From 7da9722368755e6e957ba21b0f8f5586b5da1b49 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Jul 2026 16:43:20 +0000 Subject: [PATCH 1/3] docs: add Parallels Tools setup section to the guide page Documents the opt-in pt-install flow (attach CD -> pt-install -> reboot), what the helper fixes automatically (noexec remount, kernel headers, libfuse2t64 shim), and the kernel-header abort recovery path. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01QZaFM9UGEhsfHQnrD7HD3m --- docs/index.html | 36 ++++++++++++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/docs/index.html b/docs/index.html index 2023fad..650070a 100644 --- a/docs/index.html +++ b/docs/index.html @@ -213,6 +213,7 @@ install command deck pe workspace + parallels kali docker box @@ -339,6 +340,41 @@

An encrypted memory for the box.

+ +
+
+ parallels guest +

Parallels Tools, without the noexec fight.

+
+

Running the arsenal in a Parallels Kali VM on Apple Silicon? Parallels Tools buys you the Mac ↔ VM shared clipboard the BSPWM rice leans on, plus drag-and-drop, dynamic resolution and shared folders. Its stock installer routinely dies on Kali — so the bundled pt-install helper does it for you. It's opt-in: voidwalker env drops pt-install onto your PATH but never runs it unprompted.

+ +
+
+
1

Attach the CD

+
parallels menu
+ 
# in the Parallels menu bar, with the VM focused:
+#   Actions → Install Parallels Tools
+# this mounts the Tools CD inside the guest
+
+
+
2

Install

+
inside the kali guest
+ 
pt-install                    # self-elevates — do NOT prefix sudo
+# …or straight from the pentest-env checkout:
+./install.sh --parallels-tools
+
+
+
3

Reboot

+
inside the kali guest
+ 
sudo reboot                 # loads the prl_fs / prl_eth modules
+# clipboard + shared folders work after this
+
+
+ +

What pt-install fixes for you: it unmounts the auto-mounted Tools CD and remounts it with exec (Kali mounts it noexec, so the stock ./install can't execute), pulls the linux-headers matching your running kernel, and satisfies Parallels' hardcoded libfuse2 dependency with a libfuse2t64 shim on time64 Kali.

+

If it aborts on kernel headers: your running kernel is newer than the packaged headers. Run sudo apt update && sudo apt full-upgrade -y && sudo reboot, then re-run pt-install. Handy flags: pt-install --mount-only just remounts the CD so you can run ./install yourself; --no-deps skips the apt step.

+
+
From b35cc6a46ccd20230883eac6e26c3d8efcf83f56 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Jul 2026 16:43:20 +0000 Subject: [PATCH 2/3] fix(parallels-tools): self-elevate via 'bash $0' so the vendored copy works The vendored copy shipped inside the package is mode 644 and voidwalker runs it as 'bash parallels-tools.sh'. The self-elevation re-exec'd 'sudo -E ... "$0"', which makes sudo treat the non-executable path as a command and die with 'command not found'. Re-exec through 'bash "$0"' so it works regardless of the file's exec bit. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01QZaFM9UGEhsfHQnrD7HD3m --- .../assets/pentest-env/config/scripts/parallels-tools.sh | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/voidwalker/integrations/assets/pentest-env/config/scripts/parallels-tools.sh b/voidwalker/integrations/assets/pentest-env/config/scripts/parallels-tools.sh index b9a4a96..09363f2 100644 --- a/voidwalker/integrations/assets/pentest-env/config/scripts/parallels-tools.sh +++ b/voidwalker/integrations/assets/pentest-env/config/scripts/parallels-tools.sh @@ -44,9 +44,14 @@ done [ "$(uname -s)" = Linux ] || die "this script is for the Kali guest, not the host." # --- self-elevate to root (mounting + module install need it) --------------- +# Re-exec through `bash "$0"` rather than `sudo "$0"`: when this script is run +# as a bare file that lacks the exec bit (e.g. the copy vendored inside the +# voidwalker package, launched via `bash parallels-tools.sh`), `sudo "$0"` +# treats the path as a command and dies with "command not found". Invoking the +# interpreter explicitly works whether or not the file is executable. if [ "$(id -u)" -ne 0 ]; then info "elevating with sudo..." - exec sudo -E PT_MOUNT="$MOUNT_TARGET" "$0" \ + exec sudo -E PT_MOUNT="$MOUNT_TARGET" bash "$0" \ $( [ "$MOUNT_ONLY" = 1 ] && printf -- --mount-only ) \ $( [ "$WITH_DEPS" = 0 ] && printf -- --no-deps ) fi From 8805af13f7263f0fef857fa5a0dfb4a7818e90c8 Mon Sep 17 00:00:00 2001 From: Claude Date: Thu, 2 Jul 2026 16:57:31 +0000 Subject: [PATCH 3/3] docs: expand the guide page to cover the whole toolkit Adds an overview of the three folded-in engines, an arsenal/categories section, the full BSPWM rice + zsh/tmux environment (deploy flags, what it installs, the 'not Starship' prompt note, login steps and a keymap table), a pimpmykali kali-fix section, pe shell-sugar/fzf widgets, and shodan/pt command cards. Adds kbd/pill/feature-list styles and the matching nav links. Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01QZaFM9UGEhsfHQnrD7HD3m --- docs/index.html | 189 +++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 186 insertions(+), 3 deletions(-) diff --git a/docs/index.html b/docs/index.html index 650070a..40cfc76 100644 --- a/docs/index.html +++ b/docs/index.html @@ -199,6 +199,23 @@ .grid2,.steps{grid-template-columns:1fr} .nav__links{display:none} } + +/* keycaps for the keybinding tables */ +kbd{font-family:var(--f-mono); font-size:12px; line-height:1; display:inline-block; padding:3px 7px; margin:1px 0; + border-radius:6px; background:var(--overlay); border:1px solid var(--hl-high); border-bottom-width:2px; + color:var(--text); white-space:nowrap} +.kbd-tbl td{vertical-align:top} +/* pill list (kali fixes, plugin chips) */ +.pills{display:flex; gap:8px; flex-wrap:wrap; margin-top:6px} +.pill{font-family:var(--f-mono); font-size:12.5px; padding:6px 11px; border-radius:999px; background:var(--surface); + border:1px solid var(--hl-high); color:var(--subtle)} +.pill b{color:var(--pine); font-weight:600} +/* feature list */ +.flist{list-style:none; margin:8px 0 0; padding:0} +.flist li{position:relative; padding:7px 0 7px 22px; font-size:14.5px; color:var(--subtle); border-bottom:1px solid var(--hl-med)} +.flist li:last-child{border-bottom:0} +.flist li::before{content:"▹"; position:absolute; left:2px; color:var(--foam)} +.flist b{color:var(--text); font-weight:600} @@ -210,11 +227,15 @@ VOIDWALKER
+ overview install - command deck - pe workspace + arsenal + commands + pe + rice + kali fix parallels - kali docker box + docker
@@ -252,6 +273,37 @@

VOIDWALKER

+ +
+
+ overview +

Three engines, one command.

+
+

VoidWalker folds two former standalone projects into itself and drives them through one themed CLI. The engines are vendored inside the package — nothing to clone separately — and every install path is architecture-aware (amd64 · arm64 · armv7).

+ +
+
arsenal

voidwalker

The arsenal builder: 400+ arch-aware offensive tools, a C# source-build pipeline, offline CVE / NSE / Exploit-DB search, and Obsidian engagement vaults.

voidwalker # interactive menu
+
harden

pimpmykali

The battle-tested “make a fresh Kali usable” engine — missing tooling, smb.conf, nmap scripts, Impacket, mirrors, root login and more.

voidwalker kali --newvm
+
workspace

pentest-env

An encrypted pe store for flags / creds / hosts / notes, plus a full Rosé-Pine zsh + tmux + BSPWM rice and in-terminal cheatsheets.

voidwalker env # deploy it
+
+ +
+
python3 voidwalker.py
+ 
[1]  Install Full Arsenal (400+ tools)
+[2]  Select Categories
+[3]  View All Tools
+[4]  System Packages (apt/brew)
+[5]  Windows Binaries Only
+[6]  Build C# Tools from Source
+[7]  Setup Pentest Obsidian Vault
+[8]  Fix / Harden Kali (pimpmykali)
+[9]  Deploy Pentest Environment (pe)
+[10] Setup BloodHound-CE
+[11] View Sources & Guides
+[12] Exit
+
+
+
@@ -287,6 +339,28 @@

Two ways in. uv is the fast one.

Architecture-aware: on ARM, tools with no native binary route to a go/cargo source build instead of grabbing an x86 build that can't run. voidwalker --dry-run prints the exact plan for your machine.

+ +
+
+ arsenal +

400+ tools, chosen for your CPU.

+
+

Menu [1] installs the lot; [2] lets you cherry-pick categories. On ARM, anything without a native binary routes to a go / cargo source build instead of a dead x86 download.

+ + + + + + + + + + + +
CategoryWhat it coversKey tools
Windows BinariesCompiled C# AD recon, cred extraction, lateral movementRubeus · Seatbelt · SharpHound · Certify
C# Build TargetsSource-to-binary compilation for OPSECADCSPwn · SharpSCCM · SauronEye
Maldev & EvasionLoaders, sleep obfuscation, shellcode runnersFreeze.rs · NimPlant · Ekko
C2 FrameworksCommand-and-control for post-exploitationHavoc · Mythic · Sliver · Empire
PowerShellMemory-resident scripts + AMSI bypassesPowerSploit · PowerView · Nishang
Cross-PlatformTunnels, proxies, relays across OS boundariesChisel · Ligolo-ng · Kerbrute · Fscan
+

Preview first: voidwalker --dry-run prints the exact per-architecture plan and downloads nothing; voidwalker selftest validates the catalog offline. Menu [7] scaffolds an Obsidian engagement vault under ~/voidwalker/Vault.

+
+
@@ -305,6 +379,8 @@

One CLI, the whole engagement.

graph

bloodhound

Install + start BloodHound-CE.

voidwalker bloodhound
pivot

proxy

Wire proxychains4 to a SOCKS pivot.

voidwalker proxy 127.0.0.1:1080
evidence

rec

Record a shell / capture screenshots.

voidwalker rec shell HTB-Cap
+
search

shodan

Shodan terminal query (SHODAN_API_KEY).

voidwalker shodan apache
+
parallels

pt

Install Parallels Tools in a Kali guest.

voidwalker pt
@@ -338,6 +414,113 @@

An encrypted memory for the box.

Shell sugar from the env: newbox Cap 10.10.10.245 registers a target and drops you into ~/htb/Cap; scan runs a recorded nmap; Ctrl-X f pastes a flag.

+ +
+
+
shell sugar (from the env)
+ 
newbox Cap 10.10.10.245   # add target + ~/htb/Cap/{nmap,loot,…}
+scan                     # recorded nmap -sCV into ./nmap
+useip                    # export $IP / $RHOST from active target
+ts                       # pe status · tl=target ls · fl=flag ls
+
+
+

One-letter aliases & fzf widgets wired into the prompt:

+ + + + + + + + +
t · f · c · h · npe target / flag / cred / host / note
Ctrl+X ffzf-pick a flag, paste its value at the cursor
Ctrl+X cfzf-pick a cred, paste the secret
Ctrl+X tfzf-switch the active target
tip · useipactive IP → clipboard / into $IP
+
+
+
+ + +
+
+ the rig +

BSPWM, zsh & tmux — Rosé Pine throughout.

+
+

One deploy lays down the window-manager rice and the shell together. voidwalker env runs the installer; the full run includes the BSPWM rice, the core run skips it. It's idempotent — safe to re-run.

+ +
+
+
deploy
+ 
voidwalker env                 # menu → [1] full install
+# …non-interactive equivalents:
+./install.sh                     # full: pe+zsh+tmux+theme+rice
+./install.sh --no-wm --no-theme   # core only (no rice)
+./install.sh --dry-run           # print actions, change nothing
+# more flags: --no-deps  --no-fonts  --no-plugins  --uninstall
+
+
+

What the full install lays down:

+
    +
  • BSPWM rice — bspwm · sxhkd · polybar · rofi · picom · dunst, symlinked into ~/.config, with a generated Rosé-Pine wallpaper.
    • +
  • Zsh — oh-my-zsh + zsh-autosuggestions, zsh-syntax-highlighting, zsh-you-should-use, fzf-tab (+ git / sudo / fzf / docker / tmux built-ins).
    • +
  • Prompt — a hand-written two-line Rosé-Pine prompt showing git branch + the active target.
    • +
  • Fonts + terminal — MesloLGS NF Nerd Font and a themed Alacritty config.
    • +
  • tmux — tpm + a Rosé-Pine status bar wired into ~/.tmux.conf.
    • +
+
+
+ +

Not Starship. People ask — the prompt is a custom, dependency-free zsh prompt (ZSH_THEME="", defined in prompt.zsh), not Starship or Powerlevel10k. It only borrows the MesloLGS NF font. All the zsh plugins listed above are installed automatically.

+ +

Log in to the rice

+

Log out, pick the bspwm session at the greeter, log back in — or for startx users: echo 'exec bspwm' >> ~/.xinitrc && startx. The mod key is Super (the ⊞ key).

+ + + + + + + + + + + + + +
KeysActionKeysAction
Super+Returnterminal (alacritty)Super+wclose window
Super+Spaceapp launcher (rofi)Super+Shift+wkill window
Super+Shift+ReturnbrowserSuper+t / s / ftiled / floating / fullscreen
Super+efile managerSuper+h/j/k/lfocus window (vim dirs)
Super+vclipboard historySuper+Shift+h/j/k/lmove window
Super+1–9switch desktopSuper+Shift+1–9send window to desktop
Print / Super+Printscreenshot full / regionSuper+Shift+epower menu
Super+Escapereload sxhkdSuper+Shift+rrestart bspwm
+

Full keymap lives in ~/.config/sxhkd/sxhkdrc — resize with Super+Alt+h/j/k/l, preselect splits with Super+Ctrl+h/j/k/l, and the media / volume / brightness keys are wired too.

+
+ + +
+
+ kali fix +

Make a fresh Kali usable.

+
+

The pimpmykali engine, folded in as voidwalker kali. It self-elevates with sudo and is Kali/Debian-only. Start with --newvm on a brand-new box, or open the submenu to cherry-pick.

+ +
+
+
voidwalker kali
+ 
voidwalker kali --newvm      # recommended first run
+voidwalker kali --all        # fix all (menu options 1-8)
+voidwalker kali --missing    # the usual missing tooling
+voidwalker kali              # curated submenu
+
+
+

Individual fixes you can pass straight through:

+
+ --missing tools + --nmap scripts + --smbconf LANMAN1 + --impacket + --golang +GOPATH + --netexec nxc + --root login + --mirrors fastest apt + --upgrade +guest-additions +
+

Any bare pimpmykali switch is forwarded verbatim — e.g. voidwalker kali --nmap --smbconf. Passing no switch opens the full upstream menu.

+
+