summarylogtreecommitdiffstats
path: root/README.native-port.md
blob: a4cf3b20796b215b620c1522de3f093c9b9f98be (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
pentest-ghostwriter is a local-first Arch Linux port of Ghostwriter adapted for single-user offensive security workflows on a workstation.

Ghostwriter itself is an offensive security reporting and project management platform. It is also known from Kali Linux packaging, but this package is an unofficial Arch adaptation that defaults to localhost-only single-user behavior.

Package goals

local-first desktop workflow on Arch Linux
localhost-only default bind
single-user default behavior
automatic localhost login enabled by default
desktop launchers for starting and stopping Ghostwriter
no hardcoded public credentials in the package

First-time setup

Run:
sudo pentest-ghostwriter-init

This initializes PostgreSQL, Valkey, the Python runtime, Ghostwriter frontend assets, database migrations, and the local services.

Login behavior

By default this package enables Local Trust Mode.

Requests from 127.0.0.1 and ::1 are logged in automatically.
Login, logout, password reset, and password change routes are redirected back to /home/.
This is intended for local single-user workstation usage only.

If you want the standard Ghostwriter login flow instead, run:
sudo pentest-ghostwriter-init --no-local-trust

When standard login mode is used, generated admin credentials are written to:
 /etc/pentest-ghostwriter/admin-credentials

Desktop launchers

The package installs two English desktop entries:
Ghostwriter
Stop Ghostwriter

The main launcher opens http://127.0.0.1:8000/home/ and starts services on demand when needed.

Services

The local package flow uses these services:
postgresql
valkey
pentest-ghostwriter-web.service
pentest-ghostwriter-queue.service
pentest-ghostwriter-collab.service

Hasura and GraphQL remain optional for this local Arch port.