Initial public release

Full BigBrother network implant - passive SOC + active exploitation.
Personal identifiers removed; all capabilities intact.
See README.md for setup and docs/deployment.md for detailed deployment.

config/caplets/arp_mitm.cap

@@ -0,0 +1,5 @@
+set arp.spoof.fullduplex true
+set arp.spoof.internal false
+# targets set dynamically via API
+arp.spoof on
+net.sniff on

config/caplets/dns_spoof.cap

@@ -0,0 +1,3 @@
+set dns.spoof.all false
+# domains set dynamically via API
+dns.spoof on

config/caplets/full_mitm.cap

@@ -0,0 +1,7 @@
+set arp.spoof.fullduplex true
+set arp.spoof.internal false
+set http.proxy.sslstrip false
+set net.sniff.verbose false
+arp.spoof on
+http.proxy on
+net.sniff on

config/caplets/passive_recon.cap

@@ -0,0 +1,6 @@
+set net.sniff.verbose false
+set net.sniff.local true
+set net.sniff.output /tmp/bb_sniff.pcap
+net.recon on
+net.sniff on
+events.stream on

config/caplets/wifi_recon.cap

@@ -0,0 +1,2 @@
+wifi.recon on
+wifi.show