@miraj181/ipingyou 2.0.8 → 2.0.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.0.8",
+  "version": "2.0.10",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {

package/src/modes/client.js

@@ -187,7 +187,7 @@ async function connectSSH(username, hostname, privateKeyPath) {
     }
 
     sshArgs.push(`${username}@${hostname}`);
-    sshArgs.push('-t', 'tmux new-session -A -s SecureLink_Session || exec $SHELL');
+    sshArgs.push('-t', 'tmux new-session -A -s SecureLink_Session 2>/dev/null || exec $SHELL -l');
 
     const child = execa('ssh', sshArgs, {
       stdio: 'inherit',

package/src/modes/host.js

@@ -18,6 +18,8 @@ import chalk from 'chalk';
 import inquirer from 'inquirer';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import fs from 'node:fs';
+import os from 'node:os';
 import { generateUID } from '../lib/uid.js';
 import { encrypt, decrypt } from '../lib/crypto.js';
 import { trackPID, untrackPID, setRevokeOnExit, addCleanupHook } from '../lib/cleanup.js';
@@ -85,6 +87,50 @@ async function ensureSSHRunning() {
   }
 }
 
+/**
+ * Ensure tmux is installed for terminal mirroring.
+ */
+async function ensureTmuxInstalled() {
+  const osInfo = detectOS();
+  if (osInfo.isWindows) return;
+
+  const spinner = createSpinner('Checking tmux installation...', networkSpinner).start();
+  try {
+    try {
+      await execaCommand('tmux -V', { reject: true });
+      spinner.succeed('tmux is installed (Terminal Mirroring available)');
+    } catch {
+      spinner.text = 'tmux not found. Attempting to install...';
+      if (osInfo.isLinux) {
+        if (fs.existsSync('/usr/bin/apt') || fs.existsSync('/usr/bin/apt-get')) {
+          await execaCommand('sudo apt-get update && sudo apt-get install -y tmux', { shell: true, stdio: 'inherit' });
+        } else if (fs.existsSync('/usr/bin/dnf')) {
+          await execaCommand('sudo dnf install -y tmux', { shell: true, stdio: 'inherit' });
+        } else if (fs.existsSync('/usr/bin/yum')) {
+          await execaCommand('sudo yum install -y tmux', { shell: true, stdio: 'inherit' });
+        } else if (fs.existsSync('/usr/bin/pacman')) {
+          await execaCommand('sudo pacman -S --noconfirm tmux', { shell: true, stdio: 'inherit' });
+        } else if (fs.existsSync('/sbin/apk')) {
+          await execaCommand('sudo apk add tmux', { shell: true, stdio: 'inherit' });
+        } else {
+          throw new Error('Unsupported Linux package manager');
+        }
+        spinner.succeed('tmux installed successfully (Terminal Mirroring available)');
+      } else if (osInfo.isMac) {
+        try {
+          await execaCommand('brew install tmux', { shell: true, stdio: 'inherit' });
+          spinner.succeed('tmux installed successfully (Terminal Mirroring available)');
+        } catch {
+          throw new Error('Homebrew is required to install tmux on macOS');
+        }
+      }
+    }
+  } catch (err) {
+    spinner.fail(`tmux check/install failed: ${err.message}`);
+    console.log(chalk.dim('  Terminal Mirroring feature will not be available.'));
+  }
+}
+
 /**
  * Supervise cloudflared tunnel, restarting it if it crashes.
  */
@@ -565,6 +611,7 @@ export async function startHostMode() {
 
   if (serviceType === 'ssh') {
     await ensureSSHRunning();
+    await ensureTmuxInstalled();
     console.log(chalk.dim('  🔑 Generating ephemeral SSH key for passwordless entry...'));
     try {
       const ephemeralKey = await generateEphemeralKey();

package/src/server.js

@@ -79,8 +79,11 @@ function recordViolation(req) {
   }
 }
 
-// ─── In-memory store — auto-expire after TTL ─────────────────
+// ─── Constants & Limits ──────────────────────────────────────
 const TTL_MS = 60 * 60 * 1000; // 1 hour
+const MAX_UIDS = 50000;        // Max concurrent tunnels (prevent memory leak)
+const MAX_VIOLATIONS = 50000;  // Max tracked malicious IPs before reset
+
 const store = new Map(); // uid → { iv, ciphertext, salt, createdAt, clients: [] }
 
 function pruneExpired() {
@@ -91,6 +94,10 @@ function pruneExpired() {
       console.log(`🗑️  Expired UID: ${uid}`);
     }
   }
+
+  // Strict check to prevent malicious OOM overflow
+  if (ipViolations.size > MAX_VIOLATIONS) ipViolations.clear();
+  if (blacklistedIPs.size > MAX_VIOLATIONS) blacklistedIPs.clear();
 }
 
 // Run pruning every 5 minutes
@@ -136,6 +143,11 @@ app.post('/register', strictLimiter, (req, res) => {
       return res.status(400).json({ error: 'Invalid ciphertext' });
     }
 
+    // Prevent broker OOM
+    if (store.size >= MAX_UIDS && !store.has(uid)) {
+      return res.status(503).json({ error: 'Broker is at maximum capacity. Please try again later.' });
+    }
+
     // Store the encrypted blob as-is — broker NEVER decrypts
     store.set(uid, {
       iv,