admin/SquidSec-SquidC5
1
0
Fork 0
mirror of https://github.com/SquidSec/SquidC5 synced 2026-08-09 12:22:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
c62d0f603f6e9b8ba7a2856bff88202179989d34
SquidSec-SquidC5/CHANGELOG.md
T
Mr. The Plague fb18551392 chore: strip AI typography crumbs from docs and app 
Replace em/en dashes, arrows, middots, smart quotes, ellipsis, and
emoji/icon glyphs with plain ASCII across docs, UI, source, and agents.
INKO branding is text-only; empty placeholder is "-"; nav icons removed.
2026-08-02 12:19:37 -04:00

3.0 KiB
Raw Blame History

Changelog

All notable changes to SquidC5 are documented here. Format inspired by Keep a Changelog. OPSEC notes call out changes that affect detection surface or defaults.

[Unreleased]

Added

  • INKO (Intelligent Neural Kinetic Operator): rebrand of ops neural operator chat
  • INKO opens from a top-bar button as a right flyout panel (full-screen on mobile); floating FAB removed
  • SOCKS5 duplex: direct mode + implant reverse-dial bridge (socks:connect)
  • Local Ollama path via SQUIDC5_LOCAL_LLM_* when no cloud LLM configured
  • README badges fixed (live CI + SquidGate workflow shields)
  • Docs: Diátaxis index, Artifacts / Profiles / OAST / TLS cert library chapters, Ops nav map

Changed

  • Ops UI and chat system prompt use INKO naming; user guide / runbook / README / AGENTS updated
  • INKO chat: persisted history (browser localStorage), clear input on send, pending indicator, block send while waiting, markdown rendering for assistant replies
  • Documentation consistency pass: user guide What/Why/How/Example/See also; runbook Goal/Prereqs/Steps/Verify; deployment Context/Config/Commands/Verify; fixed cross-links and Ops Docs menu anchors

Security / OPSEC

  • Native agent remains AEAD-only with full TLS verify

[0.1.126] - 2026-08-01

Added

  • Audit verify, profile push, file chunks, native agent CI builds

[0.1.115] - 2026-08-01

Added

  • Malleable transforms (base64/prepend/append/xor/netbios)
  • File ops API /api/v1/files/op (file:list/read/write/delete tasks)
  • SOCKS pivot broker /api/v1/pivot/socks
  • Caddy redirector generator; Windows PS beacon file ops
  • profile_id/version on beacon check-in (runtime switch signal)
  • Lab e2e + fuzz + beacon load tests; CI cov>=65%, mypy core, SBOM on release
  • Implant router split (api/routers)

Security / OPSEC

  • Full parity batch toward best-in-class AI-native C5

[0.1.107] - 2026-08-01

Added

  • Implant AEAD (ChaCha20-Poly1305) check-in auth (implant_psk, require auth default on)
  • HTTPS-default HTTP beacon templates (system CA verify; lab uses redirector or scheme=http)
  • Beacon kill_date enforcement
  • Audit integrity chain (chain_hash / prev_hash, migration v3)
  • Native Linux Go beacon scaffold (agents/linux)
  • Listener crash supervision + audit retention purge
  • Team RBAC on shell when session metadata has team_id
  • Server-side HITL approval queue with command binding
  • Listener restore on boot; sc5 backup / restore
  • Deep health, rate limits, body limits, JSON logging
  • SquidGate PR security gate
  • SquidSec branding (logo), expanded threat model, systemd unit

Security / OPSEC

  • Client hitl_approved ignored; admin.js admin-only
  • LLM keys encrypted at rest; plugin signing secret hardened
  • TLS-by-default docs; binary-only prod deploy path
  • Rate limit may need 600/min for ops UI

[0.1.x] - 2026

Initial alpha line: FastAPI teamserver, reverse shells, HTTP beacons, OAST, scoped tokens, dual AI, binary releases.

Reference in New Issue View Git Blame Copy Permalink