c5b0430da8
- docker-compose.yml for podman-compose deployment - Makefile: add up/down/logs compose targets - README: plugin table, container quickstart, make targets - PROJECT: plugin categories, deployment matrix, design decisions - ROADMAP: v0.1 done, v0.2 current, v0.3-v1.0 planned - TASKS: current sprint with priorities - TODO: full backlog organized by wave - CHEATSHEET: reorganized by category (OSINT, Red Team, OPSEC) - INSTALL: container deployment instructions - DEBUG: container logs, hot-reload, DNS troubleshooting - USAGE: all 19 commands documented Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2.1 KiB
2.1 KiB
derp - Backlog
Wave 2 Plugins (stdlib, next up)
whois-- raw socket WHOIS client (port 43)portcheck-- async TCP connect scanhttpcheck-- HTTP status, redirects, response timetlscheck-- TLS version, cipher suite, cert chain, expiryblacklist-- DNSBL/RBL IP checkrand-- passwords, hex strings, UUIDstimer-- countdown/stopwatch for time-boxed ops
Wave 3 Plugins (local databases)
geoip-- GeoLite2-City mmdb (requiresmaxminddb)asn-- GeoLite2-ASN mmdb (same package)torcheck-- local Tor exit node list, daily refreshiprep-- Firehol/Emerging Threats blocklist feedscve-- local NVD JSON feed mirror
Wave 4 Plugins (advanced)
opslog-- timestamped operational notes (SQLite)note-- per-channel persistent key-value storesubdomain-- crt.sh + wordlist DNS brute forceheaders-- HTTP header fingerprinting with local sigsexploitdb-- local exploit-db CSV searchpayload-- SQLi/XSS/SSTI template libraryusername-- cross-platform username enumerationemailcheck-- SMTP VRFY/RCPT TO verificationdork-- Google dork query builderwayback-- Wayback Machine snapshot lookupcanary-- canary token generator/tracker
Bot Features
- SASL PLAIN authentication
- Rate limiting (anti-flood, token bucket)
- CTCP responses (VERSION, TIME, PING)
- Admin/owner permission system (hostmask-based)
- Per-channel plugin enable/disable
- Channel management commands (kick, ban, topic)
- Multi-server support
- IRCv3 capability negotiation
Improvements
- Structured logging (JSON output option)
- Plugin state persistence (SQLite backend)
- Configurable reconnect backoff (exponential)
- Message truncation for IRC 512-byte limit
- Data update script for local databases (cron-friendly)
Testing
- Integration tests with mock IRC server
- Bot orchestrator unit tests
- Config merge edge case tests
- Plugin command tests (encode, hash, dns, etc.)