> For the complete documentation index, see [llms.txt](https://docs.monarchlinux.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.monarchlinux.com/basics/pentest-tools/exegol.md).

# Exegol

Monarch provides an Exegol configuration and a manager for pentest environments. Press **Ctrl+Alt+E** or run `monarch-menu-pentestenv` to open the manager. It lists Exegol and RF Swift containers together. If Exegol is missing, run `monarch-menu-exegol` from a terminal and accept its installation prompt. Access to Docker may require authentication for the session.

## Create an environment

1. Press **Ctrl+N** in the manager and choose **Exegol** if both tools are installed.
2. Select an image. The wizard offers to download it if it is not installed.
3. Name the container, then choose an optional VPN configuration and authentication file.
4. Choose whether to record the shell session and whether to enable an HTTP or VNC desktop.

The wizard starts the container and opens a shell. Shell logging is **off by default** in Monarch's Exegol configuration; choose **Enable logging** in the wizard when you need a record of the session.

## Manage containers

| Key        | Action                                                           |
| ---------- | ---------------------------------------------------------------- |
| **Enter**  | Start a stopped container or open another shell in a running one |
| **Ctrl+X** | Stop the selected container                                      |
| **Ctrl+D** | Remove the selected container                                    |
| **Ctrl+W** | Open its workspace folder on the host                            |
| **Ctrl+R** | Refresh the list                                                 |

Run `monarch-menu-exegol` directly for two additional shortcuts: **Ctrl+F** launches Firefox in the selected container and **Ctrl+B** launches BloodHound.

## Files and configuration

Monarch seeds `~/.exegol/config.yml` and `~/.exegol/my-resources/` during user setup. The default host directory for container workspaces is `~/Work/exegol/workspaces`; `my-resources` is shared across local Exegol containers. The seeded resources include Kitty and Zellij configuration, `leakcheck` and `inteleaks` scripts, and a Leviathan setup. Exegol runs `my-resources/setup/load_user_setup.sh` when a new container starts for the first time, so that setup can download additional tools. See the [Exegol documentation](https://docs.exegol.com/) for image management, workspace options, VPN formats, and advanced container settings.