Cobra 402c4e849b Replace nmap ARP scan with passive /proc/net/arp read — no active probing (#449) ...

- Removed get_local_subnets() and scan_subnet() — no longer needed
- Added read_arp_cache() to read kernel ARP table from /proc/net/arp
- Added fallback to 'ip neigh show' if /proc/net/arp unavailable
- Added lookup_oui() to query system /usr/share/hwdata/oui.txt for vendor names
- Removed subprocess nmap call and re import (no longer needed)
- run() now directly reads ARP cache instead of scanning subnets
- Zero active network traffic — purely passive monitoring
- Removed sudo requirement

2026-04-08 21:01:12 -04:00

config

Cap stealth/intel/connectivity modules on Pi3B tier to prevent OOM

2026-04-06 22:44:52 -04:00

core

Robust interface detection — retry fallback chain for headless boot (#206)

2026-04-08 20:58:43 -04:00

data

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

modules

Robust interface detection — retry fallback chain for headless boot (#206)

2026-04-08 20:58:43 -04:00

net_alerter

Replace nmap ARP scan with passive /proc/net/arp read — no active probing (#449)

2026-04-08 21:01:12 -04:00

scripts

Move operator_setup.sh to repo root for direct access

2026-04-07 14:05:12 -04:00

services

Fix firstboot service startup: GOPATH env, enable all services, add bettercap passive caplet

2026-04-08 10:51:09 -04:00

storage

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

templates

Phase 4: Active modules, templates, and operator scripts

2026-03-18 13:48:11 -04:00

tests

Robust interface detection — retry fallback chain for headless boot (#206)

2026-04-08 20:58:43 -04:00

utils

Add missing detect_interface_with_retry function to fix engine startup

2026-04-08 20:59:35 -04:00

.gitignore

Encrypt sensitive credential fields before event bus emission (#215)

2026-04-06 11:43:46 -04:00

bigbrother.py

Securely wipe state.db on exit (#216)

2026-04-06 11:44:44 -04:00

IMPLEMENTATION_PLAN.md

Document comprehensive fix plan for daemon initialization failures

2026-04-06 09:15:40 -04:00

OPERATIONAL_WORKFLOW.md

Update hardware platform to Orange Pi Zero 3 (4GB) as primary implant

2026-03-18 08:04:24 -04:00

operator_setup.sh

Fix flash bugs: remove netplan wifi conflict, suppress eth default route, force IPv4 for Tailscale install

2026-04-08 19:37:38 -04:00

requirements.txt

Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

2026-03-18 08:11:25 -04:00

SECURITY_REVIEW.md

Document operator dispositions from post-review session

2026-04-06 11:33:00 -04:00

setup.sh

Wire net_alerter cron into setup.sh — reads bb-config.env, seeds baseline on first boot

2026-04-08 13:50:58 -04:00

S

Description

Network drop implant — passive SOC + active exploitation. Deploy on any Debian host.

4.3 MiB

Languages

Python 89.2%

Shell 8.5%

HTML 1.1%

C 0.9%

Jinja 0.3%