rtexit-method 0.1.17 → 0.1.19

package/packaged-assets/scripts/rt-native-install.sh

@@ -0,0 +1,438 @@
+#!/bin/bash
+# RTExit Native Kali Linux Installer
+# Installs all 300+ tools directly on your Kali Linux system
+# No Docker overhead — full GPU, WiFi, USB, Bluetooth access
+#
+# Usage:
+#   chmod +x rt-native-install.sh
+#   sudo bash rt-native-install.sh
+#
+# Recommended: Run on fresh Kali Linux 2024.x or later
+
+set -e
+
+RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'
+BLUE='\033[0;34m'; CYAN='\033[0;36m'; NC='\033[0m'
+
+# ── Root check ────────────────────────────────────────────────────────────────
+if [ "$EUID" -ne 0 ]; then
+  echo -e "${RED}[!] Run as root: sudo bash rt-native-install.sh${NC}"
+  exit 1
+fi
+
+echo -e "${RED}"
+echo "  ██████╗ ████████╗███████╗██╗  ██╗██╗████████╗"
+echo "  ██╔══██╗╚══██╔══╝██╔════╝╚██╗██╔╝██║╚══██╔══╝"
+echo "  ██████╔╝   ██║   █████╗   ╚███╔╝ ██║   ██║   "
+echo "  ██╔══██╗   ██║   ██╔══╝   ██╔██╗ ██║   ██║   "
+echo "  ██║  ██║   ██║   ███████╗██╔╝ ██╗██║   ██║   "
+echo "  ╚═╝  ╚═╝   ╚═╝   ╚══════╝╚═╝  ╚═╝╚═╝   ╚═╝   "
+echo -e "${NC}  Native Kali Installer v3.0 — 300+ Tools"
+echo ""
+
+# ── Helper functions ──────────────────────────────────────────────────────────
+install_apt() {
+  echo -e "${BLUE}[APT]${NC} $*"
+  apt-get install -y --no-install-recommends "$@" 2>/dev/null || true
+}
+
+install_pip() {
+  echo -e "${BLUE}[PIP]${NC} $*"
+  pip3 install --no-cache-dir --break-system-packages "$@" 2>/dev/null || true
+}
+
+install_go() {
+  echo -e "${BLUE}[GO ]${NC} $1"
+  go install "$1" 2>/dev/null || true
+}
+
+install_npm() {
+  echo -e "${BLUE}[NPM]${NC} $*"
+  npm install -g "$@" 2>/dev/null || true
+}
+
+install_gem() {
+  echo -e "${BLUE}[GEM]${NC} $*"
+  gem install "$@" 2>/dev/null || true
+}
+
+clone() {
+  local repo="$1" dest="$2"
+  if [ ! -d "$dest" ]; then
+    echo -e "${BLUE}[GIT]${NC} $dest"
+    git clone "$repo" "$dest" 2>/dev/null || true
+  else
+    echo -e "${YELLOW}[SKP]${NC} $dest (exists)"
+  fi
+}
+
+log_section() {
+  echo ""
+  echo -e "${CYAN}══════════════════════════════════════════${NC}"
+  echo -e "${CYAN}  $1${NC}"
+  echo -e "${CYAN}══════════════════════════════════════════${NC}"
+}
+
+# ── System ────────────────────────────────────────────────────────────────────
+log_section "System Update"
+apt-get update && apt-get upgrade -y
+
+# ── Core dependencies ─────────────────────────────────────────────────────────
+log_section "Core Dependencies"
+install_apt curl wget git vim nano tmux screen \
+  file xxd hexedit zip unzip p7zip-full tar jq \
+  build-essential python3 python3-pip python3-venv \
+  libssl-dev libffi-dev libpcap-dev \
+  golang-go nodejs npm default-jdk ruby ruby-dev
+
+# ── Alias setup ───────────────────────────────────────────────────────────────
+log_section "Installing rt-* Aliases"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+ALIASES_SRC="$SCRIPT_DIR/../docker/aliases.sh"
+
+if [ -f "$ALIASES_SRC" ]; then
+  cp "$ALIASES_SRC" /etc/profile.d/rtexit-aliases.sh
+  chmod +x /etc/profile.d/rtexit-aliases.sh
+  echo -e "${GREEN}[✓]${NC} rt-* aliases installed → /etc/profile.d/rtexit-aliases.sh"
+  echo -e "${YELLOW}[!]${NC} Run: source /etc/profile.d/rtexit-aliases.sh"
+else
+  echo -e "${YELLOW}[!]${NC} aliases.sh not found — install from: docker/aliases.sh"
+fi
+
+# ── Network & Scanning ────────────────────────────────────────────────────────
+log_section "Network & Scanning"
+install_apt nmap ncat netcat-openbsd tcpdump tshark \
+  net-tools iproute2 iputils-ping bind9-dnsutils \
+  socat proxychains4 openvpn masscan \
+  iodine hping3 dsniff macchanger zmap \
+  bettercap ettercap-text-only sslstrip arpwatch netsniff-ng \
+  suricata ncrack
+
+# ── Wireless ─────────────────────────────────────────────────────────────────
+log_section "Wireless & Bluetooth"
+install_apt aircrack-ng wireless-tools rfkill \
+  hostapd-wpe ubertooth
+install_pip wifite2
+# hcxdumptool
+clone https://github.com/ZerBea/hcxdumptool /opt/hcxdumptool
+[ -d /opt/hcxdumptool ] && cd /opt/hcxdumptool && make && make install 2>/dev/null || true
+install_apt hcxtools 2>/dev/null || true
+
+# ── Recon & OSINT ─────────────────────────────────────────────────────────────
+log_section "Recon & OSINT"
+install_apt amass subfinder fierce dnsrecon dnsenum \
+  nbtscan smbmap enum4linux
+install_pip theHarvester shodan censys trufflehog \
+  sherlock-project h8mail maigret holehe socialscan \
+  enum4linux-ng ipinfo duckduckgo-search PyGithub git-dumper
+clone https://github.com/lanmaster53/recon-ng /opt/recon-ng
+install_pip -r /opt/recon-ng/REQUIREMENTS 2>/dev/null || true
+ln -sf /opt/recon-ng/recon-ng /usr/local/bin/recon-ng 2>/dev/null || true
+# Go recon tools
+install_go github.com/projectdiscovery/httpx/cmd/httpx@latest
+install_go github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
+install_go github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
+install_go github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
+install_go github.com/projectdiscovery/katana/cmd/katana@latest
+install_go github.com/projectdiscovery/dnsx/cmd/dnsx@latest
+install_go github.com/hakluke/hakrawler@latest
+install_go github.com/tomnomnom/waybackurls@latest
+install_go github.com/lc/gau/v2/cmd/gau@latest
+install_go github.com/ffuf/ffuf/v2@latest
+install_go github.com/OJ/gobuster/v3@latest
+install_go github.com/LukaSikic/subzy@latest
+install_go github.com/hahwul/dalfox/v2@latest
+install_go github.com/gwen001/github-subdomains@latest
+# gitleaks
+curl -sSfL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_linux_x64.tar.gz | \
+  tar xz -C /usr/local/bin 2>/dev/null || true
+# SecLists
+clone https://github.com/danielmiessler/SecLists /opt/SecLists
+
+# ── Web Application ───────────────────────────────────────────────────────────
+log_section "Web Application Testing"
+install_apt sqlmap nikto wfuzz dirb whatweb wafw00f testssl.sh
+install_pip mitmproxy impacket requests pwntools \
+  PyJWT python-jose grpcio grpcio-tools websocket-client scapy \
+  arjun padding-oracle-attacker jsbeautifier semgrep graphql-cop inql
+clone https://github.com/defparam/smuggler /opt/smuggler
+ln -sf /opt/smuggler/smuggler.py /usr/local/bin/smuggler
+chmod +x /opt/smuggler/smuggler.py 2>/dev/null || true
+clone https://github.com/ticarpi/jwt_tool /opt/jwt_tool
+install_pip -r /opt/jwt_tool/requirements.txt 2>/dev/null || true
+ln -sf /opt/jwt_tool/jwt_tool.py /usr/local/bin/jwt_tool
+chmod +x /opt/jwt_tool/jwt_tool.py 2>/dev/null || true
+clone https://github.com/GerbenJavado/LinkFinder /opt/LinkFinder
+install_pip -r /opt/LinkFinder/requirements.txt 2>/dev/null || true
+ln -sf /opt/LinkFinder/linkfinder.py /usr/local/bin/linkfinder
+clone https://github.com/enjoiz/XXEinjector /opt/XXEinjector
+clone https://github.com/epinna/tplmap /opt/tplmap
+install_pip -r /opt/tplmap/requirements.txt 2>/dev/null || true
+ln -sf /opt/tplmap/tplmap.py /usr/local/bin/tplmap
+chmod +x /opt/tplmap/tplmap.py 2>/dev/null || true
+# GraphQL tools
+install_pip graphw00f clairvoyance
+# Go web tools
+install_go github.com/fullstorydev/grpcurl/cmd/grpcurl@latest
+install_go github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest
+install_go github.com/Sh1Yo/x8@latest
+install_go github.com/tomnomnom/qsreplace@latest
+install_go github.com/Emoe/kxss@latest
+# ghauri
+install_pip ghauri 2>/dev/null || true
+clone https://github.com/r0oth3x49/ghauri /opt/ghauri
+install_pip -r /opt/ghauri/requirements.txt 2>/dev/null || true
+ln -sf /opt/ghauri/ghauri.py /usr/local/bin/ghauri
+# CORScanner
+clone https://github.com/chenjj/CORScanner /opt/CORScanner
+install_pip -r /opt/CORScanner/requirements.txt 2>/dev/null || true
+# npm web tools
+install_npm wappalyzer-cli js-beautify
+
+# ── Password & Credentials ────────────────────────────────────────────────────
+log_section "Password Attacks & Credentials"
+install_apt hashcat john hydra medusa cewl crunch
+install_pip pypykatz patator
+install_go github.com/ropnop/kerbrute@latest
+clone https://github.com/Mebus/cupp /opt/cupp
+ln -sf /opt/cupp/cupp.py /usr/local/bin/cupp
+chmod +x /opt/cupp/cupp.py
+
+# ── Active Directory ──────────────────────────────────────────────────────────
+log_section "Active Directory & Windows"
+install_pip impacket bloodhound certipy-ad pywhisker netexec mitm6 coercer \
+  bloodyAD ldeep pyrdp
+install_gem evil-winrm
+clone https://github.com/dirkjanm/PKINITtools /opt/PKINITtools
+install_pip -r /opt/PKINITtools/requirements.txt 2>/dev/null || true
+clone https://github.com/topotam/PetitPotam /opt/PetitPotam
+clone https://github.com/login-securite/DonPAPI /opt/DonPAPI
+install_pip -r /opt/DonPAPI/requirements.txt 2>/dev/null || true
+clone https://github.com/Ridter/noPac /opt/noPac
+clone https://github.com/Dec0ne/KrbRelayUp /opt/KrbRelayUp
+clone https://github.com/dirkjanm/CVE-2020-1472 /opt/CVE-2020-1472
+clone https://github.com/cube0x0/CVE-2021-1675 /opt/PrintNightmare
+clone https://github.com/dirkjanm/krbrelayx /opt/krbrelayx
+install_pip dnspython ldap3 pyOpenSSL 2>/dev/null || true
+clone https://github.com/fireeye/ADFSpoof /opt/ADFSpoof
+install_pip -r /opt/ADFSpoof/requirements.txt 2>/dev/null || true
+clone https://github.com/klezVirus/SysWhispers3 /opt/SysWhispers3
+clone https://github.com/Hackndo/pyGPOAbuse /opt/pyGPOAbuse
+install_pip -r /opt/pyGPOAbuse/requirements.txt 2>/dev/null || true
+install_pip roadtools roadrecon bloodyAD
+# windapsearch
+install_go github.com/ropnop/windapsearch@latest 2>/dev/null || true
+
+# ── C2 & Post-Exploitation ────────────────────────────────────────────────────
+log_section "C2 & Post-Exploitation"
+install_apt metasploit-framework
+curl https://sliver.sh/install | bash 2>/dev/null || true
+install_go github.com/jpillora/chisel@latest
+install_go github.com/nicocha30/ligolo-ng/cmd/proxy@latest
+install_go github.com/nicocha30/ligolo-ng/cmd/agent@latest
+install_go github.com/Ne0nd0g/merlin-agent/cmd/merlinagent@latest
+clone https://github.com/BC-SECURITY/Empire /opt/Empire
+install_pip -r /opt/Empire/requirements.txt 2>/dev/null || true
+ln -sf /opt/Empire/empire /usr/local/bin/empire 2>/dev/null || true
+clone https://github.com/nettitude/PoshC2 /opt/PoshC2
+install_pip -r /opt/PoshC2/requirements.txt 2>/dev/null || true
+clone https://github.com/t3l3machus/Villain /opt/Villain
+install_pip -r /opt/Villain/requirements.txt 2>/dev/null || true
+install_pip deathstar 2>/dev/null || true
+clone https://github.com/byt3bl33d3r/DeathStar /opt/DeathStar
+install_pip -r /opt/DeathStar/requirements.txt 2>/dev/null || true
+install_apt iodine
+clone https://github.com/iagox86/dnscat2 /opt/dnscat2
+cd /opt/dnscat2/client && make 2>/dev/null || true
+
+# ── Cloud ─────────────────────────────────────────────────────────────────────
+log_section "Cloud Platforms"
+install_pip awscli boto3 azure-cli google-cloud-storage google-auth \
+  scoutsuite prowler pacu kube-hunter principalmapper \
+  checkov s3scanner gcp-scanner
+install_go github.com/BishopFox/cloudfox@latest
+install_go github.com/DataDog/stratus-red-team/v2/cmd/stratus@latest
+install_go github.com/liamg/awswhoami@latest
+curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" 2>/dev/null && \
+  install -m 0755 kubectl /usr/local/bin/kubectl && rm kubectl 2>/dev/null || true
+clone https://github.com/andresriancho/enumerate-iam /opt/enumerate-iam
+install_pip -r /opt/enumerate-iam/requirements.txt 2>/dev/null || true
+ln -sf /opt/enumerate-iam/enumerate-iam.py /usr/local/bin/enumerate-iam
+chmod +x /opt/enumerate-iam/enumerate-iam.py 2>/dev/null || true
+# kubectx + kubens
+clone https://github.com/ahmetb/kubectx /opt/kubectx
+ln -sf /opt/kubectx/kubectx /usr/local/bin/kubectx
+ln -sf /opt/kubectx/kubens /usr/local/bin/kubens 2>/dev/null || true
+install_go github.com/aquasecurity/kube-bench@latest
+curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash 2>/dev/null || true
+# azcopy
+curl -sSL "https://aka.ms/downloadazcopy-v10-linux" | tar xz --strip-components=1 -C /usr/local/bin/ 2>/dev/null || true
+# cloud_enum
+clone https://github.com/initstring/cloud_enum /opt/cloud_enum
+install_pip -r /opt/cloud_enum/requirements.txt 2>/dev/null || true
+
+# ── Mobile ────────────────────────────────────────────────────────────────────
+log_section "Mobile Testing"
+install_apt apktool dex2jar android-tools-adb
+clone https://github.com/skylot/jadx /opt/jadx_src 2>/dev/null || true
+mkdir -p /opt/jadx
+curl -sSL "https://github.com/skylot/jadx/releases/latest/download/jadx-1.5.0.zip" \
+  -o /tmp/jadx.zip 2>/dev/null && \
+  unzip -q /tmp/jadx.zip -d /opt/jadx && \
+  ln -sf /opt/jadx/bin/jadx /usr/local/bin/jadx && \
+  ln -sf /opt/jadx/bin/jadx-gui /usr/local/bin/jadx-gui && \
+  rm /tmp/jadx.zip 2>/dev/null || true
+install_pip frida-tools objection apkleaks drozer \
+  reFlutter hermes-dec hbctool doldrums androguard \
+  "qrcode[pil]" Pillow lz4
+install_npm apk-mitm js-beautify
+install_apt mono-complete mono-utils 2>/dev/null || true
+# uber-apk-signer
+mkdir -p /opt/uber-apk-signer
+curl -sSL "https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar" \
+  -o /opt/uber-apk-signer/uber-apk-signer.jar 2>/dev/null || true
+echo '#!/bin/bash\nexec java -jar /opt/uber-apk-signer/uber-apk-signer.jar "$@"' \
+  > /usr/local/bin/uber-apk-signer && chmod +x /usr/local/bin/uber-apk-signer
+# frida-server setup script
+cat > /usr/local/bin/setup-frida-server << 'SCRIPT'
+#!/bin/bash
+FRIDA_VER=$(python3 -c "import frida; print(frida.__version__)" 2>/dev/null || pip3 show frida | grep Version | awk '{print $2}')
+ARCH=$(adb shell getprop ro.product.cpu.abi 2>/dev/null | tr -d '\r')
+case $ARCH in
+  arm64-v8a) A="arm64" ;; armeabi-v7a) A="arm" ;;
+  x86_64) A="x86_64" ;; x86) A="x86" ;; *) echo "Unknown arch: $ARCH"; exit 1 ;;
+esac
+echo "[*] Frida $FRIDA_VER | arch: $A"
+wget -q "https://github.com/frida/frida/releases/download/${FRIDA_VER}/frida-server-${FRIDA_VER}-android-${A}.xz" -O /tmp/frida-server.xz
+unxz /tmp/frida-server.xz && mv /tmp/frida-server "/tmp/frida-server-${A}"
+adb push "/tmp/frida-server-${A}" /data/local/tmp/frida-server
+adb shell chmod 755 /data/local/tmp/frida-server
+echo "[+] Done. Start: adb shell /data/local/tmp/frida-server &"
+SCRIPT
+chmod +x /usr/local/bin/setup-frida-server
+
+# ── Binary Analysis & RE ──────────────────────────────────────────────────────
+log_section "Binary Analysis & Reverse Engineering"
+install_apt gdb radare2 ltrace strace binutils patchelf nasm yara \
+  binutils-multiarch sleuthkit
+install_pip pwntools floss capstone keystone-engine unicorn \
+  ropgadget ropper angr yara-python
+clone https://github.com/pwndbg/pwndbg /opt/pwndbg
+cd /opt/pwndbg && ./setup.sh 2>/dev/null || true
+bash -c "$(curl -sSL https://gef.blah.cat/sh)" 2>/dev/null || true
+clone https://github.com/Yara-Rules/rules /opt/yara-rules
+# Ghidra
+if ! command -v ghidra &>/dev/null; then
+  curl -sSL "https://github.com/NationalSecurityAgency/ghidra/releases/latest/download/ghidra_11.1_PUBLIC_20240607.zip" \
+    -o /tmp/ghidra.zip 2>/dev/null && \
+    unzip -q /tmp/ghidra.zip -d /opt && \
+    ln -sf /opt/ghidra_*/ghidraRun /usr/local/bin/ghidra && \
+    rm /tmp/ghidra.zip 2>/dev/null || true
+fi
+
+# ── Crypto ────────────────────────────────────────────────────────────────────
+log_section "Cryptography"
+install_apt libgmp-dev libmpfr-dev libmpc-dev
+install_pip pycryptodome hashpumpy cryptography sympy ecdsa gmpy2
+
+# ── Fuzzing ───────────────────────────────────────────────────────────────────
+log_section "Fuzzing"
+install_apt afl++
+install_pip boofuzz
+clone https://gitlab.com/akihe/radamsa /opt/radamsa
+cd /opt/radamsa && make 2>/dev/null && ln -sf /opt/radamsa/bin/radamsa /usr/local/bin/radamsa 2>/dev/null || true
+
+# ── Social Engineering & Phishing ────────────────────────────────────────────
+log_section "Social Engineering & Phishing"
+clone https://github.com/trustedsec/social-engineer-toolkit /opt/setoolkit
+install_pip -r /opt/setoolkit/requirements.txt 2>/dev/null || true
+install_pip o365spray
+clone https://github.com/ustayready/CredSniper /opt/CredSniper
+install_pip -r /opt/CredSniper/requirements.txt 2>/dev/null || true
+clone https://github.com/ryhanson/phishery /opt/phishery
+wget -q "https://github.com/gophish/gophish/releases/download/v0.12.1/gophish-v0.12.1-linux-64bit.zip" \
+  -O /tmp/gophish.zip 2>/dev/null && \
+  unzip -q /tmp/gophish.zip -d /opt/gophish && \
+  chmod +x /opt/gophish/gophish && \
+  ln -s /opt/gophish/gophish /usr/local/bin/gophish && \
+  rm /tmp/gophish.zip 2>/dev/null || true
+install_go github.com/kgretzky/evilginx2@latest 2>/dev/null || true
+
+# ── Hardware & IoT ────────────────────────────────────────────────────────────
+log_section "Hardware & IoT"
+install_apt openocd flashrom avrdude minicom screen
+install_pip bleak pyserial pyModbusTCP
+
+# ── Steganography ─────────────────────────────────────────────────────────────
+log_section "Steganography"
+install_apt steghide sox binwalk exiftool
+install_pip stegoveritas
+install_gem zsteg
+
+# ── VoIP ─────────────────────────────────────────────────────────────────────
+log_section "VoIP"
+install_apt sipvicious rtpbreak pjsua 2>/dev/null || true
+install_pip sipvicious 2>/dev/null || true
+
+# ── Supply Chain & IaC ────────────────────────────────────────────────────────
+log_section "Supply Chain & IaC"
+install_pip checkov
+curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
+curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
+install_go github.com/aquasecurity/trivy@latest 2>/dev/null || true
+curl -sSfL https://raw.githubusercontent.com/wagoodman/dive/main/get-dive.sh | sh 2>/dev/null || true
+
+# ── Container & Kubernetes ────────────────────────────────────────────────────
+log_section "Container & Kubernetes"
+install_go github.com/cdk-team/CDK/cmd/cdk@latest
+curl -sSL https://github.com/stealthcopter/deepce/releases/latest/download/deepce \
+  -o /usr/local/bin/deepce && chmod +x /usr/local/bin/deepce 2>/dev/null || true
+install_go github.com/brompwnie/botb@latest
+install_pip kube-hunter
+
+# ── OSINT Specialized ─────────────────────────────────────────────────────────
+log_section "OSINT Specialized"
+install_pip spiderfoot ghunt crosslinked
+clone https://github.com/m8sec/CrossLinked /opt/CrossLinked
+install_pip -r /opt/CrossLinked/requirements.txt 2>/dev/null || true
+
+# ── AI/LLM Security ───────────────────────────────────────────────────────────
+log_section "AI/LLM Security"
+install_pip garak openai anthropic langchain transformers
+install_npm promptfoo
+
+# ── Purple Team ───────────────────────────────────────────────────────────────
+log_section "Purple Team"
+clone https://github.com/redcanaryco/atomic-red-team /opt/atomic-red-team
+clone https://github.com/mitre/caldera /opt/caldera
+install_pip -r /opt/caldera/requirements.txt 2>/dev/null || true
+
+# ── Nuclei Templates ─────────────────────────────────────────────────────────
+log_section "Nuclei Templates"
+nuclei -update-templates 2>/dev/null || true
+
+# ── PATH & Environment ────────────────────────────────────────────────────────
+log_section "Environment Setup"
+cat >> /etc/profile.d/rtexit-env.sh << 'EOF'
+export PATH="$PATH:/root/go/bin:/usr/local/bin:/opt/rtexit/scripts"
+export SECLISTS='/opt/SecLists'
+export GOPATH='/root/go'
+EOF
+chmod +x /etc/profile.d/rtexit-env.sh
+
+# ── Summary ───────────────────────────────────────────────────────────────────
+echo ""
+echo -e "${GREEN}════════════════════════════════════════════${NC}"
+echo -e "${GREEN}  RTExit Native Install Complete!${NC}"
+echo -e "${GREEN}════════════════════════════════════════════${NC}"
+echo ""
+echo -e "  ${CYAN}Next steps:${NC}"
+echo -e "  1. source /etc/profile.d/rtexit-aliases.sh"
+echo -e "  2. source /etc/profile.d/rtexit-env.sh"
+echo -e "  3. rt-verify   ← check all tools"
+echo -e "  4. rt-help     ← start your engagement"
+echo ""
+echo -e "  ${YELLOW}GPU hashcat:${NC} hashcat with --opencl-device-types 1,2"
+echo -e "  ${YELLOW}WiFi:${NC}        airmon-ng start wlan0"
+echo -e "  ${YELLOW}Bluetooth:${NC}   hciconfig hci0 up"
+echo ""

package/tools/installer/commands/install.js

@@ -1,48 +1,91 @@
-const { renderBanner } = require('../lib/banner');
-const { resolveRepoRoot, resolveTargetRoot } = require('../lib/paths');
-const { copyPackagedAssets } = require('../lib/copy-assets');
-const { writeUserConfig } = require('../lib/write-config');
-const { askInstallQuestions } = require('../lib/prompts');
-const { resolveSkillSet } = require('../lib/profiles');
-
-async function installCommand(options = {}) {
-  const repoRoot = options.repoRoot || resolveRepoRoot();
-  const cwd = options.cwd || process.cwd();
-  const io = options.io || console;
-  const promptAdapter = options.promptAdapter || askInstallQuestions;
-
-  io.log(renderBanner());
-
-  const answers = await promptAdapter({ cwd });
-  if (!answers.confirmed) {
-    io.log('RTExit install cancelled.');
-    return;
-  }
-
-  const targetRoot = resolveTargetRoot(answers.targetDirectory);
-
-  const ides = answers.ides && answers.ides.length ? answers.ides : ['agents'];
-  const allowedSkills = resolveSkillSet(answers.profiles || ['all']);
-  await copyPackagedAssets({ repoRoot, targetRoot, ides, allowedSkills });
-  await writeUserConfig({
-    targetRoot,
-    answers: {
-      language: answers.language,
-      document_output_language: answers.document_output_language,
-    },
-  });
-
-  const ideFolders = ides.map((ide) => {
-    const map = { agents: '.agents/skills', claude: '.claude/skills', trae: '.trae/skills', codex: '.codex/skills' };
-    return map[ide] || `.${ide}/skills`;
-  });
-
-  io.log('RTExit installed successfully.');
-  io.log(`Skills installed: ${allowedSkills.size} skills into ${ideFolders.join(', ')}`);
-  io.log('Next steps:');
-  io.log('1. Open _rtexit/config.user.toml and complete client/project details');
-  io.log('2. Open your AI IDE in this project');
-  io.log('3. Start with rt-help');
-}
-
-module.exports = { installCommand };
+const { renderBanner } = require('../lib/banner');
+const { resolveRepoRoot, resolveTargetRoot } = require('../lib/paths');
+const { copyPackagedAssets } = require('../lib/copy-assets');
+const { writeUserConfig } = require('../lib/write-config');
+const { askInstallQuestions } = require('../lib/prompts');
+const { resolveSkillSet } = require('../lib/profiles');
+const path = require('node:path');
+const fs = require('node:fs');
+
+async function installCommand(options = {}) {
+  const repoRoot = options.repoRoot || resolveRepoRoot();
+  const cwd = options.cwd || process.cwd();
+  const io = options.io || console;
+  const promptAdapter = options.promptAdapter || askInstallQuestions;
+
+  io.log(renderBanner());
+
+  const answers = await promptAdapter({ cwd });
+  if (!answers.confirmed) {
+    io.log('RTExit install cancelled.');
+    return;
+  }
+
+  const targetRoot = resolveTargetRoot(answers.targetDirectory);
+
+  const ides = answers.ides && answers.ides.length ? answers.ides : ['agents'];
+  const allowedSkills = resolveSkillSet(answers.profiles || ['all']);
+  await copyPackagedAssets({ repoRoot, targetRoot, ides, allowedSkills });
+  await writeUserConfig({
+    targetRoot,
+    answers: {
+      language: answers.language,
+      document_output_language: answers.document_output_language,
+    },
+  });
+
+  const ideFolders = ides.map((ide) => {
+    const map = { agents: '.agents/skills', claude: '.claude/skills', trae: '.trae/skills', codex: '.codex/skills' };
+    return map[ide] || `.${ide}/skills`;
+  });
+
+  const dockerComposePath = path.join(targetRoot, 'docker', 'docker-compose.yml');
+  const dockerInstalled = fs.existsSync(dockerComposePath);
+
+  io.log('');
+  io.log('════════════════════════════════════════════');
+  io.log('  RTExit installed successfully!');
+  io.log('════════════════════════════════════════════');
+  io.log('');
+  io.log(`  Skills: ${allowedSkills.size} skills → ${ideFolders.join(', ')}`);
+  io.log('');
+
+  if (dockerInstalled) {
+    io.log('  ┌─ STEP 1: Start the Docker Lab ─────────────────────────────┐');
+    io.log('  │                                                             │');
+    io.log('  │  cd docker                                                  │');
+    io.log('  │  docker compose up -d                                       │');
+    io.log('  │                                                             │');
+    io.log('  │  First run downloads ~4GB image. Subsequent starts: <5s    │');
+    io.log('  └─────────────────────────────────────────────────────────────┘');
+    io.log('');
+    io.log('  ┌─ STEP 2: Enter the Shell ───────────────────────────────────┐');
+    io.log('  │                                                             │');
+    io.log('  │  docker exec -it rtexit-kali bash                          │');
+    io.log('  │                                                             │');
+    io.log('  │  300+ tools ready. Your project is at /workspace           │');
+    io.log('  └─────────────────────────────────────────────────────────────┘');
+    io.log('');
+    io.log('  ┌─ STEP 3: Configure & Start ─────────────────────────────────┐');
+    io.log('  │                                                             │');
+    io.log('  │  1. Edit _rtexit/config.user.toml (client/project info)    │');
+    io.log('  │  2. Open your AI IDE in this directory                     │');
+    io.log('  │  3. Start with: rt-help                                    │');
+    io.log('  │                                                             │');
+    io.log('  └─────────────────────────────────────────────────────────────┘');
+    io.log('');
+    io.log('  Docker README: docker/README.md');
+    io.log('  Build locally: see docker/README.md → "Build Locally" section');
+  } else {
+    io.log('  Next steps:');
+    io.log('  1. Edit _rtexit/config.user.toml with your engagement details');
+    io.log('  2. Open your AI IDE in this project');
+    io.log('  3. Start with rt-help');
+  }
+
+  io.log('');
+  io.log('════════════════════════════════════════════');
+  io.log('');
+}
+
+module.exports = { installCommand };

package/tools/installer/lib/asset-manifest.js

@@ -24,6 +24,7 @@ function getInstallEntries(ides = ['agents'], allowedSkills = null) {
     { type: 'path', value: 'packaged-assets/templates',  target: 'templates'  },
     { type: 'path', value: 'packaged-assets/resources',  target: 'resources'  },
     { type: 'path', value: 'packaged-assets/RTEXIT.md',  target: 'RTEXIT.md'  },
+    { type: 'path', value: 'packaged-assets/docker',     target: 'docker'     },
   ];
 }