andy/pilens
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20 Commits 1 Branch 0 Tags
5dbf85f84eeec7eac49af580f2dbc81b4259daee
Commit Graph
12 Commits
Author SHA1 Message Date
Andy Dixon 5dbf85f84e Phase 4: authorised HTTPS interception (Mode B) 
Toggleable transparent interception via mitmdump in a venv. Own RSA CA generated
in-app, downloadable (public cert only, key never leaves the box), with per-OS
install guide and fingerprint. nftables redirect accepts only dnat'd connections
(never an open proxy). HTTP Explorer with headers and opt-in body viewers (JSON/
text/hex/image, sandboxed). Honest status: pinned/untrusting = reported errors,
excluded hosts pass through, bodies off by default. Helper op + systemd unit +
installer venv build + boot restore.
 2026-10-10 08:05:42 +01:00
Andy Dixon b6ce5b5611 UI robustness: error boundary per page; fix null-array crashes (TLS certificates, idle dashboard interfaces, stats slices) 2026-10-09 22:14:24 +01:00
Andy Dixon fa5445e4a4 Phase 5: Findings diagnostics panel; pin Go toolchain 1.27.2 (0 called stdlib vulns); npm audit clean 2026-10-09 22:01:03 +01:00
Andy Dixon 8292113a66 TLS explorer: report the true negotiated version (supported_versions / QUIC), not the compat record version; capture QUIC server port 2026-10-09 18:42:06 +01:00
Andy Dixon 6605a1d467 Phase 3: conversations, Follow TCP Stream, DNS explorer, TLS metadata explorer, statistics 
Conversations and statistics are computed from the SQLite summary index (across
segments); stream payload via tshark follow; DNS/TLS fields via tshark. TLS is
metadata-only and labelled 'encrypted pass-through' throughout.
 2026-10-09 18:39:39 +01:00
Andy Dixon d8bfcee2fc Recovery: reindex interrupted sessions and fix packet counts; actionable AP activation error 2026-10-09 18:22:56 +01:00
Andy Dixon 43cbcc4076 KillMode=mixed so shutdown finalises captures cleanly; dumpcap -F pcapng; fix installer AP check pattern 2026-10-09 18:19:09 +01:00
Andy Dixon 0edca7fdd7 Return empty rows (not null) for filtered pages with no matches 2026-10-09 18:18:14 +01:00
Andy Dixon 46513bab88 Hardware fixes: rpi_volt under-voltage fallback, dnsmasq except-interface=lo, installer AP check after iw install 2026-10-09 18:13:17 +01:00
Andy Dixon 01b568aaf7 Web UI, packaging, systemd units, installer scripts, namespace integration tests 
React/TS analyser (virtualised packet list, protocol tree, verified hex mapping),
setup wizard, network/devices/health/library/settings pages. Installer with
backup and rollback, uninstall/repair/diagnose. Docker+netns integration suite
covering DHCP, DNS, NAT, isolation, IPv6 blocking, capture and export.
 2026-10-09 17:56:02 +01:00
Andy Dixon 31e39bdbef Management API, service binary and host probes 
TLS-only HTTP API with Argon2id auth, setup token, CSRF, TOTP, login throttling,
management source allow-list; network apply via helper; capture endpoints;
SSE events; crash recovery of interrupted segments; systemd notify/watchdog.
 2026-10-09 17:39:24 +01:00
Andy Dixon 52da3c13f6 Core packages: config validation, network renderers, root helper, auth, SQLite store, capture engine 
Capture engine streams dumpcap pcapng into verbatim, hashed segments with
per-segment tshark summaries; display filters, PDML dissection with verified
byte ranges, export and import. Tests run in a Debian trixie container.
 2026-10-09 17:34:32 +01:00