.env.example

# Claude API Configuration
ANTHROPIC_API_KEY=sk-ant-...

# Authorization (CRITICAL - Security Control)
AUTHORIZED_TARGETS=10.10.10.3,192.168.1.0/24
SCAN_AUTHORIZATION_TOKEN=SEC-20251220-TENCENT-AH

# Database Configuration
DATABASE_PATH=./data/audit.db
DATABASE_TYPE=sqlite

# Logging Configuration
LOG_LEVEL=info
LOG_PATH=./logs
AUDIT_LOG_RETENTION_DAYS=365

# Rate Limiting
EXPLOIT_DB_MAX_REQUESTS_PER_MINUTE=10
NMAP_MAX_CONCURRENT_SCANS=3

# Tool Paths (adjust for your system)
NMAP_PATH=/usr/bin/nmap
DIRBUSTER_PATH=/usr/bin/dirb
METASPLOIT_PATH=/usr/bin/msfconsole
SEARCHSPLOIT_PATH=/usr/bin/searchsploit

# Agent Configuration
AGENT_MODEL=claude-opus-4-5-20251101
AGENT_MAX_TURNS=50
AGENT_MAX_BUDGET_USD=25.00
PERMISSION_MODE=default

# Monitoring Server Configuration
MONITOR_PORT=3000
ENABLE_MONITORING=true

# PoC Database Configuration
POC_DATABASE_PATH=./data/poc-database.db

# Parallel Execution Configuration
MAX_CONCURRENT_TOOLS=5
TOOL_TIMEOUT_MS=300000

# Machine Learning Configuration (Phase 4)
ML_MODEL_PATH=./models/vuln-predictor.json
ENABLE_ML_PREDICTIONS=false

# RAG Knowledge System Configuration (Phase 5)
# Set to "true" to enable RAG-based knowledge retrieval from writeups
# When enabled, agent can search past writeups for exploitation techniques
ENABLE_RAG=false
KNOWLEDGE_DATABASE_PATH=./data/knowledge.db

# Hybrid Model Agent Configuration
# Execution mode: "full" = complete execution, "plan_only" = stop at attack plan (HITL)
HYBRID_MODE=full
# Max standard exploit attempts before fallback to custom exploit
MAX_EXPLOIT_ATTEMPTS=3
# Max custom exploit attempts before termination
MAX_CUSTOM_EXPLOIT_ATTEMPTS=3
# Attacker IP for reverse shells (used in exploitation)
LHOST=
# Attacker port for reverse shells
LPORT=4444

# Additional Tool Paths (Phase 2-4)
TESTSSL_PATH=/usr/local/bin/testssl.sh
SQLMAP_PATH=/usr/bin/sqlmap
NUCLEI_PATH=/usr/bin/nuclei
HYDRA_PATH=/usr/bin/hydra