Hermes
8130de56fe
v2.6.0: BT Radar — consent-gated bluetooth scan/whitelist/push (paired-device consent model), /api/btradar, drawer BT panel; auto-crack.py for nightmare (chromium v10 offline decrypt verified)
Build Agent Binaries / build-macos (push) Failing after 1s
Build Agent Binaries / build-linux (push) Successful in 23s
Build Agent Binaries / build-windows (push) Failing after 1s
2026-10-01 23:54:43 +00:00
Hermes
9e6d7e8d48
ci: libpython3.12 for pyinstaller
Build Agent Binaries / build-linux (push) Successful in 50s
Build Agent Binaries / build-windows (push) Failing after 1s
Build Agent Binaries / build-macos (push) Failing after 2s
2026-10-01 16:28:45 -07:00
Hermes
9abafcd131
ci: fix PEP668 pip, linux-only docker, mac via host runner, windows pends on GamingPC host runner
Build Agent Binaries / build-linux (push) Failing after 6s
Build Agent Binaries / build-windows (push) Failing after 1s
Build Agent Binaries / build-macos (push) Has been cancelled
2026-10-01 16:22:45 -07:00
Hermes
1ec100388e
ci: trigger via agent.py touch
2026-10-01 16:17:22 -07:00
Hermes
0b2bba81bd
ci: fix triggers (branch filter + workflow_dispatch)
2026-10-01 16:15:48 -07:00
drjones
c31d409c94
ci: retrigger 2
2026-10-01 16:13:29 -07:00
Hermes
c34df3d6b7
ci: trigger
2026-10-01 16:11:20 -07:00
drjones
0a6810d6bc
ci: retrigger
2026-10-01 16:09:36 -07:00
drjones
ef6d18cd3c
ci: retrigger with fixed runner labels
2026-10-01 16:08:06 -07:00
Hermes
f7e17fc1ce
ci: use real runner images (catthehacker), drop impossible macos-docker, matrix artifacts
Build Agent Binaries / build (NexusAgent-linux, ubuntu-latest) (push) Failing after 3s
Build Agent Binaries / build (NexusAgent-windows, windows-latest) (push) Failing after 1s
2026-10-01 16:07:33 -07:00
Hermes
233f5c21e5
ci: multi-OS agent binary build
Build Agent Binaries / build (macos-latest) (push) Failing after 1s
Build Agent Binaries / build (ubuntu-latest) (push) Failing after 21s
Build Agent Binaries / build (windows-latest) (push) Has been cancelled
2026-10-01 16:05:09 -07:00
Hermes
43e5d0b7d8
responsive nav: hamburger menu <=1100px, column buttons <=640px, endpoint pill ellipsis, injected buttons (Export/Update/Topology) relocate into the menu
2026-10-01 21:45:17 +00:00
Hermes
212d04f87d
GPU decrypt worker live on nightmare (systemd, token-authed queue pulls); decrypt endpoints accept agent token; README android+worker
2026-10-01 19:42:46 +00:00
Hermes
d3501f862a
v2.5.0: Android/Termux support — detection, persistence (bashrc+termux-boot), screenshots, openssh on 8022, android auto-tagging, /install-android.sh + universal Android branch, Android tab + icon; update_agent UA fix (CF 403 on Python-urllib) + default update URL in update-all
2026-10-01 18:52:22 +00:00
Hermes
965cba58b4
v2.4.0: pivot_fetch (fetch through node), clipboard capture, watch_dir auto-exfil, self-destruct TTL (14d default), dead-drop failover URLs, local cred decryption (Firefox+Chromium-v10)+GPU queue, per-node LLM analyst brief (nightmare ollama), topology capture+SVG map, critical-only Telegram alerts, ATTACK-PLAN tracker
2026-10-01 16:43:53 +00:00
Hermes
6c08318d88
attack plan: v2.4.0 feature push tracker
2026-10-01 02:19:44 +00:00
Hermes
ab088c2315
polish: honest headless screenshot error, PLAN status header, binary rebuild
2026-10-01 00:40:50 +00:00
Hermes
82fb92efb5
v2.3.0: lateral_movement (subnet SSH scan + keyless install), open_ssh (sshd + dashboard key + CONNECT line), spread-on-connect USB watcher, update-all-outdated endpoint+button, persistence toggle on ALL install paths, SSH/lateral/tooltips UI
2026-10-01 00:05:00 +00:00
Hermes
b1e320bda4
v2.2.0: USB self-replication (per-node toggle + 10min dispatcher), binder persistence option, hover terminology tooltips, binder embeds current token-injected agent, README full rewrite
2026-09-30 23:39:54 +00:00
Hermes
a40f92ebd1
point-and-shoot: binary ships with agent token baked in; binder embeds CURRENT token-injected agent (was stale hardcoded pre-auth copy)
2026-09-30 23:04:13 +00:00
Hermes
67b27bb1a2
completeness pass 2: agent-token auth on /api/agent/*, token-injected agent.py downloads, export-all zip endpoint, node detail drawer (metrics/loot/tags/ping), screenshot watch mode, honest Linux-only binary note, token-aware binary command, watch-state render persistence
2026-09-30 01:19:43 +00:00
Hermes
8c31da986f
chore: gitignore backups and stray files
2026-09-30 00:48:30 +00:00
Hermes
ec705d9a49
completeness: agent version tracking (register+heartbeat+card chip), rebuild stale /bin/NexusAgent (Aug3->current), backup pre-change
2026-09-30 00:48:20 +00:00
hermes
33dd524196
v2: live console (SSE+fast-poll), scheduled tasks, tag-group commands, CPU sparklines, dead-node alerts
2026-09-23 19:40:36 +00:00
root
e3e5865419
feat: self-contained binder v2 — agent embedded directly, no curl required
...
- /api/bind now embeds agent.py as base64 (fully offline install)
- New HTML format: one-click browser payload (auto-downloads file)
- PS1 format: Windows dropper with embedded agent + schtasks persistence
- SH format (default): Linux/macOS dropper, extracts both file + agent
- Agent installs to /opt/network-agent/ with systemd or launchd persistence
- Frontend: format selector (SH/PS1/HTML) in binder modal
- Verified: both payloads extract correctly, agent.py passes py_compile
2026-08-07 05:33:55 +00:00
root
c966cb0a28
fix: audit bugs — debounce saveData, CSV escape, switchTab event param, exfil size cap, shell injection, launchctl bootstrap
...
- server.js: debounce saveData to max 1 write/15s (was every heartbeat)
- server.js: proper CSV escaping (_csvEscape) for node export endpoint
- server.js: replace deprecated String.substr() with String.slice()
- agent.py: 50MB size cap on download_file to prevent OOM
- agent.py: shlex.quote() server_url in crontab persistence (shell injection)
- agent.py: replace deprecated launchctl load with bootstrap/bootout/kickstart
- app.js: pass event param to switchTab() (global event deprecated)
- app.js: fix lootDownload URL revocation (60s → safe for slow downloads)
2026-08-07 00:59:07 +00:00
NexusOps
4da56b5874
C2: canonical public endpoint agent.thetempleofdoom.com for all agent installers
2026-08-04 00:11:59 +00:00
root
e2f1f04d35
fix: single WS boot path, probe sends stored token, un-halt on auth success
2026-08-03 14:27:12 +00:00
root
0dcbbffbaa
feat: operator auth (Bearer+WS 4401), atomic saves, WS heartbeat, Loot viewer (files+creds+screenshots), auth gate, WS reconnect backoff, empty-state hero, toasts
2026-08-03 14:21:08 +00:00
root
53d65f7a76
docs: correct gap analysis — results pipelines work, frontend lacks Loot viewer
2026-08-03 13:44:51 +00:00
root
4444dd6aa5
docs: perfection plan (auth, screenshot fix, UI polish, new features)
2026-08-03 13:42:15 +00:00
root
23d7271226
v3: universal auto-installer, silent mode, silent binders
2026-08-03 13:25:52 +00:00
root
e453ccda36
v2: persistence, file exfil, screenshot, harvest creds, auto-update, persistence fallbacks
2026-08-03 13:18:05 +00:00
root
6cdb58ecff
Clean: exclude build artifacts and binaries from repo
2026-08-03 13:10:54 +00:00
root
2922675a50
NexusOps Dashboard — node control, input capture, file binder, kill switch
2026-08-03 13:10:45 +00:00
