Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459
This commit is contained in:
Cobra
2026-04-08 22:18:35 -04:00
parent b34aab7986
commit ffd384f64b
69 changed files with 151 additions and 71 deletions
+1 -1
View File
@@ -19,7 +19,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.active.arp_spoof")
logger = logging.getLogger(__name__)
class ARPSpoof(BaseModule):
+1 -1
View File
@@ -22,7 +22,7 @@ from modules.base import BaseModule
from utils.bettercap_api import BettercapAPI
from utils.credential_encryption import emit_credential_found
logger = logging.getLogger("sensor.active.bettercap_mgr")
logger = logging.getLogger(__name__)
class BettercapManager(BaseModule):
+1 -1
View File
@@ -13,7 +13,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.active.dhcp_spoof")
logger = logging.getLogger(__name__)
class DHCPSpoof(BaseModule):
+1 -1
View File
@@ -14,7 +14,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.active.dns_poison")
logger = logging.getLogger(__name__)
class DNSPoison(BaseModule):
+1 -1
View File
@@ -25,7 +25,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.credential_encryption import emit_credential_found
logger = logging.getLogger("sensor.active.evil_twin")
logger = logging.getLogger(__name__)
# Default dnsmasq config for captive portal
DNSMASQ_CONF_TEMPLATE = """interface={iface}
+1 -1
View File
@@ -19,7 +19,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.active.ipv6_slaac")
logger = logging.getLogger(__name__)
class IPv6SLAAC(BaseModule):
+1 -1
View File
@@ -22,7 +22,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.credential_encryption import emit_credential_found
logger = logging.getLogger("sensor.active.mitmproxy_mgr")
logger = logging.getLogger(__name__)
# Hardware tier check — mitmproxy is too heavy for RPi Zero 2W
SUPPORTED_TIERS = {"opi_zero3", "rpi4", "full"}
+1 -1
View File
@@ -20,7 +20,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.credential_encryption import emit_credential_found
logger = logging.getLogger("sensor.active.ntlm_relay")
logger = logging.getLogger(__name__)
# Supported relay protocols
RELAY_PROTOCOLS = frozenset(["smb", "ldap", "ldaps", "http", "https", "mssql", "adcs"])
+1 -1
View File
@@ -22,7 +22,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.credential_encryption import emit_credential_found
logger = logging.getLogger("sensor.active.responder_mgr")
logger = logging.getLogger(__name__)
# Regex for Responder hash log filenames
HASH_FILE_PATTERN = re.compile(