d3d1deb99cff765de280d2b907d3472c0603aff4
Add 7 new modules: ldap_harvester, rdp_monitor, quic_analyzer, db_interceptor (passive), change_detector, security_posture, operator_audit (intel). Add capture_bus for single AF_PACKET demux to per-module queues (multiprocess architecture). Fix Pi Zero memory budget (70MB interpreter, 4 passive modules max). Move sensitive config inside LUKS with network-derived boot key. Require 128GB SD card with zstd PCAP compression. Add coercion tools (Coercer, PetitPotam), proxychains-ng, socat, sshuttle, pypykatz, ldapdomaindump, smbmap, ROADtools. Add thermal monitoring, SQLite contention fix (single DB + async writer), bridge STP/CDP suppression, DHCP fingerprinting, wireless interface conflict detection, optional scope.yaml, DoH/ECH awareness, triage CLI command. Update implementation phases and hardware tier matrix.
Description
Network drop implant — passive SOC + active exploitation. Deploy on any Debian host.
Languages
Python
89.2%
Shell
8.5%
HTML
1.1%
C
0.9%
Jinja
0.3%