rtexit-method 0.1.0 → 0.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/package.json +9 -7
- package/packaged-assets/.agents/skills/rt-active-recon/SKILL.md +767 -0
- package/packaged-assets/.agents/skills/rt-active-recon/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-agent-breaker/SKILL.md +65 -0
- package/packaged-assets/.agents/skills/rt-agent-breaker/customize.toml +76 -0
- package/packaged-assets/.agents/skills/rt-agent-commander/SKILL.md +63 -0
- package/packaged-assets/.agents/skills/rt-agent-commander/customize.toml +67 -0
- package/packaged-assets/.agents/skills/rt-agent-ghost/SKILL.md +65 -0
- package/packaged-assets/.agents/skills/rt-agent-ghost/customize.toml +77 -0
- package/packaged-assets/.agents/skills/rt-agent-navigator/SKILL.md +62 -0
- package/packaged-assets/.agents/skills/rt-agent-navigator/customize.toml +61 -0
- package/packaged-assets/.agents/skills/rt-agent-phantom/SKILL.md +62 -0
- package/packaged-assets/.agents/skills/rt-agent-phantom/customize.toml +62 -0
- package/packaged-assets/.agents/skills/rt-agent-scout/SKILL.md +62 -0
- package/packaged-assets/.agents/skills/rt-agent-scout/customize.toml +61 -0
- package/packaged-assets/.agents/skills/rt-agent-scribe/SKILL.md +65 -0
- package/packaged-assets/.agents/skills/rt-agent-scribe/customize.toml +77 -0
- package/packaged-assets/.agents/skills/rt-attack-chain-builder/SKILL.md +476 -0
- package/packaged-assets/.agents/skills/rt-attack-chain-builder/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-attack-surface-map/SKILL.md +1209 -0
- package/packaged-assets/.agents/skills/rt-attack-surface-map/template.md +62 -0
- package/packaged-assets/.agents/skills/rt-autodoc/SKILL.md +258 -0
- package/packaged-assets/.agents/skills/rt-c2-operations/SKILL.md +1072 -0
- package/packaged-assets/.agents/skills/rt-c2-operations/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-compliance-mapper/SKILL.md +773 -0
- package/packaged-assets/.agents/skills/rt-create-sead/SKILL.md +74 -0
- package/packaged-assets/.agents/skills/rt-create-sead/template.md +89 -0
- package/packaged-assets/.agents/skills/rt-create-sead/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-credential-access/SKILL.md +756 -0
- package/packaged-assets/.agents/skills/rt-credential-hunt/SKILL.md +856 -0
- package/packaged-assets/.agents/skills/rt-credential-hunt/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-cvss-calculator/SKILL.md +542 -0
- package/packaged-assets/.agents/skills/rt-cvss-calculator/cvss4-matrix.csv +20 -0
- package/packaged-assets/.agents/skills/rt-data-exfiltration/SKILL.md +784 -0
- package/packaged-assets/.agents/skills/rt-defense-evasion/SKILL.md +987 -0
- package/packaged-assets/.agents/skills/rt-evidence-chain/SKILL.md +712 -0
- package/packaged-assets/.agents/skills/rt-evidence-chain/template.md +31 -0
- package/packaged-assets/.agents/skills/rt-executive-report/SKILL.md +718 -0
- package/packaged-assets/.agents/skills/rt-executive-report/template.md +38 -0
- package/packaged-assets/.agents/skills/rt-executive-report/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-active-directory/SKILL.md +1078 -0
- package/packaged-assets/.agents/skills/rt-exploit-active-directory/ad-checklist.csv +12 -0
- package/packaged-assets/.agents/skills/rt-exploit-active-directory/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-android/SKILL.md +1329 -0
- package/packaged-assets/.agents/skills/rt-exploit-android/masvs-checklist.csv +10 -0
- package/packaged-assets/.agents/skills/rt-exploit-android/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-api/SKILL.md +1547 -0
- package/packaged-assets/.agents/skills/rt-exploit-api/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-auth/SKILL.md +1949 -0
- package/packaged-assets/.agents/skills/rt-exploit-auth/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-bec/SKILL.md +69 -0
- package/packaged-assets/.agents/skills/rt-exploit-cloud-aws/SKILL.md +865 -0
- package/packaged-assets/.agents/skills/rt-exploit-cloud-aws/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-cloud-azure/SKILL.md +1258 -0
- package/packaged-assets/.agents/skills/rt-exploit-cloud-gcp/SKILL.md +981 -0
- package/packaged-assets/.agents/skills/rt-exploit-containers/SKILL.md +55 -0
- package/packaged-assets/.agents/skills/rt-exploit-databases/SKILL.md +1374 -0
- package/packaged-assets/.agents/skills/rt-exploit-desktop-mac/SKILL.md +834 -0
- package/packaged-assets/.agents/skills/rt-exploit-desktop-win/SKILL.md +903 -0
- package/packaged-assets/.agents/skills/rt-exploit-desktop-win/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-dotnet/SKILL.md +945 -0
- package/packaged-assets/.agents/skills/rt-exploit-elasticsearch/SKILL.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-electron/SKILL.md +1023 -0
- package/packaged-assets/.agents/skills/rt-exploit-electron/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-file-upload/SKILL.md +1576 -0
- package/packaged-assets/.agents/skills/rt-exploit-file-upload/payloads/README.md +4 -0
- package/packaged-assets/.agents/skills/rt-exploit-file-upload/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-firebase/SKILL.md +54 -0
- package/packaged-assets/.agents/skills/rt-exploit-frameworks/SKILL.md +967 -0
- package/packaged-assets/.agents/skills/rt-exploit-idor/SKILL.md +1693 -0
- package/packaged-assets/.agents/skills/rt-exploit-idor/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-injection/SKILL.md +1860 -0
- package/packaged-assets/.agents/skills/rt-exploit-injection/payloads/sqlmap-tampers.txt +22 -0
- package/packaged-assets/.agents/skills/rt-exploit-injection/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-ios/SKILL.md +1214 -0
- package/packaged-assets/.agents/skills/rt-exploit-ios/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-iot/SKILL.md +91 -0
- package/packaged-assets/.agents/skills/rt-exploit-iot/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-java/SKILL.md +1009 -0
- package/packaged-assets/.agents/skills/rt-exploit-jwt/SKILL.md +1327 -0
- package/packaged-assets/.agents/skills/rt-exploit-jwt/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-mongodb/SKILL.md +67 -0
- package/packaged-assets/.agents/skills/rt-exploit-mssql/SKILL.md +52 -0
- package/packaged-assets/.agents/skills/rt-exploit-mysql/SKILL.md +53 -0
- package/packaged-assets/.agents/skills/rt-exploit-network/SKILL.md +118 -0
- package/packaged-assets/.agents/skills/rt-exploit-network/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-nodejs/SKILL.md +852 -0
- package/packaged-assets/.agents/skills/rt-exploit-osticket/SKILL.md +63 -0
- package/packaged-assets/.agents/skills/rt-exploit-phishing/SKILL.md +173 -0
- package/packaged-assets/.agents/skills/rt-exploit-phishing/templates/README.md +4 -0
- package/packaged-assets/.agents/skills/rt-exploit-phishing/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-php/SKILL.md +1119 -0
- package/packaged-assets/.agents/skills/rt-exploit-physical/SKILL.md +63 -0
- package/packaged-assets/.agents/skills/rt-exploit-physical/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-postgresql/SKILL.md +67 -0
- package/packaged-assets/.agents/skills/rt-exploit-python/SKILL.md +986 -0
- package/packaged-assets/.agents/skills/rt-exploit-redis/SKILL.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-ruby/SKILL.md +61 -0
- package/packaged-assets/.agents/skills/rt-exploit-scada/SKILL.md +1091 -0
- package/packaged-assets/.agents/skills/rt-exploit-ssrf/SKILL.md +1528 -0
- package/packaged-assets/.agents/skills/rt-exploit-ssrf/payloads.txt +23 -0
- package/packaged-assets/.agents/skills/rt-exploit-ssrf/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-vishing/SKILL.md +121 -0
- package/packaged-assets/.agents/skills/rt-exploit-vishing/scripts.md +4 -0
- package/packaged-assets/.agents/skills/rt-exploit-web/SKILL.md +1902 -0
- package/packaged-assets/.agents/skills/rt-exploit-web/owasp-checklist.csv +14 -0
- package/packaged-assets/.agents/skills/rt-exploit-web/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-wireless/SKILL.md +71 -0
- package/packaged-assets/.agents/skills/rt-exploit-wordpress/SKILL.md +1565 -0
- package/packaged-assets/.agents/skills/rt-exploit-wordpress/cves.csv +7 -0
- package/packaged-assets/.agents/skills/rt-exploit-wordpress/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-exploit-xss/SKILL.md +1526 -0
- package/packaged-assets/.agents/skills/rt-exploit-xss/payloads.txt +18 -0
- package/packaged-assets/.agents/skills/rt-exploit-xss/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-finding-document/SKILL.md +687 -0
- package/packaged-assets/.agents/skills/rt-finding-document/template.md +71 -0
- package/packaged-assets/.agents/skills/rt-finding-document/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-finding-tracker/SKILL.md +216 -0
- package/packaged-assets/.agents/skills/rt-finding-tracker/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-help/SKILL.md +292 -0
- package/packaged-assets/.agents/skills/rt-help/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-js-analysis/SKILL.md +639 -0
- package/packaged-assets/.agents/skills/rt-js-analysis/patterns.txt +27 -0
- package/packaged-assets/.agents/skills/rt-js-analysis/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-kill-chain-map/SKILL.md +393 -0
- package/packaged-assets/.agents/skills/rt-lateral-movement/SKILL.md +1032 -0
- package/packaged-assets/.agents/skills/rt-lateral-movement/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-methodology-selector/SKILL.md +69 -0
- package/packaged-assets/.agents/skills/rt-methodology-selector/frameworks.csv +10 -0
- package/packaged-assets/.agents/skills/rt-methodology-selector/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-mitre-map/SKILL.md +668 -0
- package/packaged-assets/.agents/skills/rt-mitre-map/tactics.csv +16 -0
- package/packaged-assets/.agents/skills/rt-mitre-map/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-osint/SKILL.md +775 -0
- package/packaged-assets/.agents/skills/rt-osint/osint-sources.csv +12 -0
- package/packaged-assets/.agents/skills/rt-osint/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-party-mode/SKILL.md +249 -0
- package/packaged-assets/.agents/skills/rt-party-mode/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-persistence/SKILL.md +1146 -0
- package/packaged-assets/.agents/skills/rt-persistence/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-poc-writer/SKILL.md +640 -0
- package/packaged-assets/.agents/skills/rt-post-exploitation/SKILL.md +998 -0
- package/packaged-assets/.agents/skills/rt-post-exploitation/linux-checklist.csv +10 -0
- package/packaged-assets/.agents/skills/rt-post-exploitation/windows-checklist.csv +10 -0
- package/packaged-assets/.agents/skills/rt-post-exploitation/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-privilege-escalation/SKILL.md +1027 -0
- package/packaged-assets/.agents/skills/rt-privilege-escalation/linux-checklist.csv +10 -0
- package/packaged-assets/.agents/skills/rt-privilege-escalation/win-checklist.csv +10 -0
- package/packaged-assets/.agents/skills/rt-privilege-escalation/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-remediation-roadmap/SKILL.md +665 -0
- package/packaged-assets/.agents/skills/rt-remediation-roadmap/template.md +28 -0
- package/packaged-assets/.agents/skills/rt-risk-matrix/SKILL.md +232 -0
- package/packaged-assets/.agents/skills/rt-rules-of-engagement/SKILL.md +62 -0
- package/packaged-assets/.agents/skills/rt-rules-of-engagement/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-scenario-c001/SKILL.md +71 -0
- package/packaged-assets/.agents/skills/rt-scenario-c002/SKILL.md +69 -0
- package/packaged-assets/.agents/skills/rt-scenario-c003/SKILL.md +71 -0
- package/packaged-assets/.agents/skills/rt-scenario-c004/SKILL.md +71 -0
- package/packaged-assets/.agents/skills/rt-scenario-c005/SKILL.md +72 -0
- package/packaged-assets/.agents/skills/rt-scenario-d001/SKILL.md +378 -0
- package/packaged-assets/.agents/skills/rt-scenario-d002/SKILL.md +392 -0
- package/packaged-assets/.agents/skills/rt-scenario-d003/SKILL.md +522 -0
- package/packaged-assets/.agents/skills/rt-scenario-d004/SKILL.md +373 -0
- package/packaged-assets/.agents/skills/rt-scenario-d005/SKILL.md +458 -0
- package/packaged-assets/.agents/skills/rt-scenario-library/SKILL.md +292 -0
- package/packaged-assets/.agents/skills/rt-scenario-library/scenarios.csv +32 -0
- package/packaged-assets/.agents/skills/rt-scenario-m001/SKILL.md +796 -0
- package/packaged-assets/.agents/skills/rt-scenario-m002/SKILL.md +723 -0
- package/packaged-assets/.agents/skills/rt-scenario-m003/SKILL.md +463 -0
- package/packaged-assets/.agents/skills/rt-scenario-m004/SKILL.md +449 -0
- package/packaged-assets/.agents/skills/rt-scenario-m005/SKILL.md +505 -0
- package/packaged-assets/.agents/skills/rt-scenario-n001/SKILL.md +573 -0
- package/packaged-assets/.agents/skills/rt-scenario-n002/SKILL.md +112 -0
- package/packaged-assets/.agents/skills/rt-scenario-n003/SKILL.md +100 -0
- package/packaged-assets/.agents/skills/rt-scenario-n004/SKILL.md +90 -0
- package/packaged-assets/.agents/skills/rt-scenario-n005/SKILL.md +71 -0
- package/packaged-assets/.agents/skills/rt-scenario-w001/SKILL.md +635 -0
- package/packaged-assets/.agents/skills/rt-scenario-w002/SKILL.md +612 -0
- package/packaged-assets/.agents/skills/rt-scenario-w003/SKILL.md +449 -0
- package/packaged-assets/.agents/skills/rt-scenario-w004/SKILL.md +648 -0
- package/packaged-assets/.agents/skills/rt-scenario-w005/SKILL.md +479 -0
- package/packaged-assets/.agents/skills/rt-scenario-w006/SKILL.md +443 -0
- package/packaged-assets/.agents/skills/rt-scenario-w007/SKILL.md +494 -0
- package/packaged-assets/.agents/skills/rt-scenario-w008/SKILL.md +576 -0
- package/packaged-assets/.agents/skills/rt-scenario-w009/SKILL.md +518 -0
- package/packaged-assets/.agents/skills/rt-scenario-w010/SKILL.md +574 -0
- package/packaged-assets/.agents/skills/rt-scope-definition/SKILL.md +79 -0
- package/packaged-assets/.agents/skills/rt-scope-definition/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-shodan-recon/SKILL.md +880 -0
- package/packaged-assets/.agents/skills/rt-status/SKILL.md +64 -0
- package/packaged-assets/.agents/skills/rt-subdomain-enum/SKILL.md +906 -0
- package/packaged-assets/.agents/skills/rt-subdomain-enum/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-technical-report/SKILL.md +710 -0
- package/packaged-assets/.agents/skills/rt-technical-report/template.md +41 -0
- package/packaged-assets/.agents/skills/rt-technical-report/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-threat-model/SKILL.md +59 -0
- package/packaged-assets/.agents/skills/rt-threat-model/template.md +32 -0
- package/packaged-assets/.agents/skills/rt-threat-model/workflow.md +68 -0
- package/packaged-assets/.agents/skills/rt-timeline/SKILL.md +338 -0
- package/packaged-assets/RTEXIT.md +127 -0
- package/tools/installer/commands/install.js +0 -1
- package/tools/installer/lib/asset-manifest.js +10 -5
- package/tools/installer/lib/banner.js +14 -6
- package/tools/installer/lib/copy-assets.js +5 -2
- package/tools/installer/lib/prompts.js +1 -11
- package/tools/installer/lib/write-config.js +8 -2
- /package/{_rtexit → packaged-assets/_rtexit}/config.toml +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/config.user.toml +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/custom/config.toml +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/scripts/autodoc_engine.py +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/scripts/finding_tracker.py +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/scripts/resolve_config.py +0 -0
- /package/{_rtexit → packaged-assets/_rtexit}/scripts/resolve_customization.py +0 -0
- /package/{resources → packaged-assets/resources}/certifications.md +0 -0
- /package/{resources → packaged-assets/resources}/payloads.md +0 -0
- /package/{resources → packaged-assets/resources}/tools.md +0 -0
- /package/{resources → packaged-assets/resources}/wordlists.md +0 -0
- /package/{templates → packaged-assets/templates}/attack-chain-template.md +0 -0
- /package/{templates → packaged-assets/templates}/executive-report-template.md +0 -0
- /package/{templates → packaged-assets/templates}/executive-report.md +0 -0
- /package/{templates → packaged-assets/templates}/finding-template.md +0 -0
- /package/{templates → packaged-assets/templates}/remediation-roadmap.md +0 -0
- /package/{templates → packaged-assets/templates}/sead-template.md +0 -0
- /package/{templates → packaged-assets/templates}/technical-report.md +0 -0
|
@@ -0,0 +1,127 @@
|
|
|
1
|
+
# RTExit — Red Team Exit Framework
|
|
2
|
+
|
|
3
|
+
> AI-Assisted Red Team Methodology — From Beginner to Expert
|
|
4
|
+
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
## What is RTExit?
|
|
8
|
+
|
|
9
|
+
RTExit is a complete, AI-assisted Red Team methodology framework built on the same architecture as BMAD-METHOD. It provides structured **Agents**, **Skills**, and **Attack Scenarios** for every phase of a Red Team engagement — from pre-engagement planning to final report delivery.
|
|
10
|
+
|
|
11
|
+
**Covers:**
|
|
12
|
+
- 🌐 Web Applications (OWASP WSTG full)
|
|
13
|
+
- 📱 Mobile — Android & iOS (OWASP MASVS full)
|
|
14
|
+
- 💻 Desktop — Electron, Windows (.NET/Win32), macOS
|
|
15
|
+
- 🔌 Network & Infrastructure
|
|
16
|
+
- 🏢 Active Directory / Windows AD
|
|
17
|
+
- ☁️ Cloud — AWS, Azure, GCP
|
|
18
|
+
- 🎭 Social Engineering & Phishing
|
|
19
|
+
- 🔒 Physical Security
|
|
20
|
+
- 📡 IoT / Firmware / SCADA
|
|
21
|
+
- 🗄️ Databases — MySQL, PostgreSQL, MSSQL, MongoDB, Redis, Firebase
|
|
22
|
+
|
|
23
|
+
---
|
|
24
|
+
|
|
25
|
+
## Quick Start
|
|
26
|
+
|
|
27
|
+
```bash
|
|
28
|
+
npx rtexit-method install
|
|
29
|
+
```
|
|
30
|
+
|
|
31
|
+
Website: `https://www.exitcode.me/`
|
|
32
|
+
Repository: `https://github.com/exit-code-eg/RTExit`
|
|
33
|
+
|
|
34
|
+
The installer will:
|
|
35
|
+
|
|
36
|
+
- show the RTExit banner
|
|
37
|
+
- ask for language and skill-level choices
|
|
38
|
+
- install RTExit assets only
|
|
39
|
+
- create or update `_rtexit/config.user.toml`
|
|
40
|
+
|
|
41
|
+
Then:
|
|
42
|
+
|
|
43
|
+
1. Open `_rtexit/config.user.toml`
|
|
44
|
+
2. Complete your operator and engagement details
|
|
45
|
+
3. Open your AI IDE in the project
|
|
46
|
+
4. Start with `rt-help`
|
|
47
|
+
|
|
48
|
+
---
|
|
49
|
+
|
|
50
|
+
## The 7 Agents
|
|
51
|
+
|
|
52
|
+
| Agent | Name | Icon | Domain |
|
|
53
|
+
|-------|------|------|--------|
|
|
54
|
+
| Commander | Ahmed | 🎯 | Strategy, Scope, Planning |
|
|
55
|
+
| Scout | Nour | 🔭 | Reconnaissance & OSINT |
|
|
56
|
+
| Breaker | Karim | 💀 | Web, API, Languages, Databases |
|
|
57
|
+
| Navigator | Rami | 📱 | Mobile, Desktop, IoT |
|
|
58
|
+
| Ghost | Sara | 👻 | Post-Exploitation, AD, Cloud |
|
|
59
|
+
| Phantom | Omar | 🎭 | Social Engineering, Physical |
|
|
60
|
+
| Scribe | Layla | 📝 | Reporting, Evidence, Auto-Docs |
|
|
61
|
+
|
|
62
|
+
---
|
|
63
|
+
|
|
64
|
+
## The 4 Phases
|
|
65
|
+
|
|
66
|
+
```
|
|
67
|
+
Phase 1: PLANNING → Scope, SEAD, Threat Model, Methodology
|
|
68
|
+
Phase 2: RECONNAISSANCE → OSINT, Subdomains, Attack Surface
|
|
69
|
+
Phase 3: EXPLOITATION → Web, Mobile, Network, Cloud, Social, Post-Exploitation
|
|
70
|
+
Phase 4: REPORTING → Findings, CVSS, MITRE, Reports, Remediation
|
|
71
|
+
```
|
|
72
|
+
|
|
73
|
+
---
|
|
74
|
+
|
|
75
|
+
## Skill Levels
|
|
76
|
+
|
|
77
|
+
Every skill supports 4 levels:
|
|
78
|
+
- **BEGINNER** — Step-by-step with explanations, safe tools
|
|
79
|
+
- **INTERMEDIATE** — Methodology focus, standard tools
|
|
80
|
+
- **ADVANCED** — OPSEC-aware, stealth techniques
|
|
81
|
+
- **EXPERT** — Custom exploitation, vulnerability research
|
|
82
|
+
|
|
83
|
+
---
|
|
84
|
+
|
|
85
|
+
## Engagement Output Structure
|
|
86
|
+
|
|
87
|
+
All documentation is auto-generated in `_rtexit-output/docs/`:
|
|
88
|
+
|
|
89
|
+
```
|
|
90
|
+
docs/
|
|
91
|
+
├── engagement/ → SEAD, scope, timeline, contacts
|
|
92
|
+
├── reconnaissance/→ subdomains, attack-surface, employees
|
|
93
|
+
├── findings/ → findings-master.csv + individual F-XXX.md files
|
|
94
|
+
├── evidence/ → screenshots, terminal-logs, chain-of-custody
|
|
95
|
+
├── attack-chains/ → multi-step paths, MITRE map
|
|
96
|
+
└── reports/ → executive + technical + remediation
|
|
97
|
+
```
|
|
98
|
+
|
|
99
|
+
---
|
|
100
|
+
|
|
101
|
+
## Frameworks Supported
|
|
102
|
+
|
|
103
|
+
| Framework | Domain |
|
|
104
|
+
|-----------|--------|
|
|
105
|
+
| PTES | General purpose (7 phases) |
|
|
106
|
+
| NIST SP 800-115 | Compliance-driven |
|
|
107
|
+
| OWASP WSTG | Web applications |
|
|
108
|
+
| OWASP MASVS | Mobile applications |
|
|
109
|
+
| TIBER-EU | Financial institutions |
|
|
110
|
+
| CBEST | UK financial sector |
|
|
111
|
+
| MITRE ATT&CK | Adversary behavior mapping |
|
|
112
|
+
| Cyber Kill Chain | Attack phase mapping |
|
|
113
|
+
|
|
114
|
+
---
|
|
115
|
+
|
|
116
|
+
## Resources
|
|
117
|
+
|
|
118
|
+
- PayloadsAllTheThings: github.com/swisskyrepo/PayloadsAllTheThings
|
|
119
|
+
- HackTricks: hacktricks.wiki
|
|
120
|
+
- SecLists: github.com/danielmiessler/SecLists
|
|
121
|
+
- OWASP WSTG: owasp.org/www-project-web-security-testing-guide
|
|
122
|
+
- MITRE ATT&CK: attack.mitre.org
|
|
123
|
+
- CVSS 4.0: first.org/cvss/v4-0
|
|
124
|
+
|
|
125
|
+
---
|
|
126
|
+
|
|
127
|
+
*RTExit — Red Team Methodology Framework | 2026*
|
|
@@ -1,10 +1,15 @@
|
|
|
1
1
|
function getInstallEntries() {
|
|
2
2
|
return [
|
|
3
|
-
{
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
3
|
+
{
|
|
4
|
+
type: 'glob-dir-prefix',
|
|
5
|
+
base: 'packaged-assets/.agents/skills',
|
|
6
|
+
targetBase: '.agents/skills',
|
|
7
|
+
prefix: 'rt-'
|
|
8
|
+
},
|
|
9
|
+
{ type: 'path', value: 'packaged-assets/_rtexit', target: '_rtexit' },
|
|
10
|
+
{ type: 'path', value: 'packaged-assets/templates', target: 'templates' },
|
|
11
|
+
{ type: 'path', value: 'packaged-assets/resources', target: 'resources' },
|
|
12
|
+
{ type: 'path', value: 'packaged-assets/RTEXIT.md', target: 'RTEXIT.md' }
|
|
8
13
|
];
|
|
9
14
|
}
|
|
10
15
|
|
|
@@ -1,11 +1,19 @@
|
|
|
1
1
|
function renderBanner() {
|
|
2
|
+
const red = '\x1b[31m';
|
|
3
|
+
const dim = '\x1b[90m';
|
|
4
|
+
const reset = '\x1b[0m';
|
|
5
|
+
|
|
2
6
|
return [
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
7
|
+
`${red}██████╗ ████████╗███████╗██╗ ██╗██╗████████╗${reset}`,
|
|
8
|
+
`${red}██╔══██╗╚══██╔══╝██╔════╝╚██╗██╔╝██║╚══██╔══╝${reset}`,
|
|
9
|
+
`${red}██████╔╝ ██║ █████╗ ╚███╔╝ ██║ ██║${reset}`,
|
|
10
|
+
`${red}██╔══██╗ ██║ ██╔══╝ ██╔██╗ ██║ ██║${reset}`,
|
|
11
|
+
`${red}██║ ██║ ██║ ███████╗██╔╝ ██╗██║ ██║${reset}`,
|
|
12
|
+
`${red}╚═╝ ╚═╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝${reset}`,
|
|
13
|
+
'',
|
|
14
|
+
`${dim}RTExit | AI-Assisted Red Team Methodology${reset}`,
|
|
15
|
+
`${dim}Install official RTExit framework assets into your project.${reset}`,
|
|
16
|
+
`${dim}Website: https://www.exitcode.me/${reset}`,
|
|
9
17
|
].join('\n');
|
|
10
18
|
}
|
|
11
19
|
|
|
@@ -20,16 +20,19 @@ function copyRecursive(source, target) {
|
|
|
20
20
|
async function copyPackagedAssets({ repoRoot, targetRoot }) {
|
|
21
21
|
for (const entry of getInstallEntries()) {
|
|
22
22
|
if (entry.type === 'path') {
|
|
23
|
-
|
|
23
|
+
const sourcePath = path.join(repoRoot, entry.value);
|
|
24
|
+
const targetPath = path.join(targetRoot, entry.target || entry.value);
|
|
25
|
+
copyRecursive(sourcePath, targetPath);
|
|
24
26
|
continue;
|
|
25
27
|
}
|
|
26
28
|
|
|
27
29
|
const skillsRoot = path.join(repoRoot, entry.base);
|
|
30
|
+
const targetBase = entry.targetBase || entry.base;
|
|
28
31
|
for (const name of fs.readdirSync(skillsRoot)) {
|
|
29
32
|
if (name.startsWith(entry.prefix)) {
|
|
30
33
|
copyRecursive(
|
|
31
34
|
path.join(skillsRoot, name),
|
|
32
|
-
path.join(targetRoot,
|
|
35
|
+
path.join(targetRoot, targetBase, name)
|
|
33
36
|
);
|
|
34
37
|
}
|
|
35
38
|
}
|
|
@@ -22,22 +22,12 @@ async function askInstallQuestions({ cwd }) {
|
|
|
22
22
|
],
|
|
23
23
|
});
|
|
24
24
|
|
|
25
|
-
const skill_level = await prompts.select({
|
|
26
|
-
message: 'Choose skill level',
|
|
27
|
-
options: [
|
|
28
|
-
{ value: 'beginner', label: 'Beginner' },
|
|
29
|
-
{ value: 'intermediate', label: 'Intermediate' },
|
|
30
|
-
{ value: 'advanced', label: 'Advanced' },
|
|
31
|
-
{ value: 'expert', label: 'Expert' },
|
|
32
|
-
],
|
|
33
|
-
});
|
|
34
|
-
|
|
35
25
|
const confirmed = await prompts.confirm({
|
|
36
26
|
message: `Install RTExit into ${targetDirectory}?`,
|
|
37
27
|
initialValue: true,
|
|
38
28
|
});
|
|
39
29
|
|
|
40
|
-
return { targetDirectory, language, document_output_language,
|
|
30
|
+
return { targetDirectory, language, document_output_language, confirmed };
|
|
41
31
|
}
|
|
42
32
|
|
|
43
33
|
module.exports = { askInstallQuestions };
|
|
@@ -17,14 +17,20 @@ async function writeUserConfig({ targetRoot, answers }) {
|
|
|
17
17
|
fs.mkdirSync(configDir, { recursive: true });
|
|
18
18
|
|
|
19
19
|
if (!fs.existsSync(configPath)) {
|
|
20
|
-
fs.writeFileSync(
|
|
20
|
+
fs.writeFileSync(
|
|
21
|
+
configPath,
|
|
22
|
+
`${buildConfigTemplate({
|
|
23
|
+
language: answers.language,
|
|
24
|
+
document_output_language: answers.document_output_language,
|
|
25
|
+
skill_level: '',
|
|
26
|
+
})}\n`,
|
|
27
|
+
);
|
|
21
28
|
return configPath;
|
|
22
29
|
}
|
|
23
30
|
|
|
24
31
|
let content = fs.readFileSync(configPath, 'utf8');
|
|
25
32
|
content = upsertKey(content, 'language', answers.language);
|
|
26
33
|
content = upsertKey(content, 'document_output_language', answers.document_output_language);
|
|
27
|
-
content = upsertKey(content, 'skill_level', answers.skill_level);
|
|
28
34
|
fs.writeFileSync(configPath, content);
|
|
29
35
|
return configPath;
|
|
30
36
|
}
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|