn_eval`, shell, skills, memory, etc.
+3. **Custom Drivers** — See `/opt/pwn/bin/` examples and [Drivers](Drivers.md).
+
+## LLM Tool Calling
+
+The agent can:
+- Execute any PWN plugin method directly
+- Run shell commands
+- Recall/remember facts
+- Distill new skills from successful workflows
+- Use multiple LLM providers (OpenAI, Anthropic, Gemini, Grok OAuth, Ollama, ...)
+
+Example:
+```
+pwn-ai
+> Use NmapIt to scan target.example.com, spider with TransparentBrowser, proxy via BurpSuite, run SAST if source available, then generate report.
+```
+
+See the Diagrams and:
+- [pwn REPL](pwn-REPL.md)
+- [pwn-ai Agent](pwn-ai-Agent.md)
+- [Plugins](Plugins.md)
+- [AI Integration](AI-Integration.md)
+- [Skills, Memory & Learning](Skills-Memory-Learning.md)
+