pwn 0.5.615 → 0.5.617

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fbf42ff07a821ff15cc7ed8596ac349ae600d93af5f1a55a1472d406583dc1b9
-  data.tar.gz: 762e04766f4eac41a212a08674a3d1821d84d9b6ba875c09f7a36ad81fa9e708
+  metadata.gz: bb16e051629252943b2df67c661ca49455cd5dfd4acfbde1620e75135f858c42
+  data.tar.gz: 036cb463b3cd848926f88c60be3f885e5e9b4f738534ac036918d118d18ec893
 SHA512:
-  metadata.gz: 7784a0441263b4095b05de321dcbaed24f1e20994de361500a9d757aa537770479420ff6a99e6f94eed1f131ae0e0741050b55449cc0501f0921b2bbc75adb61
-  data.tar.gz: c5008f8578a0b04e61e2d44429775d2bc9963e16da6091d63e84880539adecdccfa47adbe4e7d241f223e32b56dc072362b8dbb932037a87187f34854781c13b
+  metadata.gz: d76d992d344b3a2016819f772e7e304fc437d42df677b85b67f33418c988f6436385eefbb6509cbe1d1436c9df585a30f2f44189b00134792160f420af77e81c
+  data.tar.gz: 34cdfc754bd3801071a8967b672924764c5d8b894fb13a6bd74dc43f10d930aee94cb781e5c9812b6b00b14b83fbfa34cbcbbcf45d4c6c2332c800b8fe322fe5

data/README.md

@@ -6,7 +6,7 @@
   * [What is PWN](#what-is-pwn)
   * [Why PWN](#why-pwn)
   * [How PWN Works](#how-pwn-works)
-- [[Local PWN Wiki](/opt/pwn/documentation/Home.md)
+- [[Local PWN Wiki](documentation/Home.md)
 - [Installation](#installation)
 - [General Usage](#general-usage)
 - [Call to Arms](#call-to-arms)
@@ -22,7 +22,7 @@ PWN (Pronounced /pōn/ or pone), is a powerful open-source offensive cybersecuri
 
 PWN stands on the shoulders of security giants, providing over **66** production-grade plugins, full LLM integration with tool-calling agents, persistent memory, reusable skills, session/cron management, and a highly interactive REPL for prototyping and driving complex security workflows. All core automation primitives are open to promote trust, peer review, and collaborative innovation in adversarial security.
 
-**See the full [PWN Wiki](/opt/pwn/documentation/Home.md) for detailed guides.**
+**See the full [PWN Wiki](documentation/Home.md) for detailed guides.**
 
 #### **Why PWN** ####
 
@@ -73,7 +73,7 @@ A full local wiki has been generated in this checkout:
 
 **`/opt/pwn/documentation/Home.md`**
 
-- [Home](/opt/pwn/documentation/Home.md)
+- [Home](documentation/Home.md)
 - [What is PWN](documentation/What-is-PWN.md)
 - [Installation](documentation/Installation.md)
 - [pwn-ai Agent](documentation/pwn-ai-Agent.md)
@@ -95,7 +95,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.615]:001 >>> PWN.help
+pwn[v0.5.617]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -116,7 +116,7 @@ $ rvm use ruby-4.0.5@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.615]:001 >>> PWN.help
+pwn[v0.5.617]:001 >>> PWN.help
 ```
 
 If using a multi-user install of RVM:
@@ -127,7 +127,7 @@ $ rvm use ruby-4.0.5@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.615]:001 >>> PWN.help
+pwn[v0.5.617]:001 >>> PWN.help
 ```
 
 **Inside the pwn REPL (the heart of PWN):**
@@ -136,13 +136,21 @@ pwn[v0.5.615]:001 >>> PWN.help
 - `pwn-ai` — launch the autonomous AI agent (highly recommended for complex tasks). Once active you can issue natural language instructions that leverage PWN's full power.
 - Example flow:
   ``` 
-  pwn[v0.5.615]:001 >>> pwn-ai
+  pwn[v0.5.617]:001 >>> pwn-ai
   [*] pwn-ai agent TUI activated...
   > Perform active scan of https://target.example.com using preferred tooling, then analyze findings with PWN modules and produce a report.
   ```
 - Other REPL helpers: `pwn-asm`, memory/session/cron management commands, etc.
 - Exit AI mode with `back`; use full Ruby/PWN expressions at any time.
 
+**Headless / CI-CD one-shot (`pwn --ai`):**
+Skip the TUI entirely and submit a single pwn-ai request from the shell — ideal for quick lookups, scripting, or CI/CD pipelines. The final answer is written to STDOUT (pipeable); live tool-call activity streams to STDERR.
+```
+$ pwn --ai 'What ports are listening on this host?'
+$ echo "$LONG_PROMPT" | pwn --ai -
+$ pwn -Y ./ci/pwn.yaml --ai 'Run pwn_sast against ./src and summarise HIGH findings' > findings.txt
+```
+
 PWN periodically upgrades to the latest version of Ruby (reflected in `/opt/pwn/.ruby-version`). The easiest way to upgrade Ruby + pwn from a previous installation:
 
 ```
@@ -159,7 +167,7 @@ See also the wiki page on [Contributing](documentation/Contributing.md).
 
 ### **Module Documentation** ###
 
-**Primary Documentation:** Browse the embedded local wiki — start at [/opt/pwn/documentation/Home.md](/opt/pwn/documentation/Home.md).
+**Primary Documentation:** Browse the embedded local wiki — start at [/opt/pwn/documentation/Home.md](documentation/Home.md).
 
 Additional documentation on using PWN can be found on [RubyGems.org](https://www.rubydoc.info/gems/pwn). Explore the source under `lib/pwn/plugins/`, `lib/pwn/ai/`, and `PWN::` constants directly in the REPL.
 
@@ -172,15 +180,21 @@ Key wiki pages:
 
 I hope you enjoy PWN and remember... ensure you always have permission prior to carrying out any sort of security testing or hacktivities. Now — go pwn all the things (responsibly)!
 
-### **Keep Us Caffeinated** ###
 
+### **Keep Us Caffeinated** ###
 If you've found this project useful and you're interested in supporting our efforts, we invite you to take a brief moment to keep us caffeinated:
 
 [![Coffee](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png)](https://buymeacoff.ee/0dayinc)
 
+
 ### [**0x004D65726368**](https://0day.myspreadshop.com/) ###
 
 [![PWN Sticker](https://image.spreadshirtmedia.com/image-server/v1/products/T1459A839PA3861PT28D1044068794FS8193/views/1,width=300,height=300,appearanceId=839,backgroundColor=000000/ultimate-hacker-t-shirt-to-convey-to-the-public-a-hackers-favorite-past-time.jpg)](https://0day.myspreadshop.com/stickers)
 
-... (stickers, mugs, and apparel links preserved)
+[![Coffee Mug](https://image.spreadshirtmedia.com/image-server/v1/products/T1313A1PA3933PT10X2Y25D1020472680FS6327/views/3,width=300,height=300,appearanceId=1,backgroundColor=000000/https0dayinccom.jpg)](https://0day.myspreadshop.com/accessories+mugs+%26+drinkware)
+
+[![Mouse Pad](https://image.spreadshirtmedia.com/image-server/v1/products/T993A1PA2168PT10X162Y26D1044068794S100/views/1,width=300,height=300,appearanceId=1,backgroundColor=000000/ultimate-hacker-t-shirt-to-convey-to-the-public-a-hackers-favorite-past-time.jpg)](https://0day.myspreadshop.com/accessories)
+
+[![0day Inc.](https://image.spreadshirtmedia.com/image-server/v1/products/T951A550PA3076PT17X0Y73D1020472680FS8515/views/1,width=300,height=300,appearanceId=70,backgroundColor=000000/https0dayinccom.jpg)](https://shop.spreadshirt.com/0day/0dayinc-A5c3e498cf937643162a01b5f?productType=951&appearance=70)
 
+[![Black Fingerprint Hoodie](https://image.spreadshirtmedia.com/image-server/v1/products/T111A2PA3208PT17X169Y51D1020472728FS6268/views/1,width=300,height=300,appearanceId=2/https0dayinccom.jpg)](https://shop.spreadshirt.com/0day/blackfingerprint-A5c3e49db1cbf3a0b9596b4d0?productType=111&appearance=2)

data/bin/pwn

@@ -3,13 +3,58 @@
 
 require 'pwn'
 
-pwn_driver = PWN::Driver::Parser.new
+opts = PWN::Env[:driver_opts]
+pwn_driver = PWN::Driver::Parser.new do |options|
+  options.on(
+    '-APROMPT',
+    '--ai=PROMPT',
+    "<Optional - Headless one-shot pwn-ai request (no TUI). '-' reads PROMPT " \
+    'from STDIN. Final answer goes to STDOUT, tool activity to STDERR. ' \
+    'Useful for quick tasks or CI/CD jobs>'
+  ) do |a|
+    opts[:ai] = a
+  end
+end
 pwn_driver.auto_opts_help = false
 pwn_driver.parse!
 
 begin
   pwn_pid = Process.pid
-  PWN::Plugins::REPL.start
+
+  if opts[:ai]
+    # ------------------------------------------------------------------
+    # Headless pwn-ai: behave as if the user typed PROMPT at the pwn-ai
+    # TUI, but non-interactively — a single agent-loop turn with native
+    # tool-calling. STDOUT receives ONLY the final answer so it can be
+    # captured/piped; live tool dispatches stream to STDERR for CI logs.
+    #   $ pwn --ai 'What ports are listening on this host?'
+    #   $ echo "$PROMPT" | pwn --ai -
+    # ------------------------------------------------------------------
+    prompt = opts[:ai].to_s
+    prompt = $stdin.read if prompt == '-' || (prompt.strip.empty? && !$stdin.tty?)
+    raise 'ERROR: --ai requires a non-empty PROMPT (or pipe one via STDIN with --ai -)' if prompt.to_s.strip.empty?
+
+    sess = PWN::Sessions.create(
+      title: "pwn --ai #{Time.now.strftime('%Y-%m-%d %H:%M')}",
+      source: 'pwn-ai-headless'
+    )
+
+    on_tool = lambda do |name, args, result|
+      preview = args.is_a?(String) ? args[0, 120] : args.inspect[0, 120]
+      warn "[ pwn-ai → #{name} ] #{preview}"
+      warn result.to_s[0, 700]
+    end
+
+    final = PWN::AI::Agent::Loop.run(
+      request: prompt,
+      session_id: sess[:id],
+      enabled_toolsets: PWN::Env.dig(:ai, :agent, :toolsets),
+      on_tool: on_tool
+    )
+    puts final
+  else
+    PWN::Plugins::REPL.start
+  end
 rescue StandardError => e
   raise e
 ensure

data/bin/pwn_gqrx_scanner

@@ -72,6 +72,33 @@ PWN::Driver::Parser.new do |options|
   options.on('-wLOC', '--location=LOC', '<Optional - Location string to include in AI analysis (e.g. "New York, NY", 90210, GPS coords, etc.)>') do |l|
     opts[:location] = l
   end
+  options.on('--fft-scan', '<Optional - Use fast FFT-based panoramic scanning via #fast_scan_range (much faster) instead of #scan_range. Applies to profile or --scan-ranges>') do |f|
+    opts[:fft_scan] = f
+  end
+
+  options.on('-SRATE', '--sample-rate=RATE', '<Optional --fft-scan - Visible span/sample_rate in Hz (default 1_000_000)>') do |s|
+    opts[:sample_rate] = s
+  end
+
+  options.on('-NINT', '--nfft=INT', '<Optional --fft-scan - FFT bin size (default 2048)>') do |n|
+    opts[:nfft] = n
+  end
+
+  options.on('-AINT', '--avg=INT', '<Optional --fft-scan - FFT averages (default 2)>') do |a|
+    opts[:avg] = a
+  end
+
+  options.on('-CSEC', '--capture-secs=SEC', '<Optional --fft-scan - Capture seconds per chunk (default 0.03)>') do |c|
+    opts[:capture_secs] = c
+  end
+
+  options.on('--keep-spectrum', '<Optional --fft-scan - Keep full spectrum data in output (large)>') do |k|
+    opts[:keep_spectrum] = k
+  end
+
+  options.on('-ODB', '--strength-offset-db=FLOAT', '<Optional - Power offset in dB (default 0.0)>') do |o|
+    opts[:strength_offset_db] = o
+  end
 end.parse!
 
 begin
@@ -146,24 +173,54 @@ begin
   # Merge opts one last time to ensure parameters passed to the driver are included
   opts.merge!(band_plans[profile.to_sym]) unless profile.nil?
 
-  PWN::SDR::GQRX.scan_range(
-    gqrx_sock: gqrx_sock,
-    ranges: ranges,
-    demodulator_mode: demodulator_mode,
-    bandwidth: bandwidth,
-    audio_gain_db: audio_gain_db,
-    squelch: squelch,
-    precision: precision,
-    strength_lock: strength_lock,
-    rf_gain: rf_gain,
-    intermediate_gain: intermediate_gain,
-    baseband_gain: baseband_gain,
-    keep_looping: keep_looping,
-    scan_log: scan_log,
-    decoder: decoder,
-    location: location
-  )
-  puts 'Scan Complete.'
+  fft_scan = opts[:fft_scan]
+  sample_rate = opts[:sample_rate] || 1_000_000
+  sample_rate = sample_rate.to_i
+  nfft = opts[:nfft] || 2048
+  nfft = nfft.to_i
+  avgv = opts[:avg] || 2
+  avgv = avgv.to_i
+  capture_secs = opts[:capture_secs] || 0.03
+  capture_secs = capture_secs.to_f
+  keep_spectrum = opts[:keep_spectrum] ? true : false
+  strength_offset_db = opts[:strength_offset_db]
+  strength_offset_db = strength_offset_db.to_f unless strength_offset_db.nil?
+
+  if fft_scan
+    puts '[*] --fft-scan requested: using fast FFT panoramic mode (#fast_scan_range)'
+    fast_resp = PWN::SDR::GQRX.fast_scan_range(
+      gqrx_sock: gqrx_sock,
+      ranges: ranges,
+      sample_rate: sample_rate,
+      nfft: nfft,
+      avg: avgv,
+      capture_secs: capture_secs,
+      strength_lock: strength_lock,
+      keep_spectrum: keep_spectrum,
+      strength_offset_db: strength_offset_db,
+      scan_log: scan_log
+    )
+    puts "FFT Scan complete: #{fast_resp[:total]} signals found."
+  else
+    PWN::SDR::GQRX.scan_range(
+      gqrx_sock: gqrx_sock,
+      ranges: ranges,
+      demodulator_mode: demodulator_mode,
+      bandwidth: bandwidth,
+      audio_gain_db: audio_gain_db,
+      squelch: squelch,
+      precision: precision,
+      strength_lock: strength_lock,
+      rf_gain: rf_gain,
+      intermediate_gain: intermediate_gain,
+      baseband_gain: baseband_gain,
+      keep_looping: keep_looping,
+      scan_log: scan_log,
+      decoder: decoder,
+      location: location
+    )
+    puts 'Scan Complete.'
+  end
 rescue StandardError => e
   raise e
 rescue Interrupt

data/documentation/Diagrams.md

@@ -1,57 +1,140 @@
-# PWN Data Flow Diagrams (DFDs)
+# PWN Data-Flow Diagrams
 
-This page provides visual SVG Data Flow Diagrams illustrating how the PWN offensive cybersecurity framework operates across its key components and workflows.
+26 SVG diagrams, all rendered from Graphviz sources in
+[`diagrams/dot/`](diagrams/dot/) with a single shared visual theme
+(see [`_THEME.md`](diagrams/dot/_THEME.md)). Rebuild everything with:
 
-## Core Architecture & Learning
+```bash
+cd documentation/diagrams && ./build.sh
+```
 
-- **PWN-AI Feedback Learning Loop**: The closed-loop self-improvement system using Memory, Skills, Metrics, and Learning to evolve capabilities.
-  ![PWN AI Feedback Learning Loop](diagrams/pwn-ai-feedback-learning-loop.svg)
+Every diagram uses strict layer→layer edges (`newrank=true` + `{rank=same}`
+groups) so lines never criss-cross.
 
-- **PWN REPL Prototyping**: Interactive development and rapid prototyping inside the full PWN namespace.
-  ![PWN REPL Prototyping](diagrams/pwn-repl-prototyping.svg)
+---
 
-- **History Command to Driver Generation**: How REPL exploration and `history` are turned into reusable Drivers and Skills.
-  ![History to Drivers](diagrams/history-to-drivers.svg)
+## 1 · Architecture
 
-## Primary Security Workflows
+### Overall PWN Architecture
+[source](diagrams/dot/overall-pwn-architecture.dot) · doc: [How PWN Works](How-PWN-Works.md)
+![overall-pwn-architecture](diagrams/overall-pwn-architecture.svg)
 
-- **Penetration Testing Workflow**: End-to-end red teaming from recon to reporting, leveraging all PWN capabilities.
-  ![Penetration Testing Workflow](diagrams/penetration-testing-workflow.svg)
+### `~/.pwn/` Persistence Map
+[source](diagrams/dot/persistence-filesystem.dot) · doc: [Persistence](Persistence.md)
+![persistence-filesystem](diagrams/persistence-filesystem.svg)
 
-- **Network & Infrastructure Testing**: Discovery, enumeration, scanning, packet crafting, and infra-specific testing (AWS, Jenkins, etc.).
-  ![Network & Infrastructure Testing](diagrams/network-infra-testing.svg)
+### Plugin Ecosystem (66 modules)
+[source](diagrams/dot/plugin-ecosystem.dot) · doc: [Plugins](Plugins.md)
+![plugin-ecosystem](diagrams/plugin-ecosystem.svg)
 
-- **Web Application Testing**: Proxy-driven spidering, active scanning, manual assisted testing, and API security assessment. (BurpSuite preferred)
-  ![Web Application Testing](diagrams/web-application-testing.svg)
+---
 
-- **Code Scanning & SAST**: Static analysis, test case generation, and vulnerability reporting using `PWN::SAST`.
-  ![Code Scanning SAST](diagrams/code-scanning-sast.svg)
+## 2 · Entry Points
 
-- **Fuzzing Workflows**: Protocol, file, network, and web fuzzing with monitoring and corpus refinement.
-  ![Fuzzing Workflows](diagrams/fuzzing-workflow.svg)
+### `pwn` REPL Prototyping
+[source](diagrams/dot/pwn-repl-prototyping.dot) · doc: [pwn REPL](pwn-REPL.md)
+![pwn-repl-prototyping](diagrams/pwn-repl-prototyping.svg)
 
-- **Reverse Engineering Flow**: Binary/firmware analysis, patching, targeted fuzzing, and exploit crafting.
-  ![Reverse Engineering Flow](diagrams/reverse-engineering-flow.svg)
+### REPL History → Reusable Driver / Skill
+[source](diagrams/dot/history-to-drivers.dot) · doc: [Drivers](Drivers.md)
+![history-to-drivers](diagrams/history-to-drivers.svg)
 
-## Additional Notes
+### Driver Anatomy (`bin/pwn_*`)
+[source](diagrams/dot/driver-framework.dot) · doc: [CLI Drivers](CLI-Drivers.md)
+![driver-framework](diagrams/driver-framework.svg)
 
-- Diagrams are generated using Graphviz (dot) from source `.dot` files in `diagrams/dot/`.
-- These visualize the integration of:
-  - `PWN::Plugins` (67+ modules)
-  - `PWN::AI::Agent` + tool calling + LLM providers
-  - `PWN::Memory`, `PWN::Skills`, and Learning loop
-  - `PWN::SAST`, `PWN::Reports`, `PWN::Driver`
-- For the source definitions, see `diagrams/dot/*.dot`.
-- Update these diagrams by editing the `.dot` files and re-rendering with `dot -Tsvg`.
+---
 
-## Related Wiki Pages
+## 3 · AI Agent
 
-- [How PWN Works](How-PWN-Works.md)
-- [pwn-ai Agent](pwn-ai-Agent.md)
-- [pwn REPL](pwn-REPL.md)
-- [Skills, Memory & Learning](Skills-Memory-Learning.md)
-- [Plugins](Plugins.md)
-- [SAST](SAST.md)
-- [Drivers](Drivers.md)
+### pwn-ai Closed Self-Improvement Loop
+[source](diagrams/dot/pwn-ai-feedback-learning-loop.dot) · doc: [Skills, Memory & Learning](Skills-Memory-Learning.md)
+![pwn-ai-feedback-learning-loop](diagrams/pwn-ai-feedback-learning-loop.svg)
 
-[[Diagrams]]
+### Multi-Provider LLM Integration
+[source](diagrams/dot/ai-integration-tool-calling.dot) · doc: [AI Integration](AI-Integration.md)
+![ai-integration-tool-calling](diagrams/ai-integration-tool-calling.svg)
+
+### Agent Tool Registry (10 toolsets)
+[source](diagrams/dot/agent-tool-registry.dot) · doc: [Agent Tool Registry](Agent-Tool-Registry.md)
+![agent-tool-registry](diagrams/agent-tool-registry.svg)
+
+### Memory · Skills · Sessions Detail
+[source](diagrams/dot/memory-skills-detailed.dot) · doc: [Skills, Memory & Learning](Skills-Memory-Learning.md)
+![memory-skills-detailed](diagrams/memory-skills-detailed.svg)
+
+### Extrospection — World Awareness
+[source](diagrams/dot/extrospection-world-awareness.dot) · doc: [Extrospection](Extrospection.md)
+![extrospection-world-awareness](diagrams/extrospection-world-awareness.svg)
+
+### Swarm — Native Multi-Agent
+[source](diagrams/dot/swarm-multi-agent.dot) · doc: [Swarm](Swarm.md)
+![swarm-multi-agent](diagrams/swarm-multi-agent.svg)
+
+### Cron — Scheduled Jobs
+[source](diagrams/dot/cron-scheduling.dot) · doc: [Cron](Cron.md)
+![cron-scheduling](diagrams/cron-scheduling.svg)
+
+### Sessions ↔ Cron ↔ Swarm Continuity
+[source](diagrams/dot/sessions-cron-automation.dot) · doc: [Sessions](Sessions.md)
+![sessions-cron-automation](diagrams/sessions-cron-automation.svg)
+
+---
+
+## 4 · Security Workflows
+
+### End-to-End Penetration Test
+[source](diagrams/dot/penetration-testing-workflow.dot)
+![penetration-testing-workflow](diagrams/penetration-testing-workflow.svg)
+
+### Web Application Testing
+[source](diagrams/dot/web-application-testing.dot) · doc: [BurpSuite](BurpSuite.md)
+![web-application-testing](diagrams/web-application-testing.svg)
+
+### Burp ⭐ vs ZAP Selection
+[source](diagrams/dot/burp-vs-zap-preference.dot)
+![burp-vs-zap-preference](diagrams/burp-vs-zap-preference.svg)
+
+### Network & Infrastructure Testing
+[source](diagrams/dot/network-infra-testing.dot) · doc: [NmapIt](NmapIt.md)
+![network-infra-testing](diagrams/network-infra-testing.svg)
+
+### SAST / Code Scanning
+[source](diagrams/dot/code-scanning-sast.dot) · doc: [SAST](SAST.md)
+![code-scanning-sast](diagrams/code-scanning-sast.svg)
+
+### Fuzzing
+[source](diagrams/dot/fuzzing-workflow.dot) · doc: [Fuzzing](Fuzzing.md)
+![fuzzing-workflow](diagrams/fuzzing-workflow.svg)
+
+### Reverse Engineering & Binary Exploitation
+[source](diagrams/dot/reverse-engineering-flow.dot) · doc: [Hardware](Hardware.md)
+![reverse-engineering-flow](diagrams/reverse-engineering-flow.svg)
+
+### Zero-Day Research Lifecycle
+[source](diagrams/dot/zero-day-research-flow.dot)
+![zero-day-research-flow](diagrams/zero-day-research-flow.svg)
+
+### Reporting Pipeline
+[source](diagrams/dot/reporting-pipeline.dot) · doc: [Reporting](Reporting.md)
+![reporting-pipeline](diagrams/reporting-pipeline.svg)
+
+---
+
+## 5 · Domain-Specific
+
+### AWS Cloud Security (90 services)
+[source](diagrams/dot/aws-cloud-security.dot) · doc: [AWS](AWS.md)
+![aws-cloud-security](diagrams/aws-cloud-security.svg)
+
+### SDR / Radio Hacking
+[source](diagrams/dot/sdr-radio-flow.dot) · doc: [SDR](SDR.md)
+![sdr-radio-flow](diagrams/sdr-radio-flow.svg)
+
+### Hardware & Physical-Layer
+[source](diagrams/dot/hardware-hacking.dot) · doc: [Hardware](Hardware.md)
+![hardware-hacking](diagrams/hardware-hacking.svg)
+
+---
+
+[← Back to Home](Home.md)

data/documentation/General-PWN-Usage.md

@@ -1,40 +1,60 @@
-# General PWN Usage
+# General Usage — Day-One Cheat Sheet
 
-## Launching PWN
+## Launch
 
 ```bash
-$ pwn
-pwn[v0.5.613]:001 >>>
+$ pwn                         # interactive REPL
+$ pwn --ai "scan 10.0.0.0/24 with NmapIt and summarise open services"
+$ pwn_nmap_discover_tcp_udp -t 10.0.0.0/24 -o out/   # headless driver
 ```
 
-## Essential Commands Inside REPL
+## Inside the REPL
 
-- `PWN.help` — overview of top-level modules
-- `PWN::Plugins.constants.sort` — list all plugins
-- `pwn-ai` — start the autonomous AI agent TUI (recommended)
-- `pwn-asm` — assembly/REPL for low-level work
-- `pwn-ai-memory`, `pwn-ai-sessions`, `pwn-ai-cron` — management helpers
-- `back` — exit `pwn-ai` mode
-- Full Ruby expressions work at any time.
-
-## Recommended Workflow
-
-1. Launch `pwn`
-2. Start `pwn-ai`
-3. Give natural language tasks that leverage plugins, skills, memory.
-4. Use `SHIFT+ENTER` for multi-line prompts.
-
-## Updating PWN
+```ruby
+PWN.help                            # top-level help
+PWN::Plugins.constants.sort         # list all 66 plugins
+PWN::Plugins::NmapIt.help           # per-plugin usage
+ls PWN::Plugins::BurpSuite          # Pry: list methods
+show-source PWN::SAST::SQL.scan     # Pry: read the code
+history                             # what you've typed → copy into a driver
+```
 
-See [Installation](Installation.md).
+## Custom REPL commands
+
+| Command | Does |
+|---|---|
+| `pwn-ai` | Enter the agent TUI (SHIFT+ENTER = newline, ENTER = submit) |
+| `pwn-asm` | Multi-line assembly ↔ opcode workbench |
+| `pwn-ai-memory` | Inspect / edit `~/.pwn/memory.json` |
+| `pwn-ai-sessions` | List / view / delete transcripts |
+| `pwn-ai-cron` | List / run scheduled jobs |
+| `pwn-ai-delegate` | Hand a task to a Swarm persona |
+| `welcome-banner` | Redraw a random `PWN::Banner` |
+| `toggle-pager` | Pry pager on/off |
+
+## A 60-second attack chain
+
+```ruby
+# 1. discover
+nmap = PWN::Plugins::NmapIt.port_scan(target: 'scanme.nmap.org')
+
+# 2. drive traffic through Burp
+burp = PWN::Plugins::BurpSuite.start(headless: true)
+b    = PWN::Plugins::TransparentBrowser.open(
+         browser_type: :headless, proxy: 'http://127.0.0.1:8080')
+b[:browser].goto 'http://scanme.nmap.org'
+
+# 3. active scan
+scan = PWN::Plugins::BurpSuite.active_scan(burp_obj: burp,
+         target_url: 'http://scanme.nmap.org')
+
+# 4. report
+PWN::Reports::SAST.generate(dir_path: '/tmp/src', output_dir: '/tmp/out')
+```
 
-## Persistent State
+Then say the same thing in English inside `pwn-ai` and watch the agent do it.
 
-Everything lives under `~/.pwn/`:
-- `skills/`
-- `memory.json`
-- `learning.jsonl`
-- `metrics.json`
-- sessions, cron jobs, etc.
+**Next:** [pwn REPL](pwn-REPL.md) · [pwn-ai Agent](pwn-ai-Agent.md) ·
+[CLI Drivers](CLI-Drivers.md)
 
-[[Diagrams]]
+[← Home](Home.md)