VunFisher for Windows - controlled beta installation
Version 1.4.0 | Build 2026102674 | Windows x64

INSTALL AND PROTECT THE LOCAL SCANNER
1. Request free access at https://txvf.tinkextra.com/overview/downloads.html.
   The activation code is sent to the email supplied in the request.
2. Download VunFisher-Windows.zip and verify the complete SHA-256 shown on the
   official page:
   Get-FileHash .\VunFisher-Windows.zip -Algorithm SHA256
3. Extract every file into a new folder. Do not run the installer inside the ZIP.
4. Open INSTALL.vbs and choose Install VunFisher. Python and required libraries
   are included. A separate Python installation is not required.
5. Open the TX VunFisher Desktop shortcut. The installed app opens locally at
   http://127.0.0.1:8787.
6. Create the local scanner administrator account. This account stays on this
   computer and protects scans, credential references, evidence and reports.
   It is separate from an account created at txvf.tinkextra.com. Use a
   password of at least 6 characters that is not a common or easily guessed
   password.
7. Enter the emailed activation code. Keep it private. An unused code must be
   redeemed within 30 days and binds to one installation.
8. Configure MFA by scanning the displayed QR code with Microsoft Authenticator
   or another time-based authenticator. Save the recovery codes privately.
9. After enrollment, wait for the NEXT six-digit authenticator code before the
   first sign-in. The code used to finish setup is single use.
10. Close and reopen VunFisher. Confirm the local account, license, MFA and
    settings persist before running a scan.

RUN THE FIRST AUTHORIZED TEST
11. For a local assessment, open the installed app and choose a local Windows
    assessment. A remote credential profile is not required.
12. For a credentialed remote Windows assessment, first open Platform > License
    and download Target Setup Assistant 0.3.0. Run its read-only audit on the
    authorized TARGET and follow the numbered Credential scan setup plan.
13. Resolve every STOP item through the appropriate administrator, Group Policy
    or Intune path. Public-network profiles and domain controllers are stop
    conditions. The assistant does not collect passwords or run scans.
14. On the SCANNER, open Assessment > Credentials:
    a. Create a Windows WinRM profile for the approved target account.
    b. Load the target account's actual password. Do not use a VunFisher password
       or Windows PIN. Optional Windows DPAPI persistence requires approval.
    c. Test Connection with the exact target address and confirm authorization.
15. Continue only when Authentication is SUCCESS and the target identity is
    correct. Full inventory normally requires Privilege ADMINISTRATOR and Evidence
    SUCCESS. STANDARD or PARTIAL means coverage is incomplete.
16. Open Scans > New Scan, choose Credentialed Windows Assessment, enter only the
    authorized target, select the tested credential profile and confirm scope.
17. Review authentication, evidence and TXVF Plugin coverage after completion.
    Record an owner and action, retest changes and export a report. Zero findings
    or incomplete coverage does not prove a target is secure.

Full walkthrough:
https://txvf.tinkextra.com/overview/downloads/VunFisher-Tester-Walkthrough.html
Detailed remote setup:
https://txvf.tinkextra.com/overview/downloads/VunFisher-Remote-Scan-Setup-Guide.html

ACCOUNT AND EXECUTION BOUNDARY
- Run scans from the installed app at http://127.0.0.1:8787.
- The hosted portal reviews uploaded results and manages agents. It does not run
  scans directly and does not receive target passwords.
- One emailed activation code binds to one installation. The term starts at first
  activation. Existing reports remain readable after expiry; new scans require an
  active license.

UPDATES AND ORGANIZATIONAL POLICY
Finish active scans, close VunFisher and install updates with the same Windows
account. Setup preserves accounts, licenses, saved credentials and reports and
creates a verified database backup first. Do not delete the existing data folder.

The installer is not Authenticode signed. Do not bypass organizational policy.
Ask IT to approve the package and verify the published SHA-256 before installation.

Main website: https://txvf.tinkextra.com/overview/
Downloads and checksum: https://txvf.tinkextra.com/overview/downloads.html
Training resources: https://txvf.tinkextra.com/overview/resources.html
Feedback: https://txvf.tinkextra.com/overview/beta-feedback.html
Support: jkobena1@gmail.com