Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459
This commit is contained in:
Cobra
2026-04-08 22:18:35 -04:00
parent b34aab7986
commit ffd384f64b
69 changed files with 151 additions and 71 deletions
+2 -2
View File
@@ -45,7 +45,7 @@ connectivity:
reverse_ssh:
relay_host: ""
relay_port: 22
relay_user: "bb"
relay_user: "operator"
key_file: "storage/config/ssh_relay.key"
security:
@@ -90,7 +90,7 @@ bettercap:
binary: "/usr/local/bin/bettercap"
api_address: "127.0.0.1" # Localhost only -- never network-visible
api_port: 8083
api_user: "bb"
api_user: "admin"
# api_password generated per-session, stored in memory only
default_caplet: "passive_recon"
caplets_path: "config/caplets"