OPERATOR ROOM

An authorized, evidence-first workspace for planning, running, and reviewing offensive security assessments.

Open Operator Room

Workspace Overview

Operator Room brings engagement scoping, active reconnaissance, provider telemetry, structured evidence, and assessment execution into a single authenticated command center. It empowers operators to make informed, reproducible decisions with real-time auditability.

The platform never obscures partial failures: timeouts, disconnected connectors, or truncated outputs are presented as explicit audit flags rather than falsified clean scans.

Authorized Use Mandatory

Execute scans exclusively against targets for which you possess explicit, documented legal authorization. Engagement ID, client authorization tokens, rate boundaries, and operator credentials are permanently embedded in the audit stream.

Operator-Led

Access Control

Scoped Cloud / Connector

Execution Model

100% Cryptographic Audit

Provenance

Assessment Workflow

Scope & Authorization

PHASE 01

Create an engagement record with verified IP ranges, hostnames, authorization references, time windows, and rate budgets before any active scan is dispatched.

Gated Verification

Verified Asset Inventory

PHASE 02

Collect scoped OSINT, network services, open ports, and web application assets. Every asset retains provenance tags, timestamps, confidence scores, and warnings.

Gated Verification

Pre-Assessment Validation

PHASE 03

Vulnerability checks require an explicitly approved inventory. Expired or out-of-scope targets are surfaced as blocked states rather than deceptive false successes.

Gated Verification

Evidence & Report Export

PHASE 04

Generate session reports containing coverage metrics, raw execution outputs, vulnerability evidence, CVSS risk ratings, and actionable remediation guidance.

Gated Verification

Execution Modes

Public & Cloud Targets

Hosted nodes execute validated public reconnaissance, DNS enumeration, TLS inspections, and external vulnerability checks through dedicated egress gateways.

  • Egress IP rotation & health monitoring
  • Strict CIDR whitelist validation
  • Automated rate limit throttling
Private & Air-Gapped Labs

Local environments connect via the cryptographically paired ganga-agent daemon. Traffic stays on your network while telemetry syncs securely.

  • mTLS paired session tokens
  • Zero inbound firewall exceptions
  • Local hardware & OT/ICS network scan support

Safety & Safety Boundaries

  • Reconnaissance operates in read-only mode by default. Active discovery requires explicit operator approval.
  • ARES is an integrated orchestrator; its health status is displayed in real-time. Tool deployment does not bypass licensing or authorization gates.
  • Offensive C2, credential replay, and post-exploitation are strictly restricted to enrolled cyber range fixtures and dedicated enterprise agreements.
  • AI advisory suggestions are non-destructive. Operators retain full execution control and verify all raw findings before publishing reports.

Evidence & Audit Trail

Every observation within Operator Room conforms to an immutable JSON schema containing target metadata, execution hashes, tool versioning, and operator credentials.

{
  "engagement_id": "eng_2026_981a0f",
  "operator": "bh4nu@gangaoffensiveops.com.np",
  "timestamp": "2026-08-25T23:15:00Z",
  "scope": {
    "target": "target.corp.internal",
    "authorization_ref": "AUTH-2026-SEC-092",
    "valid_until": "2026-08-30T00:00:00Z"
  },
  "finding": {
    "vulnerability_id": "CVE-2026-11892",
    "confidence": 0.98,
    "evidence_hash": "sha256:d8b2...4f91",
    "remediation_status": "open"
  }
}

Resources & Next Steps

Read DocumentationHacker AI GuideContact Support