 n0mad1k
|
f90a686626
|
Phase 1: setup script and data bootstrapping
- setup.sh: Idempotent bootstrap for OPi Zero 3 / RPi Zero 2W / Debian
Platform detection, system packages, Pi optimizations (gpu_mem, swap,
sysctl), directory structure, Python venv, bettercap binary install,
external tools (Responder, NetExec, Chisel, Ligolo, kerbrute, etc),
data database creation, systemd service install, permissions, verification.
Supports --reinstall, --jumpbox, --no-tools, --verify-only flags.
- scripts/build_data.py: Creates 5 SQLite databases
innocuous_macs.db (51 consumer device profiles with OUI/DHCP/TCP fingerprints),
oui.db (50 seed OUIs), os_sigs.db (16 p0f-style signatures),
dhcp_fingerprints.db (19 option-55 fingerprints), ja3_fingerprints.db (13 hashes)
- scripts/build_lkm.sh: LKM rootkit compiler wrapper
- scripts/rotate_pcap.sh: tcpdump post-rotation handler with zstd compression,
optional AES-256-GCM encryption, disk space monitoring, and auto-purge
|
2026-03-18 08:13:55 -04:00 |
|
|
n0mad1k
|
62a1010ab4
|
Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api
9 files in utils/ providing the shared infrastructure layer:
- crypto: AES-256-GCM file encryption, argon2id/PBKDF2 key derivation, HKDF network unlock, LUKS container management
- networking: interface detection, MAC/IP helpers, BPF compilation via libpcap ctypes, gratuitous ARP, VLAN creation
- logging: encrypted log writer (BBLogger) with rotation, per-module files, stdout suppression for stealth
- stealth: process rename via prctl, cmdline spoofing, sysctl helpers, timestomping, core dump disable
- resource: hardware tier detection (OPi Zero 3 / Pi Zero / generic) via /proc/device-tree and cpuinfo, resource monitoring
- permissions: root/capability checks via capget ctypes, privilege dropping, directory permission enforcement
- config_loader: YAML merge hierarchy (hardware_tiers -> bigbrother -> modules -> stealth -> CLI), tier auto-detection, SIGHUP reload
- bettercap_api: REST client with per-session random credentials, session/events/command methods
|
2026-03-18 08:11:25 -04:00 |
|