rtexit-method 0.1.23 → 0.1.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rtexit-method",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "description": "RTExit - AI-assisted Red Team methodology installer",
   "license": "MIT",
   "author": "Exit Code",

package/packaged-assets/.agents/skills/rt-exploit-cloud-aws/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rt-exploit-cloud-aws
-description: "AWS Red Team exploitation skill. Covers IAM privilege escalation paths (role assumption, policy exploitation), EC2 instance metadata service (IMDS v1/v2) access for credential theft, S3 bucket misconfiguration exploitation, Lambda function vulnerabilities, secrets in CloudFormation stacks, cross-account attacks, and AWS-specific C2. Tools: Pacu, ScoutSuite, aws-cli, CloudFox."
+description: "AWS Red Team exploitation skill. Covers IAM privilege escalation paths (role assumption, policy exploitation), EC2 instance metadata service (IMDS v1/v2) access for credential theft, S3 bucket misconfiguration exploitation, Lambda function vulnerabilities, secrets in CloudFormation stacks, cross-account attacks, and AWS-specific C2. Tools: Pacu, aws-cli, CloudFox, prowler, enumerate-iam, awswhoami. Note: ScoutSuite requires separate Docker image (Python 3.13 conflict)."
 ---
 
 # rt-exploit-cloud-aws — AWS Red Team Exploitation
@@ -67,9 +67,15 @@ python pacu.py
 
 ### 2.3 ScoutSuite (Multi-Cloud Auditing)
 
+> ⚠️ **Note:** ScoutSuite has Python 3.13 dependency conflicts. Run via Docker instead:
+
 ```bash
-pip3 install scoutsuite
-scout aws --profile target --report-dir ./scoutsuite-report
+# Option A: Run ScoutSuite via its own Docker image
+docker run -it --rm -v ~/.aws:/root/.aws rossja/ncc-scoutsuite \
+  scout aws --profile target --report-dir /tmp/scoutsuite-report
+
+# Option B: Use prowler as alternative (installed in rtexit-kali)
+prowler aws -f us-east-1 --output-directory ./prowler-report
 ```
 
 ### 2.4 CloudFox (Cloud Privilege Escalation Discovery)

package/packaged-assets/.agents/skills/rt-exploit-cloud-gcp/SKILL.md

@@ -68,8 +68,8 @@ sudo ln -s /opt/cloudfox/cloudfox /usr/local/bin/cloudfox
 # GCP IAM Privilege Escalation scripts (Rhino Security Labs)
 git clone https://github.com/RhinoSecurityLabs/GCP-IAM-Privilege-Escalation.git /opt/gcp-privesc
 
-# ScoutSuite — multi-cloud auditing (useful for gap analysis)
-pip3 install scoutsuite
+# ScoutSuite — run via Docker (Python 3.13 conflict in rtexit-kali)
+# docker run -it --rm rossja/ncc-scoutsuite scout gcp --project <project-id>
 
 # gcp_scanner — Google's own attack surface scanner
 pip3 install gcp-scanner