Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459
This commit is contained in:
Cobra
2026-04-08 22:18:35 -04:00
parent b34aab7986
commit ffd384f64b
69 changed files with 151 additions and 71 deletions
+1 -1
View File
@@ -19,7 +19,7 @@ from utils.stealth import (
_get_os_install_time,
)
logger = logging.getLogger("sensor.stealth.anti_forensics")
logger = logging.getLogger(__name__)
# SystemMonitor install root (default; overridden by config)
BB_ROOT = "/opt/.cache/bb"
+1 -1
View File
@@ -19,7 +19,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.crypto import LUKSContainer, derive_network_key
logger = logging.getLogger("sensor.stealth.encrypted_storage")
logger = logging.getLogger(__name__)
# Subdirectories created inside the mounted LUKS container
STORAGE_SUBDIRS = ("pcaps", "logs", "baseline", "intel", "credentials", "config")
+1 -1
View File
@@ -12,7 +12,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.stealth.ids_tester")
logger = logging.getLogger(__name__)
# Detection risk levels
RISK_LOW = "LOW"
+1 -1
View File
@@ -15,7 +15,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.stealth.ja3_spoofer")
logger = logging.getLogger(__name__)
# Built-in JA3 fingerprint profiles (fallback if data/ja3_fingerprints.db absent)
# Format: {name: {ja3_hash, cipher_suites, extensions, description}}
+1 -1
View File
@@ -12,7 +12,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.resource import get_hardware_tier, TIER_GENERIC
logger = logging.getLogger("sensor.stealth.lkm_rootkit")
logger = logging.getLogger(__name__)
LKM_TEMPLATE_DIR = "templates/lkm"
LKM_SOURCE = "bb_hide.c"
+1 -1
View File
@@ -15,7 +15,7 @@ from typing import Dict, List
from modules.base import BaseModule
logger = logging.getLogger("sensor.stealth.log_suppression")
logger = logging.getLogger(__name__)
RSYSLOG_CONF = "/etc/rsyslog.d/01-bb-suppress.conf"
JOURNALD_CONF_DIR = "/etc/systemd/journald.conf.d"
+1 -1
View File
@@ -26,7 +26,7 @@ from utils.networking import (
)
from utils.stealth import set_sysctl, set_tcp_timestamps, set_tcp_window, set_ttl
logger = logging.getLogger("sensor.stealth.mac_manager")
logger = logging.getLogger(__name__)
# Category preferences per network type
_BUSINESS_CATEGORIES = ("printers", "network", "smart_home")
+1 -1
View File
@@ -13,7 +13,7 @@ from typing import Optional
from modules.base import BaseModule
from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
logger = logging.getLogger("sensor.stealth.overlayfs_manager")
logger = logging.getLogger(__name__)
# Default overlay paths
OVERLAY_BASE = "/opt/.cache/bb/overlay"
+1 -1
View File
@@ -16,7 +16,7 @@ from typing import Dict, Optional
from modules.base import BaseModule
from utils.stealth import rename_process, spoof_cmdline
logger = logging.getLogger("sensor.stealth.process_disguise")
logger = logging.getLogger(__name__)
class ProcessDisguise(BaseModule):
+1 -1
View File
@@ -16,7 +16,7 @@ from typing import Dict, List, Optional, Tuple
from modules.base import BaseModule
from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
logger = logging.getLogger("sensor.stealth.tmpfs_manager")
logger = logging.getLogger(__name__)
# Default tmpfs size limits per tier (MB)
_TIER_TMPFS_LIMITS = {
+1 -1
View File
@@ -14,7 +14,7 @@ from typing import Optional
from modules.base import BaseModule
logger = logging.getLogger("sensor.stealth.traffic_mimicry")
logger = logging.getLogger(__name__)
PHASE_BASELINE = "baseline"
PHASE_SHAPING = "shaping"
+1 -1
View File
@@ -17,7 +17,7 @@ from modules.base import BaseModule
from core.bus import Event
from utils.resource import get_process_resources
logger = logging.getLogger("sensor.stealth.watchdog")
logger = logging.getLogger(__name__)
# OOM priority assignments by module type
_OOM_PRIORITIES = {