# Clone
git clone https://github.com/YOUR_USER/flight-risk.git
cd flight-risk

# Install dependencies
pip install -r react2shell-scanner/requirements.txt
pip install pyyaml   # for gcp-ioc-scanner

# Make scripts executable
chmod +x react2shell-scanner/bin/*
chmod +x gcp-ioc-scanner/gcp-ioc-scanner
chmod +x gcp-log-correlator/gcp-log-correlator

# Authenticate
gh auth login                          # GitHub scanning
gcloud auth application-default login  # GCP scanning + log analysis

react2shell-scanner/bin/scan-github \
  --org YOUR_GITHUB_ORG \
  --output ./results/github

react2shell-scanner/bin/scan-gcp \
  --project YOUR_GCP_PROJECT \
  --output ./results/gcp

react2shell-scanner/bin/scan-all \
  --org YOUR_GITHUB_ORG \
  --project YOUR_GCP_PROJECT \
  --output ./results

python3 react2shell-scanner/cli.py https://your-app.example.com

# Dry run — show payload without sending
python3 react2shell-scanner/cli.py --dry-run --verbose https://your-app.example.com

# Read file via RCE
python3 react2shell-scanner/cli.py --method read-file https://your-app.example.com /etc/hostname

# List directory via RCE
python3 react2shell-scanner/cli.py --method list-dir https://your-app.example.com /app

# Execute command via RCE
python3 react2shell-scanner/cli.py --method exec-cmd https://your-app.example.com "id"

# Batch targets
python3 react2shell-scanner/cli.py --targets targets.txt --output results.json

gcp-ioc-scanner/gcp-ioc-scanner \
  --targets gcp-ioc-scanner/examples/targets-example.yaml \
  --iocs gcp-ioc-scanner/iocs/cve-2025-55182.yaml \
  --start 2026-01-01 \
  --end 2026-04-01 \
  --output ./results/ioc-scan

gcp-log-correlator/gcp-log-correlator \
  --project YOUR_GCP_PROJECT \
  --namespace frontend \
  --pod-pattern "web-app.*" \
  --trigger-filter 'severity=ERROR' \
  --preceding-filter 'httpRequest.requestMethod:*' \
  --window 30s \
  --start 2026-04-01T00:00:00Z \
  --end 2026-04-02T00:00:00Z \
  --format json,markdown \
  --output ./results/correlation

cd react2shell-scanner
docker compose -f docker/docker-compose.yml build
docker compose -f docker/docker-compose.yml run scanner-shell

flight-risk/
├── README.md
├── LICENSE
├── react2shell-scanner/
│   ├── bin/                        # scan-github, scan-gcp, scan-all
│   ├── cli.py                      # Exploit testing CLI
│   ├── exploit.py                  # Exploitation logic
│   ├── utils.py                    # Shared utilities
│   ├── lib/                        # Shell + Python helpers
│   ├── vuln-defs/                  # Pluggable vulnerability definitions
│   ├── docker/                     # Containerized scanning
│   ├── examples/                   # Example scripts
│   ├── test-app/                   # Vulnerable Next.js fixture
│   └── requirements.txt
├── gcp-ioc-scanner/
│   ├── gcp-ioc-scanner             # IOC log scanner
│   ├── iocs/                       # IOC pattern definitions
│   └── examples/                   # Target config examples
└── gcp-log-correlator/
    ├── gcp-log-correlator          # Event correlator
    └── examples/                   # Correlation examples