username/derp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
216 Commits 1 Branch 0 Tags
135a3791e2fe4e41daefb7591c3f3e746251ee6b
Commit Graph

216 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
user
23b4d6f2a4 feat: add wave 3 local database plugins 
GeoIP and ASN lookup via MaxMind GeoLite2 mmdb, Tor exit node check
against local bulk exit list, IP reputation via Firehol/ET blocklist
feeds, and CVE lookup against local NVD JSON mirror.

Includes cron-friendly update script (scripts/update-data.sh) for all
data sources and make update-data target. GeoLite2 requires a free
MaxMind license key; all other sources are freely downloadable.

Plugins: geoip, asn, torcheck, iprep, cve
Commands: !geoip, !asn, !tor, !iprep, !cve

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 02:38:13 +01:00
user
cf3abbdbae docs: update roadmap and tracking for v0.4.0 wave 3 
Mark v0.2.0 and v0.3.0 as done, set up wave 3 sprint targeting
local database plugins (geoip, asn, torcheck, iprep, cve).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 02:32:43 +01:00
user
f96224afb1 feat: add admin/owner permission system 
Hostmask-based admin controls with automatic IRCOP detection via WHO.
Permission enforcement in the central dispatch path denies restricted
commands to non-admins. Includes !whoami and !admins commands, marks
load/reload/unload as admin-only.

Also lands previously-implemented SASL PLAIN auth, token-bucket rate
limiting, and CTCP VERSION/TIME/PING responses that were staged but
uncommitted.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 02:26:27 +01:00
user
36b21e2463 feat: concurrent command dispatch and profiling test client 
Replace sequential await in command/event dispatch with
asyncio.create_task() so slow commands (whois, httpcheck, tlscheck)
no longer block the read loop. Add _spawn() for task lifecycle
tracking. Enable cProfile in docker-compose for profiling. Add
scripts/test_client.py for end-to-end plugin testing.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 02:09:53 +01:00
user
530f33be76 feat: add wave 2 plugins and --cprofile CLI flag 
Add 7 new pure-stdlib plugins: whois (raw TCP port 43), portcheck
(async TCP connect scan with internal-net guard), httpcheck (HTTP
status/redirects/timing), tlscheck (TLS version/cipher/cert inspect),
blacklist (parallel DNSBL check against 10 RBLs), rand (password/hex/
uuid/bytes/int/coin/dice), and timer (async countdown notifications).

Add --cprofile flag to CLI for profiling bot runtime. Update all docs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:58:47 +01:00
user
c5b0430da8 docs: add podman-compose, update all project documentation 
- docker-compose.yml for podman-compose deployment
- Makefile: add up/down/logs compose targets
- README: plugin table, container quickstart, make targets
- PROJECT: plugin categories, deployment matrix, design decisions
- ROADMAP: v0.1 done, v0.2 current, v0.3-v1.0 planned
- TASKS: current sprint with priorities
- TODO: full backlog organized by wave
- CHEATSHEET: reorganized by category (OSINT, Red Team, OPSEC)
- INSTALL: container deployment instructions
- DEBUG: container logs, hot-reload, DNS troubleshooting
- USAGE: all 19 commands documented

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:46:21 +01:00
user
2e2378d3ee feat: add wave 1 plugins (dns, encode, hash, defang, revshell, cidr) 
All pure stdlib, zero external dependencies:
- dns: raw UDP resolver with A/AAAA/MX/NS/TXT/CNAME/PTR/SOA
- encode: base64, hex, URL, ROT13 encode/decode
- hash: md5/sha1/sha256/sha512 generation + type identification
- defang: IOC defanging/refanging for safe sharing
- revshell: reverse shell one-liners for 11 languages
- cidr: subnet calculator with IP membership check

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:46:13 +01:00
user
5c0b23464c feat: add !uptime command 
Track bot start time via monotonic clock, display as compact
duration (e.g. "up 3d 2h 15m 42s").

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:46:06 +01:00
user
830add0797 refactor: mount plugins and config instead of baking into image 
Image now contains only the derp package. Config and plugins are
bind-mounted at runtime, enabling live edits without rebuilds.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:20:30 +01:00
user
7b9cde6192 feat: add container support with Containerfile and make targets 
- Containerfile: python:3.13-slim base, pip install, copy plugins
- .containerignore: exclude dev artifacts from build context
- Makefile: add build, container-run, container-stop, container-logs

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:16:05 +01:00
user
77f9a364e6 feat: add hot-reload, shorthand commands, and plugin help 
- Plugin registry: add unload_plugin(), reload_plugin(), path tracking
- Bot: add load_plugin(), reload_plugin(), unload_plugin() public API
- Core plugin: add !load, !reload, !unload, !plugins commands
- Command dispatch: support unambiguous prefix matching (!h -> !help)
- Help: support !help <plugin> to show plugin description and commands
- Tests: 17 new tests covering hot-reload, prefix matching

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 01:15:59 +01:00
user
ad18a902dd feat: add crt.sh certificate transparency lookup plugin 
Query CT logs via crt.sh to enumerate SSL certs for domains,
report expired/valid counts, and flag live expired certs.
Uses ThreadPoolExecutor(3) for blocking I/O on RPi5.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-15 00:56:55 +01:00
user
118fbb75d1 feat: add tls_verify option for self-signed certs 
Skip certificate verification when tls_verify = false in config.
Defaults to true for safety.
 2026-02-15 00:43:44 +01:00
user
5c30786e9b fix: self-ignore .gitignore 2026-02-15 00:41:37 +01:00
user
970d5d8b0b fix: gitignore live config, add example template 
Untrack config/derp.toml to avoid leaking credentials.
Ship config/derp.toml.example as the reference template.
 2026-02-15 00:41:19 +01:00
user
bf45abcbad feat: initial implementation 
Asyncio IRC bot with decorator-based plugin system.
Zero external dependencies, Python 3.11+.

- IRC protocol: message parsing, formatting, async TCP/TLS connection
- Plugin system: @command and @event decorators, file-based loading
- Bot orchestrator: connect, dispatch, reconnect, nick recovery
- CLI: argparse entry point with TOML config
- Built-in plugins: ping, help, version, echo
- 28 unit tests for parser and plugin system
 2026-02-15 00:37:31 +01:00