n0mad1k 027eaa39b2 Expand p0f OS fingerprint signatures from 16 to 102 entries ...

Comprehensive p0f-style TCP SYN signatures covering Linux (kernel 2.0-6.x,
Android, Chrome OS, Alpine, containers), Windows (2000 through 11/Server
2022, XP, Embedded), macOS (Tiger through Sonoma), iOS/iPadOS/tvOS/watchOS,
BSDs (Free/Open/Net/DragonFly), Solaris/illumos, network devices (Cisco
IOS/NX-OS/IOS-XE, Juniper, MikroTik, Ubiquiti, pfSense, OPNsense,
Fortinet, Palo Alto, Aruba, F5, HP ProCurve, Arista), printers (HP,
Brother, Epson, Canon, Xerox, Ricoh, Kyocera, Lexmark, Zebra), embedded/
IoT (lwIP, uIP, VxWorks, QNX, Zephyr, ESP-IDF, FreeRTOS, Contiki-NG,
Windows IoT), gaming consoles, and virtualization guests.

DevTrack: bigbrother #419

2026-04-10 07:06:50 -04:00

config

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

core

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

data

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

modules

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

net_alerter

Fix ble_alerter: MAC name filter, Matrix 429 backoff, active scanner

2026-04-10 06:44:13 -04:00

scripts

Expand p0f OS fingerprint signatures from 16 to 102 entries

2026-04-10 07:06:50 -04:00

services

Fix firstboot service startup: GOPATH env, enable all services, add bettercap passive caplet

2026-04-08 10:51:09 -04:00

storage

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

templates

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

tests

Update module count assertions to reflect reverse_tunnel removal

2026-04-08 22:26:06 -04:00

utils

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

.gitignore

Encrypt sensitive credential fields before event bus emission (#215)

2026-04-06 11:43:46 -04:00

bigbrother.py

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

IMPLEMENTATION_PLAN.md

Document comprehensive fix plan for daemon initialization failures

2026-04-06 09:15:40 -04:00

OPERATIONAL_WORKFLOW.md

Update hardware platform to Orange Pi Zero 3 (4GB) as primary implant

2026-03-18 08:04:24 -04:00

operator_setup.sh

Restore execute permission on operator_setup.sh

2026-04-10 06:32:31 -04:00

requirements.txt

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

SECURITY_REVIEW.md

Append QA review findings to consolidated security report

2026-04-09 08:31:26 -04:00

setup.sh

Wire net_alerter cron into setup.sh — reads bb-config.env, seeds baseline on first boot

2026-04-08 13:50:58 -04:00

S

Description

Network drop implant — passive SOC + active exploitation. Deploy on any Debian host.

4.3 MiB

Languages

Python 89.2%

Shell 8.5%

HTML 1.1%

C 0.9%

Jinja 0.3%