How ghostmanager/ghostwriter works
Ghostwriter is a red-team assessment management and reporting platform. Users organize clients and projects, track infrastructure and assessment activity, curate findings and evidence, then author reports and export deliverables. The repository also documents collaborative editing, GraphQL integration, authentication controls, and integrations for automatic activity logging. The map emphasizes these product stages; several subsystem links are documented rather than verified from source excerpts, so those edges are dashed where implementation wiring was not shown.
Main entry points: reporting/models.py Reports and Evidence · shepherd/models.py Infrastructure Assets · rolodex/models.py Clients and Projects · report.py Report Workflows
Components 17
Assessment Management
- Clients and Projects
ghostwriter/rolodex/models.py - Findings Library
ghostwriter/reporting/models.py
Infrastructure and Activity
- Infrastructure Assets
ghostwriter/shepherd/models.py - Domain Review
ghostwriter/modules/review.py - Asset Monitoring
ghostwriter/modules/cloud_monitors.py - Activity Logging
ghostwriter/oplog/models.py
Reporting and Editing
- Reports and Evidence
ghostwriter/reporting/models.py - Report Workflows
ghostwriter/reporting/views2/report.py - Report Exporters
ghostwriter/modules/reportwriter - Report Templates
ghostwriter/commandcenter/models.py - Collaborative Editors
javascript/src/frontend/collab_forms - Collaboration Server
javascript/src/collab_server
Platform Services
- GraphQL API
ghostwriter/api/views.py - Accounts and Access
ghostwriter/users/models.py - Platform Configuration
ghostwriter/commandcenter/models.py
Other components
- Team Members
- Security Tools
Connections 19
- Team Members → Clients and Projects: manages
- Clients and Projects → Infrastructure Assets: organizes assessments
- Team Members → Infrastructure Assets: tracks assets
- Infrastructure Assets → Domain Review: reviewed by
ghostwriter/shepherd/tasks.py - Infrastructure Assets → Asset Monitoring: monitored by
ghostwriter/shepherd/tasks.py - Security Tools → Activity Logging: sends activity
- Team Members → Activity Logging: records activity
- Clients and Projects → Reports and Evidence: supports reports
ghostwriter/reporting/models.py - Findings Library → Reports and Evidence: included in
ghostwriter/reporting/models.py - Team Members → Report Workflows: authors
- Report Workflows → Reports and Evidence: manages
- Reports and Evidence → Report Exporters: exports through
ghostwriter/reporting/models.py - Report Templates → Report Exporters: configures output
ghostwriter/commandcenter/models.py - Team Members → Collaborative Editors: edits collaboratively
- Collaborative Editors → Collaboration Server: syncs edits
- Team Members → GraphQL API: integrates through
- GraphQL API → Reports and Evidence: exposes workflows
- Team Members → Accounts and Access: authenticates
- Platform Configuration → Security Tools: configures integrations