feat(feat): some wizzards and some suggester \n\n Version: release/0.2.116 \n\n with love \n\n LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n LazyOwn/ https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: jue 14 may 2026 21:48:55 -04 \n\n Hora: 1778809735

Author: grisuno

CHANGELOG.md

@@ -2,6 +2,13 @@
 # Changelog
 
 
+### Nuevas características
+
+### Otros
+
+  *   * feat(feat): some wizzards and some suggester \n\n Version: release/0.2.116 \n\n with love \n\n   LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: jue 14 may 2026 21:48:55 -04 \n\n Hora: 1778809735
+
+
 ### Nuevas características
 
 ### Otros

COMMANDS.md

@@ -200,7 +200,14 @@ Example:
 Fall through to the payload-aware completer for unhandled commands.
 
 ## preloop
-Print a session-start pro tip after the banner, once per session.
+Print a session-start pro tip and handle first-run setup.
+
+If ``sessions/theone`` does not exist this is the operator's first
+launch.  The shell will:
+  1. Run ``config_banner`` so the operator can customise the prompt.
+  2. Run ``wizard`` to populate the essential payload keys.
+  3. Print first-step suggestions (ping → lazynmap).
+  4. Create ``sessions/theone`` so subsequent launches skip setup.
 
 ## postloop
 Handle operations to perform after exiting the command loop.

README.md

@@ -3083,7 +3083,14 @@ Example:
 Fall through to the payload-aware completer for unhandled commands.
 
 ## preloop
-Print a session-start pro tip after the banner, once per session.
+Print a session-start pro tip and handle first-run setup.
+
+If ``sessions/theone`` does not exist this is the operator's first
+launch.  The shell will:
+  1. Run ``config_banner`` so the operator can customise the prompt.
+  2. Run ``wizard`` to populate the essential payload keys.
+  3. Print first-step suggestions (ping → lazynmap).
+  4. Create ``sessions/theone`` so subsequent launches skip setup.
 
 ## postloop
 Handle operations to perform after exiting the command loop.
@@ -12807,6 +12814,13 @@ No description available.
 # Changelog
 
 
+### Nuevas características
+
+### Otros
+
+  *   * feat(feat): recomended commands and some love \n\n Version: release/0.2.115 \n\n  \n\n   LazyOwn on HackTheBox: https://app.hackthebox.com/teams/overview/6429 \n\n  LazyOwn/   https://grisuno.github.io/LazyOwn/ \n\n \n\n Fecha: jue 14 may 2026 01:26:16 -04 \n\n Hora: 1778736376
+
+
 ### Nuevas características
 
 ### Otros

cli/reactive_hints.py

@@ -46,6 +46,45 @@
     }
 )
 
+# Ordered kill-chain: after running X, suggest Y (phase-agnostic sensible defaults)
+_KILL_CHAIN_NEXT: dict[str, list[str]] = {
+    "ping":          ["lazynmap", "arpscan", "hosts_discovery"],
+    "lazynmap":      ["gobuster", "ffuf", "enum4linux", "searchsploit"],
+    "rustscan":      ["gobuster", "ffuf", "enum4linux", "searchsploit"],
+    "nmap":          ["gobuster", "ffuf", "enum4linux", "searchsploit"],
+    "gobuster":      ["ffuf", "nikto", "whatweb", "feroxbuster"],
+    "ffuf":          ["nikto", "whatweb", "burpsuite", "sqlmap"],
+    "enum4linux":    ["crackmapexec", "secretsdump", "kerbrute"],
+    "crackmapexec":  ["secretsdump", "evil-winrm", "psexec"],
+    "secretsdump":   ["evil-winrm", "psexec", "hashcat"],
+    "linpeas":       ["pspy64", "find_suid", "sudo_privesc"],
+    "winpeas":       ["printspoofer", "juicypotato", "whoami_priv"],
+    "searchsploit":  ["lazynmap", "gobuster", "exploit_db"],
+    "kerbrute":      ["GetNPUsers", "GetUserSPNs", "crackmapexec"],
+    "nikto":         ["sqlmap", "burpsuite", "ffuf"],
+    "whatweb":       ["gobuster", "nikto", "burpsuite"],
+    "feroxbuster":   ["ffuf", "nikto", "whatweb"],
+    "sqlmap":        ["burpsuite", "ffuf", "wfuzz"],
+    "hashcat":       ["evil-winrm", "ssh", "crackmapexec"],
+    "john":          ["evil-winrm", "ssh", "crackmapexec"],
+    "evil-winrm":    ["winpeas", "secretsdump", "mimikatz"],
+    "ssh":           ["linpeas", "pspy64", "sudo_privesc"],
+    "ftp":           ["gobuster", "enum4linux", "searchsploit"],
+    "smb":           ["enum4linux", "crackmapexec", "secretsdump"],
+    "responder":     ["crackmapexec", "hashcat", "secretsdump"],
+}
+
+_PHASE_PRIORITY: dict[str, list[str]] = {
+    "recon":   ["ping", "lazynmap", "rustscan", "arpscan", "whois"],
+    "enum":    ["gobuster", "ffuf", "enum4linux", "nikto", "whatweb", "feroxbuster", "kerbrute"],
+    "exploit": ["searchsploit", "crackmapexec", "sqlmap", "burpsuite", "evil-winrm"],
+    "privesc": ["linpeas", "winpeas", "pspy64", "sudo_privesc", "printspoofer"],
+    "lateral": ["crackmapexec", "evil-winrm", "chisel", "secretsdump", "psexec"],
+    "cred":    ["hashcat", "john", "responder", "kerbrute", "secretsdump"],
+    "postexp": ["linpeas", "winpeas", "mimikatz", "secretsdump", "whoami_priv"],
+    "exfil":   ["download_c2", "nc", "curl", "scp", "rsync"],
+}
+
 _MAX_LABEL_LEN: int = 24
 _HINT_CONSOLE: Console = Console(stderr=False, highlight=False, soft_wrap=True)
 
@@ -118,4 +157,78 @@ def _render(labels: list[str]) -> None:
     _HINT_CONSOLE.print(hint)
 
 
-__all__ = ["SKIP_COMMANDS", "render_inline_hints"]
+def _read_run_commands(sessions_dir: str = "sessions") -> set[str]:
+    """Return the set of command names already executed this session."""
+    import csv
+    from pathlib import Path
+
+    path = Path(sessions_dir) / "LazyOwn_session_report.csv"
+    seen: set[str] = set()
+    if not path.exists():
+        return seen
+    try:
+        with path.open("r", encoding="utf-8", errors="ignore") as fh:
+            reader = csv.DictReader(fh)
+            for row in reader:
+                for col in ("tool", "command", "name"):
+                    val = (row.get(col) or "").strip().split()[0]
+                    if val:
+                        seen.add(val)
+                        break
+    except Exception:
+        pass
+    return seen
+
+
+def render_command_hints(
+    last_command: str,
+    phase: str = "",
+    sessions_dir: str = "sessions",
+    limit: int = 3,
+    enabled: bool = True,
+) -> None:
+    """Print phase-aware, history-filtered command hints after each step.
+
+    Uses kill-chain adjacency (``_KILL_CHAIN_NEXT``) first, then falls back
+    to phase priority (``_PHASE_PRIORITY``).  Commands already in the session
+    CSV are skipped so the hint is always forward-looking.
+
+    Args:
+        last_command: The command that just ran (first token used).
+        phase:        Current engagement phase (from payload.json / world_model).
+        sessions_dir: Path to sessions/ directory.
+        limit:        Maximum labels to display.
+        enabled:      When False this is a no-op.
+
+    Returns:
+        None — prints at most one dim line.
+    """
+    if not enabled:
+        return
+    cmd = _first_token(last_command)
+    if not cmd or cmd in SKIP_COMMANDS:
+        return
+
+    already_run = _read_run_commands(sessions_dir)
+
+    # 1. Kill-chain adjacency: known follow-up for this specific command
+    candidates: list[str] = [
+        c for c in _KILL_CHAIN_NEXT.get(cmd, [])
+        if c not in already_run
+    ]
+
+    # 2. Phase priority fallback
+    if len(candidates) < limit:
+        phase_key = phase.lower() if phase else "recon"
+        for c in _PHASE_PRIORITY.get(phase_key, _PHASE_PRIORITY.get("recon", [])):
+            if c not in already_run and c not in candidates and c != cmd:
+                candidates.append(c)
+            if len(candidates) >= limit * 2:
+                break
+
+    labels = [_truncate(c, _MAX_LABEL_LEN) for c in candidates[:limit]]
+    if labels:
+        _render(labels)
+
+
+__all__ = ["SKIP_COMMANDS", "render_inline_hints", "render_command_hints"]