cf3abbdbae
Mark v0.2.0 and v0.3.0 as done, set up wave 3 sprint targeting local database plugins (geoip, asn, torcheck, iprep, cve). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
50 lines
1.7 KiB
Markdown
50 lines
1.7 KiB
Markdown
# derp - Backlog
|
|
|
|
## Wave 3 Plugins (local databases) -- CURRENT
|
|
|
|
- [ ] `geoip` -- GeoLite2-City mmdb (requires `maxminddb`)
|
|
- [ ] `asn` -- GeoLite2-ASN mmdb (same package)
|
|
- [ ] `torcheck` -- local Tor exit node list, daily refresh
|
|
- [ ] `iprep` -- Firehol/Emerging Threats blocklist feeds
|
|
- [ ] `cve` -- local NVD JSON feed mirror
|
|
|
|
## Wave 4 Plugins (advanced)
|
|
|
|
- [ ] `opslog` -- timestamped operational notes (SQLite)
|
|
- [ ] `note` -- per-channel persistent key-value store
|
|
- [ ] `subdomain` -- crt.sh + wordlist DNS brute force
|
|
- [ ] `headers` -- HTTP header fingerprinting with local sigs
|
|
- [ ] `exploitdb` -- local exploit-db CSV search
|
|
- [ ] `payload` -- SQLi/XSS/SSTI template library
|
|
- [ ] `username` -- cross-platform username enumeration
|
|
- [ ] `emailcheck` -- SMTP VRFY/RCPT TO verification
|
|
- [ ] `dork` -- Google dork query builder
|
|
- [ ] `wayback` -- Wayback Machine snapshot lookup
|
|
- [ ] `canary` -- canary token generator/tracker
|
|
|
|
## Bot Features
|
|
|
|
- [x] SASL PLAIN authentication
|
|
- [x] Rate limiting (anti-flood, token bucket)
|
|
- [x] CTCP responses (VERSION, TIME, PING)
|
|
- [x] Admin/owner permission system (hostmask-based)
|
|
- [ ] Per-channel plugin enable/disable
|
|
- [ ] Channel management commands (kick, ban, topic)
|
|
- [ ] Multi-server support
|
|
- [ ] IRCv3 capability negotiation
|
|
|
|
## Improvements
|
|
|
|
- [ ] Structured logging (JSON output option)
|
|
- [ ] Plugin state persistence (SQLite backend)
|
|
- [ ] Configurable reconnect backoff (exponential)
|
|
- [ ] Message truncation for IRC 512-byte limit
|
|
- [ ] Data update script for local databases (cron-friendly)
|
|
|
|
## Testing
|
|
|
|
- [ ] Integration tests with mock IRC server
|
|
- [ ] Bot orchestrator unit tests
|
|
- [ ] Config merge edge case tests
|
|
- [ ] Plugin command tests (encode, hash, dns, etc.)
|