bigbrother/config/caplets/full_mitm.cap at 62a1010ab454002daa593bf9d695f6cf34ce2fd4 - bigbrother - Church of Malware Git

n0mad1k/bigbrother

Files

T

n0mad1k 62a1010ab4 Add Phase 1 utility modules: crypto, networking, logging, stealth, resource, permissions, config_loader, bettercap_api

9 files in utils/ providing the shared infrastructure layer:
- crypto: AES-256-GCM file encryption, argon2id/PBKDF2 key derivation, HKDF network unlock, LUKS container management
- networking: interface detection, MAC/IP helpers, BPF compilation via libpcap ctypes, gratuitous ARP, VLAN creation
- logging: encrypted log writer (BBLogger) with rotation, per-module files, stdout suppression for stealth
- stealth: process rename via prctl, cmdline spoofing, sysctl helpers, timestomping, core dump disable
- resource: hardware tier detection (OPi Zero 3 / Pi Zero / generic) via /proc/device-tree and cpuinfo, resource monitoring
- permissions: root/capability checks via capget ctypes, privilege dropping, directory permission enforcement
- config_loader: YAML merge hierarchy (hardware_tiers -> bigbrother -> modules -> stealth -> CLI), tier auto-detection, SIGHUP reload
- bettercap_api: REST client with per-session random credentials, session/events/command methods

2026-03-18 08:11:25 -04:00

8 lines

157 B

Plaintext

Raw Blame History

 set arp.spoof.fullduplex true
 set arp.spoof.internal false
 set http.proxy.sslstrip false
 set net.sniff.verbose false
 arp.spoof on
 http.proxy on
 net.sniff on