Subsystem: modules (page 3 of 14)

Previous: KB_modules_p2.md

modules/cli_auth.py

• Doc: CLI authentication module — login against users.json with remember-me.
• Layer: utility
• Language: py
• Symbols:
  • _load_users (function, line 34) def _load_users()
  • _save_users (function, line 52) def _save_users(users)
  • _load_payload (function, line 85) def _load_payload()
  • _save_payload (function, line 100) def _save_payload(payload)
  • user_exists (function, line 122) def user_exists(username)
  • register (function, line 145) def register(username, password)
  • verify_password (function, line 214) def verify_password(username, password)
  • login (function, line 240) def login(username, password, remember)
  • logout (function, line 293) def logout()
  • try_auto_login (function, line 328) def try_auto_login()
  • whoami (function, line 366) def whoami()
  • get_current_operator (function, line 396) def get_current_operator()
  • sync_elo_from_session (function, line 408) def sync_elo_from_session(elo)
  • _read_cli_session (function, line 429) def _read_cli_session()
  • _write_cli_session (function, line 444) def _write_cli_session(username, elo, role)
  • _write_cli_session_raw (function, line 462) def _write_cli_session_raw(data)
  • _clear_cli_session (function, line 478) def _clear_cli_session()
  • needs_login (function, line 487) def needs_login()
• Depends on: cli/engagement_hooks.py, core/config.py, modules/lazy_rbac.py
• Imported by: cli/auto_crypto.py, cli/banner_config.py, cli/commands/cli_auth.py, cli/engagement_hooks.py, cli/tips_engine.py, cli/wizard.py, lazyown.py, modules/redteam_gym.py, tests/test_cli_auth_remember.py, tests/test_engagement_elo_and_methodology.py

modules/cloud_enum.py

• Doc: Native cloud enumeration modules for AWS, Azure, and GCP.
• Layer: utility
• Language: py
• Symbols:
  • CloudEnumerator (class, line 23) class CloudEnumerator
  • __init__ (method, line 34) def __init__(self, provider, session, timeout)
  • detect_provider (method, line 47) def detect_provider(self)
  • enumerate_metadata (method, line 75) def enumerate_metadata(self)
  • _enumerate_aws_metadata (method, line 96) def _enumerate_aws_metadata(self)
  • _enumerate_azure_metadata (method, line 146) def _enumerate_azure_metadata(self)
  • _enumerate_gcp_metadata (method, line 193) def _enumerate_gcp_metadata(self)
  • enumerate_storage (method, line 251) def enumerate_storage(self, target_bucket)
  • _enumerate_s3 (method, line 274) def _enumerate_s3(self, target_bucket)
  • _enumerate_azure_storage (method, line 316) def _enumerate_azure_storage(self, target_bucket)
  • _enumerate_gcs (method, line 350) def _enumerate_gcs(self, target_bucket)
  • enumerate_iam (method, line 372) def enumerate_iam(self)
  • _enumerate_aws_iam (method, line 390) def _enumerate_aws_iam(self)
  • _enumerate_azure_iam (method, line 421) def _enumerate_azure_iam(self)
  • _enumerate_gcp_iam (method, line 477) def _enumerate_gcp_iam(self)
  • _check_aws_privesc (method, line 526) def _check_aws_privesc(data)
  • full_enumeration (method, line 576) def full_enumeration(self)
• Imported by: cli/commands/cloud.py

modules/collab_bp.py

• Doc: modules/collab_bp.py
• Layer: presentation
• Language: py
• Symbols:
  • _authenticated_operator (function, line 90) def _authenticated_operator()
  • _check_collab_permission (function, line 100) def _check_collab_permission(perm_name)
  • _collab_login_required (function, line 120) def _collab_login_required(f)
  • _collab_permission_required (function, line 136) def _collab_permission_required(perm_name)
  • ColabEvent (class, line 163) class ColabEvent
  • OperatorInfo (class, line 176) class OperatorInfo
  • EventBus (class, line 188) class EventBus
  • TargetLock (class, line 250) class TargetLock
  • LockManager (class, line 257) class LockManager
  • OperatorRegistry (class, line 314) class OperatorRegistry
  • get_event_bus (function, line 370) def get_event_bus()
  • get_lock_manager (function, line 374) def get_lock_manager()
  • get_operator_registry (function, line 378) def get_operator_registry()
  • publish_event (function, line 382) def publish_event(type, payload, operator)
  • collab_ui (function, line 396) def collab_ui()
  • stream (function, line 411) def stream()
  • operators (function, line 458) def operators()
  • publish (function, line 470) def publish()
  • lock (function, line 483) def lock()
  • unlock (function, line 504) def unlock()
  • locks (function, line 522) def locks()
  • history (function, line 537) def history()
  • decorated (function, line 124) def decorated()
  • decorator (function, line 139) def decorator(f)
  • to_sse (method, line 170) def to_sse(self)
  • __init__ (method, line 198) def __init__(self)
  • subscribe (method, line 203) def subscribe(self, subscriber_id)
  • unsubscribe (method, line 215) def unsubscribe(self, subscriber_id)
  • publish (method, line 219) def publish(self, event)
  • recent (method, line 234) def recent(self, n)
  • reset (method, line 238) def reset(self)
  • __init__ (method, line 263) def __init__(self)
  • acquire (method, line 267) def acquire(self, target, operator, ttl_secs)
  • release (method, line 279) def release(self, target, operator)
  • status (method, line 287) def status(self, target)
  • all_locks (method, line 292) def all_locks(self)
  • _expire (method, line 297) def _expire(self)
  • reset (method, line 304) def reset(self)
  • __init__ (method, line 319) def __init__(self)
  • join (method, line 323) def join(self, name)
  • heartbeat (method, line 334) def heartbeat(self, name)
  • leave (method, line 340) def leave(self, name)
  • active_operators (method, line 345) def active_operators(self)
  • _expire (method, line 350) def _expire(self)
  • reset (method, line 356) def reset(self)
  • generate (function, line 424) def generate()
  • login_required (function, line 80) def login_required(f)
  • decorated (function, line 141) def decorated()
  • decorated (function, line 84) def decorated()
• Depends on: core/logging.py, modules/lazy_rbac.py
• Imported by: cli/commands/collaboration.py, lazyc2.py, modules/engagement_hooks.py, modules/event_bus.py, skills/lazyown_mcp.py, tests/test_collab_and_onboarding.py, tests/test_core_modules.py

modules/colors.py

• Doc: retModel: gemma2-9b-it Google 8,192 - - llama-3.3-70b-versatile Meta 128k...
• Layer: utility
• Language: py
• Symbols:
  • retModel (function, line 40) def retModel()
  • delete_lines (function, line 68) def delete_lines(content, to_delete)
  • no_html (function, line 74) def no_html(content)
• Imported by: contrib/legacy/lazygptcli.py, contrib/legacy/lazygptcli_unified.py, contrib/legacy/lazyproxy.py, contrib/legacy/lazyseo.py, lazyc2.py, modules/llm_prompts.py, static/js/xterm.js

modules/command_executor.py

• Doc: UnifiedCommandExecutor — shared shell command execution service.
• Layer: utility
• Language: py
• Symbols:
  • set_thread_timeout (function, line 41) def set_thread_timeout(seconds)
  • clear_thread_timeout (function, line 46) def clear_thread_timeout()
  • thread_timeout (function, line 54) def thread_timeout()
  • set_thread_stdin_devnull (function, line 59) def set_thread_stdin_devnull(enabled)
  • clear_thread_stdin_devnull (function, line 64) def clear_thread_stdin_devnull()
  • thread_stdin_devnull (function, line 72) def thread_stdin_devnull()
  • _kill_process_group (function, line 77) def _kill_process_group(proc)
  • ExecutionResult (class, line 97) class ExecutionResult
  • CommandExecutor (class, line 106) class CommandExecutor
  • get_executor (function, line 426) def get_executor()
  • __init__ (method, line 118) def __init__(self)
  • instance (method, line 122) def instance(cls)
  • add_hook (method, line 127) def add_hook(self, hook)
  • run (method, line 131) def run(self, command, timeout, stream)
  • _needs_shell (method, line 165) def _needs_shell(self, command)
  • _argv (method, line 173) def _argv(self, command)
  • run_passthrough (method, line 179) def run_passthrough(self, command, env)
  • run_tee (method, line 194) def run_tee(self, command)
  • _default_writer (method, line 291) def _default_writer(line)
  • _run_capture (method, line 296) def _run_capture(self, command, timeout)
  • _run_stream (method, line 321) def _run_stream(self, command, timeout)
  • run_with_tee (method, line 358) def run_with_tee(self, command, output_path, timeout)
  • _fire_hooks (method, line 394) def _fire_hooks(self, result)
  • _publish_event (method, line 401) def _publish_event(self, result)
• Depends on: core/logging.py, core/safe_exec.py, modules/auto_registry.py, modules/event_bus.py
• Imported by: lazyown.py, modules/auto_registry.py, tests/test_executor_kernel.py, tests/test_lazy_runner.py

modules/compliance.py

• Doc: modules/compliance.py
• Layer: utility
• Language: py
• Symbols:
  • EvidenceEntry (class, line 340) class EvidenceEntry
  • EvidenceChain (class, line 349) class EvidenceChain
  • export_pdf (function, line 449) def export_pdf(report_md, output_path, title, classification)
  • export_to_elastic_ndjson (function, line 533) def export_to_elastic_ndjson(findings, output_path, index_prefix)
  • export_to_cef (function, line 572) def export_to_cef(findings, output_path, vendor, product, version)
  • ComplianceFinding (class, line 620) class ComplianceFinding
  • ComplianceEngine (class, line 632) class ComplianceEngine
  • __init__ (method, line 357) def __init__(self, sessions_dir)
  • _load (method, line 364) def _load(self)
  • _hash_entry (method, line 379) def _hash_entry(self, entry)
  • add_file (method, line 383) def add_file(self, filepath, operator, description)
  • _append_to_file (method, line 403) def _append_to_file(self, entry)
  • verify (method, line 410) def verify(self)
  • get_chain_digest (method, line 429) def get_chain_digest(self)
  • to_report (method, line 432) def to_report(self)
  • __init__ (method, line 635) def __init__(self, sessions_dir)
  • map_findings_to_compliance (method, line 639) def map_findings_to_compliance(self, findings, frameworks)
  • generate_compliance_report (method, line 710) def generate_compliance_report(self, findings, include_evidence_chain, include_siem_formats)
  • _count_by_severity (method, line 765) def _count_by_severity(self, findings)
  • _count_by_category (method, line 772) def _count_by_category(self, findings)
  • _load_findings (method, line 779) def _load_findings(self)
  • export_pdf (method, line 831) def export_pdf(self, report, output_path)
  • _format_compliance_report_md (method, line 835) def _format_compliance_report_md(self, report)
  • add_evidence (method, line 901) def add_evidence(self, filepath, operator, description)
  • verify_evidence_chain (method, line 904) def verify_evidence_chain(self)
• Depends on: core/logging.py
• Imported by: lazyc2.py

modules/conditional_hooks.py

• Doc: Conditional Hooks System for LazyOwn (Mythic-style triggers).
• Layer: utility
• Language: py
• Symbols:
  • HookRule (class, line 45) class HookRule
  • HookEngine (class, line 258) class HookEngine
  • get_hook_engine (function, line 586) def get_hook_engine()
  • can_fire (method, line 56) def can_fire(self, now)
  • mark_fired (method, line 65) def mark_fired(self)
  • to_dict (method, line 69) def to_dict(self)
  • __init__ (method, line 270) def __init__(self)
  • register_action_handler (method, line 277) def register_action_handler(self, action_type, handler)
  • set_placeholders (method, line 286) def set_placeholders(self, placeholders)
  • load_rules (method, line 290) def load_rules(self, path)
  • save_rules (method, line 322) def save_rules(self, path)
  • add_rule (method, line 330) def add_rule(self, rule_dict)
  • remove_rule (method, line 345) def remove_rule(self, name)
  • enable_rule (method, line 359) def enable_rule(self, name, enabled)
  • _match_trigger (method, line 369) def _match_trigger(self, rule_trigger, event, context)
  • _resolve_placeholders (method, line 414) def _resolve_placeholders(self, text, context)
  • _execute_action (method, line 428) def _execute_action(self, action, context)
  • _execute_shell_command (method, line 467) def _execute_shell_command(self, command, context)
  • _execute_local_command (method, line 476) def _execute_local_command(command)
  • _execute_cred_reuse (method, line 500) def _execute_cred_reuse(self, context)
  • fire (method, line 516) def fire(self, event, context)
  • list_rules (method, line 571) def list_rules(self)
  • get_rule (method, line 575) def get_rule(self, name)
• Depends on: core/logging.py, core/safe_exec.py, modules/credential_reuse.py, modules/state_manager.py
• Imported by: cli/commands/automation.py, lazyc2.py, lazyc2/blueprints/beacon.py, tests/test_conditional_hooks_extended.py

modules/config_store.py

• Doc: Thread-safe singleton facade over core.config for payload.json.
• Layer: data_access
• Language: py
• Symbols:
  • init (function, line 36) def init(path, watch)
  • get_config (function, line 53) def get_config(key, default)
  • set_config (function, line 66) def set_config()
  • set_config_dict (function, line 80) def set_config_dict(updates)
  • reload_config (function, line 90) def reload_config()
  • stop_watcher (function, line 96) def stop_watcher()
  • _ensure_loaded (function, line 106) def _ensure_loaded()
  • _load (function, line 113) def _load()
  • _persist (function, line 131) def _persist()
  • _start_watcher (function, line 143) def _start_watcher(interval)
  • _watch_loop (function, line 148) def _watch_loop()
• Depends on: core/config.py, core/logging.py
• Imported by: tests/test_core_modules.py

modules/credential_reuse.py

• Doc: Credential Reuse Engine for LazyOwn.
• Layer: utility
• Language: py
• Symbols:
  • ReuseCandidate (class, line 32) class ReuseCandidate
  • CredentialReuseEngine (class, line 55) class CredentialReuseEngine
  • get_credential_reuse_engine (function, line 358) def get_credential_reuse_engine()
  • to_dict (method, line 43) def to_dict(self)
  • __init__ (method, line 80) def __init__(self)
  • _load_cache (method, line 85) def _load_cache(self)
  • _save_cache (method, line 95) def _save_cache(self)
  • mark_failed (method, line 107) def mark_failed(self, username, password, host)
  • mark_confirmed (method, line 112) def mark_confirmed(self, username, password, host)
  • _subnet_distance (method, line 118) def _subnet_distance(self, ip_a, ip_b)
  • _score_candidate (method, line 144) def _score_candidate(self, username, password, source_host, target_host, target_services)
  • _build_command (method, line 196) def _build_command(self, username, password, host, target_services)
  • rank (method, line 226) def rank(self, hosts, creds, host_services, limit)
  • suggest_from_state_manager (method, line 278) def suggest_from_state_manager(self, state_manager, limit)
  • suggest_from_world_model (method, line 308) def suggest_from_world_model(self, world_model, limit)
  • get_summary (method, line 338) def get_summary(self, candidates)
• Depends on: core/logging.py
• Imported by: cli/commands/automation.py, lazyc2.py, lazyc2/blueprints/beacon.py, modules/conditional_hooks.py

modules/cross_cloud.py

• Doc: Cross-cloud identity paths — multi-cloud identity federation abuse.
• Layer: utility
• Language: py
• Symbols:
  • CrossCloudConfig (class, line 30) class CrossCloudConfig
  • CrossCloudAttackEngine (class, line 54) class CrossCloudAttackEngine
  • __init__ (method, line 64) def __init__(self, config)
  • azure_saml_to_aws (method, line 67) def azure_saml_to_aws(self)
  • gcp_oidc_to_azure (method, line 104) def gcp_oidc_to_azure(self)
  • aws_oidc_to_gcp (method, line 133) def aws_oidc_to_gcp(self)
  • multi_cloud_imds_harvesting (method, line 167) def multi_cloud_imds_harvesting(self)
  • entra_id_to_gcp_workforce_federation (method, line 204) def entra_id_to_gcp_workforce_federation(self)
  • detect_cross_cloud_federation (method, line 234) def detect_cross_cloud_federation(self)
  • summary (method, line 258) def summary(self)
• Imported by: cli/commands/cloud_attacks.py

modules/custom_tools.py

• Doc: Operator-defined custom tools exposed to the autonomous loop.
• Layer: utility
• Language: py
• Symbols:
  • _store_file (function, line 30) def _store_file()
  • _load (function, line 37) def _load()
  • _save (function, line 45) def _save(payload)
  • add_tool (function, line 52) def add_tool(name, kind, target, description, method, body, timeout, trigger)
  • remove_tool (function, line 97) def remove_tool(name)
  • list_tools (function, line 109) def list_tools()
  • get_tool (function, line 114) def get_tool(name)
  • _trigger_tokens (function, line 122) def _trigger_tokens(raw)
  • match_tools (function, line 128) def match_tools(text, limit)
  • run_tool (function, line 151) def run_tool(name, arg, on_output)
  • _run_http (function, line 179) def _run_http(tool, arg, on_output)
• Depends on: modules/auto_registry.py, modules/lazy_loop.py, modules/notify.py
• Imported by: cli/commands/lazyops.py, modules/lazy_loop.py, modules/lazy_runner.py, tests/test_lazy_loop.py

modules/cve_matcher.py

• Doc: modules/cve_matcher.py
• Layer: utility
• Language: py
• Symbols:
  • CVEResult (class, line 51) class CVEResult
  • CVEMatcher (class, line 60) class CVEMatcher
  • get_matcher (function, line 198) def get_matcher()
  • search (function, line 206) def search(product, version, max_results)
  • __init__ (method, line 70) def __init__(self, api_key, cache_dir)
  • search (method, line 82) def search(self)
  • search_by_cpe (method, line 89) def search_by_cpe(self, cpe_name, max_results)
  • _cache_path (method, line 95) def _cache_path(self, params)
  • _load_cache (method, line 100) def _load_cache(self, params)
  • _save_cache (method, line 112) def _save_cache(self, params, results)
  • _rate_limit (method, line 121) def _rate_limit(self)
  • _query (method, line 128) def _query(self)
• Depends on: core/logging.py
• Imported by: skills/lazyown_mcp.py, tests/test_core_modules.py

modules/dacl_abuse.py

• Doc: DACL/SACL abuse module — ACL manipulation for AD privilege escalation.
• Layer: utility
• Language: py
• Symbols:
  • ACEntry (class, line 67) class ACEntry
  • ACLTarget (class, line 91) class ACLTarget
  • DACLAbuseEngine (class, line 113) class DACLAbuseEngine
  • __init__ (method, line 136) def __init__(self, domain, domain_sid, acl_data)
  • parse_bloodhound_acls (method, line 143) def parse_bloodhound_acls(self, edges)
  • parse_raw_aces (method, line 182) def parse_raw_aces(self, raw_nthashes)
  • compute_attack_chains (method, line 224) def compute_attack_chains(self)
  • adminsdholder_abuse_plan (method, line 291) def adminsdholder_abuse_plan(self, target_sid)
  • dcsync_rights_assignment_plan (method, line 318) def dcsync_rights_assignment_plan(self, target_sid, domain_dn)
  • owner_takeover_plan (method, line 348) def owner_takeover_plan(self, target_dn, attacker_sid)
  • _is_dangerous_ace (method, line 379) def _is_dangerous_ace(ace)
  • _calculate_severity (method, line 384) def _calculate_severity(target)
  • _guess_object_type (method, line 397) def _guess_object_type(dn)
  • _extract_cn (method, line 414) def _extract_cn(dn)
  • summary (method, line 418) def summary(self)
• Imported by: cli/commands/active_directory.py

modules/dashboard_bp.py

• Doc: modules/dashboard_bp.py
• Layer: presentation
• Language: py
• Symbols:
  • _require_login (function, line 30) def _require_login()
  • _read_jsonl (function, line 71) def _read_jsonl(path, last_n)
  • _read_json (function, line 93) def _read_json(path)
  • _count_lines (function, line 103) def _count_lines(path)
  • _aggregate_data (function, line 113) def _aggregate_data()
  • dashboard_index (function, line 778) def dashboard_index()
  • dashboard_api_data (function, line 784) def dashboard_api_data()
  • _read_loot_lines (function, line 800) def _read_loot_lines(pattern)
  • _read_loot (function, line 817) def _read_loot()
  • dashboard_loot (function, line 902) def dashboard_loot()
  • _normalize_ts (function, line 913) def _normalize_ts(raw)
  • _read_timeline (function, line 934) def _read_timeline()
  • dashboard_timeline (function, line 1017) def dashboard_timeline()
• Imported by: lazyc2.py, tests/test_core_modules.py, tests/test_dashboard_routes.py

modules/dashboard_engine.py

• Doc: Live Network Map Dashboard for LazyOwn.
• Layer: utility
• Language: py
• Symbols:
  • _parse_nmap_xml_services (function, line 39) def _parse_nmap_xml_services(sessions_dir)
  • DashboardNode (class, line 99) class DashboardNode
  • DashboardEdge (class, line 111) class DashboardEdge
  • DashboardEngine (class, line 118) class DashboardEngine
  • __init__ (method, line 139) def __init__(self, world_model)
  • set_world_model (method, line 148) def set_world_model(self, model)
  • set_exploit_recommender (method, line 151) def set_exploit_recommender(self, recommender)
  • set_auto_pivot (method, line 154) def set_auto_pivot(self, pivot)
  • set_evasion_engine (method, line 157) def set_evasion_engine(self, evasion)
  • build_snapshot (method, line 160) def build_snapshot(self)
  • render_text_map (method, line 276) def render_text_map(self, snapshot)
  • render_ascii_topology (method, line 358) def render_ascii_topology(self, snapshot)
  • _phase_icon (method, line 398) def _phase_icon(phase)
  • export_json (method, line 408) def export_json(self, snapshot)
  • persist_snapshot (method, line 421) def persist_snapshot(self, snapshot)
  • format_for_cli (method, line 438) def format_for_cli(self, snapshot)
• Imported by: cli/commands/pwn.py, modules/rich_tui.py, modules/unified_dashboard.py, skills/lazyown_mcp.py

modules/db.py

• Doc: SQLite database layer for LazyOwn -- hosts, services, vulns, loot, creds, notes.
• Layer: utility
• Language: py
• Symbols:
  • LazyOwnDB (class, line 147) class LazyOwnDB
  • get_db (function, line 821) def get_db(db_path)
  • __init__ (method, line 159) def __init__(self, db_path)
  • _get_conn (method, line 171) def _get_conn(self)
  • db_path (method, line 182) def db_path(self)
  • _init_schema (method, line 186) def _init_schema(self)
  • _current_version (method, line 192) def _current_version(self)
  • _run_migrations (method, line 197) def _run_migrations(self)
  • migration_status (method, line 222) def migration_status(self)
  • _cursor (method, line 235) def _cursor(self)
  • _maybe_encrypt (method, line 251) def _maybe_encrypt(self, value)
  • _maybe_decrypt (method, line 273) def _maybe_decrypt(self, value)
  • workspace_create (method, line 292) def workspace_create(self, name, description)
  • workspace_list (method, line 307) def workspace_list(self)
  • workspace_get (method, line 313) def workspace_get(self, name)
  • default_workspace (method, line 320) def default_workspace(self, name)
  • workspace_delete (method, line 333) def workspace_delete(self, name)
  • host_add (method, line 357) def host_add(self, workspace_id, address, mac, hostname, os, state)
  • host_delete (method, line 390) def host_delete(self, host_id)
  • host_list (method, line 401) def host_list(self, workspace_id)
  • host_find (method, line 410) def host_find(self, workspace_id, query)
  • service_add (method, line 427) def service_add(self, host_id, port, protocol, state, name, product, version)
  • service_list (method, line 447) def service_list(self, host_id)
  • vuln_add (method, line 460) def vuln_add(self, host_id, name, severity, description, refs)
  • vuln_get (method, line 478) def vuln_get(self, vuln_id)
  • vuln_update (method, line 490) def vuln_update(self, vuln_id, refs, severity, description)
  • vuln_list (method, line 528) def vuln_list(self, workspace_id, severity)
  • cred_add (method, line 557) def cred_add(self, host_id, username, password, realm, cred_type, origin)
  • cred_list (method, line 577) def cred_list(self, workspace_id)
  • loot_add (method, line 596) def loot_add(self, workspace_id, name, loot_type, path, notes, host_id)
  • loot_list (method, line 615) def loot_list(self, workspace_id)
  • note_add (method, line 631) def note_add(self, workspace_id, data, note_type, host_id)
  • note_list (method, line 648) def note_list(self, workspace_id)
  • import_nmap_xml (method, line 664) def import_nmap_xml(self, workspace_id, xml_path)
  • export_csv (method, line 740) def export_csv(self, table, workspace_id)
  • status (method, line 775) def status(self, workspace_id)
  • close (method, line 804) def close(self)
• Depends on: core/config.py, core/crypto.py, core/logging.py
• Imported by: cli/commands/campaign.py, cli/commands/collaboration.py, cli/commands/database.py, lazyc2/blueprints/api_v1.py, modules/autonomous_exploit_engine.py, modules/estorides_importer.py, modules/hash_cracker.py, modules/integrations/nuclei_parser.py, modules/opsec_scorer.py, modules/state_manager.py, scripts/devtools/core_smoke.py, skills/autonomous_daemon.py, skills/lazyown_mcp.py, tests/test_api_v1.py, tests/test_autonomous_ops.py, tests/test_daemon_loop.py, tests/test_db.py, tests/test_mutation_verification.py, tests/test_security_hardening.py

modules/delegation_attacks.py

• Doc: Active Directory delegation enumeration and abuse.
• Layer: utility
• Language: py
• Symbols:
  • DelegationTarget (class, line 32) class DelegationTarget
  • DelegationAttackPath (class, line 63) class DelegationAttackPath
  • DelegationEnumerator (class, line 85) class DelegationEnumerator
  • __init__ (method, line 98) def __init__(self, domain, raw_ldap_output)
  • enumerate_from_uac_flags (method, line 104) def enumerate_from_uac_flags(self, accounts)
  • parse_bloodhound_output (method, line 151) def parse_bloodhound_output(self, bloodhound_json)
  • find_unconstrained_targets (method, line 181) def find_unconstrained_targets(self)
  • find_constrained_targets (method, line 189) def find_constrained_targets(self)
  • find_rbcd_targets (method, line 197) def find_rbcd_targets(self)
  • find_dc_targets (method, line 205) def find_dc_targets(self)
  • compute_attack_paths (method, line 215) def compute_attack_paths(self)
  • summary (method, line 296) def summary(self)
• Imported by: cli/commands/active_directory.py

modules/detailed_search.py

• Doc: Autor: Gris Iscomeback Correo electrónico: grisiscomeback[at]gmail[dot]com Fecha de creación...
• Layer: utility
• Language: py
• Symbols:
  • obtener_informacion (function, line 40) def obtener_informacion(url)

modules/detection_feed.py

• Doc: Dynamic detection feed for the Detection Oracle.
• Layer: utility
• Language: py
• Symbols:
  • FeedResult (class, line 64) class FeedResult
  • DetectionFeed (class, line 73) class DetectionFeed
  • get_feed (function, line 326) def get_feed()
  • __init__ (method, line 83) def __init__(self, cache_dir, sources)
  • update_rules (method, line 92) def update_rules(self, source)
  • _parse_sigma_feed (method, line 125) def _parse_sigma_feed(self, text)
  • _extract_log_source (method, line 172) def _extract_log_source(self, doc)
  • _extract_mitre (method, line 180) def _extract_mitre(self, doc)
  • _extract_keywords (method, line 189) def _extract_keywords(self, doc)
  • _extract_categories (method, line 206) def _extract_categories(self, doc)
  • _cache_rules (method, line 219) def _cache_rules(self, rules, source)
  • load_cached_rules (method, line 246) def load_cached_rules(self, source)
  • adjust_from_feedback (method, line 270) def adjust_from_feedback(self, feedback_file)
• Depends on: core/logging.py, modules/detection_oracle.py
• Imported by: modules/detection_oracle.py, tests/test_detection_feed.py

modules/detection_oracle.py

• Doc: modules/detection_oracle.py
• Layer: utility
• Language: py
• Symbols:
  • SigmaRule (class, line 50) class SigmaRule
  • DetectionAssessment (class, line 63) class DetectionAssessment
  • IDetectionOracle (class, line 90) class IDetectionOracle(ABC)
  • DetectionOracle (class, line 317) class DetectionOracle(IDetectionOracle)
  • get_oracle (function, line 478) def get_oracle()
  • is_high_risk (method, line 75) def is_high_risk(self)
  • is_critical_risk (method, line 80) def is_critical_risk(self)
  • assess (method, line 94) def assess(self, command, args, action_category)
  • probability (method, line 103) def probability(self, command, args, action_category)
  • __init__ (method, line 332) def __init__(self, rules, feed)
  • refresh (method, line 336) def refresh(self)
  • assess (method, line 371) def assess(self, command, args, action_category)
  • probability (method, line 392) def probability(self, command, args, action_category)
  • _match_rules (method, line 397) def _match_rules(self, text, action_category)
  • _effective_probability (method, line 417) def _effective_probability(rule, action_category)
  • _aggregate_probability (method, line 427) def _aggregate_probability(self, matched, action_category)
  • _build_recommendation (method, line 444) def _build_recommendation(probability, matched, action_category)
• Depends on: core/logging.py, modules/detection_feed.py
• Imported by: modules/auto_purple.py, modules/detection_feed.py, modules/loop_ai_bridge.py, skills/autonomous_daemon.py, skills/lazyown_policy.py, skills/swan_agent.py, tests/test_detection_feed.py, tests/test_loop_ai_bridge.py, tests/test_moe_rl_swan.py

Next: KB_modules_p4.md