n0mad1k/bigbrother
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 3153b7e8a3 Robust interface detection — retry fallback chain for headless boot (#206) Cobra 2026-04-08 20:58:43 -04:00
  • 1f43d97f03 Add test to verify Engine instantiates and injects CaptureBus into passive modules (#204) Cobra 2026-04-08 20:57:10 -04:00
  • 967fac5ce5 Enrich net_alerter alerts with OUI vendor and reverse DNS hostname Cobra 2026-04-08 20:31:49 -04:00
  • d9c27eaf66 Fix Cloudflare bot detection blocking net_alerter Matrix sends Cobra 2026-04-08 20:19:24 -04:00
  • 019a96b205 Fix flash bugs: remove netplan wifi conflict, suppress eth default route, force IPv4 for Tailscale install Cobra 2026-04-08 19:37:38 -04:00
  • 248ba78e15 Fix WiFi: enable wpa_supplicant@wlan0 — instance was never linked Cobra 2026-04-08 15:56:48 -04:00
  • 334f9830e1 Replace .bigbrother with .implant in all identity strings — avoid tool name exposure on fresh flash Cobra 2026-04-08 14:08:00 -04:00
  • e114d6067a Remove autossh reverse tunnel references — module deleted, causing ImportError on startup Cobra 2026-04-08 14:07:52 -04:00
  • 1dbcb6aad3 Wire net_alerter cron into setup.sh — reads bb-config.env, seeds baseline on first boot Cobra 2026-04-08 13:50:58 -04:00
  • b0fd5865cc Make binary downloads non-fatal and add force-confold for nftables conffile prompt Cobra 2026-04-08 12:22:25 -04:00
  • 3cdccbf47d Fix WiFi conflict and SSH accessibility on fresh flash Cobra 2026-04-08 11:08:02 -04:00
  • 90c26ae24d Fix firstboot service startup: GOPATH env, enable all services, add bettercap passive caplet Cobra 2026-04-08 10:51:09 -04:00
  • d66b547045 Fix wpa_supplicant conflict and firstboot robustness Cobra 2026-04-07 21:50:51 -04:00
  • 1803c54182 Switch WiFi config from NetworkManager to Netplan+wpa_supplicant Cobra 2026-04-07 17:02:36 -04:00
  • d2f4f9759d Fix SD flash mounting wrong partition — Armbian p1=boot p2=rootfs Cobra 2026-04-07 16:44:22 -04:00
  • 61a1756dae Fix mktemp overwrite prompt in autossh tunnel keygen Cobra 2026-04-07 15:56:59 -04:00
  • 56ad5662ac Fix ssh-keygen overwrite prompt and key landing in root home Cobra 2026-04-07 15:47:31 -04:00
  • 6cb48909b2 Save generated SSH key locally to ~/.ssh/bb-<device_id> Cobra 2026-04-07 15:22:55 -04:00
  • 42c05f37e6 Fix ANSI rendering and Infisical key storage in operator wizard Cobra 2026-04-07 15:22:16 -04:00
  • e00769631a Remove homeserver default — no infrastructure fingerprints in wizard Cobra 2026-04-07 14:56:46 -04:00
  • 4c332eabb4 Proper Matrix alerter support with client API Cobra 2026-04-07 14:55:23 -04:00
  • 84f0775f76 Align device ID with MAC profile OUI for consistent network identity Cobra 2026-04-07 14:48:22 -04:00
  • d8de49a53d Remove bb- prefix from device ID default Cobra 2026-04-07 14:44:59 -04:00
  • af124cc6d0 Default VPN to Tailscale, add auth key expiry warning Cobra 2026-04-07 14:41:17 -04:00
  • b0fb5af1fb Include device IP and hostname in firstboot alerter beacon Cobra 2026-04-07 14:37:04 -04:00
  • 2b00b28de6 Add reverse SSH tunnel (autossh) as VPN option in operator wizard Cobra 2026-04-07 14:30:10 -04:00
  • ae79d64913 Align default hostname with MAC device profiles for OPSEC consistency Cobra 2026-04-07 14:19:55 -04:00
  • 2b53da80d0 Fix wizard: defaults for all prompts, random hostname/device-id, download robustness Cobra 2026-04-07 14:17:01 -04:00
  • ae35f3f7b8 Fix HOME path when run via sudo — use SUDO_USER's home not /root Cobra 2026-04-07 14:12:07 -04:00
  • 6f2a6dacea Fix SCRIPT_DIR path now that operator_setup.sh is at repo root Cobra 2026-04-07 14:05:36 -04:00
  • 8e7e3fe91d Move operator_setup.sh to repo root for direct access Cobra 2026-04-07 14:05:12 -04:00
  • ab34023c51 Fix set -e crash in image detection and device selection Cobra 2026-04-07 14:02:32 -04:00
  • 0e49eb914e Add operator SD setup wizard: flash, configure, first-boot autonomy Cobra 2026-04-07 13:58:01 -04:00
  • 5e5f88d6cb Full autonomous first-boot: fix WiFi UUID, self-installing setup Cobra 2026-04-07 13:45:04 -04:00
  • e1f937f42c Generate per-device SSH keypair instead of copying operator keys Cobra 2026-04-07 13:42:45 -04:00
  • 77aac72d31 Strip SSH key comments on deploy; add preconfig_sd.sh Cobra 2026-04-07 13:41:44 -04:00
  • 8037462276 Randomize system hostname from device profile to match MAC identity Cobra 2026-04-07 13:33:54 -04:00
  • 7070f6548c Add reimage bootstrap: deploy.sh, setup_wifi.sh, fix setup.sh enable/reinstall, idempotent DB inserts Cobra 2026-04-07 13:20:15 -04:00
  • 0f754cfb7f Fix DB table/column mismatch and stale PID noise on startup Cobra 2026-04-07 13:05:31 -04:00
  • e15e077be8 Skip MAC rotation on active WiFi interfaces to prevent ENETDOWN Cobra 2026-04-07 12:48:56 -04:00
  • 7f58f1cab3 Fix StateManager deadlock with explicit BEGIN IMMEDIATE + retry Cobra 2026-04-07 12:23:38 -04:00
  • a8b81f38c9 Fix credential_db schema conflict and add resilience Cobra 2026-04-07 12:19:56 -04:00
  • 1f0e3ee79a Cap stealth/intel/connectivity modules on Pi3B tier to prevent OOM Cobra 2026-04-06 22:44:52 -04:00
  • 7442dc24dd Fix CaptureBus cross-fork visibility — restart reader in each module subprocess Cobra 2026-04-06 22:12:26 -04:00
  • 5be7fcf6d4 Fix module subprocess lifecycle and capture_bus injection bugs Cobra 2026-04-06 21:57:30 -04:00
  • 78738622eb Securely wipe state.db on exit (#216) Cobra 2026-04-06 11:44:44 -04:00
  • edf2ea7c36 Encrypt sensitive credential fields before event bus emission (#215) Cobra 2026-04-06 11:43:46 -04:00
  • f15b8994cd Fix #214: Prevent ToolManager crash callback deadlock Cobra 2026-04-06 11:40:36 -04:00
  • 1b93378f02 Fix #213: Guard BIGBROTHER_DESIGN.md from deployment Cobra 2026-04-06 11:40:03 -04:00
  • 50deaf0cfb Fix #212: Remove autossh reverse tunnel module Cobra 2026-04-06 11:39:56 -04:00
  • 1eb35c9050 Fix #211: Remove tool identity strings from deployed artifacts Cobra 2026-04-06 11:39:48 -04:00
  • ae4933044b Fix #209: Prevent SSH MITM in data_exfil.py exfiltration Cobra 2026-04-06 11:39:11 -04:00
  • e9735a15bb Fix #208: Prevent SSTI in responder_mgr.py Jinja2 template Cobra 2026-04-06 11:38:59 -04:00
  • 6ae10fd2f3 Fix #207: Prevent command injection in bettercap_api.py Cobra 2026-04-06 11:38:37 -04:00
  • 156144c1a7 Fix indentation issues in passive modules requires_capture_bus attribute Cobra 2026-04-06 11:37:43 -04:00
  • 8dd053e337 Fix #204: Instantiate and inject CaptureBus in Engine Cobra 2026-04-06 11:37:15 -04:00
  • 04eae3a43e Add requires_capture_bus attribute to BaseModule and passive modules Cobra 2026-04-06 11:36:24 -04:00
  • 59cdda0596 Fix #206: Resolve auto interface to actual interface name Cobra 2026-04-06 11:35:52 -04:00
  • 841d43a3b3 Document operator dispositions from post-review session Cobra 2026-04-06 11:33:00 -04:00
  • eef574f0ca Fix duplicate IR-014 entry and deduplication error in consolidated report Cobra 2026-04-06 09:51:09 -04:00
  • 054dc45cd5 Document comprehensive fix plan for daemon initialization failures n0mad1k 2026-04-06 09:15:40 -04:00
  • 516b7908a6 Add absent_count column and commented-out grace period threshold for tripwire resets n0mad1k 2026-04-06 08:52:30 -04:00
  • 0156101f11 Rewrite net_alerter with presence tracking: baseline on first run, alert on join and rejoin n0mad1k 2026-04-06 08:47:48 -04:00
  • 532f5f4a33 Fix net_alerter: don't treat 403 as token expiry — room permission errors were silently dropping all alerts n0mad1k 2026-04-06 08:27:42 -04:00
  • 75703d7ef6 Auto-refresh Matrix token on 401 instead of silently dropping alerts n0mad1k 2026-03-25 09:33:15 -04:00
  • 59cfb6b07a Use sudo nmap to allow ARP scan with restricted sudoers n0mad1k 2026-03-25 06:28:48 -04:00
  • 12f8a37dc4 Use dedicated net-alerter Matrix service account, keep credentials out of repo n0mad1k 2026-03-25 06:20:37 -04:00
  • 94abb6f2ce Fix deploy.sh to use SSH config alias instead of raw key/host n0mad1k 2026-03-25 06:05:32 -04:00
  • d7cdd489ce Add net_alerter: new device join alerts via Matrix to condo Pi n0mad1k 2026-03-24 20:29:24 -04:00
  • 06160b974a Add TimeoutStartSec=60 to core service to allow time for PID file write after module init n0mad1k 2026-03-23 10:30:34 -04:00
  • e0b8ba4b65 Fix bigbrother-core.service: Type=forking + PIDFile for daemon mode n0mad1k 2026-03-23 07:46:32 -04:00
  • 1433c422ec Set ZSTD_LEVEL=3 on capture service for Pi 3B CPU headroom n0mad1k 2026-03-22 20:32:41 -04:00
  • 263e5a50d0 Add pi3b hardware tier and resource guards for condo Pi deployment n0mad1k 2026-03-22 20:19:57 -04:00
  • a0164c0275 Fix aircrack-ng detection to use apt-cache policy instead of apt-cache show n0mad1k 2026-03-22 17:34:52 -04:00
  • 054c044546 Fix aircrack-ng apt install failure on Ubuntu arm64 n0mad1k 2026-03-22 17:33:21 -04:00
  • 65f1fe8049 Add sd_wifi.py -- operator tool for updating WiFi config on SD cards n0mad1k 2026-03-21 19:35:19 -04:00
  • 187012e845 Add autostart.sh -- systemd service lifecycle management script n0mad1k 2026-03-21 19:34:14 -04:00
  • 56cca8ac3d Phase 5: Final integration — fix imports, full module discovery, interactive menu n0mad1k 2026-03-18 13:59:27 -04:00
  • ba5143b560 Phase 4: Active modules, templates, and operator scripts n0mad1k 2026-03-18 13:48:11 -04:00
  • 955ebfc8db Add Phase 3 connectivity modules — 8 modules + bridge scripts n0mad1k 2026-03-18 13:43:04 -04:00
  • 176da06dc9 Add Phase 2 intel modules — 9 intelligence modules for on-device analysis n0mad1k 2026-03-18 13:33:17 -04:00
  • ab27aa968b Add 9 advanced passive modules: VLAN, network mapper, auth tracker, SMB, cloud tokens, LDAP, RDP, QUIC, DB interceptor n0mad1k 2026-03-18 13:31:18 -04:00
  • 1c85244e9c Add 8 passive network observation modules (Phase 2) n0mad1k 2026-03-18 13:30:39 -04:00
  • 3394c72814 Add main CLI entry point and full test suite n0mad1k 2026-03-18 09:48:23 -04:00
  • 6caf1a15ca Add Phase 1 advanced stealth modules: anti-forensics, traffic mimicry, JA3 spoofing, IDS testing, LKM rootkit, overlayfs manager n0mad1k 2026-03-18 08:23:02 -04:00
  • d883b07e34 Add Phase 1 core stealth modules: MAC manager, process disguise, log suppression, encrypted storage, tmpfs manager, watchdog n0mad1k 2026-03-18 08:21:01 -04:00
  • f90a686626 Phase 1: setup script and data bootstrapping n0mad1k 2026-03-18 08:13:55 -04:00
  • 0a05f009e8 Add Phase 1 core infrastructure: event bus, state manager, engine, capture bus, tool manager, scheduler, resource monitor, kill switch n0mad1k 2026-03-18 08:13:11 -04:00
  • 62a1010ab4 Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api n0mad1k 2026-03-18 08:11:25 -04:00
  • 63e317176d Update hardware platform to Orange Pi Zero 3 (4GB) as primary implant n0mad1k 2026-03-18 08:04:24 -04:00
  • 5694fdc56c WireGuard as primary C2 — zero traffic when idle, on-demand connect. Tailscale moves to fallback. n0mad1k 2026-03-17 16:03:21 -04:00
  • b6d9d7a738 Drop Suricata/RITA — Zeek is the offensive analysis tool, IDS is not our job n0mad1k 2026-03-17 15:32:12 -04:00
  • 813e224b03 v4.0: Shadow SOC framing — Zeek/Suricata/RITA offline analysis, innocuous MAC profiles, operator workstation as SOC analysis brain n0mad1k 2026-03-17 15:28:15 -04:00
  • 0a80f8bed8 v4.0 design rewrite: orchestrator architecture, operator workstation, innocuous MACs n0mad1k 2026-03-17 12:35:47 -04:00
  • 0a62b805f4 v4.0 architecture rethink: orchestrator model over custom reimplementation n0mad1k 2026-03-17 12:27:09 -04:00
  • 0a40103fd5 Full PCAP on all tiers — no headers-only, no tiered retention. 128GB+ with zstd-19 handles it. n0mad1k 2026-03-17 12:09:22 -04:00
  • 4a22eb566f Rewrite operational workflow with detailed per-module output for dental office scenario n0mad1k 2026-03-17 12:04:04 -04:00
  • 5ad9f41fba Initial commit: BigBrother design doc and operational workflow n0mad1k 2026-03-17 11:48:47 -04:00
  • a4edcf6e15 v3.2: Merge security review into design doc as single source of truth n0mad1k 2026-03-17 11:11:25 -04:00
  • 3041943c21 PCAP max compression: zstd -19 on rotation for storage and transfer efficiency n0mad1k 2026-03-17 11:01:19 -04:00