Directories
¶
| Path | Synopsis |
|---|---|
|
Package adsb decodes Mode S downlink frames captured at 1090 MHz — both short-form (56-bit) surveillance replies and long-form (112-bit) extended squitter / ADS-B frames.
|
Package adsb decodes Mode S downlink frames captured at 1090 MHz — both short-form (56-bit) surveillance replies and long-form (112-bit) extended squitter / ADS-B frames. |
|
Package ais decodes AIS (Automatic Identification System) NMEA 0183 sentences carried over the standard AIS VHF channels (161.975 / 162.025 MHz) — the maritime counterpart of ADS-B, mandatory on commercial vessels >300 GT and on most passenger ships under SOLAS Chapter V.
|
Package ais decodes AIS (Automatic Identification System) NMEA 0183 sentences carried over the standard AIS VHF channels (161.975 / 162.025 MHz) — the maritime counterpart of ADS-B, mandatory on commercial vessels >300 GT and on most passenger ships under SOLAS Chapter V. |
|
Package applecontinuity decodes Apple Continuity BLE advertisement payloads — the Manufacturer-Specific-Data blob Apple devices broadcast for Handoff, AirDrop, Nearby Info / Action, AirPods proximity pairing, iBeacon, Hey Siri, and the other ad-hoc connectivity primitives that make the Apple ecosystem feel "magical" on a sniffer.
|
Package applecontinuity decodes Apple Continuity BLE advertisement payloads — the Manufacturer-Specific-Data blob Apple devices broadcast for Handoff, AirDrop, Nearby Info / Action, AirPods proximity pairing, iBeacon, Hey Siri, and the other ad-hoc connectivity primitives that make the Apple ecosystem feel "magical" on a sniffer. |
|
Package aprs decodes APRS (Automatic Packet Reporting System) frames carried over AX.25 — the dominant ham-radio position + telemetry + messaging beacon family transmitted on 144.39 MHz (NA), 144.80 MHz (EU), and a handful of HF bands.
|
Package aprs decodes APRS (Automatic Packet Reporting System) frames carried over AX.25 — the dominant ham-radio position + telemetry + messaging beacon family transmitted on 144.39 MHz (NA), 144.80 MHz (EU), and a handful of HF bands. |
|
Package arpdecode decodes Address Resolution Protocol (ARP) and Reverse ARP (RARP) packets per RFC 826 + RFC 903 + the RFC 5227 IPv4 address-conflict-detection extensions (gratuitous ARP / ARP probe / ARP announcement).
|
Package arpdecode decodes Address Resolution Protocol (ARP) and Reverse ARP (RARP) packets per RFC 826 + RFC 903 + the RFC 5227 IPv4 address-conflict-detection extensions (gratuitous ARP / ARP probe / ARP announcement). |
|
Package attack maps PromptZero tools and workflows to MITRE ATT&CK techniques.
|
Package attack maps PromptZero tools and workflows to MITRE ATT&CK techniques. |
|
Package bacnet decodes BACnet/IP (BACnet over UDP, ASHRAE 135 Annex J) frames — the dominant building-automation protocol used in HVAC controllers, lighting panels, energy meters, fire-alarm gateways, elevator dispatch, and BMS (Building Management Systems) front-ends.
|
Package bacnet decodes BACnet/IP (BACnet over UDP, ASHRAE 135 Annex J) frames — the dominant building-automation protocol used in HVAC controllers, lighting panels, energy meters, fire-alarm gateways, elevator dispatch, and BMS (Building Management Systems) front-ends. |
|
Package badusb parses DuckyScript / BadUSB payload scripts into structured line-by-line views — command + arguments + validation status.
|
Package badusb parses DuckyScript / BadUSB payload scripts into structured line-by-line views — command + arguments + validation status. |
|
Package bfd decodes BFD Control packets per RFC 5880.
|
Package bfd decodes BFD Control packets per RFC 5880. |
|
Package bgp decodes BGP-4 messages per RFC 4271 plus the canonical extensions: RFC 4760 (Multiprotocol BGP / MP-BGP), RFC 5492 (Capabilities Optional Parameter), RFC 6793 (4-byte AS Number), and RFC 2918 / 7313 (Route Refresh).
|
Package bgp decodes BGP-4 messages per RFC 4271 plus the canonical extensions: RFC 4760 (Multiprotocol BGP / MP-BGP), RFC 5492 (Capabilities Optional Parameter), RFC 6793 (4-byte AS Number), and RFC 2918 / 7313 (Route Refresh). |
|
Package ble decodes BLE advertisement payloads — currently just Apple Continuity manufacturer-data — into operator-facing structures.
|
Package ble decodes BLE advertisement payloads — currently just Apple Continuity manufacturer-data — into operator-facing structures. |
|
Package breaker implements a per-tool consecutive-error circuit breaker (roadmap P3-28, second half).
|
Package breaker implements a per-tool consecutive-error circuit breaker (roadmap P3-28, second half). |
|
Package bruce interfaces with the Bruce pentesting firmware for ESP32-based boards over a USB-serial connection.
|
Package bruce interfaces with the Bruce pentesting firmware for ESP32-based boards over a USB-serial connection. |
|
Package btclassic decodes Bluetooth Classic (BR/EDR) metadata fields — primarily the 24-bit Class of Device (CoD) value that every classic Bluetooth device advertises during inquiry.
|
Package btclassic decodes Bluetooth Classic (BR/EDR) metadata fields — primarily the 24-bit Class of Device (CoD) value that every classic Bluetooth device advertises during inquiry. |
|
Package btuuid resolves Bluetooth SIG-assigned 16-bit GATT UUIDs (Services, Characteristics, Descriptors) to their canonical names.
|
Package btuuid resolves Bluetooth SIG-assigned 16-bit GATT UUIDs (Services, Characteristics, Descriptors) to their canonical names. |
|
Package buspirate is the PromptZero backend for the Bus Pirate 5 universal bus probe (RP2040-based).
|
Package buspirate is the PromptZero backend for the Bus Pirate 5 universal bus probe (RP2040-based). |
|
Package campaign implements the PromptZero Campaigns feature (roadmap P2-19) — declarative, YAML-authored multi-step engagement specs that compose the existing agent tool surface.
|
Package campaign implements the PromptZero Campaigns feature (roadmap P2-19) — declarative, YAML-authored multi-step engagement specs that compose the existing agent tool surface. |
|
Package cbordecode parses CBOR (Concise Binary Object Representation) per RFC 8949.
|
Package cbordecode parses CBOR (Concise Binary Object Representation) per RFC 8949. |
|
Package cdp decodes Cisco Discovery Protocol packets per the publicly-documented wire format (reverse-engineered and documented in Wireshark dissectors, tcpdump output, and the CDP protocol whitepapers Cisco has historically published).
|
Package cdp decodes Cisco Discovery Protocol packets per the publicly-documented wire format (reverse-engineered and documented in Wireshark dissectors, tcpdump output, and the CDP protocol whitepapers Cisco has historically published). |
|
Package clisafe contains helpers shared by every transport that pushes operator-supplied strings through a line-oriented CLI.
|
Package clisafe contains helpers shared by every transport that pushes operator-supplied strings through a line-oriented CLI. |
|
Package coap decodes Constrained Application Protocol (RFC 7252) packets — the application-layer protocol used by constrained IoT devices (6LoWPAN, Thread, OpenThread, Zigbee IP).
|
Package coap decodes Constrained Application Protocol (RFC 7252) packets — the application-layer protocol used by constrained IoT devices (6LoWPAN, Thread, OpenThread, Zigbee IP). |
|
Package confidence provides pre-dispatch heuristic scoring for tool-use inputs.
|
Package confidence provides pre-dispatch heuristic scoring for tool-use inputs. |
|
Package consensus implements ensemble voting over multi-model risk verdicts (roadmap P3-33).
|
Package consensus implements ensemble voting over multi-model risk verdicts (roadmap P3-33). |
|
Package containerbridge runs external CLI tools inside Docker containers and surfaces their output as Go values.
|
Package containerbridge runs external CLI tools inside Docker containers and surfaces their output as Go values. |
|
Package cost tracks Anthropic token usage and running dollar cost per PromptZero session, and implements the simple "consecutive errors → offline" heuristic that flips the observability offline banner.
|
Package cost tracks Anthropic token usage and running dollar cost per PromptZero session, and implements the simple "consecutive errors → offline" heuristic that flips the observability offline banner. |
|
Package crypto1 is the pure-Go implementation of the Crypto1 stream cipher used by MIFARE Classic and some HID iCLASS legacy systems.
|
Package crypto1 is the pure-Go implementation of the Crypto1 stream cipher used by MIFARE Classic and some HID iCLASS legacy systems. |
|
Package dcf77 decodes DCF77 time-signal frames — the long-wave (77.5 kHz) radio broadcast from Mainflingen, Germany, that carries the current Central European time + date.
|
Package dcf77 decodes DCF77 time-signal frames — the long-wave (77.5 kHz) radio broadcast from Mainflingen, Germany, that carries the current Central European time + date. |
|
Package defense provides passive RF / BLE detection helpers used to surface adversarial activity nearby — the blue-team complement to PromptZero's offensive capability set.
|
Package defense provides passive RF / BLE detection helpers used to surface adversarial activity nearby — the blue-team complement to PromptZero's offensive capability set. |
|
Package desfire decodes Mifare DESFire Application Identifiers (AIDs) — the 3-byte values returned by the DESFire GetApplicationIDs command that identify each application stored on the card.
|
Package desfire decodes Mifare DESFire Application Identifiers (AIDs) — the 3-byte values returned by the DESFire GetApplicationIDs command that identify each application stored on the card. |
|
Package dhcp decodes DHCPv4 packets per RFC 2131 (the envelope) + RFC 2132 (the options).
|
Package dhcp decodes DHCPv4 packets per RFC 2131 (the envelope) + RFC 2132 (the options). |
|
Package diff renders a `git diff --no-prefix`-style unified-diff string from two text inputs.
|
Package diff renders a `git diff --no-prefix`-style unified-diff string from two text inputs. |
|
Package dnsdecode parses DNS messages on the wire — the most-traffic-bearing UDP protocol on the internet and a staple of every blue-team / red-team / network-debugging workflow.
|
Package dnsdecode parses DNS messages on the wire — the most-traffic-bearing UDP protocol on the internet and a staple of every blue-team / red-team / network-debugging workflow. |
|
Package droneid decodes ASTM F3411-22 (a.k.a.
|
Package droneid decodes ASTM F3411-22 (a.k.a. |
|
Package dtls decodes Datagram Transport Layer Security records and handshake messages per RFC 6347 (DTLS 1.2) and RFC 9147 (DTLS 1.3 — unified header form is not supported here; we decode the legacy DTLS 1.3 record layer that uses the same 13-byte header as 1.2).
|
Package dtls decodes Datagram Transport Layer Security records and handshake messages per RFC 6347 (DTLS 1.2) and RFC 9147 (DTLS 1.3 — unified header form is not supported here; we decode the legacy DTLS 1.3 record layer that uses the same 13-byte header as 1.2). |
|
Package eapol decodes EAPOL-Key frames — the WPA / WPA2 / WPA3 4-way handshake frames captured from any 802.1X-bearing medium.
|
Package eapol decodes EAPOL-Key frames — the WPA / WPA2 / WPA3 4-way handshake frames captured from any 802.1X-bearing medium. |
|
Package emv decodes EMV BER-TLV structures from contactless and contact payment card APDU responses.
|
Package emv decodes EMV BER-TLV structures from contactless and contact payment card APDU responses. |
|
Package eval provides the PromptZero golden evaluation harness (roadmap P2-25).
|
Package eval provides the PromptZero golden evaluation harness (roadmap P2-25). |
|
Package faultier drives a hextreeio Faultier USB voltage-glitcher via its serial bridge interface.
|
Package faultier drives a hextreeio Faultier USB voltage-glitcher via its serial bridge interface. |
|
Package fileformat gives the PromptZero agent structural access to the Flipper file formats it already ships with — .sub, .nfc, .ir, .rfid.
|
Package fileformat gives the PromptZero agent structural access to the Flipper file formats it already ships with — .sub, .nfc, .ir, .rfid. |
|
mock
Package mock provides a pty-backed fake Flipper CLI so serial.go and the command wrappers can be exercised without real hardware.
|
Package mock provides a pty-backed fake Flipper CLI so serial.go and the command wrappers can be exercised without real hardware. |
|
rpc
Package rpc implements a typed Flipper Zero RPC client over a transport.Transport.
|
Package rpc implements a typed Flipper Zero RPC client over a transport.Transport. |
|
transport
Package transport defines the byte-channel substrate the Flipper CLI layer operates over.
|
Package transport defines the byte-channel substrate the Flipper CLI layer operates over. |
|
Package geneve decodes Generic Network Virtualization Encapsulation packets per RFC 8926.
|
Package geneve decodes Generic Network Virtualization Encapsulation packets per RFC 8926. |
|
Package gre decodes Generic Routing Encapsulation packets per RFC 2784 (base) + RFC 2890 (Key + Sequence Number) + RFC 2637 (PPTP Enhanced GRE, Version=1).
|
Package gre decodes Generic Routing Encapsulation packets per RFC 2784 (base) + RFC 2890 (Key + Sequence Number) + RFC 2637 (PPTP Enhanced GRE, Version=1). |
|
Package gtp decodes GPRS Tunneling Protocol User Plane (GTP-U) packets per 3GPP TS 29.281.
|
Package gtp decodes GPRS Tunneling Protocol User Plane (GTP-U) packets per 3GPP TS 29.281. |
|
Package hpack decodes HPACK-compressed HTTP/2 header blocks per RFC 7541.
|
Package hpack decodes HPACK-compressed HTTP/2 header blocks per RFC 7541. |
|
Package http2 decodes HTTP/2 frames per RFC 9113.
|
Package http2 decodes HTTP/2 frames per RFC 9113. |
|
Package httpmsg decodes HTTP/1.x messages per RFC 9112 + RFC 9110.
|
Package httpmsg decodes HTTP/1.x messages per RFC 9112 + RFC 9110. |
|
Package ibutton decodes Dallas 1-Wire ROM IDs (a.k.a.
|
Package ibutton decodes Dallas 1-Wire ROM IDs (a.k.a. |
|
Package iclass implements the iCLASS block cipher and the loclass key-recovery attack against HID iCLASS Elite / High Security readers.
|
Package iclass implements the iCLASS block cipher and the loclass key-recovery attack against HID iCLASS Elite / High Security readers. |
|
Package icmp decodes ICMP (RFC 792) and ICMPv6 (RFC 4443 + 4861 for Neighbor Discovery) packets.
|
Package icmp decodes ICMP (RFC 792) and ICMPv6 (RFC 4443 + 4861 for Neighbor Discovery) packets. |
|
Package ieee80211 decodes IEEE 802.11 management frames — the beacon / probe / authentication / association / deauthentication / disassociation frames captured by every WiFi sniffer (Marauder, hcxdumptool, aircrack-ng, Wireshark).
|
Package ieee80211 decodes IEEE 802.11 management frames — the beacon / probe / authentication / association / deauthentication / disassociation frames captured by every WiFi sniffer (Marauder, hcxdumptool, aircrack-ng, Wireshark). |
|
Package ieee802154 decodes IEEE 802.15.4 MAC-layer frames — the wire format underneath Zigbee, Thread, OpenThread, and most other 2.4 GHz IoT mesh stacks.
|
Package ieee802154 decodes IEEE 802.15.4 MAC-layer frames — the wire format underneath Zigbee, Thread, OpenThread, and most other 2.4 GHz IoT mesh stacks. |
|
Package igmp decodes Internet Group Management Protocol packets per RFC 3376 (IGMPv3) and RFC 2236 (IGMPv2).
|
Package igmp decodes Internet Group Management Protocol packets per RFC 3376 (IGMPv3) and RFC 2236 (IGMPv2). |
|
Package ipdecode parses raw IP packets (IPv4 + IPv6) plus the most-deployed next-layer headers (TCP, UDP, ICMP, ICMPv6).
|
Package ipdecode parses raw IP packets (IPv4 + IPv6) plus the most-deployed next-layer headers (TCP, UDP, ICMP, ICMPv6). |
|
Package iso14443a identifies ISO/IEC 14443-3 Type A NFC tags from their anti-collision response (ATQA + SAK + UID, plus optional ATS).
|
Package iso14443a identifies ISO/IEC 14443-3 Type A NFC tags from their anti-collision response (ATQA + SAK + UID, plus optional ATS). |
|
Package iso7816 decodes ISO/IEC 7816-3 Answer To Reset (ATR) strings — the response every contact smart card sends when reset.
|
Package iso7816 decodes ISO/IEC 7816-3 Answer To Reset (ATR) strings — the response every contact smart card sends when reset. |
|
Package j1850 decodes SAE J1850 VPW (Variable Pulse Width) and PWM (Pulse Width Modulation) frames — the legacy OBD-II protocol used by GM and Ford vehicles before they migrated to CAN bus around 2008.
|
Package j1850 decodes SAE J1850 VPW (Variable Pulse Width) and PWM (Pulse Width Modulation) frames — the legacy OBD-II protocol used by GM and Ford vehicles before they migrated to CAN bus around 2008. |
|
Package jtag decodes JTAG IDCODE values (IEEE 1149.1) and the SWD DPIDR / TARGETID variants used by ARM CoreSight debug interfaces.
|
Package jtag decodes JTAG IDCODE values (IEEE 1149.1) and the SWD DPIDR / TARGETID variants used by ARM CoreSight debug interfaces. |
|
Package jwtdecode decodes JSON Web Tokens (JWT) — the dominant API auth token format in modern web stacks.
|
Package jwtdecode decodes JSON Web Tokens (JWT) — the dominant API auth token format in modern web stacks. |
|
Package keeloq implements the KeeLoq block cipher and supporting primitives for sub-GHz rolling-code analysis.
|
Package keeloq implements the KeeLoq block cipher and supporting primitives for sub-GHz rolling-code analysis. |
|
Package lldp decodes Link Layer Discovery Protocol payloads per IEEE 802.1AB-2009.
|
Package lldp decodes Link Layer Discovery Protocol payloads per IEEE 802.1AB-2009. |
|
Package lorawan decodes LoRaWAN PHYPayload frames — the MAC-layer packet format used by LoRaWAN 1.0.x and 1.1 networks.
|
Package lorawan decodes LoRaWAN PHYPayload frames — the MAC-layer packet format used by LoRaWAN 1.0.x and 1.1 networks. |
|
parsers
Package parsers turns Marauder CLI output lines into typed events the web layer can ship as JSON.
|
Package parsers turns Marauder CLI output lines into typed events the web layer can ship as JSON. |
|
Package mcp exposes PromptZero's tool surface over the Model Context Protocol (stdio transport).
|
Package mcp exposes PromptZero's tool surface over the Model Context Protocol (stdio transport). |
|
Package mcpfed federates external Model Context Protocol (MCP) servers as native PromptZero tools.
|
Package mcpfed federates external Model Context Protocol (MCP) servers as native PromptZero tools. |
|
Package mifare decodes Mifare Classic 1K / 4K data dumps — manufacturer block (sector 0 block 0), sector trailer (last block of each sector), value blocks (recognized by their value+complement structure), and plain data blocks.
|
Package mifare decodes Mifare Classic 1K / 4K data dumps — manufacturer block (sector 0 block 0), sector trailer (last block of each sector), value blocks (recognized by their value+complement structure), and plain data blocks. |
|
Package modbus decodes Modbus RTU and Modbus TCP frames per the Modbus Application Protocol Specification v1.1b3 and the Modbus Messaging Implementation Guide v1.0b.
|
Package modbus decodes Modbus RTU and Modbus TCP frames per the Modbus Application Protocol Specification v1.1b3 and the Modbus Messaging Implementation Guide v1.0b. |
|
Package mode defines named operation profiles that constrain which tools the agent will dispatch.
|
Package mode defines named operation profiles that constrain which tools the agent will dispatch. |
|
Package mpls decodes MPLS label stacks per RFC 3032 (stack encoding) + RFC 5462 (TC field rename from EXP) + the reserved-label catalogue from RFC 4182 / 5586 / 6790 / 7274.
|
Package mpls decodes MPLS label stacks per RFC 3032 (stack encoding) + RFC 5462 (TC field rename from EXP) + the reserved-label catalogue from RFC 4182 / 5586 / 6790 / 7274. |
|
Package mqtt decodes MQTT v3.1.1 control packets — the application-layer protocol underneath most IoT smart-home / industrial-sensor / broker setups.
|
Package mqtt decodes MQTT v3.1.1 control packets — the application-layer protocol underneath most IoT smart-home / industrial-sensor / broker setups. |
|
Package ndef decodes NFC Data Exchange Format messages — the payload format every NDEF-formatted NFC tag stores.
|
Package ndef decodes NFC Data Exchange Format messages — the payload format every NDEF-formatted NFC tag stores. |
|
Package nrf24 decodes Nordic NRF24L01 Enhanced Shockburst (ESB) packets and the Logitech Unifying / Mousejack payload variants that ride on top of them.
|
Package nrf24 decodes Nordic NRF24L01 Enhanced Shockburst (ESB) packets and the Logitech Unifying / Mousejack payload variants that ride on top of them. |
|
Package ntp decodes NTP / SNTP packets per RFC 5905 (v4), RFC 1305 (v3), and RFC 4330 (SNTPv4).
|
Package ntp decodes NTP / SNTP packets per RFC 5905 (v4), RFC 1305 (v3), and RFC 4330 (SNTPv4). |
|
Package obs ("observability") is the cross-cutting layer that wires structured logging, Prometheus metrics, and the /debug snapshot view into the rest of PromptZero.
|
Package obs ("observability") is the cross-cutting layer that wires structured logging, Prometheus metrics, and the /debug snapshot view into the rest of PromptZero. |
|
Package ospf decodes OSPFv2 packets per RFC 2328.
|
Package ospf decodes OSPFv2 packets per RFC 2328. |
|
Package pacs decodes Physical Access Control System (PACS) credential payloads — the upper-layer encoding that sits on top of the Wiegand bit-stream produced by an HID Prox / iCLASS / EM-style reader.
|
Package pacs decodes Physical Access Control System (PACS) credential payloads — the upper-layer encoding that sits on top of the Wiegand bit-stream produced by an HID Prox / iCLASS / EM-style reader. |
|
Package pcap implements a pure-Go libpcap classic-format writer and reader.
|
Package pcap implements a pure-Go libpcap classic-format writer and reader. |
|
Package persona implements operator-mode profiles for PromptZero.
|
Package persona implements operator-mode profiles for PromptZero. |
|
Package pocsag decodes POCSAG (Post Office Code Standardisation Advisory Group) paging-protocol bit-streams — ITU-R M.584-2 — into structured pages with address, function (numeric / alphanumeric), and decoded message text.
|
Package pocsag decodes POCSAG (Post Office Code Standardisation Advisory Group) paging-protocol bit-streams — ITU-R M.584-2 — into structured pages with address, function (numeric / alphanumeric), and decoded message text. |
|
Package pppoe decodes Point-to-Point Protocol over Ethernet packets per RFC 2516 — both the Discovery phase (PADI / PADO / PADR / PADS / PADT) and the Session phase (PPP-in- PPPoE payload).
|
Package pppoe decodes Point-to-Point Protocol over Ethernet packets per RFC 2516 — both the Discovery phase (PADI / PADO / PADR / PADS / PADT) and the Session phase (PPP-in- PPPoE payload). |
|
Package protobufdecode parses raw Protocol Buffers wire-format bytes without needing the .proto schema — the equivalent of `protoc --decode_raw`.
|
Package protobufdecode parses raw Protocol Buffers wire-format bytes without needing the .proto schema — the equivalent of `protoc --decode_raw`. |
|
Package quic decodes QUIC long-header packets per RFC 9000.
|
Package quic decodes QUIC long-header packets per RFC 9000. |
|
Package radius decodes RADIUS packets per RFC 2865 (auth) + RFC 2866 (accounting) + supporting RFCs.
|
Package radius decodes RADIUS packets per RFC 2865 (auth) + RFC 2866 (accounting) + supporting RFCs. |
|
Package rag provides lexical retrieval over the bundled PromptZero documentation corpus.
|
Package rag provides lexical retrieval over the bundled PromptZero documentation corpus. |
|
Package report renders engagement reports from PromptZero session audit data.
|
Package report renders engagement reports from PromptZero session audit data. |
|
Package rtp decodes RTP and RTCP packets per RFC 3550 (Real-time Transport Protocol) and the static payload type assignments of RFC 3551, plus the standard RTCP feedback extensions of RFC 4585 (RTPFB / PSFB) and RFC 3611 (XR).
|
Package rtp decodes RTP and RTCP packets per RFC 3550 (Real-time Transport Protocol) and the static payload type assignments of RFC 3551, plus the standard RTCP feedback extensions of RFC 4585 (RTPFB / PSFB) and RFC 3611 (XR). |
|
Package rules is PromptZero's reactive rules engine.
|
Package rules is PromptZero's reactive rules engine. |
|
Package semcache implements a small, durable, on-disk semantic cache for LLM-generated payloads (roadmap P2-27).
|
Package semcache implements a small, durable, on-disk semantic cache for LLM-generated payloads (roadmap P2-27). |
|
Package sip decodes SIP messages per RFC 3261.
|
Package sip decodes SIP messages per RFC 3261. |
|
Package snapshot captures pre-write copies of Flipper SD files so /rewind can restore them on demand.
|
Package snapshot captures pre-write copies of Flipper SD files so /rewind can restore them on demand. |
|
Package snmp decodes SNMP v1, v2c, and v3 packets — the dominant network-management protocol on enterprise networks, found on every router / switch / firewall / printer / UPS / PDU / managed AP / managed VM-host since the late '80s.
|
Package snmp decodes SNMP v1, v2c, and v3 packets — the dominant network-management protocol on enterprise networks, found on every router / switch / firewall / printer / UPS / PDU / managed AP / managed VM-host since the late '80s. |
|
Package sshdecode parses SSH wire-protocol frames per RFC 4253 (SSH Transport Layer Protocol) and RFC 4250-4256.
|
Package sshdecode parses SSH wire-protocol frames per RFC 4253 (SSH Transport Layer Protocol) and RFC 4250-4256. |
|
Package stp decodes Spanning Tree Protocol BPDUs per IEEE 802.1D-2004 (STP / RSTP) and IEEE 802.1Q-2014 §13 (MSTP).
|
Package stp decodes Spanning Tree Protocol BPDUs per IEEE 802.1D-2004 (STP / RSTP) and IEEE 802.1Q-2014 §13 (MSTP). |
|
Package streaming provides the partial-frame sink used by tools that opt into streaming dispatch (roadmap P3-28 first half).
|
Package streaming provides the partial-frame sink used by tools that opt into streaming dispatch (roadmap P3-28 first half). |
|
Package stun decodes STUN packets per RFC 5389 / 8489 + TURN extensions per RFC 5766 / 8656.
|
Package stun decodes STUN packets per RFC 5389 / 8489 + TURN extensions per RFC 5766 / 8656. |
|
Package subghz provides pure-Go classifiers for common Sub-GHz radio protocols captured by the Flipper Zero.
|
Package subghz provides pure-Go classifiers for common Sub-GHz radio protocols captured by the Flipper Zero. |
|
protocols
Package protocols implements pure-Go decoders for the top-20 Sub-GHz remote control protocols captured by the Flipper Zero.
|
Package protocols implements pure-Go decoders for the top-20 Sub-GHz remote control protocols captured by the Flipper Zero. |
|
Package syslog decodes syslog messages in both the modern RFC 5424 (IETF) format and the legacy RFC 3164 (BSD) format.
|
Package syslog decodes syslog messages in both the modern RFC 5424 (IETF) format and the legacy RFC 3164 (BSD) format. |
|
Package targetmem stores per-target facts across PromptZero sessions.
|
Package targetmem stores per-target facts across PromptZero sessions. |
|
Package testmocks centralises the shared mock harness used across PromptZero's test surfaces — flipper-agent tests, end-to-end REPL tests, workflow tests.
|
Package testmocks centralises the shared mock harness used across PromptZero's test surfaces — flipper-agent tests, end-to-end REPL tests, workflow tests. |
|
Package tlsdecode decodes the cleartext portion of a TLS handshake — the ClientHello and ServerHello records that every TLS connection emits in the clear before encryption is negotiated.
|
Package tlsdecode decodes the cleartext portion of a TLS handshake — the ClientHello and ServerHello records that every TLS connection emits in the clear before encryption is negotiated. |
|
Package toolctx serves static per-tool cheat sheets the agent appends to tool descriptions at catalog registration time.
|
Package toolctx serves static per-tool cheat sheets the agent appends to tool descriptions at catalog registration time. |
|
Package tools — argument-extraction helpers.
|
Package tools — argument-extraction helpers. |
|
Package trainset exports the audit log as a fine-tuning dataset.
|
Package trainset exports the audit log as a fine-tuning dataset. |
|
Package validator scans BadUSB/DuckyScript payloads for patterns that the operator would want to see before the Flipper types them on a real target.
|
Package validator scans BadUSB/DuckyScript payloads for patterns that the operator would want to see before the Flipper types them on a real target. |
|
Package version carries build-time metadata embedded via -ldflags.
|
Package version carries build-time metadata embedded via -ldflags. |
|
Package vlan decodes IEEE 802.1Q (C-tag) and 802.1ad (S-tag, QinQ) VLAN tags per IEEE 802.1Q-2018.
|
Package vlan decodes IEEE 802.1Q (C-tag) and 802.1ad (S-tag, QinQ) VLAN tags per IEEE 802.1Q-2018. |
|
Package vrrp decodes Virtual Router Redundancy Protocol (VRRP) packets per RFC 5798 (v3, IPv4 + IPv6) and the older RFC 3768 (v2, IPv4-only, still widely deployed).
|
Package vrrp decodes Virtual Router Redundancy Protocol (VRRP) packets per RFC 5798 (v3, IPv4 + IPv6) and the older RFC 3768 (v2, IPv4-only, still widely deployed). |
|
Package vxlan decodes Virtual Extensible LAN packets per RFC 7348, plus per-vendor variants: Cisco's Group-Based Policy (VXLAN-GBP, draft-smith-vxlan-group-policy) and the Generic Protocol Extension (VXLAN-GPE, draft-ietf-nvo3- vxlan-gpe).
|
Package vxlan decodes Virtual Extensible LAN packets per RFC 7348, plus per-vendor variants: Cisco's Group-Based Policy (VXLAN-GBP, draft-smith-vxlan-group-policy) and the Generic Protocol Extension (VXLAN-GPE, draft-ietf-nvo3- vxlan-gpe). |
|
Package watch implements the --watch filesystem-trigger mode.
|
Package watch implements the --watch filesystem-trigger mode. |
|
Marauder synth-panel WebSocket layer.
|
Marauder synth-panel WebSocket layer. |
|
Package webhook dispatches PromptZero lifecycle events as outbound HTTP POSTs.
|
Package webhook dispatches PromptZero lifecycle events as outbound HTTP POSTs. |
|
Package wireguard decodes WireGuard UDP packets per the official protocol specification at https://www.wireguard.com/protocol/.
|
Package wireguard decodes WireGuard UDP packets per the official protocol specification at https://www.wireguard.com/protocol/. |
|
Package wordlists embeds PromptZero's built-in wordlists and exposes them as MCP resources via promptzero://wordlists/<name> URIs.
|
Package wordlists embeds PromptZero's built-in wordlists and exposes them as MCP resources via promptzero://wordlists/<name> URIs. |
|
Package workflows implements composite pentest flows that orchestrate several Flipper primitives + LLM reasoning behind a single LLM-callable tool.
|
Package workflows implements composite pentest flows that orchestrate several Flipper primitives + LLM reasoning behind a single LLM-callable tool. |
|
Package wsframe decodes WebSocket frames per RFC 6455.
|
Package wsframe decodes WebSocket frames per RFC 6455. |
|
Package x509decode parses X.509 certificates into a structured view — the natural complement to tls_handshake_decode (whose Certificate handshake-message body is surfaced as raw hex).
|
Package x509decode parses X.509 certificates into a structured view — the natural complement to tls_handshake_decode (whose Certificate handshake-message body is surfaced as raw hex). |
|
Package zigbee decodes Zigbee Network Layer (NWK) frames — the layer that sits on top of IEEE 802.15.4 MAC frames in the Zigbee stack.
|
Package zigbee decodes Zigbee Network Layer (NWK) frames — the layer that sits on top of IEEE 802.15.4 MAC frames in the Zigbee stack. |
Click to show internal directories.
Click to hide internal directories.