anti aa833ddda9 feat(sniffer): passive IPv6 link-local leak detection ...

Add _ipv6_iid_classify() to fingerprint EUI-64 vs stable-privacy IIDs
and derive the MAC OUI from EUI-64-encoded link-local addresses.
SnifferEngine._on_ipv6_packet() observes fe80::/10 sources destined for
known deckies and emits ipv6_link_local_leak syslog + bus events.
on_packet() now dispatches the IPv6 branch before the v4 TCP path.
BPF default widened from "tcp" to "tcp or ip6" so the sniff loop
captures IPv6 frames without config change.

2026-05-17 20:16:29 -04:00

..

agent

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

artifacts

refactor(artifacts): extract shard-finder out of transcripts router

2026-05-08 18:49:11 -04:00

asn

fix(types): P1 — annotate ranges: list[Range] in geoip/rir and asn/iptoasn providers

2026-05-01 00:21:44 -04:00

bus

perf(pytest): 194s → 4s collection — lazy heavy imports + norecursedirs

2026-05-10 06:41:25 -04:00

canary

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

cli

feat(deploy): wire attribution worker — CLI + systemd unit + registry

2026-05-09 02:31:59 -04:00

clustering

fix(clustering): filter extra fp keys before splatting into update_identity_fingerprints

2026-05-10 04:51:49 -04:00

collector

fix(collector): strip port from remote_addr before attacker identity resolution

2026-05-10 04:06:42 -04:00

correlation

perf(pytest): 194s → 4s collection — lazy heavy imports + norecursedirs

2026-05-10 06:41:25 -04:00

decky_io

feat(deckies): generic file drops on fleet + MazeNET deckies

2026-04-28 22:43:34 -04:00

engine

fix(deployer): chown synced _caddy_modules back to source owner after root copy

2026-05-10 01:26:13 -04:00

fleet

fix(types): T3 — narrow str|None at 12 sites; fix LANRow/DeckyRow subscript in mutator tests

2026-05-01 02:18:53 -04:00

geoip

fix(types): P1 — annotate ranges: list[Range] in geoip/rir and asn/iptoasn providers

2026-05-01 00:21:44 -04:00

intel

refactor(intel): migrate AttackerIntel JSON-string columns to native SQLAlchemy JSON

2026-05-10 09:17:15 -04:00

logging

fix(types): P2 — wire _MixinBase + col() across sqlmodel_repo; suppress pydantic/SQLModel column typing false positives

2026-05-01 00:49:18 -04:00

mutator

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

net

feat(net): stealth-egress httpx client factory

2026-04-26 04:59:34 -04:00

orchestrator

fix(orchestrator/tests): attribute access on TopologySummary, not dict

2026-05-10 07:11:14 -04:00

prober

feat(prober,correlation): attacker fingerprint rotation detection (DEBT-032)

2026-05-03 05:12:51 -04:00

profiler

perf(pytest): 194s → 4s collection — lazy heavy imports + norecursedirs

2026-05-10 06:41:25 -04:00

realism

feat(realism/llm): GET/PUT /api/v1/realism/llm + worker hot-reload tick

2026-05-09 23:12:29 -04:00

services

fix(topology): publish UDP/443 on gateway base when https service has http/3 enabled

2026-05-10 01:33:01 -04:00

sniffer

feat(sniffer): passive IPv6 link-local leak detection

2026-05-17 20:16:29 -04:00

swarm

fix(bundle): prune node_modules during agent tarball walk

2026-05-10 05:17:32 -04:00

tarpit

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

templates

fix(lint): prefix unused params with _ to silence vulture 80% findings

2026-05-17 20:08:54 -04:00

topology

fix(topology): publish UDP/443 on gateway base when https service has http/3 enabled

2026-05-10 01:33:01 -04:00

ttp

fix(lint): prefix unused params with _ to silence vulture 80% findings

2026-05-17 20:08:54 -04:00

updater

sec(updater): harden tarball extraction and verify sha256 before extract

2026-04-27 21:14:48 -04:00

vectorstore

fix(types): T1 — remove 15 stale type: ignore comments confirmed unused by mypy

2026-05-01 02:18:40 -04:00

web

feat(models): add IPv6 link-local leak columns to Attacker + AttackerIdentity

2026-05-17 20:12:08 -04:00

webhook

fix(types): T5 — narrow AsyncClient|None with inline if; rename loop variable t→task to avoid no-redef

2026-05-01 02:18:57 -04:00

__init__.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

archetypes.py

refactor(ssh): consolidate real_ssh into ssh, remove duplication

2026-04-11 19:51:41 -04:00

composer.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

config_ini.py

feat(config): add swarmctl-host to INI, env, CLI; drop hardcoded bind from systemd unit

2026-04-30 22:16:00 -04:00

config.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

custom_service.py

Add per-service customization, stealth hardening, and BYOS support

2026-04-04 04:08:27 -03:00

distros.py

chore(infra): pin Docker base images by digest (DEBT-023)

2026-05-03 04:38:39 -04:00

env.py

fix(types): T3 — narrow str|None at 12 sites; fix LANRow/DeckyRow subscript in mutator tests

2026-05-01 02:18:53 -04:00

ini_loader.py

fix: align tests with model validation and API error reporting

2026-04-13 01:43:52 -04:00

models.py

chore(infra): pin Docker base images by digest (DEBT-023)

2026-05-03 04:38:39 -04:00

network.py

fix(network): reload network before checking Containers on IPAM drift

2026-05-10 00:56:56 -04:00

os_fingerprint.py

feat(os_fingerprint): Phase 2 — add icmp_ratelimit + icmp_ratemask sysctls

2026-04-10 16:41:23 -04:00

privdrop.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

telemetry.py

fix(types): P2 — wire _MixinBase + col() across sqlmodel_repo; suppress pydantic/SQLModel column typing false positives

2026-05-01 00:49:18 -04:00