# Clone the repository
git clone https://github.com/chAng-L19/codex-redteam-mode.git
cd codex-redteam-mode

# Run installer
python scripts/install.py

# Navigate to project directory
cd codex-redteam-mode

# Run installer with execution policy bypass
powershell -ExecutionPolicy Bypass -File .\scripts\install.ps1

# Ensure Python 3 is available
python3 scripts/install.py

# Run validation script
python scripts/validate.py

# Or run full test suite
python -m unittest discover -s tests -p "test_*.py"

# Full command
/redteam on

# Light mode (targeted security analysis)
/redteam light

# Full mode (complete red team workflow)
/redteam full

# Natural language
enable red team mode
Enter Red Team Mode

# Command
/redteam off

# Natural language
disable red team mode
Exit Red Team Mode

# Query current state
what mode am I in?
show red team status

phase -> router -> pack -> leaf

# In red team mode, analyze a web application
"""
/redteam full

I need to assess a web application at https://target.example.com (authorized)
Focus on:
- Authentication mechanisms
- Session management
- Input validation
- API endpoints
"""

# The AI will route through: web -> api -> injection -> leaf
# Providing structured analysis with appropriate techniques

# Enable red team mode for AD testing
"""
/redteam full

Analyzing Active Directory environment (authorized pentest)
- Domain: corp.example.local
- Current access: low-privilege domain user
- Goal: privilege escalation paths
"""

# Routes through: ad -> enum -> privesc -> pack

# Light mode for code review
"""
/redteam light

Review this authentication function for security issues:

def authenticate(username, password):
    query = f"SELECT * FROM users WHERE username='{username}' AND password='{password}'"
    result = db.execute(query)
    return result.fetchone()

### Payload Development

```python
# Full mode for payload creation
"""
/redteam full

Need to create a Python reverse shell payload that:
- Connects to ${C2_SERVER}:${C2_PORT} (env vars)
- Evades basic AV signature detection
- Works on Windows 10+
- Maintains persistence
"""

# Routes through: payload -> evasion -> windows -> leaf

.codex/runtime/redteam_state.json

{
  "mode": "redteam-full",
  "phase": "web",
  "router": "injection",
  "pack": "sqli",
  "session_id": "uuid-here",
  "timestamp": "2026-05-19T12:34:56Z"
}

{
  "redteam": {
    "enabled": false,
    "mode": "normal",
    "phases": ["web", "ad", "postex", "reverse", "code-audit", "payload", "evasion"],
    "routing": "phase-router-pack-leaf"
  }
}

# Example: Adding a custom "wireless" phase
# Edit runtime/routing.json

{
  "phases": {
    "wireless": {
      "routers": ["wifi", "bluetooth", "rfid"],
      "packs": {
        "wifi": ["wpa", "wep", "wps", "evil-twin"],
        "bluetooth": ["ble", "classic", "pairing"]
      }
    }
  }
}

# Check if files were properly injected
ls -la .codex/AGENTS.md
cat .codex/hooks.json | grep redteam

# Re-run installer with verbose output
python scripts/install.py --verbose

# Clean install (removes all managed blocks first)
python scripts/install.py --clean

# Verify runtime state
cat .codex/runtime/redteam_state.json

# Check hooks are loaded
python -c "import json; print(json.load(open('.codex/hooks.json'))['redteam'])"

# Force mode switch
/redteam off
/redteam full

# Run specific test
python -m unittest tests.test_routing

# Check installer integrity
python scripts/validate.py --check-install

# Verify phase detection
python scripts/validate.py --test-phases

# Ensure clean mode switch
/redteam off

# Verify state
python -c "import json; print(json.load(open('.codex/runtime/redteam_state.json'))['mode'])"

# Should output: "normal"

# Always document scope
"""
AUTHORIZATION:
- Client: Example Corp
- Scope: https://test.example.com
- Date: 2026-05-20 to 2026-05-27
- Contact: security@example.com
"""

# Using with Model Context Protocol tools
"""
/redteam full

Using ${MCP_TOOL_NMAP} scan:
- Target: ${TARGET_NETWORK}
- Ports: 1-65535
- Service detection enabled
- Output: XML format
"""

# Light mode for automated security review
"""
/redteam light

Analyze this PR for security issues:
- Changes in auth/* files
- New API endpoints
- Database query modifications
"""