Flowers

Network/service discovery. Ingests into targets + yagi_services.

SQL injection testing. ./run sqlmap-scan ingests findings.

Template CVE/vuln scan. ./run nuclei-scan → JSONL → findings.

AD/network auth & enum (nxc). Artifacts under DATA_ROOT/runs; hub adapter queued.

Protocol examples (secretsdump, smbclient, …). Wrapper resolves PATH or tools/access/impacket.

Full DAST. Complements Nuclei + sqlmap (adapter later).

AD attack-path graph. Install separately; hub ingest later (no new flower yet).

SE campaign helpers. Gate via ./run campaign.

Exploitation RPC (msfrpcd) on lab :46662 only. No public web page. ./run rose-ingest; export msf-hosts / msf-services.

Browser insights UI. ./run poppy-ingest for hub; host poppy.06660666.xyz.

PRIMARY durable C2 (Lily). Hybrid with Orchid via hub (same case_id); adapter Phase 5.

Adversary emulation planner. Pair with Lily for plan→live hybrid.

Automation sidecar to Lily (not installed yet). Demoted until a real Empire image/runtime is wired.