Commit Graph

11 Commits

Author SHA1 Message Date
n0mad1k c618d4ed80 Revert trashpanda changes — out of scope for SIEM UA tagging task 2026-04-12 07:15:26 -04:00
n0mad1k 384ef33943 Remove duplicate nuclei UA header from trashpanda; make UA configurable via env var 2026-04-12 07:04:30 -04:00
n0mad1k 52821459bb Tag internal nuclei scans with authorized-scan UA to aid SIEM filtering 2026-04-12 06:52:58 -04:00
n0mad1k 1d95a868a0 Fix 11 bugs found in full codebase review
- deploy_phishing.py: undefined extra_vars on orchestration playbook
- freebird/main_menu.py: set_variable() called as function, is a method; fix to config.prompt_set_variable()
- freebird/tool_manager.py: shell=True with f-string paths; replace with direct pip binary call
- certipy-enum.py: password exposed in process list and logs; pass via env var
- cleanup_engine.py: load_vars_file() called with path string, expects provider name
- ioc-u.py: scapy import not guarded; tool crashed if scapy missing
- um_ops.py + um-vault.py: SQL table names f-stringed directly; quote identifiers
- ops-logger.sh: 63-line duplicate function block; removed second copy; quote config_script var
- recon_tools.py: ir-sandbox + link-sandbox not in TOOLS dict; forensics menu option 5 hidden from user
- um-crack.py: missing --scope flag inconsistent with all other Umbra tools
- heartbeat_ingest.py: openssl subprocess not catching FileNotFoundError; wrap with clear error
2026-04-01 22:11:01 -04:00
n0mad1k 7ccb121875 Persist tmux socket outside /tmp on attack boxes
systemd-tmpfiles cleans /tmp on a schedule, wiping the tmux socket
and breaking existing sessions. Set TMUX_TMPDIR to ~/.local/share/tmux
so the socket survives cleanup on both full and quick recon boxes.
2026-03-25 21:32:54 -04:00
n0mad1k ae3ecf863c add Chaos C2 deploy module with local/remote/manage options 2026-03-21 21:42:29 -04:00
n0mad1k acaffecbe8 Add claude-bot integration module to tools menu
New module modules/tools/deploy_claude_bot.py with claude_bot_menu()
entry point. Supports local deploy/uninstall, remote SSH deploy with
auto-generated config.yaml (credentials passed via env vars, not written
to disk), and local/remote systemctl status checks. Wired into deploy.py
tools_menu() as option 8.
2026-03-21 20:30:19 -04:00
n0mad1k 9bef2e7d31 Got attack box and c2-redirector working 2025-08-21 16:25:00 -04:00
n0mad1k a6ed515a05 updated paths for restructure 2025-07-09 13:29:54 -04:00
n0mad1k 8673559470 working on phishing 2025-07-09 11:30:04 -04:00
n0mad1k 36de65ba60 Restructure in-progress 2025-07-04 23:48:04 -04:00