Torjus Håkestad
8ff029fcb7
Add an 80s-style green-on-black bank terminal shell ("banking") using
charmbracelet/bubbletea for full-screen TUI rendering over SSH.
Screens: login, main menu, account summary, account detail with
transactions, wire transfer wizard (6-step form capturing routing
number, destination, beneficiary, amount, memo, auth code), transaction
history with pagination, secure messages with breadcrumb content (fake
internal IPs, vault codes), change PIN, and hidden admin access (99)
that locks after 3 failed attempts with COBOL-style error output.
All key actions (login, navigation, wire transfers, admin attempts) are
logged to the session store. Wire transfer data is the honeypot gold.
Configurable via [shell.banking] in TOML: bank_name, terminal_id, region.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
61 lines
1.4 KiB
Plaintext
61 lines
1.4 KiB
Plaintext
log_level = "info"
|
||
log_format = "text" # "text" or "json"
|
||
|
||
[ssh]
|
||
listen_addr = ":2222"
|
||
host_key_path = "oubliette_host_key"
|
||
max_connections = 500
|
||
|
||
[auth]
|
||
accept_after = 10
|
||
credential_ttl = "24h"
|
||
|
||
[[auth.static_credentials]]
|
||
username = "root"
|
||
password = "toor"
|
||
|
||
[[auth.static_credentials]]
|
||
username = "admin"
|
||
password = "admin"
|
||
|
||
# Route specific credentials to a named shell (optional).
|
||
# [[auth.static_credentials]]
|
||
# username = "samsung"
|
||
# password = "fridge"
|
||
# shell = "fridge"
|
||
|
||
# [[auth.static_credentials]]
|
||
# username = "teller"
|
||
# password = "banking"
|
||
# shell = "banking"
|
||
|
||
[storage]
|
||
db_path = "oubliette.db"
|
||
retention_days = 90
|
||
retention_interval = "1h"
|
||
|
||
# [web]
|
||
# enabled = true
|
||
# listen_addr = ":8080"
|
||
|
||
[shell]
|
||
hostname = "ubuntu-server"
|
||
# banner = "Welcome to Ubuntu 22.04.3 LTS (GNU/Linux 5.15.0-89-generic x86_64)\r\n\r\n"
|
||
# fake_user = "" # override username in prompt; empty = use authenticated user
|
||
|
||
# Per-shell configuration (optional).
|
||
# [shell.banking]
|
||
# bank_name = "SECUREBANK"
|
||
# terminal_id = "SB-0001" # random if not set
|
||
# region = "NORTHEAST"
|
||
|
||
# [detection]
|
||
# enabled = true
|
||
# threshold = 0.6 # 0.0–1.0, sessions above this trigger notifications
|
||
# update_interval = "5s" # how often to recompute the score during a session
|
||
|
||
# [[notify.webhooks]]
|
||
# url = "https://ntfy.example.com/honeypot"
|
||
# headers = { Authorization = "Bearer your-token" }
|
||
# events = ["human_detected", "session_started"] # empty = all events
|