install.sh

#!/usr/bin/env bash
# TryHackMe + Claude Code Trainer Kit — installer.
# Pulls the kit straight from the GitHub repo (single source of truth), then
# optionally installs the Kali tooling. No files are embedded in this script.
set -euo pipefail

REPO="https://github.com/pashki975/thm-claude-kit.git"
DIR="./thm-claude-kit"
TOOLS="ask"   # ask | yes | no

while [ $# -gt 0 ]; do
  case "$1" in
    --dir) DIR="$2"; shift 2;;
    --repo) REPO="$2"; shift 2;;
    --tools) TOOLS="yes"; shift;;
    --no-tools) TOOLS="no"; shift;;
    --help)
      echo "Usage: bash install.sh [--dir PATH] [--repo URL] [--tools|--no-tools]"
      echo "  --dir PATH   install location (default: ./thm-claude-kit)"
      echo "  --repo URL   source repo (default: the Trainer Kit repo)"
      echo "  --tools      install Kali tooling without prompting"
      echo "  --no-tools   skip tooling entirely"
      exit 0;;
    *) echo "Unknown option: $1 (try --help)"; exit 1;;
  esac
done

command -v git >/dev/null 2>&1 || { echo "ERROR: git is required. Install it first (sudo apt install -y git)."; exit 1; }

# --- get the kit from the repo (clone fresh, or update an existing checkout) ---
if [ -d "$DIR/.git" ]; then
  echo "Updating existing kit in: $DIR"
  git -C "$DIR" pull --ff-only
elif [ -e "$DIR" ] && [ -n "$(ls -A "$DIR" 2>/dev/null)" ]; then
  echo "ERROR: $DIR exists and is not a git checkout. Move it or pick another --dir."
  exit 1
else
  echo "Cloning kit into: $DIR"
  git clone "$REPO" "$DIR"
fi

chmod +x "$DIR/new-room.sh" 2>/dev/null || true
ABSDIR="$(cd "$DIR" && pwd)"
echo "Kit ready in $ABSDIR"

# --- prerequisite check ---
command -v claude >/dev/null 2>&1 || echo "NOTE: Claude Code (claude) not found — install: npm install -g @anthropic-ai/claude-code"
command -v node   >/dev/null 2>&1 || echo "NOTE: node not found — install Node.js 18+ first."

# --- optional tooling ---
install_tools() {
  echo "Installing Kali tooling (sudo required)..."
  sudo apt update
  sudo apt install -y seclists enum4linux smbclient hashid john hashcat rlwrap exploitdb \
    tshark wpscan snmp onesixtyone tftp-hpa proxychains4 chisel mariadb-client postgresql-client redis-tools \
    netexec impacket-scripts evil-winrm enum4linux-ng freerdp2-x11 ldap-utils || \
    echo "Some apt packages may have different names on your Kali version — see README."
  if command -v pipx >/dev/null 2>&1; then
    pipx install certipy-ad || true; pipx install bloodhound || true; pipx install sshuttle || true
  else
    echo "pipx not found — skipping certipy/bloodhound/sshuttle. Install pipx then rerun with --tools."
  fi
}

case "$TOOLS" in
  yes) install_tools;;
  no)  echo "Skipping tooling (--no-tools).";;
  ask)
    printf "Install the Kali tooling now (apt + pipx, needs sudo)? [y/N] "
    read -r ans || ans="n"
    case "$ans" in [Yy]*) install_tools;; *) echo "Skipped. Rerun with --tools later if you want it.";; esac;;
esac

echo ""
echo "Done. Next:"
echo "  cd $ABSDIR && ./new-room.sh myroom && cd rooms/myroom && claude"
echo "  then in Claude: /start (paste the room description + target IP)"