From 334f9830e1f87540de1bfff0785b1a0aa9529e72 Mon Sep 17 00:00:00 2001 From: Cobra Date: Wed, 8 Apr 2026 14:08:00 -0400 Subject: [PATCH] =?UTF-8?q?Replace=20.bigbrother=20with=20.implant=20in=20?= =?UTF-8?q?all=20identity=20strings=20=E2=80=94=20avoid=20tool=20name=20ex?= =?UTF-8?q?posure=20on=20fresh=20flash?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- core/state.py | 2 +- modules/active/mitmproxy_mgr.py | 2 +- modules/active/ntlm_relay.py | 4 ++-- modules/passive/auth_flow_tracker.py | 2 +- modules/passive/cloud_token_harvester.py | 2 +- modules/passive/db_interceptor.py | 2 +- modules/passive/ldap_harvester.py | 2 +- modules/passive/network_mapper.py | 2 +- modules/passive/quic_analyzer.py | 2 +- modules/passive/rdp_monitor.py | 2 +- modules/passive/smb_monitor.py | 2 +- modules/passive/vlan_discovery.py | 2 +- 12 files changed, 13 insertions(+), 13 deletions(-) diff --git a/core/state.py b/core/state.py index 3df972b..36478ef 100644 --- a/core/state.py +++ b/core/state.py @@ -19,7 +19,7 @@ from pathlib import Path logger = logging.getLogger("sensor.state") _DEFAULT_DB = os.path.join( - os.path.expanduser("~"), ".bigbrother", "state.db" + os.path.expanduser("~"), ".implant", "state.db" ) diff --git a/modules/active/mitmproxy_mgr.py b/modules/active/mitmproxy_mgr.py index dcba60a..5a6025d 100644 --- a/modules/active/mitmproxy_mgr.py +++ b/modules/active/mitmproxy_mgr.py @@ -66,7 +66,7 @@ class MitmproxyManager(BaseModule): self._mitmdump_binary = config.get("mitmdump_binary", "mitmdump") self._flow_log = config.get( "flow_log", - os.path.join(os.path.expanduser("~"), ".bigbrother", "mitmproxy_flows"), + os.path.join(os.path.expanduser("~"), ".implant", "mitmproxy_flows"), ) # ------------------------------------------------------------------ diff --git a/modules/active/ntlm_relay.py b/modules/active/ntlm_relay.py index 8d35f09..35c574e 100644 --- a/modules/active/ntlm_relay.py +++ b/modules/active/ntlm_relay.py @@ -68,10 +68,10 @@ class NTLMRelay(BaseModule): self._relays_lock = threading.Lock() self._responder_mgr = None self._target_file = os.path.join( - os.path.expanduser("~"), ".bigbrother", "relay_targets.txt" + os.path.expanduser("~"), ".implant", "relay_targets.txt" ) self._loot_dir = os.path.join( - os.path.expanduser("~"), ".bigbrother", "ntlmrelay_loot" + os.path.expanduser("~"), ".implant", "ntlmrelay_loot" ) # ------------------------------------------------------------------ diff --git a/modules/passive/auth_flow_tracker.py b/modules/passive/auth_flow_tracker.py index 2923b65..95404d3 100644 --- a/modules/passive/auth_flow_tracker.py +++ b/modules/passive/auth_flow_tracker.py @@ -499,7 +499,7 @@ class AuthFlowTracker(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "auth_flow_tracker.db") diff --git a/modules/passive/cloud_token_harvester.py b/modules/passive/cloud_token_harvester.py index aef81c7..cfda864 100644 --- a/modules/passive/cloud_token_harvester.py +++ b/modules/passive/cloud_token_harvester.py @@ -277,7 +277,7 @@ class CloudTokenHarvester(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "cloud_token_harvester.db") diff --git a/modules/passive/db_interceptor.py b/modules/passive/db_interceptor.py index 8ddced7..4eac6db 100644 --- a/modules/passive/db_interceptor.py +++ b/modules/passive/db_interceptor.py @@ -648,7 +648,7 @@ class DBInterceptor(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "db_interceptor.db") diff --git a/modules/passive/ldap_harvester.py b/modules/passive/ldap_harvester.py index 4171a53..bcd1bb1 100644 --- a/modules/passive/ldap_harvester.py +++ b/modules/passive/ldap_harvester.py @@ -449,7 +449,7 @@ class LDAPHarvester(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "ldap_harvester.db") diff --git a/modules/passive/network_mapper.py b/modules/passive/network_mapper.py index 05b570b..b5f97ea 100644 --- a/modules/passive/network_mapper.py +++ b/modules/passive/network_mapper.py @@ -305,7 +305,7 @@ class NetworkMapper(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "network_mapper.db") diff --git a/modules/passive/quic_analyzer.py b/modules/passive/quic_analyzer.py index e22d3d2..acddcd5 100644 --- a/modules/passive/quic_analyzer.py +++ b/modules/passive/quic_analyzer.py @@ -417,7 +417,7 @@ class QUICAnalyzer(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "quic_analyzer.db") diff --git a/modules/passive/rdp_monitor.py b/modules/passive/rdp_monitor.py index 6ce21c7..8596bb1 100644 --- a/modules/passive/rdp_monitor.py +++ b/modules/passive/rdp_monitor.py @@ -329,7 +329,7 @@ class RDPMonitor(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "rdp_monitor.db") diff --git a/modules/passive/smb_monitor.py b/modules/passive/smb_monitor.py index 7fe81d6..8154634 100644 --- a/modules/passive/smb_monitor.py +++ b/modules/passive/smb_monitor.py @@ -347,7 +347,7 @@ class SMBMonitor(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "smb_monitor.db") diff --git a/modules/passive/vlan_discovery.py b/modules/passive/vlan_discovery.py index fa6fc1f..dfe1568 100644 --- a/modules/passive/vlan_discovery.py +++ b/modules/passive/vlan_discovery.py @@ -382,7 +382,7 @@ class VLANDiscovery(BaseModule): def _resolve_db_path(self) -> str: base = self.config.get("db_dir", os.path.join( - os.path.expanduser("~"), ".bigbrother" + os.path.expanduser("~"), ".implant" )) return os.path.join(base, "vlan_discovery.db")