Engagement Setup
Initialize a new engagement workspace with target configuration, plugin selection, tool verification, and tailored project files.
Quick Start
Run /setup to start the interactive wizard, or /setup <engagement-name> to skip the name prompt.
What Gets Created
| File | Purpose | | ----------------- | ----------------------------------------------------------------------------- | | engagement.json | Central engagement config — name, targets, plugins, opsec profile, timestamps | | CLAUDE.md | Tailored guidance for this engagement — active plugins, commands, workflows | | README.md | Human-readable engagement overview and status tracker | | scope.md | Formal scope definition — in-scope, out-of-scope, rules of engagement | | targets.jsonl | Structured target list with types (domain, ip, cidr, org, individual) | | .gitignore | Runtime data file ignore patterns for all active plugins |
Plugin-Aware Setup
The setup process knows about all fsociety plugins and will:
- Check tool dependencies — Runs each plugin's tool-checker (Tier 1/2/3)
- Tailor CLAUDE.md — Only includes commands and skills for active plugins
- Configure OPSEC profiles — Maps unified profile (surface/standard/paranoid) to each plugin's native profiles
- Detect cross-plugin pipelines — Documents tyrell→elliot data flows when both are active
- Generate goal-specific workflows — Suggests first commands based on engagement goals
Available Plugins
| Plugin | Domain | Agents | | ----------- | -------------------------- | -------------- | | elliot | Web & Application Security | scout, darlene | | romero | Reverse Engineering | cipher | | trenton | Operational Security | ghost, cleaner | | tyrell | Leak Database Hunting | joanna, scott |
OPSEC Profiles
| Profile | Description | Timing | | ---------- | --------------------------------- | ------------- | | surface | No anonymity, max speed — lab/CTF | Immediate | | standard | Basic precautions, moderate speed | 1-5s delays | | paranoid | Full anonymity, Tor/VPN required | 10-60s delays |
Re-Running Setup
Running /setup in a directory with an existing engagement.json will offer to:
- Update targets, plugins, or scope (non-destructive)
- Re-check tools for newly added plugins
- Regenerate CLAUDE.md and README.md with updated configuration
- Append new targets to targets.jsonl (SHA256 deduplication prevents duplicates)
Additional Resources
references/engagement-guide.md— Target taxonomy, scope best practices, plugin selection matrix, cross-plugin pipelines