pwn 0.5.615 → 0.5.618

data/documentation/diagrams/zero-day-research-flow.svg

@@ -3,147 +3,151 @@
  "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
 <!-- Generated by graphviz version 14.1.2 (0)
  -->
-<!-- Title: PWN Zero&#45;Day Research Workflow Pages: 1 -->
-<svg width="272pt" height="529pt"
- viewBox="0.00 0.00 272.00 529.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 524.69)">
-<title>PWN Zero&#45;Day Research Workflow</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-524.69 267.62,-524.69 267.62,4 -4,4"/>
-<!-- Target -->
+<!-- Title: PWN_ZeroDay Pages: 1 -->
+<svg width="1064pt" height="309pt"
+ viewBox="0.00 0.00 1064.00 309.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(43.2 265.39)">
+<title>PWN_ZeroDay</title>
+<polygon fill="#0f172a" stroke="none" points="-43.2,43.2 -43.2,-265.39 1021.2,-265.39 1021.2,43.2 -43.2,43.2"/>
+<text xml:space="preserve" text-anchor="start" x="304.5" y="-200.19" font-family="sans-Serif" font-weight="bold" font-size="20.00" fill="#e2e8f0">Zero&#45;Day Research Lifecycle with PWN</text>
+<text xml:space="preserve" text-anchor="start" x="337.12" y="-188.74" font-family="sans-Serif" font-size="11.00" fill="#94a3b8">attack surface → hypothesis → prove → weaponise → disclose</text>
+<g id="clust1" class="cluster">
+<title>cluster_hyp</title>
+<path fill="#022c22" stroke="#047857" d="M210.5,-24.19C210.5,-24.19 312,-24.19 312,-24.19 318,-24.19 324,-30.19 324,-36.19 324,-36.19 324,-163.19 324,-163.19 324,-169.19 318,-175.19 312,-175.19 312,-175.19 210.5,-175.19 210.5,-175.19 204.5,-175.19 198.5,-169.19 198.5,-163.19 198.5,-163.19 198.5,-36.19 198.5,-36.19 198.5,-30.19 204.5,-24.19 210.5,-24.19"/>
+<text xml:space="preserve" text-anchor="middle" x="261.25" y="-152.19" font-family="sans-Serif" font-size="20.00" fill="#a7f3d0">Hypothesise</text>
+</g>
+<g id="clust2" class="cluster">
+<title>cluster_prove</title>
+<path fill="#422006" stroke="#a16207" d="M407,-24.19C407,-24.19 502.75,-24.19 502.75,-24.19 508.75,-24.19 514.75,-30.19 514.75,-36.19 514.75,-36.19 514.75,-163.19 514.75,-163.19 514.75,-169.19 508.75,-175.19 502.75,-175.19 502.75,-175.19 407,-175.19 407,-175.19 401,-175.19 395,-169.19 395,-163.19 395,-163.19 395,-36.19 395,-36.19 395,-30.19 401,-24.19 407,-24.19"/>
+<text xml:space="preserve" text-anchor="middle" x="454.88" y="-152.19" font-family="sans-Serif" font-size="20.00" fill="#fde68a">Prove</text>
+</g>
+<g id="clust3" class="cluster">
+<title>cluster_weapon</title>
+<path fill="#450a0a" stroke="#b91c1c" d="M674.75,-24.19C674.75,-24.19 767.25,-24.19 767.25,-24.19 773.25,-24.19 779.25,-30.19 779.25,-36.19 779.25,-36.19 779.25,-163.19 779.25,-163.19 779.25,-169.19 773.25,-175.19 767.25,-175.19 767.25,-175.19 674.75,-175.19 674.75,-175.19 668.75,-175.19 662.75,-169.19 662.75,-163.19 662.75,-163.19 662.75,-36.19 662.75,-36.19 662.75,-30.19 668.75,-24.19 674.75,-24.19"/>
+<text xml:space="preserve" text-anchor="middle" x="721" y="-152.19" font-family="sans-Serif" font-size="20.00" fill="#fecaca">Weaponise</text>
+</g>
+<g id="clust4" class="cluster">
+<title>cluster_disc</title>
+<path fill="#2e1065" stroke="#6d28d9" d="M862.25,-24.19C862.25,-24.19 958,-24.19 958,-24.19 964,-24.19 970,-30.19 970,-36.19 970,-36.19 970,-163.19 970,-163.19 970,-169.19 964,-175.19 958,-175.19 958,-175.19 862.25,-175.19 862.25,-175.19 856.25,-175.19 850.25,-169.19 850.25,-163.19 850.25,-163.19 850.25,-36.19 850.25,-36.19 850.25,-30.19 856.25,-24.19 862.25,-24.19"/>
+<text xml:space="preserve" text-anchor="middle" x="910.12" y="-152.19" font-family="sans-Serif" font-size="20.00" fill="#ddd6fe">Disclose</text>
+</g>
+<!-- Surface -->
 <g id="node1" class="node">
-<title>Target</title>
-<path fill="none" stroke="black" d="M147.88,-520.69C147.88,-520.69 77.12,-520.69 77.12,-520.69 71.12,-520.69 65.12,-514.69 65.12,-508.69 65.12,-508.69 65.12,-493.19 65.12,-493.19 65.12,-487.19 71.12,-481.19 77.12,-481.19 77.12,-481.19 147.88,-481.19 147.88,-481.19 153.88,-481.19 159.88,-487.19 159.88,-493.19 159.88,-493.19 159.88,-508.69 159.88,-508.69 159.88,-514.69 153.88,-520.69 147.88,-520.69"/>
-<text xml:space="preserve" text-anchor="middle" x="112.5" y="-508.14" font-family="Arial" font-size="9.00">Target Research</text>
-<text xml:space="preserve" text-anchor="middle" x="112.5" y="-497.64" font-family="Arial" font-size="9.00">(Binary, Firmware,</text>
-<text xml:space="preserve" text-anchor="middle" x="112.5" y="-487.14" font-family="Arial" font-size="9.00">Protocol, Web App)</text>
+<title>Surface</title>
+<path fill="#7dd3fc" stroke="#334155" stroke-width="1.3" d="M107.5,-101.19C107.5,-101.19 12,-101.19 12,-101.19 6,-101.19 0,-95.19 0,-89.19 0,-89.19 0,-77.19 0,-77.19 0,-71.19 6,-65.19 12,-65.19 12,-65.19 107.5,-65.19 107.5,-65.19 113.5,-65.19 119.5,-71.19 119.5,-77.19 119.5,-77.19 119.5,-89.19 119.5,-89.19 119.5,-95.19 113.5,-101.19 107.5,-101.19"/>
+<text xml:space="preserve" text-anchor="middle" x="59.75" y="-85.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Attack Surface</text>
+<text xml:space="preserve" text-anchor="middle" x="59.75" y="-73.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">OpenAPI · Shodan · Git</text>
 </g>
-<!-- RE -->
+<!-- SAST -->
 <g id="node2" class="node">
-<title>RE</title>
-<path fill="none" stroke="black" d="M91,-444.19C91,-444.19 12,-444.19 12,-444.19 6,-444.19 0,-438.19 0,-432.19 0,-432.19 0,-420.19 0,-420.19 0,-414.19 6,-408.19 12,-408.19 12,-408.19 91,-408.19 91,-408.19 97,-408.19 103,-414.19 103,-420.19 103,-420.19 103,-432.19 103,-432.19 103,-438.19 97,-444.19 91,-444.19"/>
-<text xml:space="preserve" text-anchor="middle" x="51.5" y="-428.14" font-family="Arial" font-size="9.00">Reverse Engineering</text>
-<text xml:space="preserve" text-anchor="middle" x="51.5" y="-417.64" font-family="Arial" font-size="9.00">+ Static Analysis</text>
+<title>SAST</title>
+<path fill="#6ee7b7" stroke="#334155" stroke-width="1.3" d="M285.25,-136.19C285.25,-136.19 236.25,-136.19 236.25,-136.19 230.25,-136.19 224.25,-130.19 224.25,-124.19 224.25,-124.19 224.25,-112.19 224.25,-112.19 224.25,-106.19 230.25,-100.19 236.25,-100.19 236.25,-100.19 285.25,-100.19 285.25,-100.19 291.25,-100.19 297.25,-106.19 297.25,-112.19 297.25,-112.19 297.25,-124.19 297.25,-124.19 297.25,-130.19 291.25,-136.19 285.25,-136.19"/>
+<text xml:space="preserve" text-anchor="middle" x="260.75" y="-120.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">PWN::SAST</text>
+<text xml:space="preserve" text-anchor="middle" x="260.75" y="-108.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">taint patterns</text>
 </g>
-<!-- Target&#45;&gt;RE -->
+<!-- Surface&#45;&gt;SAST -->
 <g id="edge1" class="edge">
-<title>Target&#45;&gt;RE</title>
-<path fill="none" stroke="black" d="M96.47,-480.82C89.38,-472.36 80.92,-462.28 73.27,-453.15"/>
-<polygon fill="black" stroke="black" points="76.04,-451.01 66.93,-445.59 70.68,-455.51 76.04,-451.01"/>
+<title>Surface&#45;&gt;SAST</title>
+<path fill="none" stroke="#38bdf8" stroke-width="1.3" d="M119.92,-93.59C150.05,-98.89 186.12,-105.24 214.08,-110.16"/>
+<polygon fill="#38bdf8" stroke="#38bdf8" stroke-width="1.3" points="213.3,-112.86 221.67,-111.49 214.27,-107.35 213.3,-112.86"/>
 </g>
-<!-- SAST -->
+<!-- AI -->
 <g id="node3" class="node">
-<title>SAST</title>
-<path fill="none" stroke="black" d="M215.5,-444.19C215.5,-444.19 133.5,-444.19 133.5,-444.19 127.5,-444.19 121.5,-438.19 121.5,-432.19 121.5,-432.19 121.5,-420.19 121.5,-420.19 121.5,-414.19 127.5,-408.19 133.5,-408.19 133.5,-408.19 215.5,-408.19 215.5,-408.19 221.5,-408.19 227.5,-414.19 227.5,-420.19 227.5,-420.19 227.5,-432.19 227.5,-432.19 227.5,-438.19 221.5,-444.19 215.5,-444.19"/>
-<text xml:space="preserve" text-anchor="middle" x="174.5" y="-422.89" font-family="Arial" font-size="9.00">PWN::SAST + Custom</text>
+<title>AI</title>
+<path fill="#6ee7b7" stroke="#334155" stroke-width="1.3" d="M291.25,-68.19C291.25,-68.19 230.25,-68.19 230.25,-68.19 224.25,-68.19 218.25,-62.19 218.25,-56.19 218.25,-56.19 218.25,-44.19 218.25,-44.19 218.25,-38.19 224.25,-32.19 230.25,-32.19 230.25,-32.19 291.25,-32.19 291.25,-32.19 297.25,-32.19 303.25,-38.19 303.25,-44.19 303.25,-44.19 303.25,-56.19 303.25,-56.19 303.25,-62.19 297.25,-68.19 291.25,-68.19"/>
+<text xml:space="preserve" text-anchor="middle" x="260.75" y="-52.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">pwn&#45;ai</text>
+<text xml:space="preserve" text-anchor="middle" x="260.75" y="-40.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Agent::VulnGen</text>
 </g>
-<!-- Target&#45;&gt;SAST -->
+<!-- Surface&#45;&gt;AI -->
 <g id="edge2" class="edge">
-<title>Target&#45;&gt;SAST</title>
-<path fill="none" stroke="black" d="M128.79,-480.82C136,-472.36 144.6,-462.28 152.38,-453.15"/>
-<polygon fill="black" stroke="black" points="155,-455.47 158.82,-445.59 149.67,-450.93 155,-455.47"/>
+<title>Surface&#45;&gt;AI</title>
+<path fill="none" stroke="#38bdf8" stroke-width="1.3" d="M119.92,-73.38C147.98,-68.72 181.19,-63.22 208.2,-58.74"/>
+<polygon fill="#38bdf8" stroke="#38bdf8" stroke-width="1.3" points="208.48,-61.53 215.91,-57.46 207.56,-56 208.48,-61.53"/>
 </g>
 <!-- Fuzz -->
 <g id="node4" class="node">
 <title>Fuzz</title>
-<path fill="none" stroke="black" d="M178.38,-371.19C178.38,-371.19 110.62,-371.19 110.62,-371.19 104.62,-371.19 98.62,-365.19 98.62,-359.19 98.62,-359.19 98.62,-347.19 98.62,-347.19 98.62,-341.19 104.62,-335.19 110.62,-335.19 110.62,-335.19 178.38,-335.19 178.38,-335.19 184.38,-335.19 190.38,-341.19 190.38,-347.19 190.38,-347.19 190.38,-359.19 190.38,-359.19 190.38,-365.19 184.38,-371.19 178.38,-371.19"/>
-<text xml:space="preserve" text-anchor="middle" x="144.5" y="-355.14" font-family="Arial" font-size="9.00">Fuzzing + Protocol</text>
-<text xml:space="preserve" text-anchor="middle" x="144.5" y="-344.64" font-family="Arial" font-size="9.00">Analysis</text>
+<path fill="#fcd34d" stroke="#334155" stroke-width="1.3" d="M477.5,-136.19C477.5,-136.19 432.25,-136.19 432.25,-136.19 426.25,-136.19 420.25,-130.19 420.25,-124.19 420.25,-124.19 420.25,-112.19 420.25,-112.19 420.25,-106.19 426.25,-100.19 432.25,-100.19 432.25,-100.19 477.5,-100.19 477.5,-100.19 483.5,-100.19 489.5,-106.19 489.5,-112.19 489.5,-112.19 489.5,-124.19 489.5,-124.19 489.5,-130.19 483.5,-136.19 477.5,-136.19"/>
+<text xml:space="preserve" text-anchor="middle" x="454.88" y="-120.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Fuzz · Sock</text>
+<text xml:space="preserve" text-anchor="middle" x="454.88" y="-108.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Packet</text>
 </g>
-<!-- RE&#45;&gt;Fuzz -->
+<!-- SAST&#45;&gt;Fuzz -->
 <g id="edge3" class="edge">
-<title>RE&#45;&gt;Fuzz</title>
-<path fill="none" stroke="black" d="M74.01,-408C85.69,-399.08 100.15,-388.04 112.93,-378.29"/>
-<polygon fill="black" stroke="black" points="114.84,-381.23 120.67,-372.38 110.6,-375.67 114.84,-381.23"/>
+<title>SAST&#45;&gt;Fuzz</title>
+<path fill="none" stroke="#f59e0b" stroke-width="1.3" d="M297.89,-118.19C329.74,-118.19 376.24,-118.19 410.18,-118.19"/>
+<polygon fill="#f59e0b" stroke="#f59e0b" stroke-width="1.3" points="409.87,-120.99 417.87,-118.19 409.87,-115.39 409.87,-120.99"/>
 </g>
-<!-- Dyn -->
+<!-- TB -->
 <g id="node5" class="node">
-<title>Dyn</title>
-<path fill="none" stroke="black" d="M142.88,-296.25C142.88,-296.25 78.12,-296.25 78.12,-296.25 72.12,-296.25 66.12,-290.25 66.12,-284.25 66.12,-284.25 66.12,-272.25 66.12,-272.25 66.12,-266.25 72.12,-260.25 78.12,-260.25 78.12,-260.25 142.88,-260.25 142.88,-260.25 148.88,-260.25 154.88,-266.25 154.88,-272.25 154.88,-272.25 154.88,-284.25 154.88,-284.25 154.88,-290.25 148.88,-296.25 142.88,-296.25"/>
-<text xml:space="preserve" text-anchor="middle" x="110.5" y="-280.2" font-family="Arial" font-size="9.00">Dynamic Analysis</text>
-<text xml:space="preserve" text-anchor="middle" x="110.5" y="-269.7" font-family="Arial" font-size="9.00">(REPL + Debug)</text>
+<title>TB</title>
+<path fill="#fcd34d" stroke="#334155" stroke-width="1.3" d="M494.75,-68.19C494.75,-68.19 415,-68.19 415,-68.19 409,-68.19 403,-62.19 403,-56.19 403,-56.19 403,-44.19 403,-44.19 403,-38.19 409,-32.19 415,-32.19 415,-32.19 494.75,-32.19 494.75,-32.19 500.75,-32.19 506.75,-38.19 506.75,-44.19 506.75,-44.19 506.75,-56.19 506.75,-56.19 506.75,-62.19 500.75,-68.19 494.75,-68.19"/>
+<text xml:space="preserve" text-anchor="middle" x="454.88" y="-52.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">TransparentBrowser</text>
+<text xml:space="preserve" text-anchor="middle" x="454.88" y="-40.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Burp replay</text>
 </g>
-<!-- RE&#45;&gt;Dyn -->
-<g id="edge6" class="edge">
-<title>RE&#45;&gt;Dyn</title>
-<path fill="none" stroke="black" d="M58.5,-407.87C68.57,-382.97 87.25,-336.77 99.26,-307.05"/>
-<polygon fill="black" stroke="black" points="102.44,-308.53 102.94,-297.94 95.95,-305.9 102.44,-308.53"/>
-</g>
-<!-- SAST&#45;&gt;Fuzz -->
+<!-- AI&#45;&gt;TB -->
 <g id="edge4" class="edge">
-<title>SAST&#45;&gt;Fuzz</title>
-<path fill="none" stroke="black" d="M167.24,-408C163.88,-400.06 159.82,-390.45 156.06,-381.55"/>
-<polygon fill="black" stroke="black" points="159.4,-380.46 152.28,-372.61 152.95,-383.18 159.4,-380.46"/>
+<title>AI&#45;&gt;TB</title>
+<path fill="none" stroke="#f59e0b" stroke-width="1.3" d="M303.44,-50.19C329.61,-50.19 363.82,-50.19 393,-50.19"/>
+<polygon fill="#f59e0b" stroke="#f59e0b" stroke-width="1.3" points="392.72,-52.99 400.72,-50.19 392.72,-47.39 392.72,-52.99"/>
+</g>
+<!-- Asm -->
+<g id="node6" class="node">
+<title>Asm</title>
+<path fill="#fda4af" stroke="#334155" stroke-width="1.3" d="M758.5,-136.19C758.5,-136.19 682.5,-136.19 682.5,-136.19 676.5,-136.19 670.5,-130.19 670.5,-124.19 670.5,-124.19 670.5,-112.19 670.5,-112.19 670.5,-106.19 676.5,-100.19 682.5,-100.19 682.5,-100.19 758.5,-100.19 758.5,-100.19 764.5,-100.19 770.5,-106.19 770.5,-112.19 770.5,-112.19 770.5,-124.19 770.5,-124.19 770.5,-130.19 764.5,-136.19 758.5,-136.19"/>
+<text xml:space="preserve" text-anchor="middle" x="720.5" y="-120.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Assembly</text>
+<text xml:space="preserve" text-anchor="middle" x="720.5" y="-108.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">pwn&#45;asm shellcode</text>
 </g>
-<!-- Fuzz&#45;&gt;Dyn -->
+<!-- Fuzz&#45;&gt;Asm -->
 <g id="edge5" class="edge">
-<title>Fuzz&#45;&gt;Dyn</title>
-<path fill="none" stroke="black" d="M136.44,-334.9C132.53,-326.52 127.74,-316.24 123.35,-306.81"/>
-<polygon fill="black" stroke="black" points="126.65,-305.62 119.26,-298.04 120.31,-308.58 126.65,-305.62"/>
+<title>Fuzz&#45;&gt;Asm</title>
+<path fill="none" stroke="#fb7185" stroke-width="1.3" d="M490.07,-118.19C533.13,-118.19 607.81,-118.19 660.24,-118.19"/>
+<polygon fill="#fb7185" stroke="#fb7185" stroke-width="1.3" points="660.12,-120.99 668.12,-118.19 660.12,-115.39 660.12,-120.99"/>
 </g>
-<!-- Exploit -->
-<g id="node8" class="node">
-<title>Exploit</title>
-<path fill="none" stroke="black" d="M137.88,-212.56C137.88,-212.56 97.12,-212.56 97.12,-212.56 91.12,-212.56 85.12,-206.56 85.12,-200.56 85.12,-200.56 85.12,-188.56 85.12,-188.56 85.12,-182.56 91.12,-176.56 97.12,-176.56 97.12,-176.56 137.88,-176.56 137.88,-176.56 143.88,-176.56 149.88,-182.56 149.88,-188.56 149.88,-188.56 149.88,-200.56 149.88,-200.56 149.88,-206.56 143.88,-212.56 137.88,-212.56"/>
-<text xml:space="preserve" text-anchor="middle" x="117.5" y="-196.51" font-family="Arial" font-size="9.00">Exploit Dev</text>
-<text xml:space="preserve" text-anchor="middle" x="117.5" y="-186.01" font-family="Arial" font-size="9.00">&amp; Validation</text>
+<!-- MSF -->
+<g id="node7" class="node">
+<title>MSF</title>
+<path fill="#fda4af" stroke="#334155" stroke-width="1.3" d="M739,-68.19C739,-68.19 702,-68.19 702,-68.19 696,-68.19 690,-62.19 690,-56.19 690,-56.19 690,-44.19 690,-44.19 690,-38.19 696,-32.19 702,-32.19 702,-32.19 739,-32.19 739,-32.19 745,-32.19 751,-38.19 751,-44.19 751,-44.19 751,-56.19 751,-56.19 751,-62.19 745,-68.19 739,-68.19"/>
+<text xml:space="preserve" text-anchor="middle" x="720.5" y="-52.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Metasploit</text>
+<text xml:space="preserve" text-anchor="middle" x="720.5" y="-40.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">module</text>
 </g>
-<!-- Dyn&#45;&gt;Exploit -->
-<g id="edge9" class="edge">
-<title>Dyn&#45;&gt;Exploit</title>
-<path fill="none" stroke="black" d="M111.98,-259.93C112.88,-249.53 114.03,-236.05 115.05,-224.11"/>
-<polygon fill="black" stroke="black" points="118.52,-224.63 115.89,-214.37 111.55,-224.03 118.52,-224.63"/>
+<!-- TB&#45;&gt;MSF -->
+<g id="edge6" class="edge">
+<title>TB&#45;&gt;MSF</title>
+<path fill="none" stroke="#fb7185" stroke-width="1.3" d="M507.33,-50.19C557.76,-50.19 633.56,-50.19 679.6,-50.19"/>
+<polygon fill="#fb7185" stroke="#fb7185" stroke-width="1.3" points="679.54,-52.99 687.54,-50.19 679.54,-47.39 679.54,-52.99"/>
 </g>
-<!-- Memory -->
-<g id="node6" class="node">
-<title>Memory</title>
-<path fill="none" stroke="black" d="M89.5,-49.38C89.5,-52.1 71.12,-54.31 48.5,-54.31 25.88,-54.31 7.5,-52.1 7.5,-49.38 7.5,-49.38 7.5,-4.94 7.5,-4.94 7.5,-2.21 25.88,0 48.5,0 71.12,0 89.5,-2.21 89.5,-4.94 89.5,-4.94 89.5,-49.38 89.5,-49.38"/>
-<path fill="none" stroke="black" d="M89.5,-49.38C89.5,-46.65 71.12,-44.44 48.5,-44.44 25.88,-44.44 7.5,-46.65 7.5,-49.38"/>
-<text xml:space="preserve" text-anchor="middle" x="48.5" y="-34.36" font-family="Arial" font-size="9.00">PWN Memory</text>
-<text xml:space="preserve" text-anchor="middle" x="48.5" y="-23.86" font-family="Arial" font-size="9.00">(historical vulns,</text>
-<text xml:space="preserve" text-anchor="middle" x="48.5" y="-13.36" font-family="Arial" font-size="9.00">references)</text>
-</g>
-<!-- Memory&#45;&gt;RE -->
+<!-- H1 -->
+<g id="node8" class="node">
+<title>H1</title>
+<path fill="#c4b5fd" stroke="#334155" stroke-width="1.3" d="M950,-136.19C950,-136.19 870.25,-136.19 870.25,-136.19 864.25,-136.19 858.25,-130.19 858.25,-124.19 858.25,-124.19 858.25,-112.19 858.25,-112.19 858.25,-106.19 864.25,-100.19 870.25,-100.19 870.25,-100.19 950,-100.19 950,-100.19 956,-100.19 962,-106.19 962,-112.19 962,-112.19 962,-124.19 962,-124.19 962,-130.19 956,-136.19 950,-136.19"/>
+<text xml:space="preserve" text-anchor="middle" x="910.12" y="-120.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">HackerOne</text>
+<text xml:space="preserve" text-anchor="middle" x="910.12" y="-108.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">BugCrowd · Synack</text>
+</g>
+<!-- Asm&#45;&gt;H1 -->
 <g id="edge7" class="edge">
-<title>Memory&#45;&gt;RE</title>
-<path fill="none" stroke="black" d="M41.34,-54.52C37.08,-72.49 32.5,-96.92 32.5,-118.81 32.5,-354.19 32.5,-354.19 32.5,-354.19 32.5,-368.7 36.25,-384.32 40.41,-397.21"/>
-<polygon fill="black" stroke="black" points="36.99,-398.03 43.6,-406.31 43.6,-395.71 36.99,-398.03"/>
-<text xml:space="preserve" text-anchor="middle" x="63.25" y="-232.71" font-family="Times,serif" font-size="8.00">recall past findings</text>
+<title>Asm&#45;&gt;H1</title>
+<path fill="none" stroke="#a78bfa" stroke-width="1.3" d="M770.8,-118.19C794.47,-118.19 823.07,-118.19 848.11,-118.19"/>
+<polygon fill="#a78bfa" stroke="#a78bfa" stroke-width="1.3" points="847.9,-120.99 855.9,-118.19 847.9,-115.39 847.9,-120.99"/>
 </g>
-<!-- Skill -->
-<g id="node7" class="node">
-<title>Skill</title>
-<path fill="none" stroke="black" d="M263.62,-294.56C263.62,-296.56 243.4,-298.19 218.5,-298.19 193.6,-298.19 173.38,-296.56 173.38,-294.56 173.38,-294.56 173.38,-261.94 173.38,-261.94 173.38,-259.94 193.6,-258.31 218.5,-258.31 243.4,-258.31 263.62,-259.94 263.62,-261.94 263.62,-261.94 263.62,-294.56 263.62,-294.56"/>
-<path fill="none" stroke="black" d="M263.62,-294.56C263.62,-292.56 243.4,-290.94 218.5,-290.94 193.6,-290.94 173.38,-292.56 173.38,-294.56"/>
-<text xml:space="preserve" text-anchor="middle" x="218.5" y="-280.2" font-family="Arial" font-size="9.00">Skills (prior</text>
-<text xml:space="preserve" text-anchor="middle" x="218.5" y="-269.7" font-family="Arial" font-size="9.00">zero&#45;day patterns)</text>
+<!-- Rep -->
+<g id="node9" class="node">
+<title>Rep</title>
+<path fill="#c4b5fd" stroke="#334155" stroke-width="1.3" d="M939.88,-68.19C939.88,-68.19 880.38,-68.19 880.38,-68.19 874.38,-68.19 868.38,-62.19 868.38,-56.19 868.38,-56.19 868.38,-44.19 868.38,-44.19 868.38,-38.19 874.38,-32.19 880.38,-32.19 880.38,-32.19 939.88,-32.19 939.88,-32.19 945.88,-32.19 951.88,-38.19 951.88,-44.19 951.88,-44.19 951.88,-56.19 951.88,-56.19 951.88,-62.19 945.88,-68.19 939.88,-68.19"/>
+<text xml:space="preserve" text-anchor="middle" x="910.12" y="-52.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">Reports · Skills</text>
+<text xml:space="preserve" text-anchor="middle" x="910.12" y="-40.69" font-family="sans-Serif" font-size="10.00" fill="#0f172a">distill_skill</text>
 </g>
-<!-- Skill&#45;&gt;Exploit -->
+<!-- MSF&#45;&gt;Rep -->
 <g id="edge8" class="edge">
-<title>Skill&#45;&gt;Exploit</title>
-<path fill="none" stroke="black" d="M194.56,-257.89C180.56,-246.56 162.73,-232.15 147.76,-220.03"/>
-<polygon fill="black" stroke="black" points="150.01,-217.36 140.04,-213.79 145.61,-222.8 150.01,-217.36"/>
-<text xml:space="preserve" text-anchor="middle" x="193.53" y="-232.71" font-family="Times,serif" font-size="8.00">apply patterns</text>
+<title>MSF&#45;&gt;Rep</title>
+<path fill="none" stroke="#a78bfa" stroke-width="1.3" d="M751.65,-50.19C780.31,-50.19 823.98,-50.19 858.07,-50.19"/>
+<polygon fill="#a78bfa" stroke="#a78bfa" stroke-width="1.3" points="857.9,-52.99 865.9,-50.19 857.9,-47.39 857.9,-52.99"/>
 </g>
-<!-- Disclose -->
-<g id="node9" class="node">
-<title>Disclose</title>
-<path fill="none" stroke="black" d="M162.25,-139.56C162.25,-139.56 72.75,-139.56 72.75,-139.56 66.75,-139.56 60.75,-133.56 60.75,-127.56 60.75,-127.56 60.75,-112.06 60.75,-112.06 60.75,-106.06 66.75,-100.06 72.75,-100.06 72.75,-100.06 162.25,-100.06 162.25,-100.06 168.25,-100.06 174.25,-106.06 174.25,-112.06 174.25,-112.06 174.25,-127.56 174.25,-127.56 174.25,-133.56 168.25,-139.56 162.25,-139.56"/>
-<text xml:space="preserve" text-anchor="middle" x="117.5" y="-127.01" font-family="Arial" font-size="9.00">Responsible Disclosure</text>
-<text xml:space="preserve" text-anchor="middle" x="117.5" y="-116.51" font-family="Arial" font-size="9.00">&amp; Fix (Reports,</text>
-<text xml:space="preserve" text-anchor="middle" x="117.5" y="-106.01" font-family="Arial" font-size="9.00">HackerOne, etc.)</text>
-</g>
-<!-- Exploit&#45;&gt;Disclose -->
-<g id="edge10" class="edge">
-<title>Exploit&#45;&gt;Disclose</title>
-<path fill="none" stroke="black" d="M117.5,-176.32C117.5,-168.81 117.5,-159.78 117.5,-151.2"/>
-<polygon fill="black" stroke="black" points="121,-151.49 117.5,-141.49 114,-151.49 121,-151.49"/>
-</g>
-<!-- Disclose&#45;&gt;Memory -->
-<g id="edge11" class="edge">
-<title>Disclose&#45;&gt;Memory</title>
-<path fill="none" stroke="black" d="M102.87,-99.59C94.92,-89.15 84.85,-75.91 75.53,-63.67"/>
-<polygon fill="black" stroke="black" points="78.37,-61.62 69.53,-55.78 72.8,-65.86 78.37,-61.62"/>
-<text xml:space="preserve" text-anchor="middle" x="122.93" y="-74.46" font-family="Times,serif" font-size="8.00">remember disclosure</text>
+<!-- Rep&#45;&gt;AI -->
+<g id="edge9" class="edge">
+<title>Rep&#45;&gt;AI</title>
+<path fill="none" stroke="#fbbf24" stroke-width="1.3" stroke-dasharray="5,2" d="M867.84,-36.49C842.58,-28.83 809.42,-20.07 779.25,-16.19 609.87,5.62 564.45,5.09 395,-16.19 367.6,-19.63 337.77,-26.9 313.29,-33.84"/>
+<polygon fill="#fbbf24" stroke="#fbbf24" stroke-width="1.3" points="312.63,-31.11 305.73,-36.03 314.19,-36.49 312.63,-31.11"/>
+<text xml:space="preserve" text-anchor="middle" x="588.75" y="-2.92" font-family="sans-Serif" font-size="9.00" fill="#cbd5e1">lesson → next hunt</text>
 </g>
 </g>
 </svg>

data/documentation/pwn-REPL.md

@@ -1,33 +1,49 @@
-# The pwn REPL
+# The `pwn` REPL
 
-The `pwn` command launches a Pry-based interactive Ruby shell with the entire `PWN` namespace pre-loaded.
+`pwn` launches a **Pry** session with the entire `PWN::` namespace already
+`require`d, a themed prompt, a persistent history file, and a set of custom
+commands.
 
-## Starting
+![REPL prototyping](diagrams/pwn-repl-prototyping.svg)
 
-```bash
-pwn
-pwn[v0.5.613]:001 >>>
-```
+## Why Pry (not IRB)?
 
-## Key Features
+- `ls PWN::Plugins::BurpSuite` — instant method listing
+- `show-source` / `show-doc` — read any plugin without leaving the shell
+- `edit -m` — patch a method live and retry
+- `wtf?` — full backtrace of the last exception
+- `history --replay 5..12` — re-run a range of lines
 
-- Direct access to every `PWN::` constant and plugin.
-- Tab completion for classes and methods.
-- Multi-line support.
-- Easy prototyping of security workflows.
-- `PWN.help` and inspection of any object.
+## Custom commands
 
-## Useful REPL Commands
+| Command | Implemented in | Purpose |
+|---|---|---|
+| `pwn-ai` | `Agent::Loop` | Enter the AI agent TUI |
+| `pwn-asm` | `Plugins::Assembly` | Multiline asm ↔ opcodes workbench |
+| `pwn-ai-memory` | `PWN::Memory` | View/edit persistent memory |
+| `pwn-ai-sessions` | `PWN::Sessions` | List/view/delete transcripts |
+| `pwn-ai-cron` | `PWN::Cron` | List/run/toggle scheduled jobs |
+| `pwn-ai-delegate` | `Agent::Swarm` | Send one request to a persona |
+| `welcome-banner` | `PWN::Banner` | Redraw a random banner |
+| `toggle-pager` | Pry | Page long output on/off |
 
-```
-pwn[v0.5.613]:001 >>> PWN::Plugins.constants.sort
-pwn[v0.5.613]:001 >>> PWN::Plugins::BurpSuite.methods(false).sort
-pwn[v0.5.613]:001 >>> PWN::SAST.constants
-pwn[v0.5.613]:001 >>> pwn-ai
-```
+## Multi-line input
 
-See:
-- [pwn-ai Agent](pwn-ai-Agent.md) — the killer feature inside the REPL
-- [General Usage](General-PWN-Usage.md)
+`pwn-ai` and `pwn-asm` use a custom `PWNMultiLineInput` reader:
 
-[[Diagrams]]
+- **SHIFT + ENTER** → insert newline
+- **ENTER** → submit
+
+> **tmux users:** requires `set -s extended-keys on` **and**
+> `set -as terminal-features '<outerTERM>*:extkeys'` — see
+> [Troubleshooting](Troubleshooting.md#shiftenter-submits-instead-of-newline).
+
+## History → Driver
+
+`~/.pwn_history` captures every line you type. When a sequence works, turn it
+into a shipped `bin/pwn_*` driver — see
+[From REPL History to Driver](Drivers.md).
+
+**Next:** [pwn-ai Agent](pwn-ai-Agent.md) · [CLI Drivers](CLI-Drivers.md)
+
+[← Home](Home.md)

data/documentation/pwn-ai-Agent.md

@@ -1,43 +1,72 @@
-# pwn-ai Autonomous Agent
+# `pwn-ai` — The Autonomous Agent
 
-The most powerful way to use PWN is via the `pwn-ai` command inside the REPL.
+`pwn-ai` is a natural-language front end to everything in `PWN::`. You describe
+the goal; the agent plans a sequence of tool calls (`pwn_eval`, `shell`,
+`memory_*`, `skill_*`, `extro_*`, `agent_*`, …), executes them against the live
+process, observes the results, and loops until it can give you a final answer.
 
-## Activation
+## Two ways to run it
+
+```text
+# 1. Interactive TUI (inside the pwn REPL)
+pwn[v0.5.616]:001 >>> pwn-ai
+✨ pwn-ai · anthropic · session 20260707_220802_3f39791f
+> Use NmapIt to sweep 10.0.0.0/24, then TransparentBrowser via Burp on any
+  host with 443 open, active-scan, and give me a Reports::SAST summary.
+```
 
 ```bash
-pwn[v0.5.613]:001 >>> pwn-ai
-[*] pwn-ai agent TUI activated...
->
+# 2. Headless one-shot (CI-friendly)
+$ pwn --ai "run bin/pwn_sast against ./src and push findings to DefectDojo"
 ```
 
-## Capabilities
+## Anatomy of a turn
 
-- Natural language instruction of complex multi-step security tasks.
-- Full tool calling access to:
-  - All `PWN::Plugins` (BurpSuite preferred, TransparentBrowser, NmapIt, Shodan, Metasploit, etc.)
-  - `PWN::SAST`
-  - `PWN::Reports`
-  - Shell execution
-  - Memory recall / remember
-  - Skill usage and distillation
-  - Learning / introspection loop
-- Persistent context across interactions via memory and skills.
+1. **PromptBuilder** assembles the system prompt: your request + MEMORY block +
+   SKILLS list + LEARNING stats + EXTROSPECTION block.
+2. **Loop** sends it to the active `PWN::AI::<Engine>` client.
+3. Provider replies with `tool_calls` → **Dispatch** executes each one via the
+   [Registry](Agent-Tool-Registry.md), **Metrics** records duration/success.
+4. Results are appended to the message list; go to 2.
+5. When the reply has *no* tool_calls it's the **final answer** →
+   `Learning.auto_reflect` and `Extrospection.auto_extrospect` fire (if
+   enabled), transcript is flushed to `~/.pwn/sessions/`.
 
-## Tips
+![Self-improvement loop](diagrams/pwn-ai-feedback-learning-loop.svg)
+
+## What the agent can call
+
+10 toolsets · 45+ tools — full table at
+[Agent Tool Registry](Agent-Tool-Registry.md).
 
-- Use `SHIFT+ENTER` to insert newlines.
-- `ENTER` submits the prompt.
-- Type `back` or `exit` to return to normal REPL.
-- Example prompt:
-  ```
-  Scan https://target with NmapIt + TransparentBrowser (via BurpSuite), 
-  run relevant SAST if source present, exploit any findings, generate report.
-  ```
+The two that matter most:
 
-## Self-Improvement
+| Tool | Reach |
+|---|---|
+| `pwn_eval` | **Any** Ruby in-process — the whole `PWN::` namespace, `require`, monkey-patch, everything |
+| `shell` | **Any** OS command on the host |
+
+Everything else (memory, skills, learning, extrospection, cron, swarm,
+sessions, metrics) is a convenience wrapper the model can discover from the
+schema alone.
+
+## Delegating to other agents
+
+`agent_ask`, `agent_debate`, `agent_broadcast` spin up **sub-agents** (each a
+full `Loop.run` under a persona overlay) that share a JSONL bus. See
+[Swarm](Swarm.md).
+
+## Tips
 
-Successful workflows can be distilled into reusable **Skills** (see [Skills-Memory-Learning](Skills-Memory-Learning.md)).
+- SHIFT+ENTER = newline, ENTER = submit.
+- `back` / `exit` returns to the plain REPL.
+- Set `ai.agent.max_iters` in `~/.pwn/config.yml` if long tasks get truncated.
+- Disable `auto_reflect` during noisy fuzz loops
+  (`learning_auto_reflect_toggle(enabled: false)`), re-enable for the summary
+  turn.
 
-See also [AI Integration](AI-Integration.md).
+**See also:** [AI Integration](AI-Integration.md) ·
+[Skills, Memory & Learning](Skills-Memory-Learning.md) ·
+[Extrospection](Extrospection.md) · [Swarm](Swarm.md) · [Cron](Cron.md)
 
-[[Diagrams]]
+[← Home](Home.md)

data/git_commit.sh

@@ -37,7 +37,7 @@ if (( $# == 3 )); then
   fi
 
   # Generate RDoc JSONL for fine-tunning LLMs
-  echo "[TEMP] skipping rdoc for commit completion"
+  pwn_rdoc_to_jsonl --rdoc-root-dir '/opt/pwn/rdoc/PWN' --jsonl-results '/opt/pwn/third_party/pwn_rdoc.jsonl'
 
   # Tag for every 100 commits (i.e. 0.1.100, 0.1.200, etc)
   tag_this_version_bool=`ruby -r 'pwn' -e 'if (PWN::VERSION.split(".")[-1].to_i + 1) % 100 == 0; then print true; else print false; end'`

data/lib/pwn/ai/agent/assembly.rb

@@ -35,7 +35,7 @@ module PWN
             raise "ERROR: Unsupported type parameter value '#{type}'. Supported values are :opcodes_to_asm and :asm_to_opcodes."
           end
 
-          PWN::AI::Introspection.reflect_on(
+          PWN::AI::Agent::Introspection.reflect_on(
             system_role_content: system_role_content,
             request: request,
             suppress_pii_warning: true

data/lib/pwn/ai/agent/btc.rb

@@ -16,7 +16,7 @@ module PWN
 
           system_role_content = 'Provide a useful summary of this latest bitcoin block returned from a bitcoin node via getblockchaininfo.'
 
-          PWN::AI::Introspection.reflect_on(
+          PWN::AI::Agent::Introspection.reflect_on(
             system_role_content: system_role_content,
             request: request,
             suppress_pii_warning: true

data/lib/pwn/ai/agent/burp_suite.rb

@@ -50,7 +50,7 @@ module PWN
             Analyze provided HTTP request/response pairs methodically: Start with a high-level overview, then dive into specifics, flag potential issues with evidence from the traffic, and end with PoC if applicable. Be verbose in reasoning but concise in output. Prioritize high-severity findings. If data is incomplete, request clarifications.  If analyzing a JavaScript source map file (i.e. .js.map), focus on deobfuscating and identifying any potentially vulnerable code patterns, especially those that could lead to client-side vulnerabilities like DOM XSS, prototype pollution, or insecure deserialization. Look for patterns such as eval, document.write, innerHTML assignments, and event handlers that could be influenced by user input. Provide detailed analysis and PoCs if vulnerabilities are identified.
           '
 
-          PWN::AI::Introspection.reflect_on(
+          PWN::AI::Agent::Introspection.reflect_on(
             system_role_content: system_role_content,
             request: request,
             suppress_pii_warning: true