Skip to content

Documentation Export: Auto-generated Knowledge Base - #209

Closed
grisuno wants to merge 1102 commits into
mainfrom
docs-export
Closed

Documentation Export: Auto-generated Knowledge Base#209
grisuno wants to merge 1102 commits into
mainfrom
docs-export

Conversation

@grisuno

@grisuno grisuno commented Jul 31, 2026

Copy link
Copy Markdown
Owner

Automated documentation export generated on 2026-07-31 02:24:24.

This PR adds KNOWLEDGE_BASE.md to the root and docs/KNOWLEDGE_BASE.md.

Each run replaces this branch (and closes any previous PR using the same head), so only the latest snapshot is open at any time.

Generated by readmenator_orchestrator.py.

grisuno and others added 30 commits April 27, 2026 00:53
feat: add TopoSwarm AI router addon
…unavailable

Integrates the TopoSwarm 2M-param quaternionic router as a zero-dependency
local brain for LazyOwn. When Groq, Ollama, and Claude Code are all absent,
TopoSwarm routes operator NL prompts to LazyOwn tools using a trained neural
routing head or keyword fallback (93% accuracy on common pentesting prompts).

New file
--------
modules/toposwarm_bridge.py
  - TopoSwarmBridge: lazy-loads model + RoutingHead on first use (zero cost
    when cloud LLMs are available)
  - route(prompt) → RoutedCall with tool_name, arg, confidence, backend
  - 80+ keyword/regex patterns covering all LazyOwn tool categories
  - Neural routing via RoutingHead (d_model→80 classes) when model loaded
  - execute_via_orchestrator(): runs the full TopoSwarm pipeline as subprocess
  - get_bridge() module-level singleton

Modified files
--------------
modules/hive_invoke.py
  - When claude binary not found: _run_toposwarm_mode() autonomous loop
    instead of fatal error
  - Loop runs 1-8 iterations (effort level) routing NL → tool → execute
  - Falls back gracefully with actionable error if TopoSwarm also absent

modules/moe_router.py
  - Added toposwarm_local ExpertProfile to _DEFAULT_EXPERTS
    capabilities: all task types, cost_tier=0, latency=200ms
  - ExpertAvailabilityChecker.is_available() handles backend=="toposwarm"

modules/ai_fallback.py
  - Extended fallback chain: Groq → Ollama → TopoSwarm → helpful error
  - _toposwarm_call() tries TopoSwarm orchestrator as level-3 fallback

skills/lazyown_daemon.py
  - Role 4: toposwarm_keepalive_loop() starts and monitors the TopoSwarm
    MCP process as asyncio subprocess with exponential backoff restart
  - Writes PID to sessions/toposwarm.pid
  - Updates daemon_status.json with toposwarm_pid field

Tested
------
- 15-prompt routing test: 14/15 correct (93%)
- hive fallback with mocked claude=None: routes and executes correctly
- Syntax-clean: all 5 files pass ast.parse()

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
feat: TopoSwarm local brain — zero-dependency fallback for hive mind
…warm

Adds the `toposwarm` lazyaddon that drives LazyOwn through a full
pentest kill-chain autonomously using TopoSwarm as the local AI router.
Zero dependency on Groq, Ollama, or Claude Code.

New files
---------
skills/toposwarm_autonomous.py
  - AutonomousAgent: 8-phase kill-chain loop (INIT→RECON→ENUM→VULN→
    EXPLOIT→POST→LATERAL→REPORT)
  - PentestState: tracks open_ports, services, credentials, shells,
    vulns across phases with JSON persistence
  - Phase-aware goal generation: adapts enumeration targets based on
    discovered services (SMB/LDAP/web/FTP)
  - ReactiveEngine integration: parses tool output for signals (creds,
    shells, new hosts) and updates state in real-time
  - ReAct-style loop: route NL goal → execute via TopoSwarm bridge →
    parse output → decide next goal
  - Effort levels: low(2)/med(3)/high(5)/max(8) steps per phase
  - Flags: --phase (resume), --max-phases (stop early), --no-model
    (keyword-only, no GPU), --verbose, --json-out

lazyaddons/toposwarm.yaml
  - YAML addon definition: reads rhost/lhost/domain from payload.json
  - execute_command: python3 skills/toposwarm_autonomous.py ...
  - Invocable from LazyOwn shell as: toposwarm [args]
  - Additional args passed directly to the script

Usage
-----
  # In LazyOwn shell (after set rhost 10.10.11.78):
  toposwarm                     # full 8-phase run
  toposwarm --effort max        # more steps per phase
  toposwarm --no-model          # keyword routing, no GPU
  toposwarm --phase 2           # resume from ENUM
  toposwarm --verbose           # full tool output

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
feat: toposwarm lazyaddon — autonomous red team agent
modules/toposwarm_bridge.py
  - OnlineFeedbackLoop: collects +/- feedback on routing decisions
    * Positive → immediate Hebbian update on routing_head.liquid.W_fast
    * Negative → stored as hard-negative for next --finetune run
    * Both persisted to sessions/toposwarm_feedback.jsonl (survives restarts)
  - RoutedCall gets result_id (uuid hex) for feedback tracking
  - TopoSwarmBridge.feedback(result_id, good, comment) — non-blocking,
    fire-and-forget, returns False silently if id expired
  - _neural_route saves hidden state per result for Hebbian update
  - bridge.feedback_loop.stats() shows pending/positive/negative counts
  - Updated docstring: 16-40% acc → 80.5% val_acc

Usage:
  result = bridge.route("scan 10.10.11.78")
  bridge.feedback(result.result_id, good=True)   # strengthens W_fast instantly
  bridge.feedback(result.result_id, good=False,
                  comment="should be hive_spawn") # stored for next finetune

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
feat: online RL feedback loop for TopoSwarm routing
Added installation of golang and joblib, fixed pip install commands.
Five new modules wrap the existing 95-tool MCP server with a defense-in-depth
harness inspired by the Claude Code paper. The harness applies transparently
to every tool call without modifying the existing handlers.

Modules added (skills/)
-----------------------
- lazyown_permissions.py — deny-first rule evaluator with 7 modes, glob
  patterns, persistent rules, and an audit log. Catastrophic command
  patterns (rm -rf /, curl|bash, mkfs.) are always denied even with no
  user rules configured. Read-only tools always allowed. Adds .metrics()
  for the defense-in-depth dashboard.
- lazyown_context.py — 5-layer compaction pipeline: microcompact (boilerplate
  strip) -> snip (duplicate lines) -> collapse (large unique content) ->
  budget (per-tool size cap) -> auto-compact (template session summary).
  Applied via the text() helper inside call_tool() so every existing
  handler benefits with no code changes.
- lazyown_session.py — append-only JSONL transcripts with fork() that
  resets permissions for subagent isolation. maybe_auto_compact() writes
  compact_boundary markers without ever deleting events.
- lazyown_hooks.py — 8-event registry (pre/post tool use, permission denied,
  compact boundaries, session start, audit) with sandbox / rate-limit /
  timing / audit handlers wired by default. Tracks runs, blocks, and
  errors per event for metrics.
- lazyown_claudemd.py — 4-level instruction hierarchy (managed -> user ->
  project -> local) merged on each session start.

MCP tools added (6, total now 101)
----------------------------------
- lazyown_search_tools — keyword search across all registered tools
- lazyown_manage_permissions — view/modify permission rules and mode
- lazyown_harness_status — defense-in-depth dashboard aggregating
  permissions + hooks + transcript + claudemd metrics
- lazyown_session_resume — reconstruct context from append-only transcript
- lazyown_subagent_run — isolated sidechain execution; forks transcript,
  wraps the runner so subagent tool calls log to the sidechain only,
  parent context stays clean
- lazyown_claudemd — manage the instruction hierarchy

MCP integration
---------------
- Permission gate runs before dispatch; deny rules always win
- Pre-tool-use hooks run after permission check; can block with _block
- text() helper applies compaction + transcript logging on every return
- lazyown_run_agent now logs agent_spawned event to parent transcript
  for traceability
- Lazy-loaded singletons keep MCP startup time unchanged

Bug fix
-------
- skills/hive_mind.py: sanitize FTS5 queries to strip special characters
  (dots, colons, brackets). Was causing "fts5: syntax error near ." every
  time the daemon recalled episodic memory by IP address.

Tests
-----
- skills/tests/test_harness_e2e.py exercises all 7 systems together with
  58 assertions across 8 test sections. All passing.
- 116 pre-existing skill tests still passing.
- Autonomous daemon regression test: Q-learning still advancing
  (5.85 -> 6.79 over two cycles), drones spawning, no FTS5 errors.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
…transport

The dashboard's Local Shell terminal showed only the "Welcome..." placeholder
and never received PTY output. Two issues stacked: the embedded xterm in
index.html had no socket.io wiring at all (no connect, no pty-output handler,
no onData -> input), and the SocketIO server is configured with
transports=['websocket'] (lazyc2.py:1664) - the v4 client tried polling first
by default and the connection died silently.

Connect to /pty (which already forks pty + runs lazyown.py + emits pty-output),
force transport to websocket, and surface connect/connect_error/disconnect
events into the terminal itself for future diagnosis.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Adds modules/lazyllmchat.py and lazyaddons/lazyllmchat.yaml.
Provides an interactive AI assistant inside LazyOwn that:
- Reads last 10 lines of sessions/LazyOwn_session_report.csv as context
- Executes native LazyOwn cmd2 commands and shell commands
- Sends command output to LLM (Groq/Ollama) for tactical analysis
- Suggests next steps and LazyOwn commands

Usage: llm [query] inside LazyOwn shell.
feat(lazyllmchat): add interactive LLM chatbot assistant
…and pytest tests

Implements the foundation for the C2 web security remediation plan:
- lazyc2/security/constants.py: single source of truth for patterns and limits
- lazyc2/security/validators.py: stateless input validation (routes, templates, YAML, AES keys, passwords, uploads)
- lazyc2/security/services.py: SecretKeyManager, SafeFileService, AESKeyManager, UploadSizeValidator
- tests/test_security_lazyc2.py: 64 pytest tests covering path traversal, input sanitization, cryptography, and file operations
- docs/SECURITY_PLAN.md: complete remediation roadmap with SOLID architecture and phased implementation

All tests pass: 64/64.
feat(security): lazyc2 security layer and remediation plan
… de variables

- Detecta automaticamente si GPG signing esta disponible (user.signingkey).
- Usa gh release create para publicar releases en GitHub.
- Corrige orden de START_COMMIT/END_COMMIT (se calculan antes de usarse).
- Corrige typo 'relsease' -> 'release'.
- Limpia tags locales huerfanos antes de crear nuevos.
- Agrega set -euo pipefail para abortar ante errores criticos.
…Version: release/0.2.97 \n\n with love \n\n Modified file(s):\n- .codacyrc

- .env.example
- .eslintignore
- .eslintrc.json
- .gitignore
- .mcp.json
- .pylintrc
- CLAUDE.md
- DEPLOY.sh
- README.md
- cert.pem
- cert.pem.bkp
- docs/SECURITY_PLAN.md
- graphify-out/.graphify_detect.json
- graphify-out/.graphify_python
- install.sh
- key.pem
- key.pem.bkp
- knowledge_base_vuln.json
- lazyaddons/copyfail.yaml
- lazyaddons/gui2.yaml
- lazyaddons/lazyaddon_creator.yaml
- lazyaddons/lazyllmchat.yaml
- lazyaddons/opencode_adapter.yaml
- lazyaddons/toposwarm.yaml
- lazyc2.py
- lazyc2/__init__.py
- lazyc2/security/__init__.py
- lazyc2/security/constants.py
- lazyc2/security/services.py
- lazyc2/security/validators.py
- lazygui/__init__.py
- lazygui/__main__.py
- lazygui/app.py
- lazygui/config/__init__.py
- lazygui/config/constants.py
- lazygui/config/paths.py
- lazygui/config/settings.py
- lazygui/panels/__init__.py
- lazygui/panels/base.py
- lazygui/panels/event_log_panel.py
- lazygui/panels/listeners_panel.py
- lazygui/panels/registry.py
- lazygui/panels/sessions_panel.py
- lazygui/panels/terminal_panel.py
- lazygui/services/__init__.py
- lazygui/services/backend.py
- lazygui/services/event_log.py
- lazygui/services/factory.py
- lazygui/services/local_backend.py
- lazygui/services/models.py
- lazygui/services/teamserver_backend.py
- lazygui/theme/__init__.py
- lazygui/theme/manager.py
- lazygui/theme/palettes/__init__.py
- lazygui/theme/palettes/catppuccin_mocha.py
- lazygui/theme/palettes/cobalt_clone.py
- lazygui/theme/palettes/gruvbox_dark.py
- lazygui/theme/palettes/solarized_light.py
- lazygui/theme/palettes/tactical_green.py
- lazygui/theme/palettes/tokyo_night.py
- lazygui/theme/qss_builder.py
- lazygui/theme/tokens.py
- lazygui/version.py
- lazygui/widgets/__init__.py
- lazygui/widgets/command_palette_list.py
- lazygui/widgets/event_log_view.py
- lazygui/widgets/filter_bar.py
- lazygui/widgets/status_badge.py
- lazygui/widgets/terminal_view.py
- lazygui/windows/__init__.py
- lazygui/windows/command_palette_window.py
- lazygui/windows/connect_dialog.py
- lazygui/windows/main_window.py
- modules/ai_fallback.py
- modules/hive_invoke.py
- modules/knowledge_base_vuln.json
- modules/lazyaddon_creator.py
- modules/lazyllmchat.py
- modules/moe_router.py
- modules/obs_parser.py
- modules/session_rag.py
- modules/toposwarm_bridge.py
- modules/world_model.py
- payload.json
- sessions/implant/implant_crypt.go
- skills/hive_mind.py
- skills/lazyown_claudemd.py
- skills/lazyown_context.py
- skills/lazyown_daemon.py
- skills/lazyown_hooks.py
- skills/lazyown_mcp.py
- skills/lazyown_permissions.py
- skills/lazyown_session.py
- skills/tests/test_harness_e2e.py
- skills/toposwarm_autonomous.py
- static/security_dashboard.png
- templates/index.html
- tests/integration_autonomous_flow.py
- tests/test_security_lazyc2.py\nDeleted file(s):\n- cert.pem
- cert.pem.bkp
- key.pem
- key.pem.bkp\nCreated file(s):\n- .codacyrc
- .env.example
- .eslintignore
- .eslintrc.json
- .mcp.json
- .pylintrc
- CLAUDE.md
- docs/SECURITY_PLAN.md
- graphify-out/.graphify_detect.json
- graphify-out/.graphify_python
- lazyaddons/copyfail.yaml
- lazyaddons/gui2.yaml
- lazyaddons/lazyaddon_creator.yaml
- lazyaddons/lazyllmchat.yaml
- lazyaddons/opencode_adapter.yaml
- lazyaddons/toposwarm.yaml
- lazyc2/__init__.py
- lazyc2/security/__init__.py
- lazyc2/security/constants.py
- lazyc2/security/services.py
- lazyc2/security/validators.py
- lazygui/__init__.py
- lazygui/__main__.py
- lazygui/app.py
- lazygui/config/__init__.py
- lazygui/config/constants.py
- lazygui/config/paths.py
- lazygui/config/settings.py
- lazygui/panels/__init__.py
- lazygui/panels/base.py
- lazygui/panels/event_log_panel.py
- lazygui/panels/listeners_panel.py
- lazygui/panels/registry.py
- lazygui/panels/sessions_panel.py
- lazygui/panels/terminal_panel.py
- lazygui/services/__init__.py
- lazygui/services/backend.py
- lazygui/services/event_log.py
- lazygui/services/factory.py
- lazygui/services/local_backend.py
- lazygui/services/models.py
- lazygui/services/teamserver_backend.py
- lazygui/theme/__init__.py
- lazygui/theme/manager.py
- lazygui/theme/palettes/__init__.py
- lazygui/theme/palettes/catppuccin_mocha.py
- lazygui/theme/palettes/cobalt_clone.py
- lazygui/theme/palettes/gruvbox_dark.py
- lazygui/theme/palettes/solarized_light.py
- lazygui/theme/palettes/tactical_green.py
- lazygui/theme/palettes/tokyo_night.py
- lazygui/theme/qss_builder.py
- lazygui/theme/tokens.py
- lazygui/version.py
- lazygui/widgets/__init__.py
- lazygui/widgets/command_palette_list.py
- lazygui/widgets/event_log_view.py
- lazygui/widgets/filter_bar.py
- lazygui/widgets/status_badge.py
- lazygui/widgets/terminal_view.py
- lazygui/windows/__init__.py
- lazygui/windows/command_palette_window.py
- lazygui/windows/connect_dialog.py
- lazygui/windows/main_window.py
- modules/lazyaddon_creator.py
- modules/lazyllmchat.py
- modules/toposwarm_bridge.py
- skills/lazyown_claudemd.py
- skills/lazyown_context.py
- skills/lazyown_hooks.py
- skills/lazyown_permissions.py
- skills/lazyown_session.py
- skills/tests/test_harness_e2e.py
- skills/toposwarm_autonomous.py
- tests/integration_autonomous_flow.py
- tests/test_security_lazyc2.py\n  LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mié 06 may 2026 10:53:02 -04 \n\n Hora: 1778079182
…se/0.2.97 \n\n with love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mié 06 may 2026 10:56:21 -04 \n\n Hora: 1778079381
…99 \n\n with love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: jue 07 may 2026 00:53:57 -04 \n\n Hora: 1778129637
…/0.2.100 \n\n with love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: jue 07 may 2026 23:59:11 -04 \n\n Hora: 1778212751
…0.2.101 \n\n with love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: sáb 09 may 2026 01:57:18 -04 \n\n Hora: 1778306238
…zyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: sáb 09 may 2026 01:58:03 -04 \n\n Hora: 1778306283
…odified file(s):\n- CHANGELOG.md

- README.md
- cli/palette_command.py
- cli/palette_graph.py
- docs/CHANGELOG.html
- docs/README.html
- lazyaddons/dirtyfrag.yaml
- lazyc2.py
- skills/lazyown_mcp.py
- templates/base.html
- templates/palette.html
- tests/test_command_palette.py
- version.json\nCreated file(s):\n- cli/palette_graph.py
- lazyaddons/dirtyfrag.yaml
- templates/palette.html\n  LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: sáb 09 may 2026 01:59:51 -04 \n\n Hora: 1778306391
grisuno and others added 26 commits July 24, 2026 20:08
Bumps [tqdm](https://github.com/tqdm/tqdm) from 4.67.3 to 4.69.1.
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.67.3...v4.69.1)

---
updated-dependencies:
- dependency-name: tqdm
  dependency-version: 4.69.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [argcomplete](https://github.com/kislyuk/argcomplete) from 3.6.3 to 3.7.0.
- [Release notes](https://github.com/kislyuk/argcomplete/releases)
- [Changelog](https://github.com/kislyuk/argcomplete/blob/main/Changes.rst)
- [Commits](kislyuk/argcomplete@v3.6.3...v3.7.0)

---
updated-dependencies:
- dependency-name: argcomplete
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pyelftools](https://github.com/eliben/pyelftools) from 0.32 to 0.33.
- [Changelog](https://github.com/eliben/pyelftools/blob/main/CHANGES)
- [Commits](eliben/pyelftools@v0.32...v0.33)

---
updated-dependencies:
- dependency-name: pyelftools
  dependency-version: '0.33'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [cffi](https://github.com/python-cffi/cffi) from 2.0.0 to 2.1.0.
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.0)

---
updated-dependencies:
- dependency-name: cffi
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pyarrow](https://github.com/apache/arrow) from 24.0.0 to 25.0.0.
- [Release notes](https://github.com/apache/arrow/releases)
- [Commits](apache/arrow@apache-arrow-24.0.0...apache-arrow-25.0.0)

---
updated-dependencies:
- dependency-name: pyarrow
  dependency-version: 25.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
chore(deps): bump pyarrow from 24.0.0 to 25.0.0
chore(deps): bump cffi from 2.0.0 to 2.1.0
chore(deps): bump pyelftools from 0.32 to 0.33
chore(deps): bump argcomplete from 3.6.3 to 3.7.0
chore(deps): bump tqdm from 4.67.3 to 4.69.1
Resolve 11 conflicts by taking main's promoted command sets. main advanced
the migration past this branch: the ten cli/commands/*_migrated.py modules
moved from dormant PendingCommandSet to active LazyOwnCommandSet (category
decorators, real imports, utils-globals shim), superseding this branch's
dormant versions while already carrying the __all__ NameError fix.

tests/test_command_set_migration.py taken from main too: it pins the
completed (active, deduplicated) migration and would fail against the old
dormant assertions this branch shipped.

Feature-branch work preserved via clean auto-merge: the migrate_lazyown.py
build_migrated_module extraction + tests/test_migrate_lazyown_generator.py
generator guard, and the engagement command-gate (cli/engagement_hooks.py,
tests/test_engagement_command_gate.py, lazyown.py hook).

Verified: 42 command sets discover and register with no collision;
test_command_set_migration + test_migrate_lazyown_generator +
test_engagement_command_gate = 61 passed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
… love \n\n Modified file(s):\n- .c2_credentials.txt

- .github/dependabot.yml
- .github/workflows/attack_surface_scan.yml
- .github/workflows/ci.yml
- .github/workflows/lint.yml
- .github/workflows/test.yml
- .gitignore
- .pre-commit-config.yaml
- .secrets.baseline
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- CONTRIBUTING.md
- KNOWLEDGE_BASE.md
- README.md
- TUTORIAL_LazyOwn.md
- adversary.json
- banners/Lazy.png
- banners/Lazy1.png
- banners/Lazy2.png
- cli/aliases.yaml
- cli/assign.py
- cli/autosuggest.py
- cli/banner_config.py
- cli/cli_enhancements.py
- cli/command_chain.py
- cli/command_form.py
- cli/command_index.json
- cli/commands/__init__.py
- cli/commands/_base.py
- cli/commands/ai.py
- cli/commands/anti_forensics.py
- cli/commands/caldera.py
- cli/commands/cloud.py
- cli/commands/command_and_control.py
- cli/commands/command_and_control_migrated.py
- cli/commands/containers.py
- cli/commands/cred.py
- cli/commands/cred_migrated.py
- cli/commands/database.py
- cli/commands/enum.py
- cli/commands/evasive_payload.py
- cli/commands/exfiltration.py
- cli/commands/exploit.py
- cli/commands/exploit_migrated.py
- cli/commands/lateral.py
- cli/commands/lateral_migrated.py
- cli/commands/misc_migrated.py
- cli/commands/mobile_macos.py
- cli/commands/module_manager.py
- cli/commands/payload_generation.py
- cli/commands/persist.py
- cli/commands/persist_migrated.py
- cli/commands/phishing_wizard.py
- cli/commands/pivoting.py
- cli/commands/postexp.py
- cli/commands/postexp_migrated.py
- cli/commands/privilege_escalation.py
- cli/commands/pwn.py
- cli/commands/recon.py
- cli/commands/recon_migrated.py
- cli/commands/report.py
- cli/commands/report_migrated.py
- cli/commands/reporting.py
- cli/commands/resource_scripting.py
- cli/commands/scan_migrated.py
- cli/commands/supply_chain.py
- cli/dashboard_tui.py
- cli/doctor.py
- cli/engagement_hooks.py
- cli/exploit_advisor.py
- cli/exploration.py
- cli/exploration_view.py
- cli/fuzzy_picker.py
- cli/graph_advisor.py
- cli/graph_overlay.py
- cli/headless.py
- cli/lazynmap_post.py
- cli/ops_commands.py
- cli/palette_command.py
- cli/palette_graph.py
- cli/palette_overlay.py
- cli/palette_telemetry.py
- cli/protips.py
- cli/recommendation.py
- cli/recommendation_signals.py
- cli/recon_plan.py
- cli/registry.py
- cli/scope_guard.py
- cli/sessions_browser.py
- cli/show.py
- cli/splash.py
- cli/status_bar.py
- cli/style.py
- cli/surface_graph.py
- cli/themes.py
- cli/timeline_browser.py
- cli/toast_bus.py
- cli/tui_theme.py
- cli/wizard.py
- core/__init__.py
- core/config.py
- core/credentials.py
- core/crypto.py
- core/http.py
- core/llm_budget.py
- core/network.py
- core/parsers.py
- core/payload_schema.py
- core/process.py
- core/safe_subprocess.py
- deploy/README.md
- deploy/k8s/lazyown-c2.yaml
- discord_c2.py
- docs/api_docs.html
- external/install_external.sh
- fast_run_as_r00t.sh
- graphify-out/GRAPH_REPORT.md
- graphify-out/GRAPH_REPORT_LAZYOWN.md
- graphify-out/README.md
- graphify-out/cost.json
- graphify-out/graph.html
- graphify-out/graph.json
- graphify-out/graph_lazyown.json
- graphify-out/manifest.json
- lazy_sentinel4.py
- lazyaddons/BlackObsidianC2.yaml
- lazyaddons/CVE-2026-25089.yaml
- lazyaddons/adcs_attacks.yaml
- lazyaddons/cloud_bucket_enum.yaml
- lazyaddons/cloud_enum.yaml
- lazyaddons/cloud_metadata.yaml
- lazyaddons/container_escape.yaml
- lazyaddons/docker_enum.yaml
- lazyaddons/fakesystemD.yaml
- lazyaddons/gitleaks.yaml
- lazyaddons/k8s_enum.yaml
- lazyaddons/phantom2.yaml
- lazyaddons/shadow.yaml
- lazyaddons/websocket_beacon.yaml
- lazyaddons/yara_scanner.yaml
- lazyadversaries/lazynim.yaml
- lazyadversaries/malleable_beacon.yaml
- lazyadversaries/rust_implant.yaml
- lazyc2.py
- lazyc2/app_factory.py
- lazyc2/blueprints/__init__.py
- lazyc2/blueprints/api.py
- lazyc2/blueprints/auth.py
- lazyc2/blueprints/operations.py
- lazyc2/blueprints/phishing.py
- lazyc2/extensions/__init__.py
- lazyc2/extensions/decoy.py
- lazyc2/extensions/short_urls.py
- lazyc2/extensions/storage.py
- lazyc2/extensions/users.py
- lazyc2/models.py
- lazyc2/security/command_allowlist.py
- lazyc2/security/cors.py
- lazyc2/security/csrf.py
- lazyc2/security/html_sanitizer.py
- lazyc2/security/trusted_proxy.py
- lazyc2/state.py
- lazygui/app.py
- lazygui/config/constants.py
- lazygui/config/settings.py
- lazygui/panels/listeners_panel.py
- lazygui/panels/registry.py
- lazygui/panels/sessions_panel.py
- lazygui/services/backend.py
- lazygui/services/event_log.py
- lazygui/services/local_backend.py
- lazygui/services/models.py
- lazygui/services/teamserver_backend.py
- lazygui/theme/manager.py
- lazygui/theme/palettes/__init__.py
- lazygui/widgets/command_palette_list.py
- lazygui/windows/command_palette_window.py
- lazygui/windows/main_window.py
- lazyown.py
- modules/49803.py
- modules/CVE-2023-28432.py
- modules/LazyOwnExplorer.py
- modules/__init__.py
- modules/adcs_attacks.py
- modules/agent_runner.py
- modules/agent_tool.py
- modules/ai_exploit_chain.py
- modules/ai_fallback.py
- modules/ai_model.py
- modules/amt_auth_bypass.py
- modules/apt_playbooks.py
- modules/atomic_enricher.py
- modules/auto_pivot.py
- modules/autonomous_exploit_engine.py
- modules/bin2img.py
- modules/bot.py
- modules/c2_builder.py
- modules/c2_messaging_base.py
- modules/c2_profile.py
- modules/categories.py
- modules/cgi-bin/lazywebshell.py
- modules/cloud_enum.py
- modules/collab_bp.py
- modules/colors.py
- modules/compliance.py
- modules/config_store.py
- modules/cve_matcher.py
- modules/dashboard_bp.py
- modules/dashboard_engine.py
- modules/db.py
- modules/detailed_search.py
- modules/detection_feed.py
- modules/detection_oracle.py
- modules/domain_dominance.py
- modules/engagement_hooks.py
- modules/evasion_engine.py
- modules/evasive_payloads.py
- modules/event_engine.py
- modules/evilhttprev.sh
- modules/exploit_chain.py
- modules/exploit_recommender.py
- modules/generate_tools.py
- modules/gui.py
- modules/ia_code_analysis.py
- modules/ia_logs_analysis.py
- modules/ia_network_analysis.py
- modules/icmp_client.py
- modules/icmp_server.py
- modules/img2bin.py
- modules/integrations/__init__.py
- modules/integrations/misp_export.py
- modules/integrations/nuclei_bridge.py
- modules/integrations/searchsploit.py
- modules/jwtexploit.py
- modules/kivi.py
- modules/lazy_rbac.py
- modules/lazyaddon_creator.py
- modules/lazyagentAi.py
- modules/lazyarpspoofing.py
- modules/lazybinenc.py
- modules/lazybotcli.py
- modules/lazybotnet.py
- modules/lazycam.py
- modules/lazycam2.py
- modules/lazycam3.py
- modules/lazycam4.py
- modules/lazycloud.py
- modules/lazycreate_webshell.py
- modules/lazydeepseekcli_local.py
- modules/lazydeepseekcli_localreport.py
- modules/lazydisassebler.py
- modules/lazyencoder_decoder.py
- modules/lazyftpsniff.py
- modules/lazygalazy.py
- modules/lazygptcli.py
- modules/lazygptcli2.py
- modules/lazygptcli3.py
- modules/lazygptcli4.py
- modules/lazygptcli5.py
- modules/lazygpttask.py
- modules/lazygptvulns.py
- modules/lazyhoneypot.py
- modules/lazyhttpreverseshell.py
- modules/lazyhttpsniff.py
- modules/lazyk8s.py
- modules/lazykeygen.py
- modules/lazylfi2rce.py
- modules/lazyllmchat.py
- modules/lazylogpoisoning.py
- modules/lazymariadb_rce_cve_2016-662.py
- modules/lazymidm.py
- modules/lazymitmap.py
- modules/lazynetbios.py
- modules/lazyntlrelayx.py
- modules/lazyopenssh77enum2.py
- modules/lazyown.py
- modules/lazyown_bprfuzzer.py
- modules/lazyown_bridge.py
- modules/lazyown_metaextract0r.py
- modules/lazyownclient.py
- modules/lazyownerweb.py
- modules/lazyownserver.py
- modules/lazyphishingai.py
- modules/lazyproxy.py
- modules/lazypwn.py
- modules/lazypwnkit.py
- modules/lazypyautogui.py
- modules/lazyredopgpt.py
- modules/lazyreversentlmv2.py
- modules/lazysearch.py
- modules/lazysearch_bot.py
- modules/lazyseo.py
- modules/lazysmbrelay.py
- modules/lazysniff.py
- modules/lazysqli.py
- modules/lazyssh.py
- modules/lazyvsftp.py
- modules/lazywerkzeug.py
- modules/lesson_ingestor.py
- modules/lilsplunky.py
- modules/listener_manager.py
- modules/llm_client.py
- modules/llm_evaluator.py
- modules/llm_factory.py
- modules/logging_config.py
- modules/mario.py
- modules/mcp_agent_bridge.py
- modules/memory_store.py
- modules/metrics.py
- modules/module_registry.py
- modules/modules/colors.py
- modules/moe_router.py
- modules/morse.py
- modules/nmap2csv.py
- modules/obs_parser.py
- modules/ooficesod0woodo.py
- modules/operation.py
- modules/payload_factory.py
- modules/phishing_orchestrator.py
- modules/pipeline_engine.py
- modules/planner.py
- modules/playbook_engine.py
- modules/professional_report.py
- modules/reactive_engine.py
- modules/recommender.py
- modules/report_generator.py
- modules/resource_script.py
- modules/rich_tui.py
- modules/rl_trainer.py
- modules/rootkit/mr.c
- modules/rootkit/rootkit.c
- modules/rootkit/rootkit.c.bkp.c
- modules/search.py
- modules/security_sanitizers.py
- modules/session_rag.py
- modules/session_reader.py
- modules/sessions/llm_budget.json
- modules/sql.py
- modules/tel.py
- modules/threat_model.py
- modules/timeline_narrator.py
- modules/tool_extractor.py
- modules/toposwarm_bridge.py
- modules/traffic_morpher.py
- modules/ttp_coverage.py
- modules/unified_dashboard.py
- modules/unified_llm_client.py
- modules/venator.py
- modules/vuln_agent.py
- modules/vuln_bot_cli.py
- modules/vulnbot.py
- modules/websocket_beacon.py
- modules/win_rootkit/backup.c
- modules/win_rootkit/win_ring3_rootkit.c
- modules/world_model.py
- modules/yaml_generator.py
- modules/yara_scanner.py
- payload.example.json
- payloads/default_engagement.json
- plugins/README.md
- plugins/amsi_bypass.yaml
- plugins/dotnet_reflection.yaml
- plugins/etw_bypass.yaml
- plugins/powershell_obfuscation.yaml
- profiles/README.md
- pyproject.toml
- report.py
- requirements-ml.txt
- requirements.txt
- scripts/activate_migrations.py
- scripts/build_command_index.py
- scripts/fix_migrated_classes.py
- scripts/migrate_lazyown.py
- sessions/README.md
- skills/aci_planner.py
- skills/autonomous_daemon.py
- skills/autonomous_replay.py
- skills/claude_md_orchestrator/bdd_agent.py
- skills/claude_md_orchestrator/boy_scout.py
- skills/claude_md_orchestrator/cicd_agent.py
- skills/claude_md_orchestrator/config.py
- skills/claude_md_orchestrator/documentation_agent.py
- skills/claude_md_orchestrator/models.py
- skills/claude_md_orchestrator/orchestrator.py
- skills/claude_md_orchestrator/parser.py
- skills/claude_md_orchestrator/reviewer_agent.py
- skills/claude_md_orchestrator/sdd_agent.py
- skills/claude_md_orchestrator/tdd_agent.py
- skills/claude_md_orchestrator/tests/test_orchestrator.py
- skills/claude_md_orchestrator/validators.py
- skills/daemon_control.py
- skills/heartbeat.py
- skills/hermes-lazyown/claudemd_rules.py
- skills/hermes-lazyown/executor.py
- skills/hermes-lazyown/hermes_sync.py
- skills/hermes-lazyown/mcp_server.py
- skills/hermes-lazyown/output_compactor.py
- skills/hive_mind.py
- skills/lazyown_automapper.py
- skills/lazyown_campaign.py
- skills/lazyown_claudemd.py
- skills/lazyown_context.py
- skills/lazyown_daemon.py
- skills/lazyown_facts.py
- skills/lazyown_groq_agents.py
- skills/lazyown_hooks.py
- skills/lazyown_llm.py
- skills/lazyown_mcp.py
- skills/lazyown_mcp_helpers.py
- skills/lazyown_objective.py
- skills/lazyown_parquet_db.py
- skills/lazyown_permissions.py
- skills/lazyown_policy.py
- skills/lazyown_session.py
- skills/sessions_watcher.py
- skills/swan_agent.py
- skills/tests/test_autonomous_daemon.py
- skills/tests/test_facts.py
- skills/tests/test_harness_e2e.py
- skills/tests/test_hive_mind.py
- skills/tests/test_mcp_smoke.py
- skills/tests/test_objectives.py
- skills/tests/test_parquet_db.py
- skills/toposwarm_autonomous.py
- skills/unified_orchestrator.py
- skills/update_knowledge.py
- slack_c2_bot.py
- specs.md
- telegram_c2.py
- telegram_hermes.py
- tests/test_ci_strict.py
- tests/test_cli_assign.py
- tests/test_cli_command_sets.py
- tests/test_collab_and_onboarding.py
- tests/test_command_allowlist.py
- tests/test_command_palette.py
- tests/test_command_set_migration.py
- tests/test_credentials_rotation.py
- tests/test_csrf_policy.py
- tests/test_db.py
- tests/test_detection_feed.py
- tests/test_engage_orchestrator.py
- tests/test_engagement_command_gate.py
- tests/test_fuzzy_picker.py
- tests/test_html_sanitizer.py
- tests/test_https_redirect.py
- tests/test_improvements_spec.py
- tests/test_lesson_ingestor.py
- tests/test_llm_budget.py
- tests/test_metrics.py
- tests/test_migrate_lazyown_generator.py
- tests/test_module_registry.py
- tests/test_packaging.py
- tests/test_payload_factory.py
- tests/test_reactive_lateral_data.py
- tests/test_recon_plan.py
- tests/test_safe_subprocess.py
- tests/test_scope_bound_auto_gate.py
- tests/test_trusted_proxy.py
- tests/test_tui_theme_command.py
- tests/test_tui_themes.py
- tests/test_unified_dashboard.py
- tests/test_vuln_mitigations.py
- users.json
- utils.py
- yara_rules/README.md
- yara_rules/cobalt_strike_beacon.yar
- yara_rules/credential_theft.yar
- yara_rules/persistence_mechanism.yar
- yara_rules/reverse_shell_payload.yar
- yara_rules/webshell_detection.yar\nDeleted file(s):\n- .c2_credentials.txt
- graphify-out/GRAPH_REPORT.md
- graphify-out/GRAPH_REPORT_LAZYOWN.md
- graphify-out/README.md
- graphify-out/cost.json
- graphify-out/graph.html
- graphify-out/graph.json
- graphify-out/graph_lazyown.json
- graphify-out/manifest.json
- sessions/README.md\nCreated file(s):\n- banners/Lazy.png
- banners/Lazy1.png
- banners/Lazy2.png
- cli/commands/anti_forensics.py
- cli/commands/caldera.py
- cli/commands/cloud.py
- cli/commands/command_and_control_migrated.py
- cli/commands/containers.py
- cli/commands/cred.py
- cli/commands/cred_migrated.py
- cli/commands/database.py
- cli/commands/evasive_payload.py
- cli/commands/exploit.py
- cli/commands/exploit_migrated.py
- cli/commands/lateral.py
- cli/commands/lateral_migrated.py
- cli/commands/misc_migrated.py
- cli/commands/mobile_macos.py
- cli/commands/module_manager.py
- cli/commands/payload_generation.py
- cli/commands/persist.py
- cli/commands/persist_migrated.py
- cli/commands/phishing_wizard.py
- cli/commands/pivoting.py
- cli/commands/postexp.py
- cli/commands/postexp_migrated.py
- cli/commands/pwn.py
- cli/commands/recon_migrated.py
- cli/commands/report.py
- cli/commands/report_migrated.py
- cli/commands/reporting.py
- cli/commands/resource_scripting.py
- cli/commands/scan_migrated.py
- cli/commands/supply_chain.py
- core/credentials.py
- core/http.py
- core/network.py
- core/parsers.py
- core/process.py
- deploy/README.md
- docs/api_docs.html
- lazyaddons/CVE-2026-25089.yaml
- lazyaddons/adcs_attacks.yaml
- lazyaddons/cloud_bucket_enum.yaml
- lazyaddons/cloud_enum.yaml
- lazyaddons/cloud_metadata.yaml
- lazyaddons/container_escape.yaml
- lazyaddons/docker_enum.yaml
- lazyaddons/fakesystemD.yaml
- lazyaddons/gitleaks.yaml
- lazyaddons/k8s_enum.yaml
- lazyaddons/phantom2.yaml
- lazyaddons/shadow.yaml
- lazyaddons/websocket_beacon.yaml
- lazyaddons/yara_scanner.yaml
- lazyc2/app_factory.py
- lazyc2/blueprints/__init__.py
- lazyc2/blueprints/api.py
- lazyc2/blueprints/auth.py
- lazyc2/blueprints/operations.py
- lazyc2/blueprints/phishing.py
- lazyc2/extensions/__init__.py
- lazyc2/extensions/decoy.py
- lazyc2/extensions/short_urls.py
- lazyc2/extensions/storage.py
- lazyc2/extensions/users.py
- lazyc2/models.py
- lazyc2/state.py
- modules/__init__.py
- modules/adcs_attacks.py
- modules/ai_exploit_chain.py
- modules/auto_pivot.py
- modules/autonomous_exploit_engine.py
- modules/c2_messaging_base.py
- modules/cloud_enum.py
- modules/dashboard_engine.py
- modules/db.py
- modules/detection_feed.py
- modules/domain_dominance.py
- modules/evasion_engine.py
- modules/evasive_payloads.py
- modules/exploit_chain.py
- modules/exploit_recommender.py
- modules/lazycloud.py
- modules/lazyk8s.py
- modules/lesson_ingestor.py
- modules/logging_config.py
- modules/module_registry.py
- modules/operation.py
- modules/payload_factory.py
- modules/phishing_orchestrator.py
- modules/planner.py
- modules/professional_report.py
- modules/resource_script.py
- modules/rich_tui.py
- modules/traffic_morpher.py
- modules/ttp_coverage.py
- modules/unified_dashboard.py
- modules/unified_llm_client.py
- modules/websocket_beacon.py
- modules/yara_scanner.py
- plugins/amsi_bypass.yaml
- plugins/dotnet_reflection.yaml
- plugins/etw_bypass.yaml
- plugins/powershell_obfuscation.yaml
- profiles/README.md
- scripts/activate_migrations.py
- scripts/fix_migrated_classes.py
- scripts/migrate_lazyown.py
- skills/tests/test_mcp_smoke.py
- tests/test_db.py
- tests/test_detection_feed.py
- tests/test_engagement_command_gate.py
- tests/test_lesson_ingestor.py
- tests/test_migrate_lazyown_generator.py
- tests/test_module_registry.py
- tests/test_payload_factory.py
- tests/test_reactive_lateral_data.py
- tests/test_scope_bound_auto_gate.py
- tests/test_unified_dashboard.py
- yara_rules/README.md
- yara_rules/cobalt_strike_beacon.yar
- yara_rules/credential_theft.yar
- yara_rules/persistence_mechanism.yar
- yara_rules/reverse_shell_payload.yar
- yara_rules/webshell_detection.yar\n  LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: mié 29 jul 2026 21:29:08 -04 \n\n Hora: 1785374948
@pantoaibot

pantoaibot Bot commented Jul 31, 2026

Copy link
Copy Markdown

PR Summary:

Adds an auto-generated documentation export placeholder for the project knowledge base.

  • New file: docs/KNOWLEDGE_BASE.md (currently empty/placeholder — contains no substantive content).
  • Documentation-only change; no code, behavior, dependency, or performance changes.
  • No breaking changes. Next steps: populate this file via the export/generator process or hook it into CI to produce the actual knowledge base content.

Reviewed by Panto AI

@pantoaibot

pantoaibot Bot commented Jul 31, 2026

Copy link
Copy Markdown

Reviewed up to commit:19254845007b6eee6110d4bf5d43947676f98020

Additional Suggestion
Others - PR description mentions adding a root-level KNOWLEDGE_BASE.md in addition to docs/KNOWLEDGE_BASE.md, but only docs/KNOWLEDGE_BASE.md appears in this diff. Either include the root file as described or update the PR description to reflect the actual changes.

Reviewed by Panto AI


Few more points:

  • [NITPICK] The new file contains only a placeholder token ('0\t0') and no actual content. Either populate this file with the intended knowledge-base content (title, summary, links), add a clear stub explaining why it's empty, or remove the file. If this is produced by the generator, update the generator to avoid emitting empty placeholders.
# Knowledge Base

> This file is auto-generated by `readmenator_orchestrator.py`.
>
> Current status: placeholder only. The generator did not emit any content for this run.

This file is intended to contain an exported knowledge base snapshot.

- Generation date: 2026-07-31
- Source: internal documentation automation pipeline

_Content will be populated by the documentation generator once the underlying data sources are configured._

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants