Skip to main content

Actions Catalog

Action specs are loaded from YAML packs via load_pack and registered in ActionRegistry.

Code: smolotchi/actions/registry.py:load_pack, smolotchi/actions/registry.py:ActionRegistry

Pack: smolotchi/actions/packs/bjorn_core.yml

Action IDNameCategoryRiskDriverCode Reference
net.host_discoveryHost Discoverynetwork_scansafecommandsmolotchi/actions/packs/bjorn_core.yml
net.port_scanPort Scan (XML)network_scancautioncommandsmolotchi/actions/packs/bjorn_core.yml
vuln.assess_basicVulnerability Assessment (basic, XML)vuln_assesscautioncommandsmolotchi/actions/packs/bjorn_core.yml
vuln.http_basicHTTP Assessment (safe)vuln_assesssafecommandsmolotchi/actions/packs/bjorn_core.yml
vuln.ssh_basicSSH Assessment (safe)vuln_assesssafecommandsmolotchi/actions/packs/bjorn_core.yml
vuln.smb_basicSMB Assessment (safe)vuln_assesscautioncommandsmolotchi/actions/packs/bjorn_core.yml
attack.bruteforce_sshBrute Force SSHsystem_attackdangerexternal_stubsmolotchi/actions/packs/bjorn_core.yml
steal.files_smbFile Stealing SMBfile_stealdangerexternal_stubsmolotchi/actions/packs/bjorn_core.yml

Action runner

Action execution uses ActionRunner.execute and run_action_spec.

Code: smolotchi/actions/runner.py:ActionRunner.execute, smolotchi/actions/execution.py:run_action_spec