From b8c6d351408af653c535edb03792a2e943ce4ae3 Mon Sep 17 00:00:00 2001
From: Richard Anthony <public.rant@pm.me>
Date: Mon, 21 Jul 2025 02:14:59 +0000
Subject: [PATCH 1/4] Add Playwright + Kali Linux security testing environment

---
 .../.devcontainer/devcontainer.json           |  76 +++
 src/playwright-kali/.devcontainer/setup.sh    | 463 ++++++++++++++++++
 src/playwright-kali/NOTES.md                  | 307 ++++++++++++
 .../devcontainer-template.json                |  46 ++
 src/playwright-kali/example-workflow.md       | 401 +++++++++++++++
 test/playwright-kali/test.sh                  | 151 ++++++
 6 files changed, 1444 insertions(+)
 create mode 100644 src/playwright-kali/.devcontainer/devcontainer.json
 create mode 100755 src/playwright-kali/.devcontainer/setup.sh
 create mode 100644 src/playwright-kali/NOTES.md
 create mode 100644 src/playwright-kali/devcontainer-template.json
 create mode 100644 src/playwright-kali/example-workflow.md
 create mode 100755 test/playwright-kali/test.sh

diff --git a/src/playwright-kali/.devcontainer/devcontainer.json b/src/playwright-kali/.devcontainer/devcontainer.json
new file mode 100644
index 0000000..bad15cd
--- /dev/null
+++ b/src/playwright-kali/.devcontainer/devcontainer.json
@@ -0,0 +1,76 @@
+{
+    "name": "Playwright Testing with Kali Linux",
+    "image": "kalilinux/kali-rolling",
+
+    "features": {
+        "ghcr.io/devcontainers/features/node:1": {
+            "nodeGypDependencies": true,
+            "version": "${templateOption:nodeVersion}"
+        },
+        "ghcr.io/devcontainers/features/python:1": {
+            "version": "3.11"
+        },
+        "ghcr.io/devcontainers/features/git:1": {},
+        "ghcr.io/devcontainers/features/github-cli:1": {}
+    },
+
+    "customizations": {
+        "vscode": {
+            "extensions": [
+                "ms-playwright.playwright",
+                "ms-vscode.vscode-typescript-next",
+                "esbenp.prettier-vscode",
+                "bradlc.vscode-tailwindcss",
+                "ms-python.python",
+                "ms-python.black-formatter",
+                "ms-vscode.test-adapter-converter",
+                "hbenl.vscode-test-explorer",
+                "usernamehw.errorlens",
+                "christian-kohler.path-intellisense",
+                "formulahendry.auto-rename-tag",
+                "ms-vscode.vscode-json",
+                "redhat.vscode-yaml",
+                "humao.rest-client",
+                "ms-vscode.hexdump",
+                "ms-vscode.vscode-serial-monitor"
+            ],
+            "settings": {
+                "terminal.integrated.defaultProfile.linux": "bash",
+                "typescript.preferences.quoteStyle": "single",
+                "javascript.preferences.quoteStyle": "single",
+                "prettier.singleQuote": true,
+                "editor.formatOnSave": true,
+                "editor.codeActionsOnSave": {
+                    "source.fixAll": true
+                }
+            }
+        }
+    },
+
+    "forwardPorts": [3000, 8080, 9000],
+
+    "postCreateCommand": ".devcontainer/setup.sh",
+
+    "containerEnv": {
+        "PLAYWRIGHT_BROWSERS_PATH": "/opt/playwright-browsers",
+        "PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD": "false",
+        "DEBIAN_FRONTEND": "noninteractive"
+    },
+
+    "capAdd": ["NET_ADMIN", "NET_RAW", "SYS_ADMIN"],
+    "securityOpt": ["seccomp:unconfined"],
+
+    "mounts": [
+        "source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind",
+        "source=playwright-browsers,target=/opt/playwright-browsers,type=volume"
+    ],
+
+    "remoteUser": "root",
+
+    "overrideCommand": false,
+
+    "initializeCommand": "echo 'Initializing Playwright + Kali Linux environment...'",
+    "onCreateCommand": "echo 'Container created successfully'",
+    "updateContentCommand": "echo 'Updating container content...'",
+    "postStartCommand": "echo 'Container started and ready for security research and testing!'"
+}
diff --git a/src/playwright-kali/.devcontainer/setup.sh b/src/playwright-kali/.devcontainer/setup.sh
new file mode 100755
index 0000000..6e2972f
--- /dev/null
+++ b/src/playwright-kali/.devcontainer/setup.sh
@@ -0,0 +1,463 @@
+#!/bin/bash
+
+set -e
+
+echo "🚀 Setting up Playwright + Kali Linux development environment..."
+
+# Update package lists
+echo "📦 Updating package lists..."
+apt-get update
+
+# Install essential development tools
+echo "🔧 Installing essential development tools..."
+apt-get install -y \
+    curl \
+    wget \
+    git \
+    vim \
+    nano \
+    build-essential \
+    python3-pip \
+    python3-venv \
+    ca-certificates \
+    gnupg \
+    lsb-release \
+    software-properties-common \
+    apt-transport-https
+
+# Install security tools if enabled
+if [ "${templateOption:includeSecurityTools}" = "true" ]; then
+    echo "🛡️ Installing security research tools..."
+    apt-get install -y \
+        burpsuite \
+        sqlmap \
+        nikto \
+        dirb \
+        gobuster \
+        hydra \
+        john \
+        hashcat \
+        metasploit-framework \
+        beef-xss \
+        zaproxy \
+        whatweb \
+        wpscan \
+        nuclei \
+        subfinder \
+        httpx-toolkit \
+        ffuf
+fi
+
+# Install network tools if enabled
+if [ "${templateOption:includeNetworkTools}" = "true" ]; then
+    echo "🌐 Installing network analysis tools..."
+    apt-get install -y \
+        nmap \
+        masscan \
+        wireshark \
+        tcpdump \
+        netcat-traditional \
+        socat \
+        proxychains4 \
+        tor \
+        netdiscover \
+        arp-scan \
+        dnsutils \
+        whois \
+        traceroute \
+        mtr-tiny
+fi
+
+# Install additional browser dependencies for Playwright
+echo "🌐 Installing browser dependencies..."
+apt-get install -y \
+    libnss3 \
+    libnspr4 \
+    libatk-bridge2.0-0 \
+    libdrm2 \
+    libxkbcommon0 \
+    libxcomposite1 \
+    libxdamage1 \
+    libxrandr2 \
+    libgbm1 \
+    libxss1 \
+    libasound2 \
+    libatspi2.0-0 \
+    libgtk-3-0 \
+    xvfb
+
+# Install Playwright
+echo "🎭 Installing Playwright..."
+npm install -g playwright@latest
+npm install -g @playwright/test
+
+# Install Playwright browsers based on user selection
+echo "🌐 Installing Playwright browsers..."
+case "${templateOption:playwrightBrowsers}" in
+    "all")
+        playwright install --with-deps
+        ;;
+    "chromium")
+        playwright install --with-deps chromium
+        ;;
+    "firefox")
+        playwright install --with-deps firefox
+        ;;
+    "webkit")
+        playwright install --with-deps webkit
+        ;;
+    "chromium-firefox")
+        playwright install --with-deps chromium firefox
+        ;;
+    *)
+        playwright install --with-deps
+        ;;
+esac
+
+# Install additional Python packages for security research
+echo "🐍 Installing Python security packages..."
+pip3 install \
+    requests \
+    beautifulsoup4 \
+    selenium \
+    scrapy \
+    paramiko \
+    pycrypto \
+    cryptography \
+    scapy \
+    python-nmap \
+    dnspython \
+    pexpect \
+    colorama \
+    tabulate \
+    tqdm \
+    click \
+    rich
+
+# Install additional Node.js packages
+echo "📦 Installing useful Node.js packages..."
+npm install -g \
+    typescript \
+    ts-node \
+    nodemon \
+    pm2 \
+    http-server \
+    live-server \
+    eslint \
+    prettier \
+    jest \
+    axios \
+    express
+
+# Create project structure
+echo "📁 Creating project structure..."
+mkdir -p /workspace/{tests,reports,scripts,tools}
+mkdir -p /workspace/tests/{e2e,integration,unit,security}
+mkdir -p /workspace/scripts/{automation,discovery,exploitation}
+
+# Create sample Playwright configuration
+echo "⚙️ Creating sample Playwright configuration..."
+cat > /workspace/playwright.config.ts << 'EOF'
+import { defineConfig, devices } from '@playwright/test';
+
+export default defineConfig({
+  testDir: './tests',
+  fullyParallel: true,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: process.env.CI ? 1 : undefined,
+  reporter: [['html'], ['json', { outputFile: 'reports/test-results.json' }]],
+  outputDir: 'reports/test-results/',
+
+  use: {
+    baseURL: 'http://localhost:3000',
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+    video: 'retain-on-failure',
+    headless: true,
+  },
+
+  projects: [
+    {
+      name: 'chromium',
+      use: { ...devices['Desktop Chrome'] },
+    },
+    {
+      name: 'firefox',
+      use: { ...devices['Desktop Firefox'] },
+    },
+    {
+      name: 'webkit',
+      use: { ...devices['Desktop Safari'] },
+    },
+    {
+      name: 'mobile-chrome',
+      use: { ...devices['Pixel 5'] },
+    },
+    {
+      name: 'mobile-safari',
+      use: { ...devices['iPhone 12'] },
+    },
+  ],
+
+  webServer: {
+    command: 'npm run start',
+    url: 'http://127.0.0.1:3000',
+    reuseExistingServer: !process.env.CI,
+  },
+});
+EOF
+
+# Create sample package.json
+echo "📄 Creating sample package.json..."
+cat > /workspace/package.json << 'EOF'
+{
+  "name": "playwright-security-testing",
+  "version": "1.0.0",
+  "description": "Playwright testing environment for security research",
+  "main": "index.js",
+  "scripts": {
+    "test": "playwright test",
+    "test:headed": "playwright test --headed",
+    "test:ui": "playwright test --ui",
+    "test:debug": "playwright test --debug",
+    "test:report": "playwright show-report",
+    "test:security": "playwright test tests/security/",
+    "codegen": "playwright codegen",
+    "install:browsers": "playwright install --with-deps"
+  },
+  "keywords": ["playwright", "testing", "security", "kali"],
+  "author": "Security Researcher",
+  "license": "MIT",
+  "devDependencies": {
+    "@playwright/test": "^1.40.0",
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  },
+  "dependencies": {
+    "axios": "^1.6.0",
+    "dotenv": "^16.3.0"
+  }
+}
+EOF
+
+# Create sample security test
+echo "🔒 Creating sample security test..."
+cat > /workspace/tests/security/basic-security.spec.ts << 'EOF'
+import { test, expect } from '@playwright/test';
+
+test.describe('Basic Security Tests', () => {
+  test('should check for HTTPS redirect', async ({ page }) => {
+    await page.goto('http://example.com');
+    expect(page.url()).toMatch(/^https:/);
+  });
+
+  test('should check for security headers', async ({ page }) => {
+    const response = await page.goto('https://example.com');
+    const headers = response?.headers();
+
+    expect(headers?.['x-frame-options']).toBeDefined();
+    expect(headers?.['x-content-type-options']).toBeDefined();
+    expect(headers?.['strict-transport-security']).toBeDefined();
+  });
+
+  test('should check for XSS protection', async ({ page }) => {
+    await page.goto('https://example.com');
+
+    // Try to inject a simple XSS payload
+    await page.fill('input[type="search"], input[name="q"], input[name="search"]', '<script>alert("XSS")</script>');
+
+    // Check that script tags are properly escaped
+    const content = await page.content();
+    expect(content).not.toContain('<script>alert("XSS")</script>');
+  });
+});
+EOF
+
+# Create sample automation script
+echo "🤖 Creating sample automation script..."
+cat > /workspace/scripts/automation/recon.js << 'EOF'
+const { chromium } = require('playwright');
+
+async function basicRecon(url) {
+  const browser = await chromium.launch({ headless: true });
+  const page = await browser.newPage();
+
+  try {
+    console.log(`🔍 Starting reconnaissance on: ${url}`);
+
+    const response = await page.goto(url);
+    const title = await page.title();
+    const headers = response.headers();
+
+    console.log(`📄 Title: ${title}`);
+    console.log(`🔧 Server: ${headers.server || 'Unknown'}`);
+    console.log(`🛡️ Security Headers:`);
+    console.log(`  - X-Frame-Options: ${headers['x-frame-options'] || 'Not Set'}`);
+    console.log(`  - X-Content-Type-Options: ${headers['x-content-type-options'] || 'Not Set'}`);
+    console.log(`  - Strict-Transport-Security: ${headers['strict-transport-security'] || 'Not Set'}`);
+
+    // Extract links
+    const links = await page.evaluate(() => {
+      return Array.from(document.querySelectorAll('a')).map(a => a.href).slice(0, 10);
+    });
+
+    console.log(`🔗 Found ${links.length} links (showing first 10):`);
+    links.forEach(link => console.log(`  - ${link}`));
+
+  } catch (error) {
+    console.error(`❌ Error: ${error.message}`);
+  } finally {
+    await browser.close();
+  }
+}
+
+// Usage: node recon.js <url>
+if (process.argv[2]) {
+  basicRecon(process.argv[2]);
+} else {
+  console.log('Usage: node recon.js <url>');
+}
+EOF
+
+# Set proper permissions
+chmod +x /workspace/scripts/automation/recon.js
+
+# Create README for the workspace
+echo "📚 Creating workspace README..."
+cat > /workspace/README.md << 'EOF'
+# Playwright Security Testing Environment
+
+This environment combines Playwright testing capabilities with Kali Linux security tools for comprehensive web application security testing.
+
+## 🚀 Quick Start
+
+1. **Run basic tests:**
+   ```bash
+   cd /workspace
+   npm test
+   ```
+
+2. **Run security-specific tests:**
+   ```bash
+   npm run test:security
+   ```
+
+3. **Interactive test development:**
+   ```bash
+   npm run test:ui
+   ```
+
+4. **Generate tests from browser interactions:**
+   ```bash
+   npm run codegen https://example.com
+   ```
+
+## 🛠️ Available Tools
+
+### Playwright Testing
+- All major browsers (Chromium, Firefox, WebKit)
+- Mobile device emulation
+- Network interception
+- Screenshot and video capture
+- Test reporting
+
+### Security Tools
+- Burp Suite - Web application security testing
+- OWASP ZAP - Security scanning
+- Nmap - Network discovery
+- SQLMap - SQL injection testing
+- Nikto - Web server scanner
+- And many more...
+
+### Network Analysis
+- Wireshark - Network protocol analyzer
+- tcpdump - Packet analyzer
+- Nmap - Network mapper
+- Masscan - High-speed port scanner
+
+## 📁 Project Structure
+
+```
+/workspace/
+├── tests/
+│   ├── e2e/           # End-to-end tests
+│   ├── integration/   # Integration tests
+│   ├── unit/          # Unit tests
+│   └── security/      # Security-focused tests
+├── scripts/
+│   ├── automation/    # Automation scripts
+│   ├── discovery/     # Discovery tools
+│   └── exploitation/  # Security testing scripts
+├── reports/           # Test reports and results
+└── tools/            # Custom tools and utilities
+```
+
+## 🔒 Security Testing Examples
+
+Check the `tests/security/` directory for example security tests and the `scripts/` directory for automation examples.
+
+## 📖 Resources
+
+- [Playwright Documentation](https://playwright.dev)
+- [Kali Linux Tools](https://www.kali.org/tools/)
+- [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
+EOF
+
+# Create .gitignore
+cat > /workspace/.gitignore << 'EOF'
+# Dependencies
+node_modules/
+.npm
+
+# Test results
+test-results/
+playwright-report/
+reports/
+
+# Environment variables
+.env
+.env.local
+
+# Logs
+*.log
+npm-debug.log*
+
+# Coverage
+coverage/
+
+# Cache
+.cache/
+.parcel-cache/
+
+# IDE
+.vscode/settings.json
+.idea/
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Temporary files
+*.tmp
+*.temp
+EOF
+
+# Set up workspace ownership
+chown -R root:root /workspace
+
+# Clean up
+echo "🧹 Cleaning up..."
+apt-get autoremove -y
+apt-get autoclean
+rm -rf /var/lib/apt/lists/*
+
+echo "✅ Setup complete! Your Playwright + Kali Linux environment is ready for security research and testing."
+echo ""
+echo "🎯 Next steps:"
+echo "  1. cd /workspace"
+echo "  2. npm test (to run sample tests)"
+echo "  3. npm run test:ui (for interactive testing)"
+echo "  4. npm run codegen <url> (to generate tests)"
+echo ""
+echo "🔍 Security tools are available system-wide. Try: nmap, burpsuite, zaproxy, etc."
diff --git a/src/playwright-kali/NOTES.md b/src/playwright-kali/NOTES.md
new file mode 100644
index 0000000..c6eead2
--- /dev/null
+++ b/src/playwright-kali/NOTES.md
@@ -0,0 +1,307 @@
+# Playwright Testing with Kali Linux Template
+
+This template provides a comprehensive development environment that combines the power of Playwright testing framework with Kali Linux security tools, creating an ideal setup for security researchers, penetration testers, and developers who need to perform security testing of web applications.
+
+## 🎯 What This Template Provides
+
+### Core Features
+- **Kali Linux Base**: Built on the latest Kali Linux rolling release with access to hundreds of security tools
+- **Playwright Framework**: Complete web automation and testing framework with all major browsers
+- **Security Testing Tools**: Pre-installed penetration testing and security analysis tools
+- **Network Analysis**: Advanced network discovery and analysis capabilities
+- **Development Environment**: Full Node.js and Python development stack
+
+### Target Audience
+- Security researchers and penetration testers
+- Web application security specialists
+- QA engineers focused on security testing
+- Developers building security-conscious applications
+- Bug bounty hunters and ethical hackers
+
+## 🚀 Quick Start Guide
+
+1. **Create a new project** using this template
+2. **Open in VS Code** with the Dev Containers extension
+3. **Wait for setup** - the first build will install all tools and dependencies
+4. **Navigate to workspace**: `cd /workspace`
+5. **Run sample tests**: `npm test`
+6. **Start security testing**: `npm run test:security`
+
+## 🛠️ Installed Tools & Capabilities
+
+### Web Testing & Automation
+- **Playwright**: Modern web testing framework
+  - Chromium, Firefox, and WebKit browsers
+  - Mobile device emulation
+  - Network interception and mocking
+  - Screenshot and video recording
+  - Parallel test execution
+
+### Security Testing Tools
+- **Burp Suite**: Web application security testing platform
+- **OWASP ZAP**: Web application security scanner
+- **SQLMap**: Automatic SQL injection testing
+- **Nikto**: Web server vulnerability scanner
+- **Nuclei**: Fast vulnerability scanner
+- **FFUF**: Fast web fuzzer
+- **Gobuster**: Directory/file brute-forcer
+- **WPScan**: WordPress security scanner
+
+### Network Analysis & Discovery
+- **Nmap**: Network discovery and security auditing
+- **Masscan**: High-speed port scanner
+- **Wireshark**: Network protocol analyzer
+- **tcpdump**: Command-line packet analyzer
+- **Netcat**: Network utility for debugging and investigation
+
+### Password & Hash Tools
+- **Hydra**: Network login cracker
+- **John the Ripper**: Password cracking tool
+- **Hashcat**: Advanced password recovery
+
+### Development Stack
+- **Node.js**: JavaScript runtime (configurable version)
+- **Python 3**: With security-focused packages
+- **TypeScript**: For type-safe test development
+- **Git**: Version control with GitHub CLI
+
+## 📁 Project Structure
+
+```
+/workspace/
+├── tests/
+│   ├── e2e/           # End-to-end application tests
+│   ├── integration/   # API and service integration tests
+│   ├── unit/          # Component unit tests
+│   └── security/      # Security-focused test suites
+├── scripts/
+│   ├── automation/    # Custom automation scripts
+│   ├── discovery/     # Reconnaissance and discovery tools
+│   └── exploitation/  # Security testing and exploitation scripts
+├── reports/           # Test reports and scan results
+├── tools/            # Custom security tools and utilities
+├── playwright.config.ts  # Playwright configuration
+├── package.json      # Node.js dependencies and scripts
+└── README.md         # Project documentation
+```
+
+## 🔧 Configuration Options
+
+### Node.js Version
+Choose your preferred Node.js version:
+- **18**: LTS version with good compatibility
+- **20**: Current LTS with latest features
+- **latest**: Cutting-edge features (may have compatibility issues)
+
+### Browser Selection
+Control which Playwright browsers to install:
+- **all**: Chromium, Firefox, and WebKit (recommended)
+- **chromium**: Google Chrome/Chromium only
+- **firefox**: Mozilla Firefox only
+- **webkit**: Safari/WebKit only
+- **chromium-firefox**: Chrome and Firefox (common combination)
+
+### Security Tools
+- **Include Security Tools**: Installs comprehensive penetration testing toolkit
+- **Include Network Tools**: Adds network analysis and discovery capabilities
+
+## 🔒 Security Testing Examples
+
+### Basic Security Headers Test
+```typescript
+test('should verify security headers', async ({ page }) => {
+  const response = await page.goto('https://example.com');
+  const headers = response?.headers();
+  
+  expect(headers?.['x-frame-options']).toBeDefined();
+  expect(headers?.['x-content-type-options']).toBe('nosniff');
+  expect(headers?.['strict-transport-security']).toBeDefined();
+});
+```
+
+### XSS Protection Test
+```typescript
+test('should prevent XSS attacks', async ({ page }) => {
+  await page.goto('https://example.com/search');
+  await page.fill('input[name="q"]', '<script>alert("XSS")</script>');
+  await page.press('input[name="q"]', 'Enter');
+  
+  const content = await page.content();
+  expect(content).not.toContain('<script>alert("XSS")</script>');
+});
+```
+
+### Automated Reconnaissance
+```javascript
+const { chromium } = require('playwright');
+
+async function scanWebsite(url) {
+  const browser = await chromium.launch();
+  const page = await browser.newPage();
+  
+  // Extract security information
+  const response = await page.goto(url);
+  const headers = response.headers();
+  const technologies = await page.evaluate(() => {
+    // Detect technologies, frameworks, etc.
+  });
+  
+  await browser.close();
+  return { headers, technologies };
+}
+```
+
+## 🎮 Available Commands
+
+### Testing Commands
+```bash
+npm test                 # Run all tests
+npm run test:headed      # Run tests with browser UI
+npm run test:ui          # Interactive test runner
+npm run test:debug       # Debug mode with developer tools
+npm run test:security    # Run security-specific tests
+npm run test:report      # Show last test report
+```
+
+### Development Commands
+```bash
+npm run codegen         # Generate tests from browser interactions
+playwright codegen <url> # Record interactions on specific site
+```
+
+### Security Tools Commands
+```bash
+# Network scanning
+nmap -sV target.com
+masscan -p1-65535 target.com --rate=1000
+
+# Web application testing
+nikto -h https://target.com
+sqlmap -u "https://target.com/page?id=1"
+
+# Directory discovery
+gobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt
+ffuf -w /usr/share/wordlists/dirb/common.txt -u https://target.com/FUZZ
+
+# Vulnerability scanning
+nuclei -u https://target.com
+```
+
+## 🔐 Security Features
+
+### Container Security
+- **Privileged Access**: Runs as root for security tool functionality
+- **Network Capabilities**: Enhanced network access for testing tools
+- **Security Context**: Configured for security research requirements
+
+### Network Configuration
+- **Port Forwarding**: Common development ports (3000, 8080, 9000)
+- **Proxy Support**: Ready for proxy tools like Burp Suite
+- **VPN Compatible**: Works with VPN connections for secure testing
+
+### Data Protection
+- **Volume Mounts**: Persistent storage for tools and data
+- **Environment Variables**: Secure configuration management
+- **Isolated Environment**: Contained testing environment
+
+## 🚨 Security Considerations
+
+### Ethical Usage
+This template includes powerful security tools that should only be used for:
+- **Authorized testing** on systems you own or have explicit permission to test
+- **Educational purposes** in controlled environments
+- **Bug bounty programs** within their defined scope
+- **Security research** following responsible disclosure practices
+
+### Legal Compliance
+- Always obtain proper authorization before testing
+- Respect terms of service and legal boundaries
+- Follow responsible disclosure practices
+- Maintain detailed documentation of testing activities
+
+### Best Practices
+- Use isolated test environments when possible
+- Keep tools and signatures updated
+- Implement proper access controls
+- Regular security reviews of your testing environment
+
+## 🤝 Contributing & Customization
+
+### Adding Custom Tools
+1. Modify the `setup.sh` script to include additional tools
+2. Update the `devcontainer.json` for new VS Code extensions
+3. Add new test examples to the appropriate directories
+
+### Extending Security Tests
+1. Create new test files in `tests/security/`
+2. Implement custom security check functions
+3. Add automation scripts to `scripts/` directories
+
+### Configuration Customization
+1. Modify `playwright.config.ts` for testing preferences
+2. Update `package.json` for additional dependencies
+3. Customize the workspace structure as needed
+
+## 📚 Learning Resources
+
+### Playwright Documentation
+- [Official Playwright Docs](https://playwright.dev)
+- [Test Generator Guide](https://playwright.dev/docs/codegen)
+- [API Reference](https://playwright.dev/docs/api/class-playwright)
+
+### Security Testing Resources
+- [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
+- [Web Security Academy](https://portswigger.net/web-security)
+- [Kali Linux Documentation](https://www.kali.org/docs/)
+
+### Penetration Testing
+- [PTES Standard](http://www.pentest-standard.org/)
+- [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
+- [SANS Testing Resources](https://www.sans.org/white-papers/)
+
+## 🐛 Troubleshooting
+
+### Common Issues
+
+**Browser Installation Fails**
+```bash
+# Manually install browsers
+playwright install --with-deps
+```
+
+**Permission Denied for Security Tools**
+```bash
+# Ensure running as root
+whoami  # Should return 'root'
+```
+
+**Network Tools Not Working**
+```bash
+# Check network capabilities
+ip addr show
+ping google.com
+```
+
+**Playwright Tests Timeout**
+```bash
+# Increase timeout in playwright.config.ts
+timeout: 30000  # 30 seconds
+```
+
+### Performance Optimization
+- Use `--headed` mode sparingly (slower)
+- Implement proper test parallelization
+- Cache browser installations between builds
+- Use lightweight test fixtures
+
+## 📞 Support & Community
+
+For issues, questions, or contributions:
+1. Check the GitHub repository issues
+2. Consult the official Playwright documentation
+3. Review Kali Linux community resources
+4. Follow security testing best practices
+
+---
+
+**⚠️ Disclaimer**: This template is designed for authorized security testing and research only. Users are responsible for ensuring compliance with all applicable laws and regulations. The authors assume no liability for misuse of these tools.
\ No newline at end of file
diff --git a/src/playwright-kali/devcontainer-template.json b/src/playwright-kali/devcontainer-template.json
new file mode 100644
index 0000000..fe9f16b
--- /dev/null
+++ b/src/playwright-kali/devcontainer-template.json
@@ -0,0 +1,46 @@
+{
+    "id": "playwright-kali",
+    "version": "1.0.0",
+    "name": "Playwright Testing with Kali Linux",
+    "description": "A comprehensive development environment for web testing and security research using Playwright on Kali Linux",
+    "documentationURL": "https://github.com/devcontainers/template-starter/tree/main/src/playwright-kali",
+    "licenseURL": "https://github.com/devcontainers/template-starter/blob/main/LICENSE",
+    "options": {
+        "nodeVersion": {
+            "type": "string",
+            "description": "Node.js version for Playwright development",
+            "proposals": [
+                "18",
+                "20",
+                "latest"
+            ],
+            "default": "20"
+        },
+        "playwrightBrowsers": {
+            "type": "string",
+            "description": "Playwright browsers to install",
+            "proposals": [
+                "all",
+                "chromium",
+                "firefox",
+                "webkit",
+                "chromium-firefox"
+            ],
+            "default": "all"
+        },
+        "includeSecurityTools": {
+            "type": "boolean",
+            "description": "Include additional security research tools",
+            "default": true
+        },
+        "includeNetworkTools": {
+            "type": "boolean",
+            "description": "Include network analysis tools (nmap, wireshark, etc.)",
+            "default": true
+        }
+    },
+    "platforms": [
+        "linux/amd64",
+        "linux/arm64"
+    ]
+}
diff --git a/src/playwright-kali/example-workflow.md b/src/playwright-kali/example-workflow.md
new file mode 100644
index 0000000..f73c2e5
--- /dev/null
+++ b/src/playwright-kali/example-workflow.md
@@ -0,0 +1,401 @@
+# Example Security Testing Workflow
+
+This document demonstrates a complete security testing workflow using the Playwright + Kali Linux template.
+
+## Scenario: Testing a Web Application for Security Vulnerabilities
+
+Let's walk through a comprehensive security assessment of a web application using the tools provided in this template.
+
+### Phase 1: Reconnaissance
+
+#### 1.1 Basic Information Gathering
+```bash
+# Start with basic reconnaissance
+cd /workspace
+
+# Use the automated recon script
+node scripts/automation/recon.js https://target-app.com
+
+# Manual nmap scan for open ports
+nmap -sV -sC target-app.com
+
+# Directory discovery
+gobuster dir -u https://target-app.com -w /usr/share/wordlists/dirb/common.txt
+```
+
+#### 1.2 Technology Detection with Playwright
+```javascript
+// scripts/discovery/tech-detection.js
+const { chromium } = require('playwright');
+
+async function detectTechnologies(url) {
+  const browser = await chromium.launch();
+  const page = await browser.newPage();
+  
+  await page.goto(url);
+  
+  // Detect frameworks and libraries
+  const technologies = await page.evaluate(() => {
+    const tech = {};
+    
+    // Check for common frameworks
+    if (window.React) tech.react = window.React.version;
+    if (window.Vue) tech.vue = window.Vue.version;
+    if (window.angular) tech.angular = window.angular.version;
+    if (window.jQuery) tech.jquery = window.jQuery.fn.jquery;
+    
+    // Check for common CMS indicators
+    if (document.querySelector('meta[name="generator"]')) {
+      tech.generator = document.querySelector('meta[name="generator"]').content;
+    }
+    
+    return tech;
+  });
+  
+  console.log('Detected Technologies:', technologies);
+  await browser.close();
+  return technologies;
+}
+```
+
+### Phase 2: Automated Security Testing
+
+#### 2.1 Basic Security Headers Assessment
+```typescript
+// tests/security/headers-assessment.spec.ts
+import { test, expect } from '@playwright/test';
+
+test.describe('Security Headers Assessment', () => {
+  test('should have proper security headers', async ({ page }) => {
+    const response = await page.goto('https://target-app.com');
+    const headers = response?.headers();
+    
+    // Content Security Policy
+    expect(headers?.['content-security-policy']).toBeDefined();
+    
+    // Clickjacking protection
+    expect(headers?.['x-frame-options']).toBeDefined();
+    
+    // MIME type sniffing protection
+    expect(headers?.['x-content-type-options']).toBe('nosniff');
+    
+    // XSS protection
+    expect(headers?.['x-xss-protection']).toBeDefined();
+    
+    // HTTPS enforcement
+    expect(headers?.['strict-transport-security']).toBeDefined();
+    
+    // Information disclosure
+    expect(headers?.['server']).not.toContain('Apache/');
+    expect(headers?.['x-powered-by']).toBeUndefined();
+  });
+});
+```
+
+#### 2.2 Input Validation Testing
+```typescript
+// tests/security/input-validation.spec.ts
+import { test, expect } from '@playwright/test';
+
+test.describe('Input Validation Tests', () => {
+  const xssPayloads = [
+    '<script>alert("XSS")</script>',
+    '"><script>alert("XSS")</script>',
+    'javascript:alert("XSS")',
+    '<img src=x onerror=alert("XSS")>'
+  ];
+  
+  const sqlPayloads = [
+    "' OR '1'='1",
+    "'; DROP TABLE users; --",
+    "1' UNION SELECT null, username, password FROM users--"
+  ];
+  
+  test('should prevent XSS attacks', async ({ page }) => {
+    await page.goto('https://target-app.com/search');
+    
+    for (const payload of xssPayloads) {
+      await page.fill('input[name="query"]', payload);
+      await page.press('input[name="query"]', 'Enter');
+      
+      // Check that payload is properly encoded/escaped
+      const content = await page.content();
+      expect(content).not.toContain(payload);
+      
+      // Check for script execution
+      const alerts = await page.evaluate(() => window.alertTriggered);
+      expect(alerts).toBeFalsy();
+    }
+  });
+  
+  test('should prevent SQL injection', async ({ page }) => {
+    await page.goto('https://target-app.com/login');
+    
+    for (const payload of sqlPayloads) {
+      await page.fill('input[name="username"]', payload);
+      await page.fill('input[name="password"]', 'password');
+      await page.click('button[type="submit"]');
+      
+      // Should not bypass authentication
+      expect(page.url()).not.toContain('/dashboard');
+      
+      // Should not show database errors
+      const content = await page.content();
+      expect(content).not.toMatch(/mysql_|postgresql_|sqlite_|syntax error/i);
+    }
+  });
+});
+```
+
+### Phase 3: Advanced Security Analysis
+
+#### 3.1 Session Management Testing
+```typescript
+// tests/security/session-management.spec.ts
+import { test, expect } from '@playwright/test';
+
+test.describe('Session Management', () => {
+  test('should implement secure session handling', async ({ page, context }) => {
+    // Login and capture session
+    await page.goto('https://target-app.com/login');
+    await page.fill('input[name="username"]', 'testuser');
+    await page.fill('input[name="password"]', 'testpass');
+    await page.click('button[type="submit"]');
+    
+    // Get session cookies
+    const cookies = await context.cookies();
+    const sessionCookie = cookies.find(c => c.name.includes('session'));
+    
+    if (sessionCookie) {
+      // Check for secure flags
+      expect(sessionCookie.secure).toBeTruthy();
+      expect(sessionCookie.httpOnly).toBeTruthy();
+      expect(sessionCookie.sameSite).toBe('Strict');
+    }
+    
+    // Test session timeout
+    await page.waitForTimeout(30000); // Wait 30 seconds
+    await page.reload();
+    
+    // Should redirect to login if session expired
+    expect(page.url()).toContain('/login');
+  });
+});
+```
+
+#### 3.2 Authentication Bypass Testing
+```typescript
+// tests/security/auth-bypass.spec.ts
+import { test, expect } from '@playwright/test';
+
+test.describe('Authentication Bypass Tests', () => {
+  test('should not allow unauthorized access', async ({ page }) => {
+    // Try accessing protected pages directly
+    const protectedUrls = [
+      '/admin',
+      '/dashboard',
+      '/profile',
+      '/settings'
+    ];
+    
+    for (const url of protectedUrls) {
+      await page.goto(`https://target-app.com${url}`);
+      
+      // Should redirect to login
+      expect(page.url()).toContain('/login');
+    }
+  });
+  
+  test('should validate JWT tokens properly', async ({ page }) => {
+    // Test with malformed JWT
+    await page.addInitScript(() => {
+      localStorage.setItem('token', 'invalid.jwt.token');
+    });
+    
+    await page.goto('https://target-app.com/dashboard');
+    expect(page.url()).toContain('/login');
+  });
+});
+```
+
+### Phase 4: Network-Level Security Testing
+
+#### 4.1 Using Nmap for Port Scanning
+```bash
+# Comprehensive port scan
+nmap -sS -sV -sC -O -A target-app.com
+
+# Scan for common vulnerabilities
+nmap --script vuln target-app.com
+
+# Check for SSL/TLS issues
+nmap --script ssl-enum-ciphers -p 443 target-app.com
+```
+
+#### 4.2 SSL/TLS Security Assessment
+```bash
+# Use SSLyze for detailed SSL analysis
+sslyze target-app.com:443
+
+# Test SSL with testssl.sh
+testssl.sh https://target-app.com
+```
+
+### Phase 5: Web Application Vulnerability Scanning
+
+#### 5.1 Using Nuclei for Automated Scanning
+```bash
+# Run nuclei with all templates
+nuclei -u https://target-app.com -t /root/nuclei-templates/
+
+# Run specific vulnerability checks
+nuclei -u https://target-app.com -t /root/nuclei-templates/cves/
+nuclei -u https://target-app.com -t /root/nuclei-templates/vulnerabilities/
+```
+
+#### 5.2 Using SQLMap for SQL Injection Testing
+```bash
+# Test forms for SQL injection
+sqlmap -u "https://target-app.com/search?q=test" --batch --banner
+
+# Test POST parameters
+sqlmap -u "https://target-app.com/login" --data="username=test&password=test" --batch
+```
+
+### Phase 6: Reporting and Documentation
+
+#### 6.1 Automated Report Generation
+```javascript
+// scripts/reporting/generate-report.js
+const fs = require('fs');
+const path = require('path');
+
+class SecurityReport {
+  constructor() {
+    this.findings = [];
+    this.timestamp = new Date().toISOString();
+  }
+  
+  addFinding(severity, title, description, evidence) {
+    this.findings.push({
+      severity,
+      title,
+      description,
+      evidence,
+      timestamp: new Date().toISOString()
+    });
+  }
+  
+  generateHTML() {
+    const template = `
+    <!DOCTYPE html>
+    <html>
+    <head>
+      <title>Security Assessment Report</title>
+      <style>
+        body { font-family: Arial, sans-serif; margin: 40px; }
+        .critical { color: #d32f2f; }
+        .high { color: #f57c00; }
+        .medium { color: #fbc02d; }
+        .low { color: #388e3c; }
+        .finding { margin: 20px 0; padding: 15px; border-left: 4px solid #ccc; }
+      </style>
+    </head>
+    <body>
+      <h1>Security Assessment Report</h1>
+      <p>Generated: ${this.timestamp}</p>
+      
+      <h2>Executive Summary</h2>
+      <p>Total findings: ${this.findings.length}</p>
+      
+      <h2>Detailed Findings</h2>
+      ${this.findings.map(finding => `
+        <div class="finding ${finding.severity}">
+          <h3>${finding.title}</h3>
+          <p><strong>Severity:</strong> ${finding.severity.toUpperCase()}</p>
+          <p><strong>Description:</strong> ${finding.description}</p>
+          <p><strong>Evidence:</strong> ${finding.evidence}</p>
+        </div>
+      `).join('')}
+    </body>
+    </html>
+    `;
+    
+    return template;
+  }
+  
+  save() {
+    const reportPath = `/workspace/reports/security-report-${Date.now()}.html`;
+    fs.writeFileSync(reportPath, this.generateHTML());
+    console.log(`Report saved to: ${reportPath}`);
+  }
+}
+
+module.exports = SecurityReport;
+```
+
+### Phase 7: Continuous Security Testing
+
+#### 7.1 CI/CD Integration
+```yaml
+# .github/workflows/security-tests.yml
+name: Security Tests
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  security-tests:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+    
+    - name: Run Security Tests
+      run: |
+        docker run --rm -v $PWD:/workspace \
+          ghcr.io/your-org/playwright-kali:latest \
+          npm run test:security
+        
+    - name: Upload Security Report
+      uses: actions/upload-artifact@v3
+      with:
+        name: security-report
+        path: reports/
+```
+
+### Best Practices for Security Testing
+
+1. **Always Get Authorization**: Never test systems you don't own or lack permission to test
+2. **Use Isolated Environments**: Test in staging/development environments when possible
+3. **Document Everything**: Keep detailed logs of all testing activities
+4. **Follow Responsible Disclosure**: Report vulnerabilities through proper channels
+5. **Stay Updated**: Keep tools and vulnerability databases current
+6. **Validate Findings**: Manually verify automated scan results
+7. **Consider Impact**: Assess the real-world impact of discovered vulnerabilities
+
+### Common Security Issues to Test For
+
+- **OWASP Top 10 Vulnerabilities**
+  - Injection attacks (SQL, XSS, etc.)
+  - Broken authentication
+  - Sensitive data exposure
+  - XML external entities (XXE)
+  - Broken access control
+  - Security misconfigurations
+  - Cross-site scripting (XSS)
+  - Insecure deserialization
+  - Using components with known vulnerabilities
+  - Insufficient logging and monitoring
+
+- **Additional Security Concerns**
+  - CSRF attacks
+  - Clickjacking
+  - Server-side request forgery (SSRF)
+  - Directory traversal
+  - File upload vulnerabilities
+  - Business logic flaws
+
+This workflow provides a comprehensive approach to security testing using the Playwright + Kali Linux template. Adapt and extend it based on your specific testing requirements and the applications you're assessing.
\ No newline at end of file
diff --git a/test/playwright-kali/test.sh b/test/playwright-kali/test.sh
new file mode 100755
index 0000000..ab794a6
--- /dev/null
+++ b/test/playwright-kali/test.sh
@@ -0,0 +1,151 @@
+#!/bin/bash
+
+set -e
+
+# Source test utilities
+source ../test-utils/test-utils.sh
+
+# Test variables
+TEMPLATE_ID="playwright-kali"
+TEMPLATE_NAME="Playwright Testing with Kali Linux"
+
+header "Testing template: $TEMPLATE_NAME"
+
+# Test 1: Verify container starts successfully
+section "Testing container startup"
+check "Container should start without errors" \
+    "devcontainer exec --workspace-folder . echo 'Container started successfully'"
+
+# Test 2: Verify Node.js installation
+section "Testing Node.js installation"
+check "Node.js should be installed" \
+    "devcontainer exec --workspace-folder . node --version"
+
+check "npm should be available" \
+    "devcontainer exec --workspace-folder . npm --version"
+
+# Test 3: Verify Python installation
+section "Testing Python installation"
+check "Python 3 should be installed" \
+    "devcontainer exec --workspace-folder . python3 --version"
+
+check "pip3 should be available" \
+    "devcontainer exec --workspace-folder . pip3 --version"
+
+# Test 4: Verify Playwright installation
+section "Testing Playwright installation"
+check "Playwright should be installed globally" \
+    "devcontainer exec --workspace-folder . playwright --version"
+
+check "Playwright test should be available" \
+    "devcontainer exec --workspace-folder . npx playwright --version"
+
+# Test 5: Verify basic Kali tools are installed
+section "Testing Kali Linux tools"
+check "nmap should be installed" \
+    "devcontainer exec --workspace-folder . which nmap"
+
+check "curl should be installed" \
+    "devcontainer exec --workspace-folder . which curl"
+
+check "wget should be installed" \
+    "devcontainer exec --workspace-folder . which wget"
+
+check "git should be installed" \
+    "devcontainer exec --workspace-folder . git --version"
+
+# Test 6: Verify security tools (if enabled)
+section "Testing security tools"
+check "burpsuite should be available" \
+    "devcontainer exec --workspace-folder . which burpsuite || echo 'Security tools not enabled'"
+
+check "nikto should be available" \
+    "devcontainer exec --workspace-folder . which nikto || echo 'Security tools not enabled'"
+
+# Test 7: Verify workspace structure
+section "Testing workspace structure"
+check "Workspace directory should exist" \
+    "devcontainer exec --workspace-folder . test -d /workspace"
+
+check "Tests directory should exist" \
+    "devcontainer exec --workspace-folder . test -d /workspace/tests"
+
+check "Scripts directory should exist" \
+    "devcontainer exec --workspace-folder . test -d /workspace/scripts"
+
+# Test 8: Verify Playwright configuration
+section "Testing Playwright configuration"
+check "Playwright config should exist" \
+    "devcontainer exec --workspace-folder . test -f /workspace/playwright.config.ts"
+
+check "Package.json should exist" \
+    "devcontainer exec --workspace-folder . test -f /workspace/package.json"
+
+# Test 9: Test sample security test
+section "Testing sample security tests"
+check "Security test file should exist" \
+    "devcontainer exec --workspace-folder . test -f /workspace/tests/security/basic-security.spec.ts"
+
+# Test 10: Verify browser installation
+section "Testing browser installation"
+check "Chromium should be installed" \
+    "devcontainer exec --workspace-folder . playwright install --dry-run chromium | grep -q 'chromium' || echo 'Browser check skipped'"
+
+# Test 11: Test basic Playwright functionality
+section "Testing Playwright functionality"
+check "Playwright should be able to run a basic test" \
+    "devcontainer exec --workspace-folder . bash -c 'cd /workspace && timeout 30s npx playwright test --version'"
+
+# Test 12: Verify network capabilities
+section "Testing network capabilities"
+check "Container should have network access" \
+    "devcontainer exec --workspace-folder . ping -c 1 google.com"
+
+# Test 13: Test automation script
+section "Testing automation scripts"
+check "Recon script should exist and be executable" \
+    "devcontainer exec --workspace-folder . test -x /workspace/scripts/automation/recon.js"
+
+# Test 14: Verify VS Code extensions configuration
+section "Testing VS Code configuration"
+check "Devcontainer should have VS Code extensions configured" \
+    "grep -q 'ms-playwright.playwright' src/playwright-kali/.devcontainer/devcontainer.json"
+
+# Test 15: Test template options handling
+section "Testing template options"
+check "Template should handle nodeVersion option" \
+    "grep -q 'templateOption:nodeVersion' src/playwright-kali/.devcontainer/devcontainer.json"
+
+check "Template should handle playwrightBrowsers option" \
+    "grep -q 'templateOption:playwrightBrowsers' src/playwright-kali/.devcontainer/setup.sh"
+
+# Test 16: Verify proper permissions
+section "Testing permissions"
+check "Container should run as root for security tools" \
+    "devcontainer exec --workspace-folder . whoami | grep -q 'root'"
+
+# Test 17: Test documentation
+section "Testing documentation"
+check "README should exist in workspace" \
+    "devcontainer exec --workspace-folder . test -f /workspace/README.md"
+
+check "Template should have proper documentation URL" \
+    "grep -q 'documentationURL' src/playwright-kali/devcontainer-template.json"
+
+# Test 18: Verify clean startup
+section "Testing clean startup"
+check "Setup script should complete without errors" \
+    "devcontainer exec --workspace-folder . echo 'Setup completed successfully'"
+
+# Summary
+section "Test Summary"
+echo "✅ All basic functionality tests completed"
+echo "🎭 Playwright + Kali Linux template is ready for use"
+echo ""
+echo "Manual verification recommended:"
+echo "  1. Test browser automation with: cd /workspace && npm run codegen"
+echo "  2. Run security tests with: npm run test:security"
+echo "  3. Verify security tools with: nmap --version, burpsuite --help"
+echo "  4. Test network tools with: wireshark --version"
+
+footer "Template testing completed successfully!"

From 0192159441b5ce65e64f3c76e468c78a9416b7a7 Mon Sep 17 00:00:00 2001
From: Richard Anthony <public.rant@pm.me>
Date: Mon, 21 Jul 2025 05:50:48 +0000
Subject: [PATCH 2/4] Update test-pr.yaml

---
 .github/workflows/test-pr.yaml | 51 +++++++++++++++++-----------------
 1 file changed, 25 insertions(+), 26 deletions(-)

diff --git a/.github/workflows/test-pr.yaml b/.github/workflows/test-pr.yaml
index 778bed4..2363354 100644
--- a/.github/workflows/test-pr.yaml
+++ b/.github/workflows/test-pr.yaml
@@ -1,32 +1,31 @@
 name: "CI - Test Templates"
 on:
-  pull_request:
+    pull_request:
 
 jobs:
-  detect-changes:
-    runs-on: ubuntu-latest
-    outputs:
-      templates: ${{ steps.filter.outputs.changes }}
-    steps:
-      - uses: dorny/paths-filter@v2
-        id: filter
-        with:
-          filters: |
-            color: ./**/color/**
-            hello: ./**/hello/**
+    detect-changes:
+        runs-on: ubuntu-latest
+        outputs:
+            templates: ${{ steps.filter.outputs.changes }}
+        steps:
+            - uses: dorny/paths-filter@v2
+              id: filter
+              with:
+                  filters: |
+                      templates: src/*
 
-  test:
-    needs: [detect-changes]
-    runs-on: ubuntu-latest
-    continue-on-error: true
-    strategy:
-      matrix:
-        templates: ${{ fromJSON(needs.detect-changes.outputs.templates) }}
-    steps:
-      - uses: actions/checkout@v3
+    test:
+        needs: [detect-changes]
+        runs-on: ubuntu-latest
+        continue-on-error: true
+        strategy:
+            matrix:
+                templates: ${{ fromJSON(needs.detect-changes.outputs.templates) }}
+        steps:
+            - uses: actions/checkout@v3
 
-      - name: Smoke test for '${{ matrix.templates }}'
-        id: smoke_test
-        uses: ./.github/actions/smoke-test
-        with:
-          template: "${{ matrix.templates }}"
+            - name: Smoke test for '${{ matrix.templates }}'
+              id: smoke_test
+              uses: ./.github/actions/smoke-test
+              with:
+                  template: "${{ matrix.templates }}"

From 00974ce12f63d7bebeb9ca5f6a80782c30df280e Mon Sep 17 00:00:00 2001
From: Richard Anthony <public.rant@pm.me>
Date: Mon, 21 Jul 2025 06:31:28 +0000
Subject: [PATCH 3/4] Fix workflow to dynamically detect templates

- Remove hardcoded template paths from workflow filter
- Use dynamic template detection to support new templates
- Simplify job structure and fix output variable mapping
- This allows new templates to be automatically tested without code changes
---
 .github/workflows/test-pr.yaml | 41 +++++++++++++++++++++++++---------
 1 file changed, 30 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/test-pr.yaml b/.github/workflows/test-pr.yaml
index 2363354..00affca 100644
--- a/.github/workflows/test-pr.yaml
+++ b/.github/workflows/test-pr.yaml
@@ -3,29 +3,48 @@ on:
     pull_request:
 
 jobs:
-    detect-changes:
+    detect-templates:
         runs-on: ubuntu-latest
         outputs:
-            templates: ${{ steps.filter.outputs.changes }}
+            templates: ${{ steps.set-matrix.outputs.templates }}
         steps:
-            - uses: dorny/paths-filter@v2
-              id: filter
-              with:
-                  filters: |
-                      templates: src/*
+            - uses: actions/checkout@v3
+
+            - name: Find template directories
+              id: set-matrix
+              run: |
+                  # Find all directories in src/ - these are our templates
+                  templates=$(find src -mindepth 1 -maxdepth 1 -type d -exec basename {} \; | sort)
+
+                  # Convert to JSON array format for matrix
+                  json_array="["
+                  first=true
+                  for template in $templates; do
+                    if [ "$first" = true ]; then
+                      json_array="$json_array\"$template\""
+                      first=false
+                    else
+                      json_array="$json_array,\"$template\""
+                    fi
+                  done
+                  json_array="$json_array]"
+
+                  echo "Found templates: $json_array"
+                  echo "templates=$json_array" >> $GITHUB_OUTPUT
 
     test:
-        needs: [detect-changes]
+        needs: [detect-templates]
+        if: ${{ fromJSON(needs.detect-templates.outputs.templates)[0] != null }}
         runs-on: ubuntu-latest
         continue-on-error: true
         strategy:
             matrix:
-                templates: ${{ fromJSON(needs.detect-changes.outputs.templates) }}
+                template: ${{ fromJSON(needs.detect-templates.outputs.templates) }}
         steps:
             - uses: actions/checkout@v3
 
-            - name: Smoke test for '${{ matrix.templates }}'
+            - name: Smoke test for '${{ matrix.template }}'
               id: smoke_test
               uses: ./.github/actions/smoke-test
               with:
-                  template: "${{ matrix.templates }}"
+                  template: "${{ matrix.template }}"

From 045b37a3a03871a4703aca3bac1d068f93337e0f Mon Sep 17 00:00:00 2001
From: Richard Anthony <public.rant@pm.me>
Date: Mon, 21 Jul 2025 06:31:56 +0000
Subject: [PATCH 4/4] Radically simplify Kali Linux template

- Strip down to minimal Kali Linux base with basic tools only
- Remove over-engineered Playwright setup and complex security tools
- Users can now install exactly what they need on demand
- Faster builds, more reliable, easier to maintain
- Update smoke test to match simplified template expectations

This provides a clean Kali Linux foundation that can be extended
rather than a bloated environment with everything pre-installed.
---
 .../.devcontainer/devcontainer.json           |  73 +--
 src/playwright-kali/.devcontainer/setup.sh    | 463 ------------------
 src/playwright-kali/NOTES.md                  | 307 ------------
 src/playwright-kali/README.md                 |  67 +++
 .../devcontainer-template.json                |  48 +-
 src/playwright-kali/example-workflow.md       | 401 ---------------
 test/playwright-kali/test.sh                  | 163 +-----
 7 files changed, 89 insertions(+), 1433 deletions(-)
 delete mode 100755 src/playwright-kali/.devcontainer/setup.sh
 delete mode 100644 src/playwright-kali/NOTES.md
 create mode 100644 src/playwright-kali/README.md
 delete mode 100644 src/playwright-kali/example-workflow.md

diff --git a/src/playwright-kali/.devcontainer/devcontainer.json b/src/playwright-kali/.devcontainer/devcontainer.json
index bad15cd..03f8f18 100644
--- a/src/playwright-kali/.devcontainer/devcontainer.json
+++ b/src/playwright-kali/.devcontainer/devcontainer.json
@@ -1,76 +1,11 @@
 {
-    "name": "Playwright Testing with Kali Linux",
+    "name": "Kali Linux Development",
     "image": "kalilinux/kali-rolling",
-
-    "features": {
-        "ghcr.io/devcontainers/features/node:1": {
-            "nodeGypDependencies": true,
-            "version": "${templateOption:nodeVersion}"
-        },
-        "ghcr.io/devcontainers/features/python:1": {
-            "version": "3.11"
-        },
-        "ghcr.io/devcontainers/features/git:1": {},
-        "ghcr.io/devcontainers/features/github-cli:1": {}
-    },
-
     "customizations": {
         "vscode": {
-            "extensions": [
-                "ms-playwright.playwright",
-                "ms-vscode.vscode-typescript-next",
-                "esbenp.prettier-vscode",
-                "bradlc.vscode-tailwindcss",
-                "ms-python.python",
-                "ms-python.black-formatter",
-                "ms-vscode.test-adapter-converter",
-                "hbenl.vscode-test-explorer",
-                "usernamehw.errorlens",
-                "christian-kohler.path-intellisense",
-                "formulahendry.auto-rename-tag",
-                "ms-vscode.vscode-json",
-                "redhat.vscode-yaml",
-                "humao.rest-client",
-                "ms-vscode.hexdump",
-                "ms-vscode.vscode-serial-monitor"
-            ],
-            "settings": {
-                "terminal.integrated.defaultProfile.linux": "bash",
-                "typescript.preferences.quoteStyle": "single",
-                "javascript.preferences.quoteStyle": "single",
-                "prettier.singleQuote": true,
-                "editor.formatOnSave": true,
-                "editor.codeActionsOnSave": {
-                    "source.fixAll": true
-                }
-            }
+            "extensions": ["ms-python.python"]
         }
     },
-
-    "forwardPorts": [3000, 8080, 9000],
-
-    "postCreateCommand": ".devcontainer/setup.sh",
-
-    "containerEnv": {
-        "PLAYWRIGHT_BROWSERS_PATH": "/opt/playwright-browsers",
-        "PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD": "false",
-        "DEBIAN_FRONTEND": "noninteractive"
-    },
-
-    "capAdd": ["NET_ADMIN", "NET_RAW", "SYS_ADMIN"],
-    "securityOpt": ["seccomp:unconfined"],
-
-    "mounts": [
-        "source=/var/run/docker.sock,target=/var/run/docker.sock,type=bind",
-        "source=playwright-browsers,target=/opt/playwright-browsers,type=volume"
-    ],
-
-    "remoteUser": "root",
-
-    "overrideCommand": false,
-
-    "initializeCommand": "echo 'Initializing Playwright + Kali Linux environment...'",
-    "onCreateCommand": "echo 'Container created successfully'",
-    "updateContentCommand": "echo 'Updating container content...'",
-    "postStartCommand": "echo 'Container started and ready for security research and testing!'"
+    "postCreateCommand": "apt-get update && apt-get install -y curl git python3 python3-pip sudo",
+    "remoteUser": "root"
 }
diff --git a/src/playwright-kali/.devcontainer/setup.sh b/src/playwright-kali/.devcontainer/setup.sh
deleted file mode 100755
index 6e2972f..0000000
--- a/src/playwright-kali/.devcontainer/setup.sh
+++ /dev/null
@@ -1,463 +0,0 @@
-#!/bin/bash
-
-set -e
-
-echo "🚀 Setting up Playwright + Kali Linux development environment..."
-
-# Update package lists
-echo "📦 Updating package lists..."
-apt-get update
-
-# Install essential development tools
-echo "🔧 Installing essential development tools..."
-apt-get install -y \
-    curl \
-    wget \
-    git \
-    vim \
-    nano \
-    build-essential \
-    python3-pip \
-    python3-venv \
-    ca-certificates \
-    gnupg \
-    lsb-release \
-    software-properties-common \
-    apt-transport-https
-
-# Install security tools if enabled
-if [ "${templateOption:includeSecurityTools}" = "true" ]; then
-    echo "🛡️ Installing security research tools..."
-    apt-get install -y \
-        burpsuite \
-        sqlmap \
-        nikto \
-        dirb \
-        gobuster \
-        hydra \
-        john \
-        hashcat \
-        metasploit-framework \
-        beef-xss \
-        zaproxy \
-        whatweb \
-        wpscan \
-        nuclei \
-        subfinder \
-        httpx-toolkit \
-        ffuf
-fi
-
-# Install network tools if enabled
-if [ "${templateOption:includeNetworkTools}" = "true" ]; then
-    echo "🌐 Installing network analysis tools..."
-    apt-get install -y \
-        nmap \
-        masscan \
-        wireshark \
-        tcpdump \
-        netcat-traditional \
-        socat \
-        proxychains4 \
-        tor \
-        netdiscover \
-        arp-scan \
-        dnsutils \
-        whois \
-        traceroute \
-        mtr-tiny
-fi
-
-# Install additional browser dependencies for Playwright
-echo "🌐 Installing browser dependencies..."
-apt-get install -y \
-    libnss3 \
-    libnspr4 \
-    libatk-bridge2.0-0 \
-    libdrm2 \
-    libxkbcommon0 \
-    libxcomposite1 \
-    libxdamage1 \
-    libxrandr2 \
-    libgbm1 \
-    libxss1 \
-    libasound2 \
-    libatspi2.0-0 \
-    libgtk-3-0 \
-    xvfb
-
-# Install Playwright
-echo "🎭 Installing Playwright..."
-npm install -g playwright@latest
-npm install -g @playwright/test
-
-# Install Playwright browsers based on user selection
-echo "🌐 Installing Playwright browsers..."
-case "${templateOption:playwrightBrowsers}" in
-    "all")
-        playwright install --with-deps
-        ;;
-    "chromium")
-        playwright install --with-deps chromium
-        ;;
-    "firefox")
-        playwright install --with-deps firefox
-        ;;
-    "webkit")
-        playwright install --with-deps webkit
-        ;;
-    "chromium-firefox")
-        playwright install --with-deps chromium firefox
-        ;;
-    *)
-        playwright install --with-deps
-        ;;
-esac
-
-# Install additional Python packages for security research
-echo "🐍 Installing Python security packages..."
-pip3 install \
-    requests \
-    beautifulsoup4 \
-    selenium \
-    scrapy \
-    paramiko \
-    pycrypto \
-    cryptography \
-    scapy \
-    python-nmap \
-    dnspython \
-    pexpect \
-    colorama \
-    tabulate \
-    tqdm \
-    click \
-    rich
-
-# Install additional Node.js packages
-echo "📦 Installing useful Node.js packages..."
-npm install -g \
-    typescript \
-    ts-node \
-    nodemon \
-    pm2 \
-    http-server \
-    live-server \
-    eslint \
-    prettier \
-    jest \
-    axios \
-    express
-
-# Create project structure
-echo "📁 Creating project structure..."
-mkdir -p /workspace/{tests,reports,scripts,tools}
-mkdir -p /workspace/tests/{e2e,integration,unit,security}
-mkdir -p /workspace/scripts/{automation,discovery,exploitation}
-
-# Create sample Playwright configuration
-echo "⚙️ Creating sample Playwright configuration..."
-cat > /workspace/playwright.config.ts << 'EOF'
-import { defineConfig, devices } from '@playwright/test';
-
-export default defineConfig({
-  testDir: './tests',
-  fullyParallel: true,
-  forbidOnly: !!process.env.CI,
-  retries: process.env.CI ? 2 : 0,
-  workers: process.env.CI ? 1 : undefined,
-  reporter: [['html'], ['json', { outputFile: 'reports/test-results.json' }]],
-  outputDir: 'reports/test-results/',
-
-  use: {
-    baseURL: 'http://localhost:3000',
-    trace: 'on-first-retry',
-    screenshot: 'only-on-failure',
-    video: 'retain-on-failure',
-    headless: true,
-  },
-
-  projects: [
-    {
-      name: 'chromium',
-      use: { ...devices['Desktop Chrome'] },
-    },
-    {
-      name: 'firefox',
-      use: { ...devices['Desktop Firefox'] },
-    },
-    {
-      name: 'webkit',
-      use: { ...devices['Desktop Safari'] },
-    },
-    {
-      name: 'mobile-chrome',
-      use: { ...devices['Pixel 5'] },
-    },
-    {
-      name: 'mobile-safari',
-      use: { ...devices['iPhone 12'] },
-    },
-  ],
-
-  webServer: {
-    command: 'npm run start',
-    url: 'http://127.0.0.1:3000',
-    reuseExistingServer: !process.env.CI,
-  },
-});
-EOF
-
-# Create sample package.json
-echo "📄 Creating sample package.json..."
-cat > /workspace/package.json << 'EOF'
-{
-  "name": "playwright-security-testing",
-  "version": "1.0.0",
-  "description": "Playwright testing environment for security research",
-  "main": "index.js",
-  "scripts": {
-    "test": "playwright test",
-    "test:headed": "playwright test --headed",
-    "test:ui": "playwright test --ui",
-    "test:debug": "playwright test --debug",
-    "test:report": "playwright show-report",
-    "test:security": "playwright test tests/security/",
-    "codegen": "playwright codegen",
-    "install:browsers": "playwright install --with-deps"
-  },
-  "keywords": ["playwright", "testing", "security", "kali"],
-  "author": "Security Researcher",
-  "license": "MIT",
-  "devDependencies": {
-    "@playwright/test": "^1.40.0",
-    "@types/node": "^20.0.0",
-    "typescript": "^5.0.0"
-  },
-  "dependencies": {
-    "axios": "^1.6.0",
-    "dotenv": "^16.3.0"
-  }
-}
-EOF
-
-# Create sample security test
-echo "🔒 Creating sample security test..."
-cat > /workspace/tests/security/basic-security.spec.ts << 'EOF'
-import { test, expect } from '@playwright/test';
-
-test.describe('Basic Security Tests', () => {
-  test('should check for HTTPS redirect', async ({ page }) => {
-    await page.goto('http://example.com');
-    expect(page.url()).toMatch(/^https:/);
-  });
-
-  test('should check for security headers', async ({ page }) => {
-    const response = await page.goto('https://example.com');
-    const headers = response?.headers();
-
-    expect(headers?.['x-frame-options']).toBeDefined();
-    expect(headers?.['x-content-type-options']).toBeDefined();
-    expect(headers?.['strict-transport-security']).toBeDefined();
-  });
-
-  test('should check for XSS protection', async ({ page }) => {
-    await page.goto('https://example.com');
-
-    // Try to inject a simple XSS payload
-    await page.fill('input[type="search"], input[name="q"], input[name="search"]', '<script>alert("XSS")</script>');
-
-    // Check that script tags are properly escaped
-    const content = await page.content();
-    expect(content).not.toContain('<script>alert("XSS")</script>');
-  });
-});
-EOF
-
-# Create sample automation script
-echo "🤖 Creating sample automation script..."
-cat > /workspace/scripts/automation/recon.js << 'EOF'
-const { chromium } = require('playwright');
-
-async function basicRecon(url) {
-  const browser = await chromium.launch({ headless: true });
-  const page = await browser.newPage();
-
-  try {
-    console.log(`🔍 Starting reconnaissance on: ${url}`);
-
-    const response = await page.goto(url);
-    const title = await page.title();
-    const headers = response.headers();
-
-    console.log(`📄 Title: ${title}`);
-    console.log(`🔧 Server: ${headers.server || 'Unknown'}`);
-    console.log(`🛡️ Security Headers:`);
-    console.log(`  - X-Frame-Options: ${headers['x-frame-options'] || 'Not Set'}`);
-    console.log(`  - X-Content-Type-Options: ${headers['x-content-type-options'] || 'Not Set'}`);
-    console.log(`  - Strict-Transport-Security: ${headers['strict-transport-security'] || 'Not Set'}`);
-
-    // Extract links
-    const links = await page.evaluate(() => {
-      return Array.from(document.querySelectorAll('a')).map(a => a.href).slice(0, 10);
-    });
-
-    console.log(`🔗 Found ${links.length} links (showing first 10):`);
-    links.forEach(link => console.log(`  - ${link}`));
-
-  } catch (error) {
-    console.error(`❌ Error: ${error.message}`);
-  } finally {
-    await browser.close();
-  }
-}
-
-// Usage: node recon.js <url>
-if (process.argv[2]) {
-  basicRecon(process.argv[2]);
-} else {
-  console.log('Usage: node recon.js <url>');
-}
-EOF
-
-# Set proper permissions
-chmod +x /workspace/scripts/automation/recon.js
-
-# Create README for the workspace
-echo "📚 Creating workspace README..."
-cat > /workspace/README.md << 'EOF'
-# Playwright Security Testing Environment
-
-This environment combines Playwright testing capabilities with Kali Linux security tools for comprehensive web application security testing.
-
-## 🚀 Quick Start
-
-1. **Run basic tests:**
-   ```bash
-   cd /workspace
-   npm test
-   ```
-
-2. **Run security-specific tests:**
-   ```bash
-   npm run test:security
-   ```
-
-3. **Interactive test development:**
-   ```bash
-   npm run test:ui
-   ```
-
-4. **Generate tests from browser interactions:**
-   ```bash
-   npm run codegen https://example.com
-   ```
-
-## 🛠️ Available Tools
-
-### Playwright Testing
-- All major browsers (Chromium, Firefox, WebKit)
-- Mobile device emulation
-- Network interception
-- Screenshot and video capture
-- Test reporting
-
-### Security Tools
-- Burp Suite - Web application security testing
-- OWASP ZAP - Security scanning
-- Nmap - Network discovery
-- SQLMap - SQL injection testing
-- Nikto - Web server scanner
-- And many more...
-
-### Network Analysis
-- Wireshark - Network protocol analyzer
-- tcpdump - Packet analyzer
-- Nmap - Network mapper
-- Masscan - High-speed port scanner
-
-## 📁 Project Structure
-
-```
-/workspace/
-├── tests/
-│   ├── e2e/           # End-to-end tests
-│   ├── integration/   # Integration tests
-│   ├── unit/          # Unit tests
-│   └── security/      # Security-focused tests
-├── scripts/
-│   ├── automation/    # Automation scripts
-│   ├── discovery/     # Discovery tools
-│   └── exploitation/  # Security testing scripts
-├── reports/           # Test reports and results
-└── tools/            # Custom tools and utilities
-```
-
-## 🔒 Security Testing Examples
-
-Check the `tests/security/` directory for example security tests and the `scripts/` directory for automation examples.
-
-## 📖 Resources
-
-- [Playwright Documentation](https://playwright.dev)
-- [Kali Linux Tools](https://www.kali.org/tools/)
-- [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
-EOF
-
-# Create .gitignore
-cat > /workspace/.gitignore << 'EOF'
-# Dependencies
-node_modules/
-.npm
-
-# Test results
-test-results/
-playwright-report/
-reports/
-
-# Environment variables
-.env
-.env.local
-
-# Logs
-*.log
-npm-debug.log*
-
-# Coverage
-coverage/
-
-# Cache
-.cache/
-.parcel-cache/
-
-# IDE
-.vscode/settings.json
-.idea/
-
-# OS
-.DS_Store
-Thumbs.db
-
-# Temporary files
-*.tmp
-*.temp
-EOF
-
-# Set up workspace ownership
-chown -R root:root /workspace
-
-# Clean up
-echo "🧹 Cleaning up..."
-apt-get autoremove -y
-apt-get autoclean
-rm -rf /var/lib/apt/lists/*
-
-echo "✅ Setup complete! Your Playwright + Kali Linux environment is ready for security research and testing."
-echo ""
-echo "🎯 Next steps:"
-echo "  1. cd /workspace"
-echo "  2. npm test (to run sample tests)"
-echo "  3. npm run test:ui (for interactive testing)"
-echo "  4. npm run codegen <url> (to generate tests)"
-echo ""
-echo "🔍 Security tools are available system-wide. Try: nmap, burpsuite, zaproxy, etc."
diff --git a/src/playwright-kali/NOTES.md b/src/playwright-kali/NOTES.md
deleted file mode 100644
index c6eead2..0000000
--- a/src/playwright-kali/NOTES.md
+++ /dev/null
@@ -1,307 +0,0 @@
-# Playwright Testing with Kali Linux Template
-
-This template provides a comprehensive development environment that combines the power of Playwright testing framework with Kali Linux security tools, creating an ideal setup for security researchers, penetration testers, and developers who need to perform security testing of web applications.
-
-## 🎯 What This Template Provides
-
-### Core Features
-- **Kali Linux Base**: Built on the latest Kali Linux rolling release with access to hundreds of security tools
-- **Playwright Framework**: Complete web automation and testing framework with all major browsers
-- **Security Testing Tools**: Pre-installed penetration testing and security analysis tools
-- **Network Analysis**: Advanced network discovery and analysis capabilities
-- **Development Environment**: Full Node.js and Python development stack
-
-### Target Audience
-- Security researchers and penetration testers
-- Web application security specialists
-- QA engineers focused on security testing
-- Developers building security-conscious applications
-- Bug bounty hunters and ethical hackers
-
-## 🚀 Quick Start Guide
-
-1. **Create a new project** using this template
-2. **Open in VS Code** with the Dev Containers extension
-3. **Wait for setup** - the first build will install all tools and dependencies
-4. **Navigate to workspace**: `cd /workspace`
-5. **Run sample tests**: `npm test`
-6. **Start security testing**: `npm run test:security`
-
-## 🛠️ Installed Tools & Capabilities
-
-### Web Testing & Automation
-- **Playwright**: Modern web testing framework
-  - Chromium, Firefox, and WebKit browsers
-  - Mobile device emulation
-  - Network interception and mocking
-  - Screenshot and video recording
-  - Parallel test execution
-
-### Security Testing Tools
-- **Burp Suite**: Web application security testing platform
-- **OWASP ZAP**: Web application security scanner
-- **SQLMap**: Automatic SQL injection testing
-- **Nikto**: Web server vulnerability scanner
-- **Nuclei**: Fast vulnerability scanner
-- **FFUF**: Fast web fuzzer
-- **Gobuster**: Directory/file brute-forcer
-- **WPScan**: WordPress security scanner
-
-### Network Analysis & Discovery
-- **Nmap**: Network discovery and security auditing
-- **Masscan**: High-speed port scanner
-- **Wireshark**: Network protocol analyzer
-- **tcpdump**: Command-line packet analyzer
-- **Netcat**: Network utility for debugging and investigation
-
-### Password & Hash Tools
-- **Hydra**: Network login cracker
-- **John the Ripper**: Password cracking tool
-- **Hashcat**: Advanced password recovery
-
-### Development Stack
-- **Node.js**: JavaScript runtime (configurable version)
-- **Python 3**: With security-focused packages
-- **TypeScript**: For type-safe test development
-- **Git**: Version control with GitHub CLI
-
-## 📁 Project Structure
-
-```
-/workspace/
-├── tests/
-│   ├── e2e/           # End-to-end application tests
-│   ├── integration/   # API and service integration tests
-│   ├── unit/          # Component unit tests
-│   └── security/      # Security-focused test suites
-├── scripts/
-│   ├── automation/    # Custom automation scripts
-│   ├── discovery/     # Reconnaissance and discovery tools
-│   └── exploitation/  # Security testing and exploitation scripts
-├── reports/           # Test reports and scan results
-├── tools/            # Custom security tools and utilities
-├── playwright.config.ts  # Playwright configuration
-├── package.json      # Node.js dependencies and scripts
-└── README.md         # Project documentation
-```
-
-## 🔧 Configuration Options
-
-### Node.js Version
-Choose your preferred Node.js version:
-- **18**: LTS version with good compatibility
-- **20**: Current LTS with latest features
-- **latest**: Cutting-edge features (may have compatibility issues)
-
-### Browser Selection
-Control which Playwright browsers to install:
-- **all**: Chromium, Firefox, and WebKit (recommended)
-- **chromium**: Google Chrome/Chromium only
-- **firefox**: Mozilla Firefox only
-- **webkit**: Safari/WebKit only
-- **chromium-firefox**: Chrome and Firefox (common combination)
-
-### Security Tools
-- **Include Security Tools**: Installs comprehensive penetration testing toolkit
-- **Include Network Tools**: Adds network analysis and discovery capabilities
-
-## 🔒 Security Testing Examples
-
-### Basic Security Headers Test
-```typescript
-test('should verify security headers', async ({ page }) => {
-  const response = await page.goto('https://example.com');
-  const headers = response?.headers();
-  
-  expect(headers?.['x-frame-options']).toBeDefined();
-  expect(headers?.['x-content-type-options']).toBe('nosniff');
-  expect(headers?.['strict-transport-security']).toBeDefined();
-});
-```
-
-### XSS Protection Test
-```typescript
-test('should prevent XSS attacks', async ({ page }) => {
-  await page.goto('https://example.com/search');
-  await page.fill('input[name="q"]', '<script>alert("XSS")</script>');
-  await page.press('input[name="q"]', 'Enter');
-  
-  const content = await page.content();
-  expect(content).not.toContain('<script>alert("XSS")</script>');
-});
-```
-
-### Automated Reconnaissance
-```javascript
-const { chromium } = require('playwright');
-
-async function scanWebsite(url) {
-  const browser = await chromium.launch();
-  const page = await browser.newPage();
-  
-  // Extract security information
-  const response = await page.goto(url);
-  const headers = response.headers();
-  const technologies = await page.evaluate(() => {
-    // Detect technologies, frameworks, etc.
-  });
-  
-  await browser.close();
-  return { headers, technologies };
-}
-```
-
-## 🎮 Available Commands
-
-### Testing Commands
-```bash
-npm test                 # Run all tests
-npm run test:headed      # Run tests with browser UI
-npm run test:ui          # Interactive test runner
-npm run test:debug       # Debug mode with developer tools
-npm run test:security    # Run security-specific tests
-npm run test:report      # Show last test report
-```
-
-### Development Commands
-```bash
-npm run codegen         # Generate tests from browser interactions
-playwright codegen <url> # Record interactions on specific site
-```
-
-### Security Tools Commands
-```bash
-# Network scanning
-nmap -sV target.com
-masscan -p1-65535 target.com --rate=1000
-
-# Web application testing
-nikto -h https://target.com
-sqlmap -u "https://target.com/page?id=1"
-
-# Directory discovery
-gobuster dir -u https://target.com -w /usr/share/wordlists/dirb/common.txt
-ffuf -w /usr/share/wordlists/dirb/common.txt -u https://target.com/FUZZ
-
-# Vulnerability scanning
-nuclei -u https://target.com
-```
-
-## 🔐 Security Features
-
-### Container Security
-- **Privileged Access**: Runs as root for security tool functionality
-- **Network Capabilities**: Enhanced network access for testing tools
-- **Security Context**: Configured for security research requirements
-
-### Network Configuration
-- **Port Forwarding**: Common development ports (3000, 8080, 9000)
-- **Proxy Support**: Ready for proxy tools like Burp Suite
-- **VPN Compatible**: Works with VPN connections for secure testing
-
-### Data Protection
-- **Volume Mounts**: Persistent storage for tools and data
-- **Environment Variables**: Secure configuration management
-- **Isolated Environment**: Contained testing environment
-
-## 🚨 Security Considerations
-
-### Ethical Usage
-This template includes powerful security tools that should only be used for:
-- **Authorized testing** on systems you own or have explicit permission to test
-- **Educational purposes** in controlled environments
-- **Bug bounty programs** within their defined scope
-- **Security research** following responsible disclosure practices
-
-### Legal Compliance
-- Always obtain proper authorization before testing
-- Respect terms of service and legal boundaries
-- Follow responsible disclosure practices
-- Maintain detailed documentation of testing activities
-
-### Best Practices
-- Use isolated test environments when possible
-- Keep tools and signatures updated
-- Implement proper access controls
-- Regular security reviews of your testing environment
-
-## 🤝 Contributing & Customization
-
-### Adding Custom Tools
-1. Modify the `setup.sh` script to include additional tools
-2. Update the `devcontainer.json` for new VS Code extensions
-3. Add new test examples to the appropriate directories
-
-### Extending Security Tests
-1. Create new test files in `tests/security/`
-2. Implement custom security check functions
-3. Add automation scripts to `scripts/` directories
-
-### Configuration Customization
-1. Modify `playwright.config.ts` for testing preferences
-2. Update `package.json` for additional dependencies
-3. Customize the workspace structure as needed
-
-## 📚 Learning Resources
-
-### Playwright Documentation
-- [Official Playwright Docs](https://playwright.dev)
-- [Test Generator Guide](https://playwright.dev/docs/codegen)
-- [API Reference](https://playwright.dev/docs/api/class-playwright)
-
-### Security Testing Resources
-- [OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
-- [Web Security Academy](https://portswigger.net/web-security)
-- [Kali Linux Documentation](https://www.kali.org/docs/)
-
-### Penetration Testing
-- [PTES Standard](http://www.pentest-standard.org/)
-- [NIST Cybersecurity Framework](https://www.nist.gov/cyberframework)
-- [SANS Testing Resources](https://www.sans.org/white-papers/)
-
-## 🐛 Troubleshooting
-
-### Common Issues
-
-**Browser Installation Fails**
-```bash
-# Manually install browsers
-playwright install --with-deps
-```
-
-**Permission Denied for Security Tools**
-```bash
-# Ensure running as root
-whoami  # Should return 'root'
-```
-
-**Network Tools Not Working**
-```bash
-# Check network capabilities
-ip addr show
-ping google.com
-```
-
-**Playwright Tests Timeout**
-```bash
-# Increase timeout in playwright.config.ts
-timeout: 30000  # 30 seconds
-```
-
-### Performance Optimization
-- Use `--headed` mode sparingly (slower)
-- Implement proper test parallelization
-- Cache browser installations between builds
-- Use lightweight test fixtures
-
-## 📞 Support & Community
-
-For issues, questions, or contributions:
-1. Check the GitHub repository issues
-2. Consult the official Playwright documentation
-3. Review Kali Linux community resources
-4. Follow security testing best practices
-
----
-
-**⚠️ Disclaimer**: This template is designed for authorized security testing and research only. Users are responsible for ensuring compliance with all applicable laws and regulations. The authors assume no liability for misuse of these tools.
\ No newline at end of file
diff --git a/src/playwright-kali/README.md b/src/playwright-kali/README.md
new file mode 100644
index 0000000..a3af91f
--- /dev/null
+++ b/src/playwright-kali/README.md
@@ -0,0 +1,67 @@
+# Kali Linux Development Container
+
+A basic Kali Linux development environment that can be extended with security tools as needed.
+
+## What's Included
+
+- **Base Image**: Official Kali Linux Rolling Release
+- **Basic Tools**: curl, git, python3, python3-pip, sudo
+- **VS Code Extension**: Python support
+
+## Getting Started
+
+1. Open this template in VS Code with the Dev Containers extension
+2. VS Code will build and start the Kali Linux container
+3. Install additional tools as needed for your specific use case
+
+## Installing Additional Tools
+
+Since this is a minimal setup, you can install Kali's security tools on demand:
+
+```bash
+# Update package list
+sudo apt update
+
+# Install specific tools
+sudo apt install nmap burpsuite sqlmap nikto
+
+# Or install tool collections
+sudo apt install kali-tools-web
+sudo apt install kali-tools-forensics
+sudo apt install kali-tools-wireless
+```
+
+## Common Security Tools
+
+Some popular tools you might want to install:
+
+- **Web Testing**: `burpsuite`, `zaproxy`, `sqlmap`, `nikto`
+- **Network**: `nmap`, `masscan`, `wireshark`, `netcat`
+- **Forensics**: `autopsy`, `volatility`, `sleuthkit`
+- **Wireless**: `aircrack-ng`, `kismet`, `reaver`
+
+## Why This Approach?
+
+This template provides a clean Kali Linux base without pre-installing hundreds of tools. This means:
+
+- Faster container startup
+- Smaller image size
+- Install only what you need
+- Easier troubleshooting
+- More reliable builds
+
+## Extending the Template
+
+To customize this template for your specific needs:
+
+1. Fork this repository
+2. Modify `.devcontainer/devcontainer.json`
+3. Add your required tools to `postCreateCommand`
+4. Add VS Code extensions to the `extensions` array
+
+Example customization:
+```json
+{
+  "postCreateCommand": "apt-get update && apt-get install -y nmap burpsuite sqlmap"
+}
+```
diff --git a/src/playwright-kali/devcontainer-template.json b/src/playwright-kali/devcontainer-template.json
index fe9f16b..4549a55 100644
--- a/src/playwright-kali/devcontainer-template.json
+++ b/src/playwright-kali/devcontainer-template.json
@@ -1,46 +1,8 @@
 {
-    "id": "playwright-kali",
+    "id": "kali-linux",
     "version": "1.0.0",
-    "name": "Playwright Testing with Kali Linux",
-    "description": "A comprehensive development environment for web testing and security research using Playwright on Kali Linux",
-    "documentationURL": "https://github.com/devcontainers/template-starter/tree/main/src/playwright-kali",
-    "licenseURL": "https://github.com/devcontainers/template-starter/blob/main/LICENSE",
-    "options": {
-        "nodeVersion": {
-            "type": "string",
-            "description": "Node.js version for Playwright development",
-            "proposals": [
-                "18",
-                "20",
-                "latest"
-            ],
-            "default": "20"
-        },
-        "playwrightBrowsers": {
-            "type": "string",
-            "description": "Playwright browsers to install",
-            "proposals": [
-                "all",
-                "chromium",
-                "firefox",
-                "webkit",
-                "chromium-firefox"
-            ],
-            "default": "all"
-        },
-        "includeSecurityTools": {
-            "type": "boolean",
-            "description": "Include additional security research tools",
-            "default": true
-        },
-        "includeNetworkTools": {
-            "type": "boolean",
-            "description": "Include network analysis tools (nmap, wireshark, etc.)",
-            "default": true
-        }
-    },
-    "platforms": [
-        "linux/amd64",
-        "linux/arm64"
-    ]
+    "name": "Kali Linux",
+    "description": "A basic Kali Linux development environment that can be extended with security tools",
+    "documentationURL": "https://github.com/public-rant/template-starter/tree/main/src/playwright-kali",
+    "options": {}
 }
diff --git a/src/playwright-kali/example-workflow.md b/src/playwright-kali/example-workflow.md
deleted file mode 100644
index f73c2e5..0000000
--- a/src/playwright-kali/example-workflow.md
+++ /dev/null
@@ -1,401 +0,0 @@
-# Example Security Testing Workflow
-
-This document demonstrates a complete security testing workflow using the Playwright + Kali Linux template.
-
-## Scenario: Testing a Web Application for Security Vulnerabilities
-
-Let's walk through a comprehensive security assessment of a web application using the tools provided in this template.
-
-### Phase 1: Reconnaissance
-
-#### 1.1 Basic Information Gathering
-```bash
-# Start with basic reconnaissance
-cd /workspace
-
-# Use the automated recon script
-node scripts/automation/recon.js https://target-app.com
-
-# Manual nmap scan for open ports
-nmap -sV -sC target-app.com
-
-# Directory discovery
-gobuster dir -u https://target-app.com -w /usr/share/wordlists/dirb/common.txt
-```
-
-#### 1.2 Technology Detection with Playwright
-```javascript
-// scripts/discovery/tech-detection.js
-const { chromium } = require('playwright');
-
-async function detectTechnologies(url) {
-  const browser = await chromium.launch();
-  const page = await browser.newPage();
-  
-  await page.goto(url);
-  
-  // Detect frameworks and libraries
-  const technologies = await page.evaluate(() => {
-    const tech = {};
-    
-    // Check for common frameworks
-    if (window.React) tech.react = window.React.version;
-    if (window.Vue) tech.vue = window.Vue.version;
-    if (window.angular) tech.angular = window.angular.version;
-    if (window.jQuery) tech.jquery = window.jQuery.fn.jquery;
-    
-    // Check for common CMS indicators
-    if (document.querySelector('meta[name="generator"]')) {
-      tech.generator = document.querySelector('meta[name="generator"]').content;
-    }
-    
-    return tech;
-  });
-  
-  console.log('Detected Technologies:', technologies);
-  await browser.close();
-  return technologies;
-}
-```
-
-### Phase 2: Automated Security Testing
-
-#### 2.1 Basic Security Headers Assessment
-```typescript
-// tests/security/headers-assessment.spec.ts
-import { test, expect } from '@playwright/test';
-
-test.describe('Security Headers Assessment', () => {
-  test('should have proper security headers', async ({ page }) => {
-    const response = await page.goto('https://target-app.com');
-    const headers = response?.headers();
-    
-    // Content Security Policy
-    expect(headers?.['content-security-policy']).toBeDefined();
-    
-    // Clickjacking protection
-    expect(headers?.['x-frame-options']).toBeDefined();
-    
-    // MIME type sniffing protection
-    expect(headers?.['x-content-type-options']).toBe('nosniff');
-    
-    // XSS protection
-    expect(headers?.['x-xss-protection']).toBeDefined();
-    
-    // HTTPS enforcement
-    expect(headers?.['strict-transport-security']).toBeDefined();
-    
-    // Information disclosure
-    expect(headers?.['server']).not.toContain('Apache/');
-    expect(headers?.['x-powered-by']).toBeUndefined();
-  });
-});
-```
-
-#### 2.2 Input Validation Testing
-```typescript
-// tests/security/input-validation.spec.ts
-import { test, expect } from '@playwright/test';
-
-test.describe('Input Validation Tests', () => {
-  const xssPayloads = [
-    '<script>alert("XSS")</script>',
-    '"><script>alert("XSS")</script>',
-    'javascript:alert("XSS")',
-    '<img src=x onerror=alert("XSS")>'
-  ];
-  
-  const sqlPayloads = [
-    "' OR '1'='1",
-    "'; DROP TABLE users; --",
-    "1' UNION SELECT null, username, password FROM users--"
-  ];
-  
-  test('should prevent XSS attacks', async ({ page }) => {
-    await page.goto('https://target-app.com/search');
-    
-    for (const payload of xssPayloads) {
-      await page.fill('input[name="query"]', payload);
-      await page.press('input[name="query"]', 'Enter');
-      
-      // Check that payload is properly encoded/escaped
-      const content = await page.content();
-      expect(content).not.toContain(payload);
-      
-      // Check for script execution
-      const alerts = await page.evaluate(() => window.alertTriggered);
-      expect(alerts).toBeFalsy();
-    }
-  });
-  
-  test('should prevent SQL injection', async ({ page }) => {
-    await page.goto('https://target-app.com/login');
-    
-    for (const payload of sqlPayloads) {
-      await page.fill('input[name="username"]', payload);
-      await page.fill('input[name="password"]', 'password');
-      await page.click('button[type="submit"]');
-      
-      // Should not bypass authentication
-      expect(page.url()).not.toContain('/dashboard');
-      
-      // Should not show database errors
-      const content = await page.content();
-      expect(content).not.toMatch(/mysql_|postgresql_|sqlite_|syntax error/i);
-    }
-  });
-});
-```
-
-### Phase 3: Advanced Security Analysis
-
-#### 3.1 Session Management Testing
-```typescript
-// tests/security/session-management.spec.ts
-import { test, expect } from '@playwright/test';
-
-test.describe('Session Management', () => {
-  test('should implement secure session handling', async ({ page, context }) => {
-    // Login and capture session
-    await page.goto('https://target-app.com/login');
-    await page.fill('input[name="username"]', 'testuser');
-    await page.fill('input[name="password"]', 'testpass');
-    await page.click('button[type="submit"]');
-    
-    // Get session cookies
-    const cookies = await context.cookies();
-    const sessionCookie = cookies.find(c => c.name.includes('session'));
-    
-    if (sessionCookie) {
-      // Check for secure flags
-      expect(sessionCookie.secure).toBeTruthy();
-      expect(sessionCookie.httpOnly).toBeTruthy();
-      expect(sessionCookie.sameSite).toBe('Strict');
-    }
-    
-    // Test session timeout
-    await page.waitForTimeout(30000); // Wait 30 seconds
-    await page.reload();
-    
-    // Should redirect to login if session expired
-    expect(page.url()).toContain('/login');
-  });
-});
-```
-
-#### 3.2 Authentication Bypass Testing
-```typescript
-// tests/security/auth-bypass.spec.ts
-import { test, expect } from '@playwright/test';
-
-test.describe('Authentication Bypass Tests', () => {
-  test('should not allow unauthorized access', async ({ page }) => {
-    // Try accessing protected pages directly
-    const protectedUrls = [
-      '/admin',
-      '/dashboard',
-      '/profile',
-      '/settings'
-    ];
-    
-    for (const url of protectedUrls) {
-      await page.goto(`https://target-app.com${url}`);
-      
-      // Should redirect to login
-      expect(page.url()).toContain('/login');
-    }
-  });
-  
-  test('should validate JWT tokens properly', async ({ page }) => {
-    // Test with malformed JWT
-    await page.addInitScript(() => {
-      localStorage.setItem('token', 'invalid.jwt.token');
-    });
-    
-    await page.goto('https://target-app.com/dashboard');
-    expect(page.url()).toContain('/login');
-  });
-});
-```
-
-### Phase 4: Network-Level Security Testing
-
-#### 4.1 Using Nmap for Port Scanning
-```bash
-# Comprehensive port scan
-nmap -sS -sV -sC -O -A target-app.com
-
-# Scan for common vulnerabilities
-nmap --script vuln target-app.com
-
-# Check for SSL/TLS issues
-nmap --script ssl-enum-ciphers -p 443 target-app.com
-```
-
-#### 4.2 SSL/TLS Security Assessment
-```bash
-# Use SSLyze for detailed SSL analysis
-sslyze target-app.com:443
-
-# Test SSL with testssl.sh
-testssl.sh https://target-app.com
-```
-
-### Phase 5: Web Application Vulnerability Scanning
-
-#### 5.1 Using Nuclei for Automated Scanning
-```bash
-# Run nuclei with all templates
-nuclei -u https://target-app.com -t /root/nuclei-templates/
-
-# Run specific vulnerability checks
-nuclei -u https://target-app.com -t /root/nuclei-templates/cves/
-nuclei -u https://target-app.com -t /root/nuclei-templates/vulnerabilities/
-```
-
-#### 5.2 Using SQLMap for SQL Injection Testing
-```bash
-# Test forms for SQL injection
-sqlmap -u "https://target-app.com/search?q=test" --batch --banner
-
-# Test POST parameters
-sqlmap -u "https://target-app.com/login" --data="username=test&password=test" --batch
-```
-
-### Phase 6: Reporting and Documentation
-
-#### 6.1 Automated Report Generation
-```javascript
-// scripts/reporting/generate-report.js
-const fs = require('fs');
-const path = require('path');
-
-class SecurityReport {
-  constructor() {
-    this.findings = [];
-    this.timestamp = new Date().toISOString();
-  }
-  
-  addFinding(severity, title, description, evidence) {
-    this.findings.push({
-      severity,
-      title,
-      description,
-      evidence,
-      timestamp: new Date().toISOString()
-    });
-  }
-  
-  generateHTML() {
-    const template = `
-    <!DOCTYPE html>
-    <html>
-    <head>
-      <title>Security Assessment Report</title>
-      <style>
-        body { font-family: Arial, sans-serif; margin: 40px; }
-        .critical { color: #d32f2f; }
-        .high { color: #f57c00; }
-        .medium { color: #fbc02d; }
-        .low { color: #388e3c; }
-        .finding { margin: 20px 0; padding: 15px; border-left: 4px solid #ccc; }
-      </style>
-    </head>
-    <body>
-      <h1>Security Assessment Report</h1>
-      <p>Generated: ${this.timestamp}</p>
-      
-      <h2>Executive Summary</h2>
-      <p>Total findings: ${this.findings.length}</p>
-      
-      <h2>Detailed Findings</h2>
-      ${this.findings.map(finding => `
-        <div class="finding ${finding.severity}">
-          <h3>${finding.title}</h3>
-          <p><strong>Severity:</strong> ${finding.severity.toUpperCase()}</p>
-          <p><strong>Description:</strong> ${finding.description}</p>
-          <p><strong>Evidence:</strong> ${finding.evidence}</p>
-        </div>
-      `).join('')}
-    </body>
-    </html>
-    `;
-    
-    return template;
-  }
-  
-  save() {
-    const reportPath = `/workspace/reports/security-report-${Date.now()}.html`;
-    fs.writeFileSync(reportPath, this.generateHTML());
-    console.log(`Report saved to: ${reportPath}`);
-  }
-}
-
-module.exports = SecurityReport;
-```
-
-### Phase 7: Continuous Security Testing
-
-#### 7.1 CI/CD Integration
-```yaml
-# .github/workflows/security-tests.yml
-name: Security Tests
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
-
-jobs:
-  security-tests:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v3
-    
-    - name: Run Security Tests
-      run: |
-        docker run --rm -v $PWD:/workspace \
-          ghcr.io/your-org/playwright-kali:latest \
-          npm run test:security
-        
-    - name: Upload Security Report
-      uses: actions/upload-artifact@v3
-      with:
-        name: security-report
-        path: reports/
-```
-
-### Best Practices for Security Testing
-
-1. **Always Get Authorization**: Never test systems you don't own or lack permission to test
-2. **Use Isolated Environments**: Test in staging/development environments when possible
-3. **Document Everything**: Keep detailed logs of all testing activities
-4. **Follow Responsible Disclosure**: Report vulnerabilities through proper channels
-5. **Stay Updated**: Keep tools and vulnerability databases current
-6. **Validate Findings**: Manually verify automated scan results
-7. **Consider Impact**: Assess the real-world impact of discovered vulnerabilities
-
-### Common Security Issues to Test For
-
-- **OWASP Top 10 Vulnerabilities**
-  - Injection attacks (SQL, XSS, etc.)
-  - Broken authentication
-  - Sensitive data exposure
-  - XML external entities (XXE)
-  - Broken access control
-  - Security misconfigurations
-  - Cross-site scripting (XSS)
-  - Insecure deserialization
-  - Using components with known vulnerabilities
-  - Insufficient logging and monitoring
-
-- **Additional Security Concerns**
-  - CSRF attacks
-  - Clickjacking
-  - Server-side request forgery (SSRF)
-  - Directory traversal
-  - File upload vulnerabilities
-  - Business logic flaws
-
-This workflow provides a comprehensive approach to security testing using the Playwright + Kali Linux template. Adapt and extend it based on your specific testing requirements and the applications you're assessing.
\ No newline at end of file
diff --git a/test/playwright-kali/test.sh b/test/playwright-kali/test.sh
index ab794a6..0464715 100755
--- a/test/playwright-kali/test.sh
+++ b/test/playwright-kali/test.sh
@@ -1,151 +1,14 @@
 #!/bin/bash
-
-set -e
-
-# Source test utilities
-source ../test-utils/test-utils.sh
-
-# Test variables
-TEMPLATE_ID="playwright-kali"
-TEMPLATE_NAME="Playwright Testing with Kali Linux"
-
-header "Testing template: $TEMPLATE_NAME"
-
-# Test 1: Verify container starts successfully
-section "Testing container startup"
-check "Container should start without errors" \
-    "devcontainer exec --workspace-folder . echo 'Container started successfully'"
-
-# Test 2: Verify Node.js installation
-section "Testing Node.js installation"
-check "Node.js should be installed" \
-    "devcontainer exec --workspace-folder . node --version"
-
-check "npm should be available" \
-    "devcontainer exec --workspace-folder . npm --version"
-
-# Test 3: Verify Python installation
-section "Testing Python installation"
-check "Python 3 should be installed" \
-    "devcontainer exec --workspace-folder . python3 --version"
-
-check "pip3 should be available" \
-    "devcontainer exec --workspace-folder . pip3 --version"
-
-# Test 4: Verify Playwright installation
-section "Testing Playwright installation"
-check "Playwright should be installed globally" \
-    "devcontainer exec --workspace-folder . playwright --version"
-
-check "Playwright test should be available" \
-    "devcontainer exec --workspace-folder . npx playwright --version"
-
-# Test 5: Verify basic Kali tools are installed
-section "Testing Kali Linux tools"
-check "nmap should be installed" \
-    "devcontainer exec --workspace-folder . which nmap"
-
-check "curl should be installed" \
-    "devcontainer exec --workspace-folder . which curl"
-
-check "wget should be installed" \
-    "devcontainer exec --workspace-folder . which wget"
-
-check "git should be installed" \
-    "devcontainer exec --workspace-folder . git --version"
-
-# Test 6: Verify security tools (if enabled)
-section "Testing security tools"
-check "burpsuite should be available" \
-    "devcontainer exec --workspace-folder . which burpsuite || echo 'Security tools not enabled'"
-
-check "nikto should be available" \
-    "devcontainer exec --workspace-folder . which nikto || echo 'Security tools not enabled'"
-
-# Test 7: Verify workspace structure
-section "Testing workspace structure"
-check "Workspace directory should exist" \
-    "devcontainer exec --workspace-folder . test -d /workspace"
-
-check "Tests directory should exist" \
-    "devcontainer exec --workspace-folder . test -d /workspace/tests"
-
-check "Scripts directory should exist" \
-    "devcontainer exec --workspace-folder . test -d /workspace/scripts"
-
-# Test 8: Verify Playwright configuration
-section "Testing Playwright configuration"
-check "Playwright config should exist" \
-    "devcontainer exec --workspace-folder . test -f /workspace/playwright.config.ts"
-
-check "Package.json should exist" \
-    "devcontainer exec --workspace-folder . test -f /workspace/package.json"
-
-# Test 9: Test sample security test
-section "Testing sample security tests"
-check "Security test file should exist" \
-    "devcontainer exec --workspace-folder . test -f /workspace/tests/security/basic-security.spec.ts"
-
-# Test 10: Verify browser installation
-section "Testing browser installation"
-check "Chromium should be installed" \
-    "devcontainer exec --workspace-folder . playwright install --dry-run chromium | grep -q 'chromium' || echo 'Browser check skipped'"
-
-# Test 11: Test basic Playwright functionality
-section "Testing Playwright functionality"
-check "Playwright should be able to run a basic test" \
-    "devcontainer exec --workspace-folder . bash -c 'cd /workspace && timeout 30s npx playwright test --version'"
-
-# Test 12: Verify network capabilities
-section "Testing network capabilities"
-check "Container should have network access" \
-    "devcontainer exec --workspace-folder . ping -c 1 google.com"
-
-# Test 13: Test automation script
-section "Testing automation scripts"
-check "Recon script should exist and be executable" \
-    "devcontainer exec --workspace-folder . test -x /workspace/scripts/automation/recon.js"
-
-# Test 14: Verify VS Code extensions configuration
-section "Testing VS Code configuration"
-check "Devcontainer should have VS Code extensions configured" \
-    "grep -q 'ms-playwright.playwright' src/playwright-kali/.devcontainer/devcontainer.json"
-
-# Test 15: Test template options handling
-section "Testing template options"
-check "Template should handle nodeVersion option" \
-    "grep -q 'templateOption:nodeVersion' src/playwright-kali/.devcontainer/devcontainer.json"
-
-check "Template should handle playwrightBrowsers option" \
-    "grep -q 'templateOption:playwrightBrowsers' src/playwright-kali/.devcontainer/setup.sh"
-
-# Test 16: Verify proper permissions
-section "Testing permissions"
-check "Container should run as root for security tools" \
-    "devcontainer exec --workspace-folder . whoami | grep -q 'root'"
-
-# Test 17: Test documentation
-section "Testing documentation"
-check "README should exist in workspace" \
-    "devcontainer exec --workspace-folder . test -f /workspace/README.md"
-
-check "Template should have proper documentation URL" \
-    "grep -q 'documentationURL' src/playwright-kali/devcontainer-template.json"
-
-# Test 18: Verify clean startup
-section "Testing clean startup"
-check "Setup script should complete without errors" \
-    "devcontainer exec --workspace-folder . echo 'Setup completed successfully'"
-
-# Summary
-section "Test Summary"
-echo "✅ All basic functionality tests completed"
-echo "🎭 Playwright + Kali Linux template is ready for use"
-echo ""
-echo "Manual verification recommended:"
-echo "  1. Test browser automation with: cd /workspace && npm run codegen"
-echo "  2. Run security tests with: npm run test:security"
-echo "  3. Verify security tools with: nmap --version, burpsuite --help"
-echo "  4. Test network tools with: wireshark --version"
-
-footer "Template testing completed successfully!"
+cd $(dirname "$0")
+source test-utils.sh
+
+# Template specific tests
+check "distro" cat /etc/os-release | grep -i kali
+check "python3" python3 --version
+check "pip3" pip3 --version
+check "curl" curl --version
+check "git" git --version
+check "sudo" sudo --version
+
+# Report result
+reportResults