Data Management

RTFMv2 provides comprehensive data organization features including host details, checklists, mindmaps, and the CrackMapExec interface for Active Directory enumeration.

Overview

Data management features include:

  • Host Details Tab: Comprehensive view of target information
  • Checklists: Guided, data-driven testing workflows
  • Mindmaps: Visual organization of engagement structure
  • CrackMapExec Interface: Streamlined AD enumeration
  • Reverse Shells: Data-driven shell management
  • Code Snippets: Quick access to common commands
  • Reporting: Export findings and generate documentation

Host Details Tab

Centralized view of all information collected about a specific host.

Accessing Host Details

From Session:

  1. Navigate to "Hosts" view
  2. Click on any host IP address or hostname
  3. Host Details tab opens

Quick Access:

  • Double-click host in network map
  • Right-click in scan results → "View Details"
  • Search for host and click result

Host Overview Panel

Summary Information:

Basic Details:

  • IP address
  • Hostname (if resolved)
  • MAC address
  • First seen / Last seen timestamps

Operating System:

  • OS type and version
  • OS fingerprint confidence
  • Kernel version
  • Architecture (32-bit/64-bit)

Status:

  • Current state (up/down/unknown)
  • Reachability
  • Last successful ping
  • Uptime (if detected)

Tags and Notes:

  • Custom tags for organization
  • Free-form notes
  • Screenshot attachments
  • Links to related hosts

Services Tab

Discovered Services:

Service List:

For each open port: - Port number and protocol - Service name - Service version - Banner information - State (open/closed/filtered) - Last checked timestamp

Service Details:

Click on service for expanded information: - Full banner - SSL certificate details (if HTTPS) - Supported authentication methods - Known vulnerabilities (auto-matched) - Recommended exploits

Service Actions:

Right-click on service: - Run service-specific scans - Test default credentials - Launch exploit - Open in console - Add to checklist

Data-Driven Checklists

Guided testing workflows that adapt to discovered data.

Using Checklists

Pre-built Checklists:

RTFMv2 includes checklists for common scenarios:

Engagement Types:

  • External Network Penetration Test
  • Internal Network Assessment
  • Web Application Test
  • Wireless Assessment
  • Social Engineering
  • Physical Security
  • Red Team Operation

Checklist Interface

Opening a Checklist:

  1. Navigate to "Checklists" menu
  2. Select checklist or create new
  3. Checklist panel opens

Mindmaps

Visual organization of engagement structure and findings.

Navigation:

  • Pan: Click and drag background
  • Zoom: Scroll wheel
  • Collapse/expand branches: Click node icon
  • Focus: Double-click to center on node

CrackMapExec Interface

Streamlined interface for Active Directory enumeration with CrackMapExec.

Enumeration Modules

SMB Enumeration:

  • Shares and permissions
  • Sessions
  • Logged-on users
  • Local users
  • Groups
  • Domain information

Domain Enumeration:

  • Users
  • Groups
  • Computers
  • Domain controllers
  • Password policy
  • Trusts

Credential-Based:

  • Pass-the-Hash
  • Kerberoasting
  • AS-REP Roasting
  • Unconstrained delegation
  • LAPS passwords

Reverse Shells

Data-driven reverse shell management and listeners.

Shell Types

Supported Shells:

  • Netcat
  • Bash/Zsh
  • PowerShell
  • Python
  • PHP
  • MSFVenom payloads
  • Custom shells

Listener Management

Data-Driven Listeners:

Automatically suggest listeners based on: - Target OS (from scans) - Open ports (firewall evasion) - Available services (upload mechanisms)

Shell Library

Pre-built Shells:

Library of common reverse shell payloads: - Categorized by language/platform - Customizable (IP, port) - Copy to clipboard - Generate listener automatically

Custom Shells:

  • Save custom payloads
  • Parameterize for reuse
  • Share with team

Code Snippets

Quick access to common commands and code.

Next Steps

With data organized and managed: