secubox-deb/packages/secubox-dns-guard/api
CyberMind-FR 58f2395f04 feat(api): Enhance 5 security modules with production-ready features
## IoT Guard
- Fix shell injection vulnerability in quarantine removal
- Add MAC address validation to prevent injection attacks
- Add nmap discovery with proper network scanning
- Add pagination to device listing
- Improve stats with active device count

## Threat Analyst
- Fix mitmproxy rule generation syntax
- Implement actual rule deployment for nftables, CrowdSec, mitmproxy
- Add rule rollback functionality
- Add /rollback endpoint for reverting applied rules

## Network Anomaly
- Add metric history storage for proper baseline calculation
- Fix baseline calculation to use statistical aggregation
- Add fallbacks for ss command (netstat, /proc/net/tcp)
- Implement port scan detection with conntrack integration
- Auto-trim metric files to prevent unbounded growth

## DNS Guard
- Add whitelist support with automatic safe domain list
- Add threat feed download from malware-filter, phishing.army, abuse.ch
- Add parent domain checking for whitelist/blocklist
- Add /feeds endpoints for threat intelligence management

## Config Advisor
- Add 3 new security checks: NOPASSWD, world-writable files, sysctl hardening
- Implement auto-remediation for 6 checks
- Add /fix/{check_id} endpoint for automatic fixes
- Add /fixable endpoint to list fixable issues

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-03-27 11:22:47 +01:00
..
__init__.py feat: Add 15 new SecuBox-Deb modules and VM configuration 2026-03-27 10:08:05 +01:00
main.py feat(api): Enhance 5 security modules with production-ready features 2026-03-27 11:22:47 +01:00