pwn 0.5.613 → 0.5.615

data/documentation/diagrams/code-scanning-sast.svg

@@ -0,0 +1,112 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<!-- Generated by graphviz version 14.1.2 (0)
+ -->
+<!-- Title: PWN Code Scanning &amp; SAST Pages: 1 -->
+<svg width="930pt" height="137pt"
+ viewBox="0.00 0.00 930.00 137.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 132.75)">
+<title>PWN Code Scanning &amp; SAST</title>
+<polygon fill="white" stroke="none" points="-4,4 -4,-132.75 926.19,-132.75 926.19,4 -4,4"/>
+<!-- Source -->
+<g id="node1" class="node">
+<title>Source</title>
+<path fill="none" stroke="black" d="M62.5,-36C62.5,-36 12,-36 12,-36 6,-36 0,-30 0,-24 0,-24 0,-12 0,-12 0,-6 6,0 12,0 12,0 62.5,0 62.5,0 68.5,0 74.5,-6 74.5,-12 74.5,-12 74.5,-24 74.5,-24 74.5,-30 68.5,-36 62.5,-36"/>
+<text xml:space="preserve" text-anchor="middle" x="37.25" y="-19.95" font-family="Arial" font-size="9.00">Source Code</text>
+<text xml:space="preserve" text-anchor="middle" x="37.25" y="-9.45" font-family="Arial" font-size="9.00">(Git, Local Dir)</text>
+</g>
+<!-- SAST -->
+<g id="node2" class="node">
+<title>SAST</title>
+<ellipse fill="none" stroke="black" cx="174.26" cy="-55" rx="62.76" ry="20.51"/>
+<text xml:space="preserve" text-anchor="middle" x="174.26" y="-56.95" font-family="Arial" font-size="9.00">PWN::SAST</text>
+<text xml:space="preserve" text-anchor="middle" x="174.26" y="-46.45" font-family="Arial" font-size="9.00">(analyze, testgen)</text>
+</g>
+<!-- Source&#45;&gt;SAST -->
+<g id="edge1" class="edge">
+<title>Source&#45;&gt;SAST</title>
+<path fill="none" stroke="black" d="M74.78,-28.01C86.93,-31.34 100.77,-35.13 114.17,-38.81"/>
+<polygon fill="black" stroke="black" points="113.24,-42.18 123.81,-41.45 115.09,-35.43 113.24,-42.18"/>
+</g>
+<!-- Static -->
+<g id="node3" class="node">
+<title>Static</title>
+<path fill="none" stroke="black" d="M374.76,-128.75C374.76,-128.75 286.01,-128.75 286.01,-128.75 280.01,-128.75 274.01,-122.75 274.01,-116.75 274.01,-116.75 274.01,-101.25 274.01,-101.25 274.01,-95.25 280.01,-89.25 286.01,-89.25 286.01,-89.25 374.76,-89.25 374.76,-89.25 380.76,-89.25 386.76,-95.25 386.76,-101.25 386.76,-101.25 386.76,-116.75 386.76,-116.75 386.76,-122.75 380.76,-128.75 374.76,-128.75"/>
+<text xml:space="preserve" text-anchor="middle" x="330.39" y="-116.2" font-family="Arial" font-size="9.00">Static Analysis</text>
+<text xml:space="preserve" text-anchor="middle" x="330.39" y="-105.7" font-family="Arial" font-size="9.00">(RuboCop, Brakeman,</text>
+<text xml:space="preserve" text-anchor="middle" x="330.39" y="-95.2" font-family="Arial" font-size="9.00">Semgrep, custom rules)</text>
+</g>
+<!-- SAST&#45;&gt;Static -->
+<g id="edge2" class="edge">
+<title>SAST&#45;&gt;Static</title>
+<path fill="none" stroke="black" d="M218.19,-70.04C232.16,-74.94 248,-80.49 263.26,-85.83"/>
+<polygon fill="black" stroke="black" points="261.68,-88.99 272.27,-88.99 263.99,-82.38 261.68,-88.99"/>
+</g>
+<!-- TestGen -->
+<g id="node4" class="node">
+<title>TestGen</title>
+<path fill="none" stroke="black" d="M369.14,-71C369.14,-71 291.64,-71 291.64,-71 285.64,-71 279.64,-65 279.64,-59 279.64,-59 279.64,-47 279.64,-47 279.64,-41 285.64,-35 291.64,-35 291.64,-35 369.14,-35 369.14,-35 375.14,-35 381.14,-41 381.14,-47 381.14,-47 381.14,-59 381.14,-59 381.14,-65 375.14,-71 369.14,-71"/>
+<text xml:space="preserve" text-anchor="middle" x="330.39" y="-54.95" font-family="Arial" font-size="9.00">Test Case Gen</text>
+<text xml:space="preserve" text-anchor="middle" x="330.39" y="-44.45" font-family="Arial" font-size="9.00">(unit/integration fuzz)</text>
+</g>
+<!-- SAST&#45;&gt;TestGen -->
+<g id="edge3" class="edge">
+<title>SAST&#45;&gt;TestGen</title>
+<path fill="none" stroke="black" d="M237.06,-54.2C247.28,-54.07 257.88,-53.93 268.09,-53.8"/>
+<polygon fill="black" stroke="black" points="267.94,-57.3 277.9,-53.67 267.85,-50.3 267.94,-57.3"/>
+</g>
+<!-- Findings -->
+<g id="node5" class="node">
+<title>Findings</title>
+<path fill="none" stroke="black" d="M578.26,-73C578.26,-73 521.76,-73 521.76,-73 515.76,-73 509.76,-67 509.76,-61 509.76,-61 509.76,-49 509.76,-49 509.76,-43 515.76,-37 521.76,-37 521.76,-37 578.26,-37 578.26,-37 584.26,-37 590.26,-43 590.26,-49 590.26,-49 590.26,-61 590.26,-61 590.26,-67 584.26,-73 578.26,-73"/>
+<text xml:space="preserve" text-anchor="middle" x="550.01" y="-56.95" font-family="Arial" font-size="9.00">Vulns / Findings</text>
+<text xml:space="preserve" text-anchor="middle" x="550.01" y="-46.45" font-family="Arial" font-size="9.00">(CWE mapped)</text>
+</g>
+<!-- Static&#45;&gt;Findings -->
+<g id="edge4" class="edge">
+<title>Static&#45;&gt;Findings</title>
+<path fill="none" stroke="black" d="M387.15,-95.16C421.54,-86.63 465.3,-75.77 498.65,-67.5"/>
+<polygon fill="black" stroke="black" points="499.2,-70.97 508.06,-65.16 497.51,-64.17 499.2,-70.97"/>
+</g>
+<!-- TestGen&#45;&gt;Findings -->
+<g id="edge5" class="edge">
+<title>TestGen&#45;&gt;Findings</title>
+<path fill="none" stroke="black" d="M381.59,-53.46C416.55,-53.78 463.02,-54.21 498.13,-54.53"/>
+<polygon fill="black" stroke="black" points="498.02,-58.03 508.05,-54.62 498.08,-51.03 498.02,-58.03"/>
+</g>
+<!-- Reports -->
+<g id="node6" class="node">
+<title>Reports</title>
+<ellipse fill="none" stroke="black" cx="713.35" cy="-55" rx="86.09" ry="20.51"/>
+<text xml:space="preserve" text-anchor="middle" x="713.35" y="-56.95" font-family="Arial" font-size="9.00">PWN::Reports</text>
+<text xml:space="preserve" text-anchor="middle" x="713.35" y="-46.45" font-family="Arial" font-size="9.00">(generate PDF/MD/JSON)</text>
+</g>
+<!-- Findings&#45;&gt;Reports -->
+<g id="edge6" class="edge">
+<title>Findings&#45;&gt;Reports</title>
+<path fill="none" stroke="black" d="M590.48,-55C598.29,-55 606.79,-55 615.57,-55"/>
+<polygon fill="black" stroke="black" points="615.28,-58.5 625.28,-55 615.28,-51.5 615.28,-58.5"/>
+</g>
+<!-- REPL -->
+<g id="node7" class="node">
+<title>REPL</title>
+<path fill="none" stroke="black" d="M910.19,-36C910.19,-36 848.44,-36 848.44,-36 842.44,-36 836.44,-30 836.44,-24 836.44,-24 836.44,-12 836.44,-12 836.44,-6 842.44,0 848.44,0 848.44,0 910.19,0 910.19,0 916.19,0 922.19,-6 922.19,-12 922.19,-12 922.19,-24 922.19,-24 922.19,-30 916.19,-36 910.19,-36"/>
+<text xml:space="preserve" text-anchor="middle" x="879.32" y="-19.95" font-family="Arial" font-size="9.00">REPL / Agent</text>
+<text xml:space="preserve" text-anchor="middle" x="879.32" y="-9.45" font-family="Arial" font-size="9.00">(inspect findings)</text>
+</g>
+<!-- Reports&#45;&gt;REPL -->
+<g id="edge7" class="edge">
+<title>Reports&#45;&gt;REPL</title>
+<path fill="none" stroke="black" d="M776.81,-40.91C792.83,-37.29 809.91,-33.44 825.4,-29.94"/>
+<polygon fill="black" stroke="black" points="825.89,-33.42 834.88,-27.8 824.35,-26.59 825.89,-33.42"/>
+</g>
+<!-- REPL&#45;&gt;Source -->
+<g id="edge8" class="edge">
+<title>REPL&#45;&gt;Source</title>
+<path fill="none" stroke="black" d="M836.25,-13.22C803.17,-9.88 755.88,-6 714.35,-6 173.26,-6 173.26,-6 173.26,-6 144.28,-6 111.94,-8.78 86.18,-11.66"/>
+<polygon fill="black" stroke="black" points="85.87,-8.17 76.35,-12.81 86.69,-15.12 85.87,-8.17"/>
+<text xml:space="preserve" text-anchor="middle" x="448.26" y="-9.2" font-family="Times,serif" font-size="14.00">patch &amp; re&#45;scan</text>
+</g>
+</g>
+</svg>

data/documentation/diagrams/dot/ai-integration-tool-calling.dot

@@ -0,0 +1,23 @@
+digraph "PWN AI Integration & Tool Calling" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  User [label="User Prompt"];
+  Agent [label="PWN::AI::Agent", shape=ellipse, fillcolor=lightblue];
+  LLM [label="LLM (Grok OAuth,\nOpenAI, etc.)", shape=box];
+  Tools [label="Tool Registry\n(pwn_eval, shell,\nmemory_*, skill_*, \nlearning_*)", shape=box];
+  PWNNS [label="PWN Namespace\n(Plugins, SAST,\nReports, etc.)", shape=box];
+  External [label="External Tools\n(curl, nmap, msf, burp)", shape=box];
+
+  User -> Agent;
+  Agent -> LLM [label="build prompt +\ntools schema"];
+  LLM -> Agent [label="tool_calls[]"];
+  Agent -> Tools [label="dispatch"];
+  Tools -> PWNNS [label="PWN::Plugins::XXX.method"];
+  Tools -> External [label="shell commands"];
+  PWNNS -> Tools [label="return value\nor exception"];
+  External -> Tools [label="stdout/stderr"];
+  Tools -> Agent [label="results"];
+  Agent -> LLM [label="continue conversation"];
+  Agent -> User [label="final answer + artifacts"];
+}

data/documentation/diagrams/dot/burp-vs-zap-preference.dot

@@ -0,0 +1,15 @@
+digraph "PWN BurpSuite vs Zaproxy Preference" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Decision [label="Web Proxy Choice\nin PWN", shape=diamond, fillcolor=lightyellow];
+  Burp [label="PWN::Plugins::BurpSuite\n(preferred for most cases)\n- Comprehensive scanning\n- Rich ecosystem\n- Active scan + extensions", shape=box, fillcolor=lightgreen];
+  Zap [label="PWN::Plugins::Zaproxy\n(fallback)\n- Open source\n- REST API scans", shape=box, fillcolor=lightblue];
+
+  UserTask [label="Web App Test Task"];
+  UserTask -> Decision;
+  Decision -> Burp [label="default / most features"];
+  Decision -> Zap [label="if Burp unavailable\nor specific REST need"];
+  Burp -> "Scan / Proxy / Exploit";
+  Zap -> "Scan / Proxy / Exploit";
+}

data/documentation/diagrams/dot/code-scanning-sast.dot

@@ -0,0 +1,21 @@
+digraph "PWN Code Scanning & SAST" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Source [label="Source Code\n(Git, Local Dir)", shape=box];
+  SAST [label="PWN::SAST\n(analyze, testgen)", shape=ellipse, fillcolor=lightgreen];
+  Static [label="Static Analysis\n(RuboCop, Brakeman,\nSemgrep, custom rules)"];
+  TestGen [label="Test Case Gen\n(unit/integration fuzz)"];
+  Findings [label="Vulns / Findings\n(CWE mapped)", shape=box];
+  Reports [label="PWN::Reports\n(generate PDF/MD/JSON)", shape=ellipse, fillcolor=lightgreen];
+  REPL [label="REPL / Agent\n(inspect findings)"];
+
+  Source -> SAST;
+  SAST -> Static;
+  SAST -> TestGen;
+  Static -> Findings;
+  TestGen -> Findings;
+  Findings -> Reports;
+  Reports -> REPL;
+  REPL -> Source [label="patch & re-scan"];
+}

data/documentation/diagrams/dot/driver-framework.dot

@@ -0,0 +1,17 @@
+digraph "PWN Driver Framework" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Parser [label="PWN::Driver::Parser\n(OptionParser + auto_opts)"];
+  Script [label="Driver Script\n(bin/pwn_* or custom)"];
+  PWNLoad [label="require 'pwn'\nFull namespace"];
+  Orchestrate [label="Orchestration Logic\n(plugins + AI + loops)"];
+  Outputs [label="Reports, Logs,\nFindings"];
+
+  Script -> Parser;
+  Parser -> Script;
+  Script -> PWNLoad;
+  PWNLoad -> Orchestrate;
+  Orchestrate -> Outputs;
+  Script -> "standalone | cron | pwn-ai";
+}

data/documentation/diagrams/dot/fuzzing-workflow.dot

@@ -0,0 +1,27 @@
+digraph "PWN Fuzzing Workflows" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Input [label="Input Corpus\n(Seeds, Mutators)", shape=box];
+  FuzzProto [label="Protocol Fuzz\n(pwn_fuzz_net_app_proto)"];
+  FuzzFile [label="File / Format Fuzz"];
+  FuzzNet [label="Network Service Fuzz"];
+  FuzzWeb [label="Web App Fuzz\n(XSS vectors, etc.)"];
+  PWNfuzz [label="PWN::Plugins::Fuzz", shape=ellipse];
+  Monitor [label="Monitor Crashes\n(PS, logging, core dumps)"];
+  Corpus [label="Interesting Inputs\n(saved for replay)", shape=cylinder];
+  Crash [label="Crash Analysis\n(identify root cause)", shape=ellipse];
+
+  Input -> PWNfuzz;
+  PWNfuzz -> FuzzProto;
+  PWNfuzz -> FuzzFile;
+  PWNfuzz -> FuzzNet;
+  PWNfuzz -> FuzzWeb;
+  FuzzProto -> Monitor;
+  FuzzFile -> Monitor;
+  FuzzNet -> Monitor;
+  FuzzWeb -> Monitor;
+  Monitor -> Corpus;
+  Monitor -> Crash;
+  Crash -> Input [label="refine mutators"];
+}

data/documentation/diagrams/dot/history-to-drivers.dot

@@ -0,0 +1,20 @@
+digraph "History Command to Driver Generation" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  User [label="User in REPL"];
+  Pry [label="PWN REPL\n(history, edit, save)"];
+  HistoryFile [label="~/.pry_history\n(raw commands)", shape=cylinder, fillcolor=lightyellow];
+  Script [label="Prototype Script\n(.rb or bin/)", shape=box];
+  Driver [label="PWN Driver\n(/opt/pwn/bin/ example\nor PWN::Driver::Parser)", shape=box];
+  Skill [label="Distilled Skill\n(~/.pwn/skills/)", shape=cylinder, fillcolor=lightyellow];
+  Agent [label="pwn-ai Agent\n(future automation)"];
+
+  User -> Pry [label="run exploration cmds"];
+  Pry -> HistoryFile [label="appends each line"];
+  Pry -> Script [label="history | grep > my_proto.rb\nor edit -n"];
+  Script -> Driver [label="wrap in PWN::Driver\nadd opts, orchestration"];
+  Script -> Skill [label="manually or via\ndistill_skill after success"];
+  Driver -> Agent [label="invoked by agent\nor cron"];
+  Skill -> Agent [label="loaded in prompt context"];
+}

data/documentation/diagrams/dot/memory-skills-detailed.dot

@@ -0,0 +1,28 @@
+digraph "PWN Memory & Skills Detailed Data Flow" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Input [label="Successful Task\nOutcome in Agent"];
+  Learn [label="PWN::AI::Agent::Learning\nnote_outcome"];
+  Metrics [label="Metrics (success/duration)"];
+  Introspect [label="learning_reflect\n+ LLM introspection"];
+  Distill [label="learning_distill_skill"];
+  SkillCreate [label="skill_create / edit"];
+  SkillStore [label="~/.pwn/skills/*.md\n(YAML frontmatter\n+ markdown + references)", shape=cylinder, fillcolor=lightyellow];
+  MemStore [label="~/.pwn/memory.json", shape=cylinder, fillcolor=lightyellow];
+  SkillList [label="skill_list / skill_view"];
+  AgentPrompt [label="Agent System Prompt\n(injects skills + memory)"];
+  Recall [label="memory_recall"];
+
+  Input -> Learn;
+  Learn -> Metrics;
+  Learn -> Introspect;
+  Introspect -> Distill;
+  Distill -> SkillCreate;
+  SkillCreate -> SkillStore;
+  SkillStore -> SkillList;
+  SkillList -> AgentPrompt;
+  Input -> MemStore [label="remember key facts"];
+  Recall -> AgentPrompt;
+  MemStore -> Recall;
+}

data/documentation/diagrams/dot/network-infra-testing.dot

@@ -0,0 +1,22 @@
+digraph "Network & Infrastructure Testing with PWN" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Targets [label="Targets\n(IPs, Domains, ASNs)", shape=box];
+  Discovery [label="Discovery\n(NmapIt, pwn_nmap_discover,\nShodan, IPInfo, crt.sh)"];
+  Enum [label="Service Enum\n(portscan, version, scripts)"];
+  Auth [label="Auth Testing\n(basic_auth, DAOs,\ncredential spray)"];
+  VulnScan [label="Vuln Scanning\n(NessusCloud, OpenVAS,\nNexpose, Zaproxy)"];
+  Packet [label="Packet Crafting\n(PWN::Plugins::Packet,\nSock, Tor)"];
+  Infra [label="Infra Specific\n(AWS, Jenkins, Jira,\nVsphere, RabbitMQ)"];
+  ExploitNet [label="Network Exploits"];
+
+  Targets -> Discovery;
+  Discovery -> Enum;
+  Enum -> Auth;
+  Auth -> VulnScan;
+  VulnScan -> Packet;
+  Packet -> ExploitNet;
+  VulnScan -> Infra;
+  Infra -> ExploitNet;
+}

data/documentation/diagrams/dot/overall-pwn-architecture.dot

@@ -0,0 +1,49 @@
+digraph "PWN Overall Architecture" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+  edge [fontname="Arial", fontsize=8];
+
+  User [label="End User\n(Researcher, pwn-ai)", shape=box];
+  REPL [label="PWN REPL\n(pry + pwn)", shape=ellipse, fillcolor=lightgreen, style=filled];
+  AI [label="PWN::AI\n(Agent + Providers)", shape=ellipse, fillcolor=lightblue, style=filled];
+
+  subgraph cluster_core {
+    label="Core PWN";
+    color=darkblue;
+    Plugins [label="PWN::Plugins\n(67+ modules:\nBurp, NmapIt,\nMetasploit, Fuzz,\nTransparentBrowser...)" , shape=box];
+    SAST [label="PWN::SAST", shape=box];
+    Reports [label="PWN::Reports", shape=box];
+    Driver [label="PWN::Driver", shape=box];
+    Memory [label="PWN::Memory", shape=box];
+  }
+
+  subgraph cluster_persistent {
+    label="Persistent Layer";
+    color=darkgreen;
+    Skills [label="PWN::Skills\n(~/.pwn/skills)", shape=cylinder, fillcolor=lightyellow];
+    Sess [label="PWN::Sessions", shape=cylinder, fillcolor=lightyellow];
+    Cron [label="PWN::Cron", shape=cylinder, fillcolor=lightyellow];
+    Learn [label="Learning\n(Metrics + JSONL)", shape=cylinder, fillcolor=lightyellow];
+  }
+
+  BinDrivers [label="/opt/pwn/bin/\n(Drivers & CLIs)", shape=box];
+
+  User -> REPL [label="pwn / pwn-ai"];
+  REPL -> AI [label="launch pwn-ai"];
+  REPL -> Plugins [label="direct invocation"];
+  REPL -> SAST;
+  REPL -> Reports;
+  REPL -> Driver;
+  AI -> Plugins [label="tool calls\npwn_eval"];
+  AI -> Memory [label="remember/recall"];
+  REPL -> Memory;
+  REPL -> BinDrivers;
+  Driver -> BinDrivers;
+  Plugins -> Learn;
+  AI -> Learn [label="distill skills"];
+  Learn -> Skills [label="promote successful"];
+  Skills -> AI [label="context injection"];
+  Skills -> REPL;
+  Cron -> REPL [label="schedule drivers/agents"];
+  Sess -> REPL [label="replay / audit"];
+}

data/documentation/diagrams/dot/penetration-testing-workflow.dot

@@ -0,0 +1,29 @@
+digraph "PWN Penetration Testing Workflow" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+  edge [fontname="Arial", fontsize=8];
+
+  Target [label="Target System\n(Host, Network, App)", shape=box];
+
+  Recon [label="Recon\n(NmapIt, Shodan,\nIPInfo, crt.sh)", shape=ellipse, fillcolor=lightblue];
+  Scanning [label="Vuln Scanning\n(OpenVAS, Nessus,\nNexpose, ZAP/Burp)", shape=ellipse, fillcolor=lightblue];
+  Web [label="Web App Testing\n(TransparentBrowser,\nBurpSuite, Zaproxy,\nURI Buster)", shape=ellipse, fillcolor=lightblue];
+  Fuzz [label="Fuzzing\n(PWN::Plugins::Fuzz,\npwn_fuzz_net_app_proto)", shape=ellipse, fillcolor=lightblue];
+  Exploit [label="Exploitation\n(Metasploit, custom\nBeEF, Serial, etc.)", shape=ellipse, fillcolor=lightcoral];
+  Post [label="Post-Exploitation\n(PS, FileFu, SSH,\ncredential extraction)", shape=ellipse, fillcolor=lightcoral];
+  Report [label="Reporting\n(PWN::Reports)", shape=ellipse, fillcolor=lightgreen];
+
+  MemorySkills [label="Memory + Skills\n(persistent context)", shape=cylinder];
+
+  Target -> Recon;
+  Recon -> Scanning;
+  Scanning -> Web;
+  Web -> Fuzz;
+  Fuzz -> Exploit;
+  Exploit -> Post;
+  Post -> Report;
+
+  Report -> MemorySkills [label="note outcomes"];
+  MemorySkills -> Recon [label="recall previous\nfindings"];
+  MemorySkills -> Exploit [label="reuse exploits"];
+}

data/documentation/diagrams/dot/plugin-ecosystem.dot

@@ -0,0 +1,31 @@
+digraph "PWN Plugin Ecosystem" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=8];
+  edge [fontsize=7];
+
+  Hub [label="PWN::Plugins", shape=ellipse, fillcolor=lightblue];
+  Recon [label="Recon & Discovery\n(NmapIt, Shodan, IPInfo,\nHunter, crt.sh, Git)"];
+  Web [label="Web & Proxy\n(TransparentBrowser,\nBurpSuite, Zaproxy,\nSpider, URI Buster)"];
+  Vuln [label="Vulnerability\n(Fuzz, Metasploit,\nNessus, OpenVAS,\nNexpose, DefectDojo)"];
+  Auth [label="Auth & Access\n(OAuth2, BasicAuth,\nDAOs, Vault)"];
+  Infra [label="Infrastructure\n(Jenkins, AWS, Jira,\nRabbitMQ, Vsphere)"];
+  LowLevel [label="Low Level &\nHardware\n(Serial, BusPirate,\nPacket, Sock, Tor,\nAndroid, Assembly)"];
+  Util [label="Utilities\n(FileFu, Char, XXD,\nPS, Reports helpers)"];
+  SDR [label="SDR & RF\n(SDR, gqrx)"];
+  Other [label="Misc\n(BeEF, OCR, PDFParse,\nScannableCodes, etc.)"];
+
+  Hub -> Recon;
+  Hub -> Web;
+  Hub -> Vuln;
+  Hub -> Auth;
+  Hub -> Infra;
+  Hub -> LowLevel;
+  Hub -> Util;
+  Hub -> SDR;
+  Hub -> Other;
+
+  Recon -> Vuln;
+  Web -> Vuln;
+  Auth -> Vuln;
+  Infra -> Vuln;
+}

data/documentation/diagrams/dot/pwn-ai-feedback-learning-loop.dot

@@ -0,0 +1,57 @@
+digraph "PWN-AI Feedback Learning Loop" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=10];
+  edge [fontname="Arial", fontsize=9];
+
+  // External Entities
+  User [label="Security Researcher\n(User / pwn-ai)", shape=box];
+  LLM [label="LLM Providers\n(Grok/OAuth, OpenAI,\nAnthropic, Gemini, Ollama)", shape=box];
+
+  // Processes
+  subgraph cluster_agent {
+    label="PWN::AI::Agent";
+    style=rounded;
+    color=blue;
+
+    PwnAI [label="pwn-ai TUI\n(Natural Language Interface)", shape=ellipse, style=filled, fillcolor=lightblue];
+    ToolCall [label="Tool Calling Dispatcher\n(pwn_eval, shell, memory,\nskill_list, etc.)", shape=ellipse, style=filled, fillcolor=lightblue];
+    Introspection [label="Introspection &\nReflection", shape=ellipse, style=filled, fillcolor=lightblue];
+  }
+
+  // Data Stores
+  Memory [label="PWN::Memory\n(~/.pwn/memory.json)", shape=cylinder, fillcolor=lightyellow];
+  Metrics [label="PWN::AI::Agent::Metrics\n(~/.pwn/metrics.json)", shape=cylinder, fillcolor=lightyellow];
+  Learning [label="PWN::AI::Agent::Learning\n(~/.pwn/learning.jsonl)", shape=cylinder, fillcolor=lightyellow];
+  Skills [label="PWN::Skills\n(~/.pwn/skills/*.md)", shape=cylinder, fillcolor=lightyellow];
+  History [label="Pry History /\nSession Logs", shape=cylinder, fillcolor=lightyellow];
+
+  // External / Other
+  REPL [label="PWN REPL\n(Full PWN namespace)", shape=box];
+
+  // Flows
+  User -> PwnAI [label="Natural language task\n(e.g. scan + exploit + report)"];
+  PwnAI -> ToolCall [label="Parse intent, plan steps"];
+  ToolCall -> REPL [label="pwn_eval(code) or shell(cmd)"];
+  REPL -> ToolCall [label="Results / stdout / exceptions"];
+  ToolCall -> LLM [label="If needed for decisioning"];
+  LLM -> ToolCall [label="Responses"];
+
+  ToolCall -> Memory [label="remember(key, val)"];
+  Memory -> ToolCall [label="recall(query) injected\ninto prompts"];
+
+  ToolCall -> Metrics [label="record(success, duration,\ntool=...)"];
+  Metrics -> Introspection [label="per-tool stats"];
+
+  ToolCall -> Learning [label="note_outcome(task, success, details)"];
+  Learning -> Introspection [label="reflect on transcript"];
+
+  Introspection -> Skills [label="distill_skill(name, content,\nreferences)"];
+  Skills -> ToolCall [label="skill_list / skill_view\ninjected into future prompts"];
+
+  Introspection -> History [label="Update session"];
+
+  User -> History [label="history command to\ninspect previous"];
+  History -> PwnAI [label="context from prior sessions"];
+
+  PwnAI -> User [label="Results, reports, next steps"];
+}

data/documentation/diagrams/dot/pwn-repl-prototyping.dot

@@ -0,0 +1,37 @@
+digraph "PWN REPL Prototyping & Development" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+  edge [fontname="Arial", fontsize=8];
+
+  User [label="User\n(Researcher)", shape=box];
+  Shell [label="shell (pwn command)", shape=box];
+  Pry [label="Pry REPL\n(PWN preloaded)", shape=ellipse, fillcolor=lightgreen, style=filled];
+
+  subgraph cluster_pwn {
+    label="PWN Namespace";
+    color=navy;
+    Plugins [label="PWN::Plugins::\n(Burp, NmapIt,\nTransparentBrowser,\nMetasploit, etc.)", shape=box];
+    SAST [label="PWN::SAST\n(Static Analysis\n+ Testgen)", shape=box];
+    Reports [label="PWN::Reports", shape=box];
+    Driver [label="PWN::Driver\n(Parser, auto_opts)", shape=box];
+    AI [label="PWN::AI::\n(Agent, Grok, etc.)", shape=box];
+  }
+
+  History [label="Pry Command History\n(~/.pry_history)", shape=cylinder, fillcolor=yellow];
+  Scripts [label="Custom Scripts\n& Prototypes (.rb)", shape=box];
+
+  User -> Shell [label="pwn"];
+  Shell -> Pry [label="starts"];
+  Pry -> Plugins [label="direct method calls"];
+  Pry -> SAST [label="PWN::SAST.analyze..."];
+  Pry -> Reports [label="PWN::Reports.generate"];
+  Pry -> AI [label="pwn-ai or direct"];
+  Pry -> History [label="every cmd logged"];
+  Pry -> Scripts [label="save / edit\nprototype"];
+
+  History -> Pry [label="history\nup-arrow\nctrl-r search"];
+  Scripts -> Pry [label="load / require\ncopy-paste"];
+  Scripts -> Driver [label="wrap as driver"];
+
+  Pry -> User [label="interactive results\ninspect / pp / tab-complete"];
+}

data/documentation/diagrams/dot/reporting-pipeline.dot

@@ -0,0 +1,17 @@
+digraph "PWN Reporting Pipeline" {
+  rankdir=LR;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Findings [label="Raw Findings\n(Scan results,\nagent outputs,\nexploits, SAST)", shape=box];
+  Reports [label="PWN::Reports", shape=ellipse, fillcolor=lightgreen];
+  Templates [label="Templates\n(Markdown, PDF,\nJSON, CSV, HTML)", shape=cylinder];
+  Outputs [label="Generated Reports\n(DefectDojo import,\nJira tickets, PDFs)", shape=box];
+  Memory [label="PWN::Memory", shape=cylinder, fillcolor=lightyellow];
+
+  Findings -> Reports;
+  Reports -> Templates;
+  Templates -> Reports;
+  Reports -> Outputs [label="generate"];
+  Reports -> Memory [label="store summary"];
+  Memory -> Reports [label="enrich with context"];
+}

data/documentation/diagrams/dot/reverse-engineering-flow.dot

@@ -0,0 +1,21 @@
+digraph "PWN Reverse Engineering Flow" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Binary [label="Binary / Firmware\n(ELF, PE, APK,\nSerial devices)", shape=box];
+  RE [label="RE Tools\n(XXD, Assembly,\nStrings, objdump,\nRadare/Ghidra via shell)"];
+  PWNRE [label="PWN::Plugins::\nAssembly, XXD,\nSerial, BusPirate"];
+  Analysis [label="Analysis\n(Deobfuscate, patch,\nidentify vulns)", shape=ellipse];
+  FuzzRE [label="Targeted Fuzzing"];
+  ExploitRE [label="Craft Exploit\n(ROP, shellcode)"];
+  Test [label="Validate in REPL"];
+
+  Binary -> RE;
+  RE -> PWNRE;
+  PWNRE -> Analysis;
+  Analysis -> FuzzRE;
+  Analysis -> ExploitRE;
+  FuzzRE -> ExploitRE;
+  ExploitRE -> Test;
+  Test -> Binary [label="re-analyze"];
+}

data/documentation/diagrams/dot/sessions-cron-automation.dot

@@ -0,0 +1,17 @@
+digraph "PWN Sessions, Cron & Scheduled Automation" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+
+  Agent [label="pwn-ai Agent / REPL"];
+  Sessions [label="PWN::Sessions\n(record/replay,\ntranscripts)", shape=cylinder, fillcolor=lightyellow];
+  Cron [label="PWN::Cron\n(scheduled tasks)", shape=ellipse, fillcolor=lightcoral];
+  Drivers [label="Drivers &\nBin Scripts"];
+  Memory [label="PWN::Memory", shape=cylinder, fillcolor=lightyellow];
+
+  Agent -> Sessions [label="save / load"];
+  Cron -> Drivers [label="invoke on schedule"];
+  Cron -> Agent [label="run autonomous pwn-ai jobs"];
+  Drivers -> Agent [label="orchestrate"];
+  Sessions -> Memory [label="persist key facts"];
+  Memory -> Cron [label="use recalled context\nfor jobs"];
+}

data/documentation/diagrams/dot/web-application-testing.dot

@@ -0,0 +1,27 @@
+digraph "Web Application Testing with PWN" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+  edge [fontsize=8];
+
+  App [label="Web App\n(URL, API, SPA)", shape=box];
+
+  Proxy [label="Proxy Interception\n(BurpSuite (preferred),\nZaproxy)", shape=ellipse, fillcolor=lightblue];
+  Spider [label="Spider / Crawl\n(TransparentBrowser,\nSpider plugin)"];
+  ActiveScan [label="Active Scans\n(Burp active, ZAP active,\npwn_*_active_scan)"];
+  Manual [label="Manual + Assisted\n(URI Buster, XSS vectors,\nchar encodings, web_cache)"];
+  API [label="API Testing\n(OpenAPI, JSONPathify,\nGraphQL introspection)"];
+  AuthWeb [label="Auth & Session\n(OAuth2, BasicAuth,\nJWT handling)"];
+  Findings [label="Web Vulns\n(XSS, SQLi, IDOR,\nCache deception, etc.)", shape=box];
+  ReportWeb [label="PWN Reports"];
+
+  App -> Proxy;
+  Proxy -> Spider;
+  Spider -> ActiveScan;
+  ActiveScan -> Manual;
+  Manual -> API;
+  API -> AuthWeb;
+  AuthWeb -> Findings;
+  Findings -> ReportWeb;
+
+  Proxy -> Findings [label="intercept & modify"];
+}

data/documentation/diagrams/dot/zero-day-research-flow.dot

@@ -0,0 +1,27 @@
+digraph "PWN Zero-Day Research Workflow" {
+  rankdir=TB;
+  node [shape=box, style=rounded, fontname="Arial", fontsize=9];
+  edge [fontsize=8];
+
+  Target [label="Target Research\n(Binary, Firmware,\nProtocol, Web App)", shape=box];
+  RE [label="Reverse Engineering\n+ Static Analysis"];
+  SAST [label="PWN::SAST + Custom"];
+  Fuzz [label="Fuzzing + Protocol\nAnalysis"];
+  Dyn [label="Dynamic Analysis\n(REPL + Debug)"];
+  Memory [label="PWN Memory\n(historical vulns,\nreferences)", shape=cylinder];
+  Skill [label="Skills (prior\nzero-day patterns)", shape=cylinder];
+  Exploit [label="Exploit Dev\n& Validation"];
+  Disclose [label="Responsible Disclosure\n& Fix (Reports,\nHackerOne, etc.)"];
+
+  Target -> RE;
+  Target -> SAST;
+  RE -> Fuzz;
+  SAST -> Fuzz;
+  Fuzz -> Dyn;
+  RE -> Dyn;
+  Memory -> RE [label="recall past findings"];
+  Skill -> Exploit [label="apply patterns"];
+  Dyn -> Exploit;
+  Exploit -> Disclose;
+  Disclose -> Memory [label="remember disclosure"];
+}