ε - README-UPDATE
This commit is contained in:
Eun0us
parent
c2b4bb3463
commit
f2a5b50bfd
371
README.en.md
371
README.en.md
@ -1,371 +0,0 @@
|
|||||||
# Espilon
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
**Embedded ESP32 Agent Framework for Security Research and IoT**
|
|
||||||
|
|
||||||
[](LICENSE)
|
|
||||||
[](https://github.com/espressif/esp-idf)
|
|
||||||
[](https://www.espressif.com/en/products/socs/esp32)
|
|
||||||
|
|
||||||
> **IMPORTANT**: Espilon is intended for security research, authorized penetration testing, and education. Unauthorized use is illegal. Always obtain written permission before any deployment.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Full Documentation
|
|
||||||
|
|
||||||
**[View the full documentation here](https://docs.espilon.net)**
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
The MkDocs documentation includes:
|
|
||||||
|
|
||||||
```md
|
|
||||||
- Step-by-step installation guide
|
|
||||||
- Translate EN/FR
|
|
||||||
- WiFi and GPRS configuration
|
|
||||||
- Module and command reference
|
|
||||||
- Multi-device flasher guide
|
|
||||||
- C2 protocol specification
|
|
||||||
- Examples and use cases
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Quick Start
|
|
||||||
|
|
||||||
### Prerequisites
|
|
||||||
|
|
||||||
- ESP-IDF v5.3.2
|
|
||||||
- Python 3.8+
|
|
||||||
- ESP32 (any compatible model)
|
|
||||||
- LilyGO T-Call for GPRS mode (optional)
|
|
||||||
|
|
||||||
### Quick Installation
|
|
||||||
|
|
||||||
```bash
|
|
||||||
# 1. Install ESP-IDF v5.3.2
|
|
||||||
mkdir -p ~/esp
|
|
||||||
cd ~/esp
|
|
||||||
git clone -b v5.3.2 --recursive https://github.com/espressif/esp-idf.git
|
|
||||||
cd esp-idf
|
|
||||||
./install.sh esp32
|
|
||||||
. ./export.sh
|
|
||||||
|
|
||||||
# 2. Clone Espilon
|
|
||||||
cd ~
|
|
||||||
git clone https://github.com/Espilon-Net/epsilon-source.git
|
|
||||||
cd Espilon-Net/espilon_bot
|
|
||||||
|
|
||||||
# 3. Configure with menuconfig or tools/flasher/devices.json
|
|
||||||
idf.py menuconfig
|
|
||||||
|
|
||||||
# 4. Build and flash
|
|
||||||
idf.py build
|
|
||||||
idf.py -p /dev/ttyUSB0 flash monitor
|
|
||||||
```
|
|
||||||
|
|
||||||
**Minimal configuration** (menuconfig):
|
|
||||||
|
|
||||||
```c
|
|
||||||
Espilon Bot Configuration
|
|
||||||
|- Device ID: "your_unique_id"
|
|
||||||
|- Network -> WiFi
|
|
||||||
| |- SSID: "YourWiFi"
|
|
||||||
| |- Password: "YourPassword"
|
|
||||||
|- Server
|
|
||||||
|- IP: "192.168.1.100"
|
|
||||||
|- Port: 2626
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## What is Espilon?
|
|
||||||
|
|
||||||
Espilon transforms affordable ESP32 microcontrollers (~$5) into powerful networked agents for:
|
|
||||||
|
|
||||||
- **Security research**: WiFi testing, network reconnaissance, IoT pentesting
|
|
||||||
- **Education**: Learning embedded systems, network protocols, FreeRTOS
|
|
||||||
- **IoT prototyping**: Distributed communication, monitoring, sensors
|
|
||||||
|
|
||||||
### Connectivity Modes
|
|
||||||
|
|
||||||
| Mode | Hardware | Range | Use Case |
|
|
||||||
|------|----------|-------|----------|
|
|
||||||
| **WiFi** | Standard ESP32 | 50-100m | Labs, buildings |
|
|
||||||
| **GPRS** | LilyGO T-Call | National (2G) | Mobile, remote |
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Architecture
|
|
||||||
|
|
||||||
```
|
|
||||||
+---------------------------------------------------------+
|
|
||||||
| ESP32 Agent |
|
|
||||||
| +-----------+ +----------+ +---------------------+ |
|
|
||||||
| | WiFi/ |->| ChaCha20 |->| C2 Protocol | |
|
|
||||||
| | GPRS |<-| Crypto |<-| (nanoPB/TCP) | |
|
|
||||||
| +-----------+ +----------+ +---------------------+ |
|
|
||||||
| | | | |
|
|
||||||
| +-----------------------------------------------------+|
|
|
||||||
| | Module System (FreeRTOS) ||
|
|
||||||
| | [Network] [FakeAP] [Recon] [Custom...] ||
|
|
||||||
| +-----------------------------------------------------+|
|
|
||||||
+---------------------------------------------------------+
|
|
||||||
| Encrypted TCP
|
|
||||||
+---------------------+
|
|
||||||
| C2 Server (C3PO) |
|
|
||||||
| - Device Registry |
|
|
||||||
| - Group Management |
|
|
||||||
| - CLI Interface |
|
|
||||||
+---------------------+
|
|
||||||
```
|
|
||||||
|
|
||||||
### Key Components
|
|
||||||
|
|
||||||
- **Core**: Network connection, ChaCha20 crypto, nanoPB protocol
|
|
||||||
- **Modules**: Extensible system (Network, FakeAP, Recon, etc.)
|
|
||||||
- **C2 (C3PO)**: Python asyncio server for multi-agent control
|
|
||||||
- **Flasher**: Automated multi-device flashing tool
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Available Modules
|
|
||||||
|
|
||||||
> **Important note**: Modules are **mutually exclusive**. You must choose **only one module** during configuration via menuconfig.
|
|
||||||
|
|
||||||
### System Module (Built-in, always active)
|
|
||||||
|
|
||||||
Basic system commands:
|
|
||||||
|
|
||||||
- `system_reboot`: Reboot the ESP32
|
|
||||||
- `system_mem`: Display memory usage (heap free, heap min, internal free)
|
|
||||||
- `system_uptime`: Uptime since boot
|
|
||||||
|
|
||||||
### Network Module
|
|
||||||
|
|
||||||
Module for network reconnaissance and testing:
|
|
||||||
|
|
||||||
- `ping <host> [args...]`: ICMP connectivity test
|
|
||||||
- `arp_scan`: Discover hosts on local network via ARP
|
|
||||||
- `proxy_start <ip> <port>`: Start a TCP proxy
|
|
||||||
- `proxy_stop`: Stop the running proxy
|
|
||||||
- `dos_tcp <ip> <port> <count>`: TCP load test (authorized use only)
|
|
||||||
|
|
||||||
### FakeAP Module
|
|
||||||
|
|
||||||
Module for creating simulated WiFi access points:
|
|
||||||
|
|
||||||
- `fakeap_start <ssid> [open|wpa2] [password]`: Start a fake access point
|
|
||||||
- `fakeap_stop`: Stop the fake AP
|
|
||||||
- `fakeap_status`: Display status (AP, portal, sniffer, clients)
|
|
||||||
- `fakeap_clients`: List connected clients
|
|
||||||
- `fakeap_portal_start`: Enable captive portal
|
|
||||||
- `fakeap_portal_stop`: Disable captive portal
|
|
||||||
- `fakeap_sniffer_on`: Enable network traffic capture
|
|
||||||
- `fakeap_sniffer_off`: Disable capture
|
|
||||||
|
|
||||||
### Recon Module
|
|
||||||
|
|
||||||
Reconnaissance and data collection module. Two modes available:
|
|
||||||
|
|
||||||
#### Camera Mode (ESP32-CAM)
|
|
||||||
|
|
||||||
- `cam_start <ip> <port>`: Start UDP video streaming (~7 FPS, QQVGA)
|
|
||||||
- `cam_stop`: Stop streaming
|
|
||||||
|
|
||||||
#### BLE Trilateration Mode
|
|
||||||
|
|
||||||
- `trilat start <mac> <url> <bearer>`: Start BLE trilateration with HTTP POST
|
|
||||||
- `trilat stop`: Stop trilateration
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**Configuration**: `idf.py menuconfig` -> Espilon Bot Configuration -> Modules
|
|
||||||
|
|
||||||
Choose **only one module**:
|
|
||||||
|
|
||||||
- `CONFIG_MODULE_NETWORK`: Enable the Network Module
|
|
||||||
- `CONFIG_MODULE_FAKEAP`: Enable the FakeAP Module
|
|
||||||
- `CONFIG_MODULE_RECON`: Enable the Recon Module
|
|
||||||
- Then choose: `Camera` or `BLE Trilateration`
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Tools
|
|
||||||
|
|
||||||
### Multi-Device Flasher
|
|
||||||
|
|
||||||
Automated flasher to configure multiple ESP32s:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
cd tools/flasher
|
|
||||||
python3 flash.py --config devices.json
|
|
||||||
```
|
|
||||||
|
|
||||||
**devices.json**:
|
|
||||||
|
|
||||||
```json
|
|
||||||
{
|
|
||||||
"project": "/path/to/espilon_bot",
|
|
||||||
"devices": [
|
|
||||||
{
|
|
||||||
"device_id": "esp001",
|
|
||||||
"port": "/dev/ttyUSB0",
|
|
||||||
"network_mode": "wifi",
|
|
||||||
"wifi_ssid": "MyNetwork",
|
|
||||||
"wifi_pass": "MyPassword",
|
|
||||||
"srv_ip": "192.168.1.100"
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
```
|
|
||||||
|
|
||||||
See [tools/flasher/README.md](tools/flasher/README.md) for complete documentation.
|
|
||||||
|
|
||||||
### C2 Server (C3PO)
|
|
||||||
|
|
||||||
Command & Control server:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
cd tools/c2
|
|
||||||
pip3 install -r requirements.txt
|
|
||||||
python3 c3po.py --port 2626
|
|
||||||
```
|
|
||||||
|
|
||||||
**Commands**:
|
|
||||||
|
|
||||||
- `list`: List connected agents
|
|
||||||
- `select <id>`: Select an agent
|
|
||||||
- `cmd <command>`: Execute a command
|
|
||||||
- `group`: Manage agent groups
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Security
|
|
||||||
|
|
||||||
### Encryption
|
|
||||||
|
|
||||||
- **ChaCha20** for C2 communications
|
|
||||||
- **Configurable keys** via menuconfig
|
|
||||||
- **Protocol Buffers (nanoPB)** for serialization
|
|
||||||
|
|
||||||
**CHANGE DEFAULT KEYS** for production use:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
# Generate random keys
|
|
||||||
openssl rand -hex 32 # ChaCha20 key (32 bytes)
|
|
||||||
openssl rand -hex 12 # Nonce (12 bytes)
|
|
||||||
```
|
|
||||||
|
|
||||||
### Responsible Use
|
|
||||||
|
|
||||||
Espilon should only be used for:
|
|
||||||
|
|
||||||
- **Authorized** penetration testing
|
|
||||||
- **Ethical** security research
|
|
||||||
- Education and training
|
|
||||||
- Legitimate IoT prototyping
|
|
||||||
|
|
||||||
**Prohibited**: Unauthorized access, malicious attacks, privacy violations.
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Use Cases
|
|
||||||
|
|
||||||
### WiFi Pentesting
|
|
||||||
|
|
||||||
- Network security auditing
|
|
||||||
- WPA2/WPA3 robustness testing
|
|
||||||
- Network mapping
|
|
||||||
|
|
||||||
### IoT Security Research
|
|
||||||
|
|
||||||
- IoT device testing
|
|
||||||
- Protocol analysis
|
|
||||||
- Vulnerability detection
|
|
||||||
|
|
||||||
### Education
|
|
||||||
|
|
||||||
- Cybersecurity labs
|
|
||||||
- Embedded systems courses
|
|
||||||
- CTF competitions
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Roadmap
|
|
||||||
|
|
||||||
### V2.0 (In Progress)
|
|
||||||
|
|
||||||
- [ ] Mesh networking (BLE/WiFi)
|
|
||||||
- [ ] Improve documentation
|
|
||||||
- [ ] OTA updates
|
|
||||||
- [ ] Collaborative multilateration
|
|
||||||
- [ ] Memory optimization
|
|
||||||
|
|
||||||
### Future
|
|
||||||
|
|
||||||
- [ ] Custom Espilon PCB
|
|
||||||
- [ ] ESP32-S3/C3 support
|
|
||||||
- [ ] Module SDK for third-party extensions
|
|
||||||
- [ ] Web UI for C2
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## License
|
|
||||||
|
|
||||||
Espilon is licensed under **MIT** with a security addendum.
|
|
||||||
|
|
||||||
See [LICENSE](LICENSE) for full details.
|
|
||||||
|
|
||||||
**In summary**:
|
|
||||||
- Free use for research, education, development
|
|
||||||
- Modification and distribution allowed
|
|
||||||
- **Obtain authorization** before any deployment
|
|
||||||
- Malicious use strictly prohibited
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Contributors
|
|
||||||
|
|
||||||
- **@Eun0us** - Core architecture, modules
|
|
||||||
- **@off-path** - C2 server, protocol
|
|
||||||
- **@itsoktocryyy** - Network features, work on Mod Wall Hack
|
|
||||||
- **@wepfen** - Documentation, tools
|
|
||||||
|
|
||||||
### Contributing
|
|
||||||
|
|
||||||
Contributions welcome! See [CONTRIBUTING.md](CONTRIBUTING.md).
|
|
||||||
|
|
||||||
**Join us**:
|
|
||||||
|
|
||||||
- Report bugs
|
|
||||||
- Propose features
|
|
||||||
- Submit PRs
|
|
||||||
- Improve documentation
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Useful Links
|
|
||||||
|
|
||||||
- **[Full documentation](https://docs.espilon.net)**
|
|
||||||
- **[ESP-IDF Documentation](https://docs.espressif.com/projects/esp-idf/)**
|
|
||||||
- **[LilyGO T-Call](https://github.com/Xinyuan-LilyGO/LilyGO-T-Call-SIM800)**
|
|
||||||
- **French README**: [README.md](README.md)
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Support
|
|
||||||
|
|
||||||
- **Issues**: [GitHub Issues](https://github.com/Espilon-Net/Espilon-Source/issues)
|
|
||||||
- **Discussions**: [GitHub Discussions](https://github.com/Espilon-Net/Espilon-Source/discussions)
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
**Originally presented at Le Hack (June 2025)**
|
|
||||||
|
|
||||||
**Made with love for security research and education**
|
|
||||||
428
README.fr.md
Normal file
428
README.fr.md
Normal file
@ -0,0 +1,428 @@
|
|||||||
|
# Espilon
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
**Framework d'agents embarqués ESP32 pour la recherche en sécurité et l'IoT**
|
||||||
|
|
||||||
|
[](LICENSE)
|
||||||
|
[](https://github.com/espressif/esp-idf)
|
||||||
|
[](https://www.espressif.com/en/products/socs/esp32)
|
||||||
|
|
||||||
|
> **⚠️ IMPORTANT** : Espilon est destiné à la recherche en sécurité, aux tests d'intrusion autorisés et à l'éducation. L'utilisation non autorisée est illégale. Obtenez toujours une autorisation écrite avant tout déploiement.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Sommaire
|
||||||
|
|
||||||
|
- [Documentation Complète](#documentation-complète)
|
||||||
|
- [Quick Start](#quick-start)
|
||||||
|
- [Prérequis](#prérequis)
|
||||||
|
- [Installation Rapide](#installation-rapide)
|
||||||
|
- [Qu'est-ce qu'Espilon ?](#quest-ce-quespilon-)
|
||||||
|
- [Modes de Connectivité](#modes-de-connectivité)
|
||||||
|
- [Architecture](#architecture)
|
||||||
|
- [Composants Clés](#composants-clés)
|
||||||
|
- [Modules Disponibles](#modules-disponibles)
|
||||||
|
- [System Module](#system-module-built-in-toujours-actif)
|
||||||
|
- [Network Module](#network-module)
|
||||||
|
- [FakeAP Module](#fakeap-module)
|
||||||
|
- [Recon Module](#recon-module)
|
||||||
|
- [Outils](#outils)
|
||||||
|
- [Multi-Device Flasher](#multi-device-flasher)
|
||||||
|
- [C2 Server (C3PO)](#c2-server-c3po)
|
||||||
|
- [Sécurité](#sécurité)
|
||||||
|
- [Chiffrement](#chiffrement)
|
||||||
|
- [Usage Responsable](#usage-responsable)
|
||||||
|
- [Cas d'Usage](#cas-dusage)
|
||||||
|
- [Roadmap](#roadmap)
|
||||||
|
- [Licence](#licence)
|
||||||
|
- [Contributeurs](#contributeurs)
|
||||||
|
- [Liens Utiles](#liens-utiles)
|
||||||
|
- [Support](#support)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Documentation Complète
|
||||||
|
|
||||||
|
**[Consultez la documentation complète ici](https://docs.espilon.net)**
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
La documentation MkDocs inclut :
|
||||||
|
|
||||||
|
```md
|
||||||
|
- Guide d'installation pas à pas
|
||||||
|
- Traduction EN/FR
|
||||||
|
- Configuration WiFi et GPRS
|
||||||
|
- Référence des modules et commandes
|
||||||
|
- Guide du flasher multi-device
|
||||||
|
- Spécification du protocole C2
|
||||||
|
- Exemples et cas d'usage
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Quick Start
|
||||||
|
|
||||||
|
### Prérequis
|
||||||
|
|
||||||
|
- ESP-IDF v5.3.2
|
||||||
|
- Python 3.8+
|
||||||
|
- ESP32 (tout modèle compatible)
|
||||||
|
- LilyGO T-Call pour le mode GPRS (optionnel)
|
||||||
|
|
||||||
|
### Installation Rapide
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# 1. Installer ESP-IDF v5.3.2
|
||||||
|
mkdir -p ~/esp
|
||||||
|
cd ~/esp
|
||||||
|
git clone -b v5.3.2 --recursive https://github.com/espressif/esp-idf.git
|
||||||
|
cd esp-idf
|
||||||
|
./install.sh esp32
|
||||||
|
. ./export.sh
|
||||||
|
|
||||||
|
# 2. Cloner Espilon
|
||||||
|
cd ~
|
||||||
|
git clone https://github.com/Espilon-Net/epsilon-source.git
|
||||||
|
cd epsilon/espilon_bot
|
||||||
|
|
||||||
|
# 3. Configurer
|
||||||
|
idf.py menuconfig
|
||||||
|
|
||||||
|
# 4. Compiler et flasher
|
||||||
|
idf.py build
|
||||||
|
idf.py -p /dev/ttyUSB0 flash monitor
|
||||||
|
```
|
||||||
|
|
||||||
|
**Configuration minimale** (menuconfig) :
|
||||||
|
|
||||||
|
```c
|
||||||
|
Espilon Bot Configuration
|
||||||
|
├─ Device ID: "votre_id_unique"
|
||||||
|
├─ Network → WiFi
|
||||||
|
│ ├─ SSID: "VotreWiFi"
|
||||||
|
│ └─ Password: "VotreMotDePasse"
|
||||||
|
└─ Server
|
||||||
|
├─ IP: "192.168.1.100"
|
||||||
|
└─ Port: 2626
|
||||||
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Qu'est-ce qu'Espilon ?
|
||||||
|
|
||||||
|
Espilon transforme des microcontrôleurs ESP32 abordables à **~5€** en agents networked puissants pour :
|
||||||
|
|
||||||
|
- **Recherche en sécurité** : Tests WiFi, reconnaissance réseau, IoT pentesting
|
||||||
|
- **Éducation** : Apprentissage de l'embarqué, protocoles réseau, FreeRTOS
|
||||||
|
- **Prototypage IoT** : Communication distribuée, monitoring, capteurs
|
||||||
|
|
||||||
|
### Modes de Connectivité
|
||||||
|
|
||||||
|
| Mode | Hardware | Portée | Use Case |
|
||||||
|
|------|----------|--------|----------|
|
||||||
|
| **WiFi** | ESP32 standard | 50-100m | Labs, bâtiments |
|
||||||
|
| **GPRS** | LilyGO T-Call | National (2G) | Mobile, remote |
|
||||||
|
|
||||||
|
**General Packet Radio Service** vs **WiFi**
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Architecture
|
||||||
|
|
||||||
|
```md
|
||||||
|
┌─────────────────────────────────────────────────────┐
|
||||||
|
│ ESP32 Agent │
|
||||||
|
│ ┌───────────┐ ┌──────────┐ ┌─────────────────┐ │
|
||||||
|
│ │ WiFi/ │→ │ ChaCha20 │→ │ C2 Protocol │ │
|
||||||
|
│ │ GPRS │← │ Crypto │← │ (nanoPB/TCP) │ │
|
||||||
|
│ └───────────┘ └──────────┘ └─────────────────┘ │
|
||||||
|
│ ↓ ↓ ↓ │
|
||||||
|
│ ┌───────────────────────────────────────────────┐ │
|
||||||
|
│ │ Module System (FreeRTOS) │ │
|
||||||
|
│ │ [Network] [FakeAP] [Recon] [Custom...] │ │
|
||||||
|
│ └───────────────────────────────────────────────┘ │
|
||||||
|
└─────────────────────────────────────────────────────┘
|
||||||
|
↕ Encrypted TCP
|
||||||
|
┌──────────────────────┐
|
||||||
|
│ C2 Server (C3PO) │
|
||||||
|
│ - Device Registry │
|
||||||
|
│ - Group Management │
|
||||||
|
│ - CLI Interface │
|
||||||
|
└──────────────────────┘
|
||||||
|
```
|
||||||
|
|
||||||
|
### Composants Clés
|
||||||
|
|
||||||
|
- **Core** : Connexion réseau, crypto ChaCha20, protocole nanoPB
|
||||||
|
- **Modules** : Système extensible (Network, FakeAP, Recon, etc.)
|
||||||
|
- **C2 (C3PO)** : Serveur Python asyncio pour contrôle multi-agents
|
||||||
|
- **C3PO**: Ancien c2 (serveur web - Trilateration + Front affichage caméra)
|
||||||
|
- **Flasher** : Outil de flash multi-device automatisé
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Modules Disponibles
|
||||||
|
|
||||||
|
> **Note importante** : Les modules sont **mutuellement exclusifs**. Vous devez choisir **un seul module** lors de la configuration via menuconfig.
|
||||||
|
|
||||||
|
### System Module (Built-in, toujours actif)
|
||||||
|
|
||||||
|
Commandes système de base :
|
||||||
|
|
||||||
|
- `system_reboot` : Redémarrage de l'ESP32
|
||||||
|
- `system_mem` : Affichage de l'utilisation mémoire (heap free, heap min, internal free)
|
||||||
|
- `system_uptime` : Temps de fonctionnement depuis le boot
|
||||||
|
|
||||||
|
### Network Module
|
||||||
|
|
||||||
|
Module pour reconnaissance et tests réseau :
|
||||||
|
|
||||||
|
- `ping <host> [args...]` : Test de connectivité ICMP
|
||||||
|
- `arp_scan` : Découverte des hôtes sur le réseau local via ARP
|
||||||
|
- `proxy_start <ip> <port>` : Démarrer un proxy TCP
|
||||||
|
- `proxy_stop` : Arrêter le proxy en cours
|
||||||
|
- `dos_tcp <ip> <port> <count>` : Test de charge TCP (à usage autorisé uniquement)
|
||||||
|
|
||||||
|
### FakeAP Module
|
||||||
|
|
||||||
|
Module pour création de points d'accès WiFi simulés :
|
||||||
|
|
||||||
|
- `fakeap_start <ssid> [open|wpa2] [password]` : Démarrer un faux point d'accès
|
||||||
|
- `fakeap_stop` : Arrêter le faux AP
|
||||||
|
- `fakeap_status` : Afficher le statut (AP, portal, sniffer, clients)
|
||||||
|
- `fakeap_clients` : Lister les clients connectés
|
||||||
|
- `fakeap_portal_start` : Activer le portail captif
|
||||||
|
- `fakeap_portal_stop` : Désactiver le portail captif
|
||||||
|
- `fakeap_sniffer_on` : Activer la capture de trafic réseau
|
||||||
|
- `fakeap_sniffer_off` : Désactiver la capture
|
||||||
|
|
||||||
|
### Recon Module
|
||||||
|
|
||||||
|
Module de reconnaissance et collecte de données. Deux modes disponibles :
|
||||||
|
|
||||||
|
#### Mode Camera (ESP32-CAM)
|
||||||
|
|
||||||
|
- `cam_start <ip> <port>` : Démarrer le streaming vidéo UDP (~7 FPS, QQVGA)
|
||||||
|
- `cam_stop` : Arrêter le streaming
|
||||||
|
|
||||||
|
#### Mode BLE Trilateration
|
||||||
|
|
||||||
|
- `trilat start <mac> <url> <bearer>` : Démarrer la trilatération BLE avec POST HTTP
|
||||||
|
- `trilat stop` : Arrêter la trilatération
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
**Configuration** : `idf.py menuconfig` → Espilon Bot Configuration → Modules
|
||||||
|
|
||||||
|
Choisissez **un seul module** :
|
||||||
|
|
||||||
|
- `CONFIG_MODULE_NETWORK` : Active le Network Module
|
||||||
|
- `CONFIG_MODULE_FAKEAP` : Active le FakeAP Module
|
||||||
|
- `CONFIG_MODULE_RECON` : Active le Recon Module
|
||||||
|
- Puis choisir : `Camera` ou `BLE Trilateration`
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Outils
|
||||||
|
|
||||||
|
### Multi-Device Flasher
|
||||||
|
|
||||||
|
Flasher automatisé pour configurer plusieurs ESP32 :
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd tools/flasher
|
||||||
|
python3 flash.py --config devices.json
|
||||||
|
```
|
||||||
|
|
||||||
|
**devices.json** :
|
||||||
|
|
||||||
|
```json
|
||||||
|
{
|
||||||
|
"project": "/home/user/epsilon/espilon_bot",
|
||||||
|
"devices": [
|
||||||
|
## WiFi AGENT ##
|
||||||
|
{
|
||||||
|
"device_id": "ce4f626b",
|
||||||
|
"port": "/dev/ttyUSB0",
|
||||||
|
"srv_ip": "192.168.1.13",
|
||||||
|
"srv_port": 2626,
|
||||||
|
"network_mode": "wifi",
|
||||||
|
"wifi_ssid": "MyWiFi",
|
||||||
|
"wifi_pass": "MyPassword123",
|
||||||
|
"hostname": "pixel-8-pro",
|
||||||
|
"module_network": true,
|
||||||
|
"module_recon": false,
|
||||||
|
"module_fakeap": false,
|
||||||
|
"recon_camera": false,
|
||||||
|
"recon_ble_trilat": false,
|
||||||
|
"crypto_key": "testde32chars00000000000000000000",
|
||||||
|
"crypto_nonce": "noncenonceno"
|
||||||
|
},
|
||||||
|
|
||||||
|
## GPRS AGENT ##
|
||||||
|
{
|
||||||
|
"device_id": "a91dd021",
|
||||||
|
"port": "/dev/ttyUSB1",
|
||||||
|
"srv_ip": "203.0.113.10",
|
||||||
|
"srv_port": 2626,
|
||||||
|
"network_mode": "gprs",
|
||||||
|
"gprs_apn": "sl2sfr",
|
||||||
|
"hostname": "galaxy-s24-ultra",
|
||||||
|
"module_network": true,
|
||||||
|
"module_recon": false,
|
||||||
|
"module_fakeap": false
|
||||||
|
}
|
||||||
|
]
|
||||||
|
}
|
||||||
|
```
|
||||||
|
|
||||||
|
Voir [tools/flasher/README.md](tools/flasher/README.md) pour la documentation complète.
|
||||||
|
|
||||||
|
### C2 Server (C3PO)
|
||||||
|
|
||||||
|
Serveur de Command & Control :
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd tools/c2
|
||||||
|
pip3 install -r requirements.txt
|
||||||
|
python3 c3po.py --port 2626
|
||||||
|
```
|
||||||
|
|
||||||
|
**Commandes** :
|
||||||
|
|
||||||
|
- `list` : Lister les agents connectés
|
||||||
|
- `select <id>` : Sélectionner un agent
|
||||||
|
- `cmd <command>` : Exécuter une commande
|
||||||
|
- `group` : Gérer les groupes d'agents
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Sécurité
|
||||||
|
|
||||||
|
### Chiffrement
|
||||||
|
|
||||||
|
- **ChaCha20** pour les communications C2
|
||||||
|
- **Clés configurables** via menuconfig
|
||||||
|
- **Protocol Buffers (nanoPB)** pour la sérialisation
|
||||||
|
|
||||||
|
⚠️ **CHANGEZ LES CLÉS PAR DÉFAUT** pour un usage en production :
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Générer des clés aléatoires
|
||||||
|
openssl rand -hex 32 # ChaCha20 key (32 bytes)
|
||||||
|
openssl rand -hex 12 # Nonce (12 bytes)
|
||||||
|
```
|
||||||
|
|
||||||
|
### Usage Responsable
|
||||||
|
|
||||||
|
Espilon doit être utilisé uniquement pour :
|
||||||
|
|
||||||
|
- Tests d'intrusion **autorisés**
|
||||||
|
- Recherche en sécurité **éthique**
|
||||||
|
- Éducation et formation
|
||||||
|
- Prototypage IoT légitime
|
||||||
|
|
||||||
|
**Interdit** : Accès non autorisé, attaques malveillantes, violation de confidentialité.
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Cas d'Usage
|
||||||
|
|
||||||
|
### Pentest WiFi
|
||||||
|
|
||||||
|
- Audit de sécurité réseau
|
||||||
|
- Test de robustesse WPA2/WPA3
|
||||||
|
- Cartographie réseau
|
||||||
|
|
||||||
|
### IoT Security Research
|
||||||
|
|
||||||
|
- Test de devices IoT
|
||||||
|
- Analyse de protocoles
|
||||||
|
- Détection de vulnérabilités
|
||||||
|
|
||||||
|
### Éducation
|
||||||
|
|
||||||
|
- Labs de cybersécurité
|
||||||
|
- Cours d'embarqué
|
||||||
|
- CTF competitions
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Roadmap
|
||||||
|
|
||||||
|
### V2.0 (En cours)
|
||||||
|
|
||||||
|
- [ ] Mesh networking (BLE/WiFi)
|
||||||
|
- [ ] Implémenter Module reccoon dans C3PO
|
||||||
|
- [ ] Améliorer la Documentations [here](https://docs.espilon.net)
|
||||||
|
- [ ] OTA updates
|
||||||
|
- [ ] Multilatération collaborative
|
||||||
|
- [ ] Optimisation mémoire
|
||||||
|
|
||||||
|
### Future
|
||||||
|
|
||||||
|
- [ ] PCB custom Espilon
|
||||||
|
- [ ] Support ESP32-S3/C3
|
||||||
|
- [ ] Module SDK pour extensions tierces
|
||||||
|
- [ ] Web UI pour C2
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Licence
|
||||||
|
|
||||||
|
Espilon est sous licence **MIT** avec addendum de sécurité.
|
||||||
|
|
||||||
|
Voir [LICENSE](LICENSE) pour les détails complets.
|
||||||
|
|
||||||
|
**En résumé** :
|
||||||
|
|
||||||
|
- Utilisation libre pour recherche, éducation, développement
|
||||||
|
- Modification et distribution autorisées
|
||||||
|
- **Obtenir autorisation** avant tout déploiement
|
||||||
|
- Usage malveillant strictement interdit
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Contributeurs
|
||||||
|
|
||||||
|
- **@Eun0us** - Core architecture, modules
|
||||||
|
- **@off-path** - C2 server, protocol
|
||||||
|
- **@itsoktocryyy** - Network features, Wall Hack
|
||||||
|
- **@wepfen** - Documentation, tools
|
||||||
|
|
||||||
|
### Contribuer
|
||||||
|
|
||||||
|
Contributions bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md).
|
||||||
|
|
||||||
|
**Rejoignez-nous** :
|
||||||
|
|
||||||
|
- Rapporter des bugs
|
||||||
|
- Proposer des features
|
||||||
|
- Soumettre des PRs
|
||||||
|
- Améliorer la doc
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Liens Utiles
|
||||||
|
|
||||||
|
- **[Documentation complète](https://docs.espilon.net)**
|
||||||
|
- **[ESP-IDF Documentation](https://docs.espressif.com/projects/esp-idf/)**
|
||||||
|
- **[LilyGO T-Call](https://github.com/Xinyuan-LilyGO/LilyGO-T-Call-SIM800)**
|
||||||
|
- **English README** : [README.en.md](README.en.md)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Support
|
||||||
|
|
||||||
|
- **Issues** : [GitHub Issues](https://github.com/Espilon-Net/Espilon-Source/issues)
|
||||||
|
- **Discussions** : [GitHub Discussions](https://github.com/Espilon-Net/Espilon-Source/discussions)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
**Présenté initialement à Le Hack (Juin 2025)**
|
||||||
|
|
||||||
|
**Made with love for security research and education**
|
||||||
399
README.md
399
README.md
@ -2,51 +2,81 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
**Framework d'agents embarqués ESP32 pour la recherche en sécurité et l'IoT**
|
**Embedded ESP32 Agent Framework for Security Research and IoT**
|
||||||
|
|
||||||
[](LICENSE)
|
[](LICENSE)
|
||||||
[](https://github.com/espressif/esp-idf)
|
[](https://github.com/espressif/esp-idf)
|
||||||
[](https://www.espressif.com/en/products/socs/esp32)
|
[](https://www.espressif.com/en/products/socs/esp32)
|
||||||
|
|
||||||
> **⚠️ IMPORTANT** : Espilon est destiné à la recherche en sécurité, aux tests d'intrusion autorisés et à l'éducation. L'utilisation non autorisée est illégale. Obtenez toujours une autorisation écrite avant tout déploiement.
|
> **IMPORTANT**: Espilon is intended for security research, authorized penetration testing, and education. Unauthorized use is illegal. Always obtain written permission before any deployment.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Documentation Complète
|
## Table of Contents
|
||||||
|
|
||||||
**[Consultez la documentation complète ici](https://docs.espilon.net)**
|
- [Full Documentation](#full-documentation)
|
||||||
|
- [Quick Start](#quick-start)
|
||||||
|
- [Prerequisites](#prerequisites)
|
||||||
|
- [Quick Installation](#quick-installation)
|
||||||
|
- [What is Espilon?](#what-is-espilon)
|
||||||
|
- [Connectivity Modes](#connectivity-modes)
|
||||||
|
- [Architecture](#architecture)
|
||||||
|
- [Key Components](#key-components)
|
||||||
|
- [Available Modules](#available-modules)
|
||||||
|
- [System Module](#system-module-built-in-always-active)
|
||||||
|
- [Network Module](#network-module)
|
||||||
|
- [FakeAP Module](#fakeap-module)
|
||||||
|
- [Recon Module](#recon-module)
|
||||||
|
- [Tools](#tools)
|
||||||
|
- [Multi-Device Flasher](#multi-device-flasher)
|
||||||
|
- [C2 Server (C3PO)](#c2-server-c3po)
|
||||||
|
- [Security](#security)
|
||||||
|
- [Encryption](#encryption)
|
||||||
|
- [Responsible Use](#responsible-use)
|
||||||
|
- [Use Cases](#use-cases)
|
||||||
|
- [Roadmap](#roadmap)
|
||||||
|
- [License](#license)
|
||||||
|
- [Contributors](#contributors)
|
||||||
|
- [Useful Links](#useful-links)
|
||||||
|
- [Support](#support)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Full Documentation
|
||||||
|
|
||||||
|
**[View the full documentation here](https://docs.espilon.net)**
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
La documentation MkDocs inclut :
|
The MkDocs documentation includes:
|
||||||
|
|
||||||
```md
|
```md
|
||||||
- Guide d'installation pas à pas
|
- Step-by-step installation guide
|
||||||
- Traduction EN/FR
|
- Translate EN/FR
|
||||||
- Configuration WiFi et GPRS
|
- WiFi and GPRS configuration
|
||||||
- Référence des modules et commandes
|
- Module and command reference
|
||||||
- Guide du flasher multi-device
|
- Multi-device flasher guide
|
||||||
- Spécification du protocole C2
|
- C2 protocol specification
|
||||||
- Exemples et cas d'usage
|
- Examples and use cases
|
||||||
```
|
```
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Quick Start
|
## Quick Start
|
||||||
|
|
||||||
### Prérequis
|
### Prerequisites
|
||||||
|
|
||||||
- ESP-IDF v5.3.2
|
- ESP-IDF v5.3.2
|
||||||
- Python 3.8+
|
- Python 3.8+
|
||||||
- ESP32 (tout modèle compatible)
|
- ESP32 (any compatible model)
|
||||||
- LilyGO T-Call pour le mode GPRS (optionnel)
|
- LilyGO T-Call for GPRS mode (optional)
|
||||||
|
|
||||||
### Installation Rapide
|
### Quick Installation
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# 1. Installer ESP-IDF v5.3.2
|
# 1. Install ESP-IDF v5.3.2
|
||||||
mkdir -p ~/esp
|
mkdir -p ~/esp
|
||||||
cd ~/esp
|
cd ~/esp
|
||||||
git clone -b v5.3.2 --recursive https://github.com/espressif/esp-idf.git
|
git clone -b v5.3.2 --recursive https://github.com/espressif/esp-idf.git
|
||||||
@ -54,207 +84,182 @@ cd esp-idf
|
|||||||
./install.sh esp32
|
./install.sh esp32
|
||||||
. ./export.sh
|
. ./export.sh
|
||||||
|
|
||||||
# 2. Cloner Espilon
|
# 2. Clone Espilon
|
||||||
cd ~
|
cd ~
|
||||||
git clone https://github.com/Espilon-Net/epsilon-source.git
|
git clone https://github.com/Espilon-Net/epsilon-source.git
|
||||||
cd epsilon/espilon_bot
|
cd Espilon-Net/espilon_bot
|
||||||
|
|
||||||
# 3. Configurer
|
# 3. Configure with menuconfig or tools/flasher/devices.json
|
||||||
idf.py menuconfig
|
idf.py menuconfig
|
||||||
|
|
||||||
# 4. Compiler et flasher
|
# 4. Build and flash
|
||||||
idf.py build
|
idf.py build
|
||||||
idf.py -p /dev/ttyUSB0 flash monitor
|
idf.py -p /dev/ttyUSB0 flash monitor
|
||||||
```
|
```
|
||||||
|
|
||||||
**Configuration minimale** (menuconfig) :
|
**Minimal configuration** (menuconfig):
|
||||||
|
|
||||||
```c
|
```c
|
||||||
Espilon Bot Configuration
|
Espilon Bot Configuration
|
||||||
├─ Device ID: "votre_id_unique"
|
|- Device ID: "your_unique_id"
|
||||||
├─ Network → WiFi
|
|- Network -> WiFi
|
||||||
│ ├─ SSID: "VotreWiFi"
|
| |- SSID: "YourWiFi"
|
||||||
│ └─ Password: "VotreMotDePasse"
|
| |- Password: "YourPassword"
|
||||||
└─ Server
|
|- Server
|
||||||
├─ IP: "192.168.1.100"
|
|- IP: "192.168.1.100"
|
||||||
└─ Port: 2626
|
|- Port: 2626
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Qu'est-ce qu'Espilon ?
|
## What is Espilon?
|
||||||
|
|
||||||
Espilon transforme des microcontrôleurs ESP32 abordables à **~5€** en agents networked puissants pour :
|
Espilon transforms affordable ESP32 microcontrollers (~$5) into powerful networked agents for:
|
||||||
|
|
||||||
- **Recherche en sécurité** : Tests WiFi, reconnaissance réseau, IoT pentesting
|
- **Security research**: WiFi testing, network reconnaissance, IoT pentesting
|
||||||
- **Éducation** : Apprentissage de l'embarqué, protocoles réseau, FreeRTOS
|
- **Education**: Learning embedded systems, network protocols, FreeRTOS
|
||||||
- **Prototypage IoT** : Communication distribuée, monitoring, capteurs
|
- **IoT prototyping**: Distributed communication, monitoring, sensors
|
||||||
|
|
||||||
### Modes de Connectivité
|
### Connectivity Modes
|
||||||
|
|
||||||
| Mode | Hardware | Portée | Use Case |
|
| Mode | Hardware | Range | Use Case |
|
||||||
|------|----------|--------|----------|
|
|------|----------|-------|----------|
|
||||||
| **WiFi** | ESP32 standard | 50-100m | Labs, bâtiments |
|
| **WiFi** | Standard ESP32 | 50-100m | Labs, buildings |
|
||||||
| **GPRS** | LilyGO T-Call | National (2G) | Mobile, remote |
|
| **GPRS** | LilyGO T-Call | National (2G) | Mobile, remote |
|
||||||
|
|
||||||
**General Packet Radio Service** vs **WiFi**
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Architecture
|
## Architecture
|
||||||
|
|
||||||
```md
|
```
|
||||||
┌─────────────────────────────────────────────────────┐
|
+---------------------------------------------------------+
|
||||||
│ ESP32 Agent │
|
| ESP32 Agent |
|
||||||
│ ┌───────────┐ ┌──────────┐ ┌─────────────────┐ │
|
| +-----------+ +----------+ +---------------------+ |
|
||||||
│ │ WiFi/ │→ │ ChaCha20 │→ │ C2 Protocol │ │
|
| | WiFi/ |->| ChaCha20 |->| C2 Protocol | |
|
||||||
│ │ GPRS │← │ Crypto │← │ (nanoPB/TCP) │ │
|
| | GPRS |<-| Crypto |<-| (nanoPB/TCP) | |
|
||||||
│ └───────────┘ └──────────┘ └─────────────────┘ │
|
| +-----------+ +----------+ +---------------------+ |
|
||||||
│ ↓ ↓ ↓ │
|
| | | | |
|
||||||
│ ┌───────────────────────────────────────────────┐ │
|
| +-----------------------------------------------------+|
|
||||||
│ │ Module System (FreeRTOS) │ │
|
| | Module System (FreeRTOS) ||
|
||||||
│ │ [Network] [FakeAP] [Recon] [Custom...] │ │
|
| | [Network] [FakeAP] [Recon] [Custom...] ||
|
||||||
│ └───────────────────────────────────────────────┘ │
|
| +-----------------------------------------------------+|
|
||||||
└─────────────────────────────────────────────────────┘
|
+---------------------------------------------------------+
|
||||||
↕ Encrypted TCP
|
| Encrypted TCP
|
||||||
┌──────────────────────┐
|
+---------------------+
|
||||||
│ C2 Server (C3PO) │
|
| C2 Server (C3PO) |
|
||||||
│ - Device Registry │
|
| - Device Registry |
|
||||||
│ - Group Management │
|
| - Group Management |
|
||||||
│ - CLI Interface │
|
| - CLI Interface |
|
||||||
└──────────────────────┘
|
+---------------------+
|
||||||
```
|
```
|
||||||
|
|
||||||
### Composants Clés
|
### Key Components
|
||||||
|
|
||||||
- **Core** : Connexion réseau, crypto ChaCha20, protocole nanoPB
|
- **Core**: Network connection, ChaCha20 crypto, nanoPB protocol
|
||||||
- **Modules** : Système extensible (Network, FakeAP, Recon, etc.)
|
- **Modules**: Extensible system (Network, FakeAP, Recon, etc.)
|
||||||
- **C2 (C3PO)** : Serveur Python asyncio pour contrôle multi-agents
|
- **C2 (C3PO)**: Python asyncio server for multi-agent control
|
||||||
- **C3PO**: Ancien c2 (serveur web - Trilateration + Front affichage caméra)
|
- **Flasher**: Automated multi-device flashing tool
|
||||||
- **Flasher** : Outil de flash multi-device automatisé
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Modules Disponibles
|
## Available Modules
|
||||||
|
|
||||||
> **Note importante** : Les modules sont **mutuellement exclusifs**. Vous devez choisir **un seul module** lors de la configuration via menuconfig.
|
> **Important note**: Modules are **mutually exclusive**. You must choose **only one module** during configuration via menuconfig.
|
||||||
|
|
||||||
### System Module (Built-in, toujours actif)
|
### System Module (Built-in, always active)
|
||||||
|
|
||||||
Commandes système de base :
|
Basic system commands:
|
||||||
|
|
||||||
- `system_reboot` : Redémarrage de l'ESP32
|
- `system_reboot`: Reboot the ESP32
|
||||||
- `system_mem` : Affichage de l'utilisation mémoire (heap free, heap min, internal free)
|
- `system_mem`: Display memory usage (heap free, heap min, internal free)
|
||||||
- `system_uptime` : Temps de fonctionnement depuis le boot
|
- `system_uptime`: Uptime since boot
|
||||||
|
|
||||||
### Network Module
|
### Network Module
|
||||||
|
|
||||||
Module pour reconnaissance et tests réseau :
|
Module for network reconnaissance and testing:
|
||||||
|
|
||||||
- `ping <host> [args...]` : Test de connectivité ICMP
|
- `ping <host> [args...]`: ICMP connectivity test
|
||||||
- `arp_scan` : Découverte des hôtes sur le réseau local via ARP
|
- `arp_scan`: Discover hosts on local network via ARP
|
||||||
- `proxy_start <ip> <port>` : Démarrer un proxy TCP
|
- `proxy_start <ip> <port>`: Start a TCP proxy
|
||||||
- `proxy_stop` : Arrêter le proxy en cours
|
- `proxy_stop`: Stop the running proxy
|
||||||
- `dos_tcp <ip> <port> <count>` : Test de charge TCP (à usage autorisé uniquement)
|
- `dos_tcp <ip> <port> <count>`: TCP load test (authorized use only)
|
||||||
|
|
||||||
### FakeAP Module
|
### FakeAP Module
|
||||||
|
|
||||||
Module pour création de points d'accès WiFi simulés :
|
Module for creating simulated WiFi access points:
|
||||||
|
|
||||||
- `fakeap_start <ssid> [open|wpa2] [password]` : Démarrer un faux point d'accès
|
- `fakeap_start <ssid> [open|wpa2] [password]`: Start a fake access point
|
||||||
- `fakeap_stop` : Arrêter le faux AP
|
- `fakeap_stop`: Stop the fake AP
|
||||||
- `fakeap_status` : Afficher le statut (AP, portal, sniffer, clients)
|
- `fakeap_status`: Display status (AP, portal, sniffer, clients)
|
||||||
- `fakeap_clients` : Lister les clients connectés
|
- `fakeap_clients`: List connected clients
|
||||||
- `fakeap_portal_start` : Activer le portail captif
|
- `fakeap_portal_start`: Enable captive portal
|
||||||
- `fakeap_portal_stop` : Désactiver le portail captif
|
- `fakeap_portal_stop`: Disable captive portal
|
||||||
- `fakeap_sniffer_on` : Activer la capture de trafic réseau
|
- `fakeap_sniffer_on`: Enable network traffic capture
|
||||||
- `fakeap_sniffer_off` : Désactiver la capture
|
- `fakeap_sniffer_off`: Disable capture
|
||||||
|
|
||||||
### Recon Module
|
### Recon Module
|
||||||
|
|
||||||
Module de reconnaissance et collecte de données. Deux modes disponibles :
|
Reconnaissance and data collection module. Two modes available:
|
||||||
|
|
||||||
#### Mode Camera (ESP32-CAM)
|
#### Camera Mode (ESP32-CAM)
|
||||||
|
|
||||||
- `cam_start <ip> <port>` : Démarrer le streaming vidéo UDP (~7 FPS, QQVGA)
|
- `cam_start <ip> <port>`: Start UDP video streaming (~7 FPS, QQVGA)
|
||||||
- `cam_stop` : Arrêter le streaming
|
- `cam_stop`: Stop streaming
|
||||||
|
|
||||||
#### Mode BLE Trilateration
|
#### BLE Trilateration Mode
|
||||||
|
|
||||||
- `trilat start <mac> <url> <bearer>` : Démarrer la trilatération BLE avec POST HTTP
|
- `trilat start <mac> <url> <bearer>`: Start BLE trilateration with HTTP POST
|
||||||
- `trilat stop` : Arrêter la trilatération
|
- `trilat stop`: Stop trilateration
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
**Configuration** : `idf.py menuconfig` → Espilon Bot Configuration → Modules
|
**Configuration**: `idf.py menuconfig` -> Espilon Bot Configuration -> Modules
|
||||||
|
|
||||||
Choisissez **un seul module** :
|
Choose **only one module**:
|
||||||
|
|
||||||
- `CONFIG_MODULE_NETWORK` : Active le Network Module
|
- `CONFIG_MODULE_NETWORK`: Enable the Network Module
|
||||||
- `CONFIG_MODULE_FAKEAP` : Active le FakeAP Module
|
- `CONFIG_MODULE_FAKEAP`: Enable the FakeAP Module
|
||||||
- `CONFIG_MODULE_RECON` : Active le Recon Module
|
- `CONFIG_MODULE_RECON`: Enable the Recon Module
|
||||||
- Puis choisir : `Camera` ou `BLE Trilateration`
|
- Then choose: `Camera` or `BLE Trilateration`
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Outils
|
## Tools
|
||||||
|
|
||||||
### Multi-Device Flasher
|
### Multi-Device Flasher
|
||||||
|
|
||||||
Flasher automatisé pour configurer plusieurs ESP32 :
|
Automated flasher to configure multiple ESP32s:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
cd tools/flasher
|
cd tools/flasher
|
||||||
python3 flash.py --config devices.json
|
python3 flash.py --config devices.json
|
||||||
```
|
```
|
||||||
|
|
||||||
**devices.json** :
|
**devices.json**:
|
||||||
|
|
||||||
```json
|
```json
|
||||||
{
|
{
|
||||||
"project": "/home/user/epsilon/espilon_bot",
|
"project": "/path/to/espilon_bot",
|
||||||
"devices": [
|
"devices": [
|
||||||
## WiFi AGENT ##
|
|
||||||
{
|
{
|
||||||
"device_id": "ce4f626b",
|
"device_id": "esp001",
|
||||||
"port": "/dev/ttyUSB0",
|
"port": "/dev/ttyUSB0",
|
||||||
"srv_ip": "192.168.1.13",
|
|
||||||
"srv_port": 2626,
|
|
||||||
"network_mode": "wifi",
|
"network_mode": "wifi",
|
||||||
"wifi_ssid": "MyWiFi",
|
"wifi_ssid": "MyNetwork",
|
||||||
"wifi_pass": "MyPassword123",
|
"wifi_pass": "MyPassword",
|
||||||
"hostname": "pixel-8-pro",
|
"srv_ip": "192.168.1.100"
|
||||||
"module_network": true,
|
|
||||||
"module_recon": false,
|
|
||||||
"module_fakeap": false,
|
|
||||||
"recon_camera": false,
|
|
||||||
"recon_ble_trilat": false,
|
|
||||||
"crypto_key": "testde32chars00000000000000000000",
|
|
||||||
"crypto_nonce": "noncenonceno"
|
|
||||||
},
|
|
||||||
|
|
||||||
## GPRS AGENT ##
|
|
||||||
{
|
|
||||||
"device_id": "a91dd021",
|
|
||||||
"port": "/dev/ttyUSB1",
|
|
||||||
"srv_ip": "203.0.113.10",
|
|
||||||
"srv_port": 2626,
|
|
||||||
"network_mode": "gprs",
|
|
||||||
"gprs_apn": "sl2sfr",
|
|
||||||
"hostname": "galaxy-s24-ultra",
|
|
||||||
"module_network": true,
|
|
||||||
"module_recon": false,
|
|
||||||
"module_fakeap": false
|
|
||||||
}
|
}
|
||||||
]
|
]
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
Voir [tools/flasher/README.md](tools/flasher/README.md) pour la documentation complète.
|
See [tools/flasher/README.md](tools/flasher/README.md) for complete documentation.
|
||||||
|
|
||||||
### C2 Server (C3PO)
|
### C2 Server (C3PO)
|
||||||
|
|
||||||
Serveur de Command & Control :
|
Command & Control server:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
cd tools/c2
|
cd tools/c2
|
||||||
@ -262,137 +267,135 @@ pip3 install -r requirements.txt
|
|||||||
python3 c3po.py --port 2626
|
python3 c3po.py --port 2626
|
||||||
```
|
```
|
||||||
|
|
||||||
**Commandes** :
|
**Commands**:
|
||||||
|
|
||||||
- `list` : Lister les agents connectés
|
- `list`: List connected agents
|
||||||
- `select <id>` : Sélectionner un agent
|
- `select <id>`: Select an agent
|
||||||
- `cmd <command>` : Exécuter une commande
|
- `cmd <command>`: Execute a command
|
||||||
- `group` : Gérer les groupes d'agents
|
- `group`: Manage agent groups
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Sécurité
|
## Security
|
||||||
|
|
||||||
### Chiffrement
|
### Encryption
|
||||||
|
|
||||||
- **ChaCha20** pour les communications C2
|
- **ChaCha20** for C2 communications
|
||||||
- **Clés configurables** via menuconfig
|
- **Configurable keys** via menuconfig
|
||||||
- **Protocol Buffers (nanoPB)** pour la sérialisation
|
- **Protocol Buffers (nanoPB)** for serialization
|
||||||
|
|
||||||
⚠️ **CHANGEZ LES CLÉS PAR DÉFAUT** pour un usage en production :
|
**CHANGE DEFAULT KEYS** for production use:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
# Générer des clés aléatoires
|
# Generate random keys
|
||||||
openssl rand -hex 32 # ChaCha20 key (32 bytes)
|
openssl rand -hex 32 # ChaCha20 key (32 bytes)
|
||||||
openssl rand -hex 12 # Nonce (12 bytes)
|
openssl rand -hex 12 # Nonce (12 bytes)
|
||||||
```
|
```
|
||||||
|
|
||||||
### Usage Responsable
|
### Responsible Use
|
||||||
|
|
||||||
Espilon doit être utilisé uniquement pour :
|
Espilon should only be used for:
|
||||||
|
|
||||||
- Tests d'intrusion **autorisés**
|
- **Authorized** penetration testing
|
||||||
- Recherche en sécurité **éthique**
|
- **Ethical** security research
|
||||||
- Éducation et formation
|
- Education and training
|
||||||
- Prototypage IoT légitime
|
- Legitimate IoT prototyping
|
||||||
|
|
||||||
**Interdit** : Accès non autorisé, attaques malveillantes, violation de confidentialité.
|
**Prohibited**: Unauthorized access, malicious attacks, privacy violations.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Cas d'Usage
|
## Use Cases
|
||||||
|
|
||||||
### Pentest WiFi
|
### WiFi Pentesting
|
||||||
|
|
||||||
- Audit de sécurité réseau
|
- Network security auditing
|
||||||
- Test de robustesse WPA2/WPA3
|
- WPA2/WPA3 robustness testing
|
||||||
- Cartographie réseau
|
- Network mapping
|
||||||
|
|
||||||
### IoT Security Research
|
### IoT Security Research
|
||||||
|
|
||||||
- Test de devices IoT
|
- IoT device testing
|
||||||
- Analyse de protocoles
|
- Protocol analysis
|
||||||
- Détection de vulnérabilités
|
- Vulnerability detection
|
||||||
|
|
||||||
### Éducation
|
### Education
|
||||||
|
|
||||||
- Labs de cybersécurité
|
- Cybersecurity labs
|
||||||
- Cours d'embarqué
|
- Embedded systems courses
|
||||||
- CTF competitions
|
- CTF competitions
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Roadmap
|
## Roadmap
|
||||||
|
|
||||||
### V2.0 (En cours)
|
### V2.0 (In Progress)
|
||||||
|
|
||||||
- [ ] Mesh networking (BLE/WiFi)
|
- [ ] Mesh networking (BLE/WiFi)
|
||||||
- [ ] Implémenter Module reccoon dans C3PO
|
- [ ] Improve documentation
|
||||||
- [ ] Améliorer la Documentations [here](https://docs.espilon.net)
|
|
||||||
- [ ] OTA updates
|
- [ ] OTA updates
|
||||||
- [ ] Multilatération collaborative
|
- [ ] Collaborative multilateration
|
||||||
- [ ] Optimisation mémoire
|
- [ ] Memory optimization
|
||||||
|
|
||||||
### Future
|
### Future
|
||||||
|
|
||||||
- [ ] PCB custom Espilon
|
- [ ] Custom Espilon PCB
|
||||||
- [ ] Support ESP32-S3/C3
|
- [ ] ESP32-S3/C3 support
|
||||||
- [ ] Module SDK pour extensions tierces
|
- [ ] Module SDK for third-party extensions
|
||||||
- [ ] Web UI pour C2
|
- [ ] Web UI for C2
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Licence
|
## License
|
||||||
|
|
||||||
Espilon est sous licence **MIT** avec addendum de sécurité.
|
Espilon is licensed under **MIT** with a security addendum.
|
||||||
|
|
||||||
Voir [LICENSE](LICENSE) pour les détails complets.
|
See [LICENSE](LICENSE) for full details.
|
||||||
|
|
||||||
**En résumé** :
|
**In summary**:
|
||||||
|
- Free use for research, education, development
|
||||||
- Utilisation libre pour recherche, éducation, développement
|
- Modification and distribution allowed
|
||||||
- Modification et distribution autorisées
|
- **Obtain authorization** before any deployment
|
||||||
- **Obtenir autorisation** avant tout déploiement
|
- Malicious use strictly prohibited
|
||||||
- Usage malveillant strictement interdit
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Contributeurs
|
## Contributors
|
||||||
|
|
||||||
- **@Eun0us** - Core architecture, modules
|
- **@Eun0us** - Core architecture, modules
|
||||||
- **@off-path** - C2 server, protocol
|
- **@off-path** - C2 server, protocol
|
||||||
- **@itsoktocryyy** - Network features, Wall Hack
|
- **@itsoktocryyy** - Network features, work on Mod Wall Hack
|
||||||
- **@wepfen** - Documentation, tools
|
- **@wepfen** - Documentation, tools
|
||||||
|
|
||||||
### Contribuer
|
### Contributing
|
||||||
|
|
||||||
Contributions bienvenues ! Voir [CONTRIBUTING.md](CONTRIBUTING.md).
|
Contributions welcome! See [CONTRIBUTING.md](CONTRIBUTING.md).
|
||||||
|
|
||||||
**Rejoignez-nous** :
|
**Join us**:
|
||||||
|
|
||||||
- Rapporter des bugs
|
- Report bugs
|
||||||
- Proposer des features
|
- Propose features
|
||||||
- Soumettre des PRs
|
- Submit PRs
|
||||||
- Améliorer la doc
|
- Improve documentation
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Liens Utiles
|
## Useful Links
|
||||||
|
|
||||||
- **[Documentation complète](https://docs.espilon.net)**
|
- **[Full documentation](https://docs.espilon.net)**
|
||||||
- **[ESP-IDF Documentation](https://docs.espressif.com/projects/esp-idf/)**
|
- **[ESP-IDF Documentation](https://docs.espressif.com/projects/esp-idf/)**
|
||||||
- **[LilyGO T-Call](https://github.com/Xinyuan-LilyGO/LilyGO-T-Call-SIM800)**
|
- **[LilyGO T-Call](https://github.com/Xinyuan-LilyGO/LilyGO-T-Call-SIM800)**
|
||||||
- **English README** : [README.en.md](README.en.md)
|
- **French README**: [README.md](README.md)
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## Support
|
## Support
|
||||||
|
|
||||||
- **Issues** : [GitHub Issues](https://github.com/Espilon-Net/Espilon-Source/issues)
|
- **Issues**: [GitHub Issues](https://github.com/Espilon-Net/Espilon-Source/issues)
|
||||||
- **Discussions** : [GitHub Discussions](https://github.com/Espilon-Net/Espilon-Source/discussions)
|
- **Discussions**: [GitHub Discussions](https://github.com/Espilon-Net/Espilon-Source/discussions)
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
**Présenté initialement à Le Hack (Juin 2025)**
|
**Originally presented at Le Hack (June 2025)**
|
||||||
|
|
||||||
**Made with love for security research and education**
|
**Made with love for security research and education**
|
||||||
|
|||||||
@ -1,16 +0,0 @@
|
|||||||
CONFIG_ID="f34592e0"
|
|
||||||
CONFIG_WIFI_SSID="Livebox-CC80"
|
|
||||||
CONFIG_WIFI_PASS="PqKXRmcprmeWChcfQD"
|
|
||||||
CONFIG_SERVER_IP="192.168.1.13"
|
|
||||||
CONFIG_SERVER_PORT=2626
|
|
||||||
CONFIG_MBEDTLS_CHACHA20_C=y
|
|
||||||
CONFIG_LWIP_IPV4_NAPT=y
|
|
||||||
CONFIG_LWIP_IPV4_NAPT_PORTMAP=y
|
|
||||||
CONFIG_LWIP_IP_FORWARD=y
|
|
||||||
CONFIG_LWIP_LOCAL_HOSTNAME="pixel-8-pro"
|
|
||||||
CONFIG_ENABLE_CAMERA=n
|
|
||||||
|
|
||||||
# Bluetooth configuration
|
|
||||||
CONFIG_BT_ENABLED=y
|
|
||||||
CONFIG_BT_BLUEDROID_ENABLED=y
|
|
||||||
CONFIG_BT_BLE_ENABLED=y
|
|
||||||
Loading…
Reference in New Issue
Block a user