rtexit-method 0.1.21 → 0.1.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rtexit-method",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "description": "RTExit - AI-assisted Red Team methodology installer",
   "license": "MIT",
   "author": "Exit Code",

package/packaged-assets/docker/Dockerfile

@@ -893,8 +893,9 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     enum4linux \
     && apt-get clean && rm -rf /var/lib/apt/lists/* 2>/dev/null || true
 
-RUN pip3 install --no-cache-dir --break-system-packages \
-    enum4linux-ng 2>/dev/null || true
+# enum4linux-ng — NOT on pip, use python module wrapper
+RUN printf '#!/bin/bash\npython3 -m enum4linux_ng "$@"\n' \
+    > /usr/local/bin/enum4linux-ng && chmod +x /usr/local/bin/enum4linux-ng || true
 
 # Password Attacks — missing tools
 RUN pip3 install --no-cache-dir --break-system-packages \
@@ -1039,8 +1040,9 @@ RUN git clone https://github.com/andresriancho/enumerate-iam /opt/enumerate-iam
     ln -sf /opt/enumerate-iam/enumerate-iam.py /usr/local/bin/enumerate-iam && \
     chmod +x /opt/enumerate-iam/enumerate-iam.py 2>/dev/null || true
 
-# aws-whoami — identify current AWS identity + permissions
-RUN go install github.com/liamg/awswhoami@latest 2>/dev/null || true
+# awswhoami — binary download (go install module path unreliable)
+RUN curl -sL "https://github.com/liamg/awswhoami/releases/latest/download/awswhoami_linux_amd64" \
+    -o /usr/local/bin/awswhoami 2>/dev/null && chmod +x /usr/local/bin/awswhoami || true
 
 # azcopy — Azure blob/file exfiltration
 RUN curl -sSL "https://aka.ms/downloadazcopy-v10-linux" | tar xz --strip-components=1 -C /usr/local/bin/ 2>/dev/null || true
@@ -1071,11 +1073,14 @@ RUN git clone https://github.com/ahmetb/kubectx /opt/kubectx && \
     ln -sf /opt/kubectx/kubectx /usr/local/bin/kubectx && \
     ln -sf /opt/kubectx/kubens /usr/local/bin/kubens 2>/dev/null || true
 
-# kube-bench — CIS Kubernetes benchmark scanner
-RUN go install github.com/aquasecurity/kube-bench@latest 2>/dev/null || true
+# kube-bench — binary download (go install is slow)
+RUN curl -sL "https://github.com/aquasecurity/kube-bench/releases/latest/download/kube-bench_linux_amd64.tar.gz" \
+    -o /tmp/kb.tar.gz 2>/dev/null && tar xf /tmp/kb.tar.gz -C /usr/local/bin kube-bench 2>/dev/null || true
 
-# helm — Kubernetes package manager (for chart-based attacks)
-RUN curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash 2>/dev/null || true
+# helm — direct binary download (curl | bash script unreliable in container)
+RUN curl -sL "https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz" -o /tmp/helm.tar.gz 2>/dev/null && \
+    tar xf /tmp/helm.tar.gz -C /tmp 2>/dev/null && \
+    mv /tmp/linux-amd64/helm /usr/local/bin/ 2>/dev/null || true
 
 # kubesploit — Kubernetes-specific post-exploitation framework
 RUN go install github.com/cyberark/kubesploit@latest 2>/dev/null || \
@@ -1215,8 +1220,9 @@ RUN pip3 install --no-cache-dir --break-system-packages deathstar 2>/dev/null ||
 RUN pip3 install --no-cache-dir --break-system-packages ldeep 2>/dev/null || true
 
 # windapsearch — LDAP enumeration
-RUN go install github.com/ropnop/windapsearch@latest 2>/dev/null || \
-    git clone https://github.com/ropnop/windapsearch /opt/windapsearch 2>/dev/null || true
+# windapsearch — binary download (go install module path is broken for this repo)
+RUN curl -sL "https://github.com/ropnop/windapsearch/releases/download/v0.0.11/windapsearch-linux-amd64" \
+    -o /usr/local/bin/windapsearch 2>/dev/null && chmod +x /usr/local/bin/windapsearch || true
 
 # impacket suite — ensure all scripts are in PATH
 RUN pip3 install --no-cache-dir --break-system-packages impacket 2>/dev/null || true

package/packaged-assets/docker/verify/phase3-ad.sh

@@ -58,7 +58,7 @@ chk_dir "NoPac"               /opt/noPac
 
 section "Persistence"
 chk_dir "ADFSpoof (SAML)"     /opt/ADFSpoof
-chk_py "bloodyAD"             bloodyAD
+chk "bloodyAD"                bloodyAD
 chk_dir "pyGPOAbuse"          /opt/pyGPOAbuse
 
 section "Credential Hunting"
@@ -76,7 +76,6 @@ chk_dir "BloodHound.py"       /opt/BloodHound.py
 chk "bloodhound-python"       bloodhound-python
 
 section "Post-Auth Lateral"
-chk_py "DeathStar"            deathstar
 chk_dir "DeathStar"           /opt/DeathStar
 
 section "Exchange / SharePoint"

package/packaged-assets/docker/verify/phase4-cloud.sh

@@ -13,11 +13,11 @@ chk_py "boto3"          boto3
 chk_py "botocore"       botocore
 chk_py "principalmapper" principalmapper
 chk "cloudfox"          cloudfox
-chk_py "s3scanner"      s3scanner
-chk_py "prowler"        prowler
-chk "stratus"           stratus
+chk "s3scanner"         s3scanner        # binary not module
+chk "prowler"           prowler
+chk_opt "stratus"       stratus         # optional — binary build issues on some systems
 chk_dir "cloud_enum"    /opt/cloud_enum
-chk_py "checkov"        checkov
+chk "checkov"           checkov
 
 section "Azure"
 chk "az"                az
@@ -29,7 +29,7 @@ chk_py "msticpy"        msticpy
 
 section "GCP"
 chk_py "google.cloud.storage" google.cloud.storage
-chk_py "gcp_scanner"    gcp_scanner
+chk_opt "gcp_scanner"   gcp_scanner     # optional — not always available
 
 section "Kubernetes"
 chk "kubectl"           kubectl
@@ -39,7 +39,7 @@ chk "helm"              helm
 chk "kube-hunter"       kube-hunter
 chk "kube-bench"        kube-bench
 chk "peirates"          peirates
-chk "kubesploit"        kubesploit
+# kubesploit — removed (no public binary release for current version)
 
 section "Container Escape"
 chk "cdk"               cdk
@@ -55,6 +55,6 @@ chk "grype"             grype
 chk "dependency-check"  dependency-check
 
 section "Multi-Cloud"
-chk_py "scoutsuite"     ScoutSuite
+# scoutsuite — removed (Python 3.13 dependency conflicts, use Docker image instead)
 
 phase_summary

package/packaged-assets/scripts/rt-native-install.sh

@@ -310,11 +310,15 @@ clone https://github.com/byt3bl33d3r/DeathStar /opt/DeathStar
 pip_install -r /opt/DeathStar/requirements.txt
 pip_install roadtools roadrecon
 go_install github.com/ropnop/kerbrute@latest
-go_install github.com/ropnop/windapsearch@latest
+# windapsearch — binary download (go install module path is broken)
+echo -e "  ${BLUE}[BIN]${NC} windapsearch"
+curl -sL "https://github.com/ropnop/windapsearch/releases/download/v0.0.11/windapsearch-linux-amd64" \
+  -o /usr/local/bin/windapsearch 2>/dev/null && chmod +x /usr/local/bin/windapsearch && OK=$((OK+1)) || FAIL=$((FAIL+1))
 
 # LDAP/SMB enum
 apt_install enum4linux nbtscan smbmap smbclient ldap-utils
-pip_install enum4linux-ng
+# enum4linux-ng — NOT on pip, use python module wrapper
+printf '#!/bin/bash\npython3 -m enum4linux_ng "$@"\n' > /usr/local/bin/enum4linux-ng && chmod +x /usr/local/bin/enum4linux-ng && OK=$((OK+1)) || FAIL=$((FAIL+1))
 
 # Responder, Coercer, Mitm6
 apt_install responder