Initial public release

Full BigBrother network implant - passive SOC + active exploitation.
Personal identifiers removed; all capabilities intact.
See README.md for setup and docs/deployment.md for detailed deployment.

config/scope.yaml

@@ -0,0 +1,28 @@
+# BigBrother Scope Enforcement
+# Optional. When enabled, all passive/active modules respect these boundaries.
+# Prevents accidental out-of-scope activity during engagements.
+
+enabled: false
+
+# In-scope target networks (CIDR notation)
+networks: []
+  # - 10.10.0.0/16
+  # - 192.168.1.0/24
+
+# In-scope individual hosts (IP or FQDN)
+hosts: []
+  # - dc01.corp.local
+  # - 10.10.1.50
+
+# In-scope domains (wildcard matching)
+domains: []
+  # - corp.local
+  # - internal.example.com
+
+# Excluded networks — always out of scope (overrides networks/hosts above)
+exclude_networks: []
+  # - 10.10.99.0/24    # OT segment
+
+# Excluded hosts — always out of scope
+exclude_hosts: []
+  # - 10.10.1.1        # Production gateway