n0mad1k 0d92b97682 Expand JA3 fingerprint database from 4 to 501 profiles ...

New seed_ja3.py generates comprehensive JA3 TLS fingerprint profiles
covering Chrome/Chromium (100-124 x 4 platforms), Firefox (100-125 x 3),
Edge, Safari (macOS + iOS), Opera, Brave, Tor Browser, Vivaldi, ChromeOS,
TLS libraries (OpenSSL, BoringSSL, GnuTLS, NSS, Go, Java, .NET, Node.js,
mbedTLS, wolfSSL, rustls), common tools (curl, wget, Python, httpx),
mobile clients (Samsung Internet, Android WebView, iOS WKWebView),
VPN clients (AnyConnect, GlobalProtect, OpenVPN, WARP), Electron apps,
and IoT/embedded devices (ESP32, AWS IoT, smart home).

JA3 hashes are computed correctly from TLS ClientHello parameters using
the standard MD5(version,ciphers,extensions,curves,formats) formula.

DevTrack: bigbrother #416

2026-04-10 07:02:56 -04:00

config

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

core

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

data

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

modules

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

net_alerter

Fix ble_alerter: MAC name filter, Matrix 429 backoff, active scanner

2026-04-10 06:44:13 -04:00

scripts

Expand JA3 fingerprint database from 4 to 501 profiles

2026-04-10 07:02:56 -04:00

services

Fix firstboot service startup: GOPATH env, enable all services, add bettercap passive caplet

2026-04-08 10:51:09 -04:00

storage

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

templates

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

tests

Update module count assertions to reflect reverse_tunnel removal

2026-04-08 22:26:06 -04:00

utils

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

.gitignore

Encrypt sensitive credential fields before event bus emission (#215)

2026-04-06 11:43:46 -04:00

bigbrother.py

Strip OPSEC tool identity fingerprints

2026-04-08 22:18:35 -04:00

IMPLEMENTATION_PLAN.md

Document comprehensive fix plan for daemon initialization failures

2026-04-06 09:15:40 -04:00

OPERATIONAL_WORKFLOW.md

Update hardware platform to Orange Pi Zero 3 (4GB) as primary implant

2026-03-18 08:04:24 -04:00

operator_setup.sh

Restore execute permission on operator_setup.sh

2026-04-10 06:32:31 -04:00

requirements.txt

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

SECURITY_REVIEW.md

Append QA review findings to consolidated security report

2026-04-09 08:31:26 -04:00

setup.sh

Wire net_alerter cron into setup.sh — reads bb-config.env, seeds baseline on first boot

2026-04-08 13:50:58 -04:00

S

Description

Network drop implant — passive SOC + active exploitation. Deploy on any Debian host.

4.3 MiB

Languages

Python 89.2%

Shell 8.5%

HTML 1.1%

C 0.9%

Jinja 0.3%