mirror of
https://github.com/CyberMind-FR/secubox-deb.git
synced 2026-07-29 09:14:33 +00:00
## IoT Guard
- Fix shell injection vulnerability in quarantine removal
- Add MAC address validation to prevent injection attacks
- Add nmap discovery with proper network scanning
- Add pagination to device listing
- Improve stats with active device count
## Threat Analyst
- Fix mitmproxy rule generation syntax
- Implement actual rule deployment for nftables, CrowdSec, mitmproxy
- Add rule rollback functionality
- Add /rollback endpoint for reverting applied rules
## Network Anomaly
- Add metric history storage for proper baseline calculation
- Fix baseline calculation to use statistical aggregation
- Add fallbacks for ss command (netstat, /proc/net/tcp)
- Implement port scan detection with conntrack integration
- Auto-trim metric files to prevent unbounded growth
## DNS Guard
- Add whitelist support with automatic safe domain list
- Add threat feed download from malware-filter, phishing.army, abuse.ch
- Add parent domain checking for whitelist/blocklist
- Add /feeds endpoints for threat intelligence management
## Config Advisor
- Add 3 new security checks: NOPASSWD, world-writable files, sysctl hardening
- Implement auto-remediation for 6 checks
- Add /fix/{check_id} endpoint for automatic fixes
- Add /fixable endpoint to list fixable issues
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| __init__.py | ||
| main.py | ||