Strip OPSEC tool identity fingerprints
Replace all sensor.* logger namespaces with __name__ (generic module identifiers instead of discoverable 'sensor.*' prefixes). Change hardcoded 'bb' API user to 'admin' in config and code defaults. Change hardcoded relay_user 'bb' to 'operator' — prevents network profiling from exposing tool identity via SSH config. Fixes #457, #458, #459
This commit is contained in:
@@ -19,7 +19,7 @@ from typing import Optional
|
||||
|
||||
from modules.base import BaseModule
|
||||
|
||||
logger = logging.getLogger("sensor.active.arp_spoof")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class ARPSpoof(BaseModule):
|
||||
|
||||
@@ -22,7 +22,7 @@ from modules.base import BaseModule
|
||||
from utils.bettercap_api import BettercapAPI
|
||||
from utils.credential_encryption import emit_credential_found
|
||||
|
||||
logger = logging.getLogger("sensor.active.bettercap_mgr")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class BettercapManager(BaseModule):
|
||||
|
||||
@@ -13,7 +13,7 @@ from typing import Optional
|
||||
|
||||
from modules.base import BaseModule
|
||||
|
||||
logger = logging.getLogger("sensor.active.dhcp_spoof")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class DHCPSpoof(BaseModule):
|
||||
|
||||
@@ -14,7 +14,7 @@ from typing import Optional
|
||||
|
||||
from modules.base import BaseModule
|
||||
|
||||
logger = logging.getLogger("sensor.active.dns_poison")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class DNSPoison(BaseModule):
|
||||
|
||||
@@ -25,7 +25,7 @@ from typing import Optional
|
||||
from modules.base import BaseModule
|
||||
from utils.credential_encryption import emit_credential_found
|
||||
|
||||
logger = logging.getLogger("sensor.active.evil_twin")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
# Default dnsmasq config for captive portal
|
||||
DNSMASQ_CONF_TEMPLATE = """interface={iface}
|
||||
|
||||
@@ -19,7 +19,7 @@ from typing import Optional
|
||||
|
||||
from modules.base import BaseModule
|
||||
|
||||
logger = logging.getLogger("sensor.active.ipv6_slaac")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
|
||||
class IPv6SLAAC(BaseModule):
|
||||
|
||||
@@ -22,7 +22,7 @@ from typing import Optional
|
||||
from modules.base import BaseModule
|
||||
from utils.credential_encryption import emit_credential_found
|
||||
|
||||
logger = logging.getLogger("sensor.active.mitmproxy_mgr")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
# Hardware tier check — mitmproxy is too heavy for RPi Zero 2W
|
||||
SUPPORTED_TIERS = {"opi_zero3", "rpi4", "full"}
|
||||
|
||||
@@ -20,7 +20,7 @@ from typing import Optional
|
||||
from modules.base import BaseModule
|
||||
from utils.credential_encryption import emit_credential_found
|
||||
|
||||
logger = logging.getLogger("sensor.active.ntlm_relay")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
# Supported relay protocols
|
||||
RELAY_PROTOCOLS = frozenset(["smb", "ldap", "ldaps", "http", "https", "mssql", "adcs"])
|
||||
|
||||
@@ -22,7 +22,7 @@ from typing import Optional
|
||||
from modules.base import BaseModule
|
||||
from utils.credential_encryption import emit_credential_found
|
||||
|
||||
logger = logging.getLogger("sensor.active.responder_mgr")
|
||||
logger = logging.getLogger(__name__)
|
||||
|
||||
# Regex for Responder hash log filenames
|
||||
HASH_FILE_PATTERN = re.compile(
|
||||
|
||||
Reference in New Issue
Block a user