mirror of
https://github.com/SquidSec/SquidC5
synced 2026-08-09 12:22:26 +00:00
Mr. The Plague
1f8cba06c1
- sc5beacon v3.1: sa:* JSON SA, gated cred/lateral/persist, module:list - COFF section parse + research exec hook; expanded inject technique stubs - Server full module catalog + POST /modules/run allow-list - File op chunk fields (offset/length/as_b64); stepped live SQLite backup - Tests: Go postex + Python catalog/API
3.9 KiB
3.9 KiB
Five-star C5 program
Goal: ***** across implants, traffic, post-ex, multi-player, AI, governance, CI.
Process: feature branch -> unit tests -> PR -> CI + SquidGate green -> merge master -> deploy Release binary to prod -> repeat.
| Related | Link |
|---|---|
| Long-range roadmap | roadmap-2026-2027.md |
| Prod readiness checklist | prod-readiness-plan.md |
| Docs index | README.md |
Pack status (living)
| Pack | Focus | Status |
|---|---|---|
| A | Native agent, factory, lifecycle, BOF scaffold | Landed (sc5beacon v2, build API, CI artifacts) |
| B | Traffic, profile push, transforms, SOCKS duplex | In progress (transforms + push done; SOCKS reverse-dial duplex this PR) |
| C | File chunks, engagement ROE, multi-op | Landed (claim/handoff/spectator/presence/UI) |
| D | AI capability pack + local Ollama path | Landed (15 caps; local LLM URL/model) |
| E | CI proof, SBOM, audit verify, benchmarks | Landed (verify, cov, mypy, SBOM, agent CI) |
Implant maturity I1-I11
| Pack | Focus | Status |
|---|---|---|
| I1 | Jobs + config blob | Landed (sc5beacon v3) |
| I2 | Native WS channel | Landed |
| I3 | COFF parse + 5 BOFs | Landed (exec still lab/parse; catalog simulate) |
| I4 | Stage0 bash/ps1 stagers | Landed |
| I5 | Sleep/string OPSEC | Landed (mask + wipe) |
| I6 | Lab soak CI matrix | Landed (go test + multi-arch + smoke) |
| I7 | COFF section parse + BOF args + research exec hook | Landed (default parse-only; SC5_BOF_EXECUTE=1 research) |
| I8 | Injection technique catalog (gated stubs) | Landed (inject:list + multi-technique stubs) |
| I9 | Cred + lateral modules (gated) | Landed (env_secrets redacted, browser paths, tcp/ssh/smb probe) |
| I10 | Persist plan + SA JSON | Landed (sa:*, persist:plan only — no silent install) |
| I11 | Module catalog API + /modules/run |
Landed |
Multi-op + ops UI (M/U packs)
| Pack | Status |
|---|---|
| M1 claim/lock | Landed |
| M2 handoff pack | Landed |
| M3 spectator | Landed |
| M4 presence | Landed |
| M5 team chat | Landed |
| M6 per-op audit | Landed |
| U1 workbench | Landed |
| U2 events rail | Landed |
| U3 teams panel | Landed |
| U4 layout presets | Landed |
| U5 file crumbs | Landed |
| U6 pivot map | Landed |
| U7 mobile targets | Landed |
| U8 toasts | existing showOk/showError |
Security hardening pack (landed)
Token grant subset - policy admin-only - MCP=REST gates - HITL single-use - HTTP/DNS/WS implant AEAD - task session bind - claim on mutators - team lead RBAC - SOCKS loopback - LLM SSRF block - CORS null denied - stage-2 host sanitize - multi-page ops UI
Backend scalability (B packs)
| Pack | Focus | Status |
|---|---|---|
| B1 | WAL read/write split + batched metrics | Landed |
| B2 | Chunked file transfer args (offset/length/as_b64) | Landed |
| B4 | Live SQLite backup stepping + busy timeout | Landed |
| B3/B5 | External task queue / Postgres optional | Planned |
Still climbing to full *****
- Full Windows COFF mapped execute (research build only; hook present)
- Live process injection (currently lab stubs)
- P2P / SMB / named pipe
- Per-implant keys (still global PSK)
- True SSE EventSource auth (today: metrics poll rail)
- Multi-host lab soak numbers (overnight)
- Optional Postgres backend
- External security audit
Links
| Doc | Link |
|---|---|
| User guide | user-guide.md |
| Deployment | deployment.md |
| Native beacon | ../agents/sc5beacon/README.md |
| Root README | ../README.md |
| Vision | squidc5-vision.md |