Redc Skills - AI Operations Guide

Multi-cloud red team infrastructure automation tool built on Terraform.

Quick Reference

Config: ~/redc/config.yaml | Templates: ~/redc/redc-templates/ | Docs: https://github.com/wgpsec/redc

Configuration

yaml
1providers:
2  aws:
3    AWS_ACCESS_KEY_ID: "KEY"
4    AWS_SECRET_ACCESS_KEY: "SECRET"
5    region: "us-east-1"
6  aliyun:
7    ALICLOUD_ACCESS_KEY: "KEY"
8    ALICLOUD_SECRET_KEY: "SECRET"
9    region: "cn-hangzhou"
10  tencentcloud:
11    TENCENTCLOUD_SECRET_ID: "ID"
12    TENCENTCLOUD_SECRET_KEY: "KEY"
13    region: "ap-guangzhou"

Env vars: Set AWS_ACCESS_KEY_ID, ALICLOUD_ACCESS_KEY, TENCENTCLOUD_SECRET_ID, etc. if config.yaml unavailable.

Global Flags

Commands

Setup

bash
1redc init                           # Initialize templates
2redc pull <image>                   # Download template (e.g., aliyun/ecs)
3redc image ls                       # List local templates

Deploy

bash
1redc run <template> -n <name> -e key=val    # Plan & start (create infrastructure)
2redc plan <template> -n <name>              # Plan only (preview without creating)
3redc start <case-id>                        # Start case (create infrastructure)

Manage

bash
1redc ps                             # List all cases
2redc status <case-id>               # Check status
3redc stop <case-id>                 # Stop infrastructure
4redc kill <case-id>                 # Stop & remove
5redc rm <case-id>                   # Remove case

Execute

bash
1redc exec <case-id> <command>       # Run command
2redc exec -t <case-id> bash         # Interactive shell
3redc cp <src> <case-id>:<dest>      # Upload file
4redc cp <case-id>:<src> <dest>      # Download file

Workflows

Quick Deploy:

bash
1redc pull aliyun/ecs && redc init
2redc run aliyun/ecs -n myserver -e password=Pass123
3# Returns case-id (e.g., 8a57078ee856)
4redc exec 8a57078ee856 whoami

Controlled:

bash
1redc plan aws/ec2 -n staging
2# Review the planned resources, then:
3redc start <case-id>
4redc cp deploy.sh <case-id>:/root/
5redc exec <case-id> "bash /root/deploy.sh"

Cleanup:

bash
1redc stop <case-id> && redc rm <case-id>
2# Or: redc kill <case-id>

Automation

python
1import subprocess, re
2
3def redc_run(template, name, env=None):
4    cmd = ["redc", "run", template, "-n", name]
5    if env:
6        for k, v in env.items():
7            cmd.extend(["-e", f"{k}={v}"])
8    result = subprocess.run(cmd, capture_output=True, text=True, check=True)
9    match = re.search(r'[a-f0-9]{12,64}', result.stdout)
10    return match.group(0) if match else None
11
12# Usage
13case_id = redc_run("aliyun/ecs", "auto_deploy", {"password": "Secure123"})

Output Patterns

• Success: ✅ in output
• Error: ❌ in output
• Case ID: [a-f0-9]{64} (use first 12 chars)
• Status: running, stopped, created, error

Error Handling

JSON Schemas

Case:

json
1{
2  "id": "string[64]",
3  "name": "string",
4  "template": "string",
5  "status": "running|stopped|created|error",
6  "outputs": {"public_ip": "string"}
7}

Config:

json
1{
2  "providers": {
3    "aws": {"AWS_ACCESS_KEY_ID": "string", "region": "string"}
4  }
5}

Best Practices

• Use short IDs (first 12 chars)
• Assign meaningful names: <project>_<purpose>_<env>
• Always cleanup: redc stop → redc rm
• Use --debug for troubleshooting
• Never commit config.yaml to version control
• Monitor costs with redc ps

Resources

• Repo: https://github.com/wgpsec/redc
• Templates: https://github.com/wgpsec/redc-template
• Online: https://redc.wgpsec.org/