@miraj181/ipingyou 2.1.15 → 2.1.18

package/README.md

@@ -20,7 +20,7 @@ No firewalls to configure. No port forwarding. No plaintext leakage.
 * 📺 **Terminal Mirroring**: Wrap client SSH sessions in a multiplexed `tmux` terminal. The Host can spectate connected clients in real-time right from the dashboard to audit or assist.
 * 🔄 **Reverse Port Forwarding (`ssh -R`)**: Clients can expose their *local* `localhost` development ports back to the Host through the secure tunnel.
 * 📡 **Hardware Telemetry Verification**: Clients silently generate hardware footprint reports (OS, RAM, CPU, IP), encrypt them locally with the session password, and send them to the Host for authorization.
-* 🚨 **Panic Kill-Switch**: Type `ipingyou panic` to instantly vaporize all associated keys, wipe all alias configs, and send a `SIGKILL` to every active tunnel and SSH shell.
+* 🚨 **Scoped Emergency Stop**: Type `ipingyou panic` and confirm locally to stop only processes and temporary credentials owned by the current iPingYou session.
 * 👻 **Daemonization**: Run `ipingyou service install` to quietly install and run the Host listener in the background (survives system reboots using PM2).
 * 🧭 **Approval Gate**: Require the Host to explicitly approve clients before they receive tunnel/key material.
 * 📦 **One-Time File Share**: Serve a single file/folder over SCP and revoke after use.
@@ -48,12 +48,17 @@ npx @miraj181/ipingyou connect
 
 ### Global Install
 ```bash
-npm install -g @miraj181/ipingyou
+# Install Socket Firewall once, then scan iPingYou before installation
+npm install -g sfw
+sfw npm install -g @miraj181/ipingyou
 
 # Execute globally using aliases:
 ipingyou
 # or
 securelink
+
+# Verify future in-app npm installs are firewall-protected
+ipingyou security-status
 ```
 
 ---
@@ -102,7 +107,7 @@ sequenceDiagram
 
 ## 🛡️ Security Scanner Disclaimer
 
-Because **iPingYou** is a powerful remote administration tool with features like background daemonization (via PM2), secure shell execution (`execa`), and anti-forensics capabilities (`panic` mode), automated security scanners (such as Socket.dev or enterprise EDRs) may flag this package as a **potential risk** or **malware-like**. 
+Because **iPingYou** is a remote-access tool with background daemonization and SSH process management, automated security scanners may classify it as security-sensitive. Native dependencies are never downloaded or installed automatically, and emergency cleanup is limited to resources registered by the current process.
 
 These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Network access") are **expected behavior** for a peer-to-peer tunneling utility. The source code is entirely open-source, heavily documented, and uses zero-knowledge encryption to ensure your data is safe.
 
@@ -128,7 +133,7 @@ These alerts (e.g., "AI-detected potential code anomaly", "Shell access", "Netwo
 | `ipingyou connect -u <UID>` | Connect directly to a specific UID. |
 | `ipingyou ai` | Groq-powered task assistant with guarded local/remote tools. |
 | `ipingyou doctor` | Diagnostics for dependencies, SSH, broker, SCP, AI, and tests. |
-| `ipingyou panic` | 🚨 Self-destruct mode. Wipes configs, memory, and kills all processes. |
+| `ipingyou panic` | 🚨 Confirmed emergency stop for the current iPingYou session only. |
 | `ipingyou service install` | 👻 Installs Host mode as an always-on background daemon. |
 | `ipingyou service stop` | Stops and removes the background daemon. |
 | `ipingyou service status` | Shows background daemon status. |

package/SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Supported Versions
+
+Use this section to tell people about which versions of your project are
+currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.1.x   | :white_check_mark: |
+| 5.0.x   | :x:                |
+| 4.0.x   | :white_check_mark: |
+| < 4.0   | :x:                |
+
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miraj181/ipingyou",
-  "version": "2.1.15",
+  "version": "2.1.18",
   "description": "SecureLink-CLI — Secure peer-to-peer remote access via SSH & Cloudflare Tunnels",
   "main": "src/cli.js",
   "bin": {
@@ -13,12 +13,13 @@
     "src/lib/",
     "src/modes/",
     "README.md",
+    "SECURITY.md",
     "LICENSE"
   ],
   "scripts": {
     "start": "node src/server.js",
     "dev:cli": "node src/cli.js",
-    "test": "node test/test_ai_helpers.js",
+    "test": "node test/test_ai_helpers.js && node test/test_security_static.js && node test/test_e2e_crypto.js",
     "prepublishOnly": "node -e \"require('fs').accessSync('LICENSE')\" && node src/cli.js --help"
   },
   "keywords": [
@@ -44,25 +45,21 @@
     "url": "https://github.com/skmirajulislam/ipingyou/issues"
   },
   "dependencies": {
-    "chalk": "^5.3.0",
-    "commander": "^15.0.0",
-    "express": "^4.21.2",
-    "express-rate-limit": "^7.5.0",
-    "execa": "^9.5.2",
-    "helmet": "^8.0.0",
-    "inquirer": "^12.11.1",
-    "nanoid": "^5.0.9",
-    "open": "^11.0.0",
-    "ora": "^9.4.0",
-    "shell-quote": "^1.8.4",
-    "tree-kill": "^1.2.2",
-    "ws": "^8.20.1"
+    "chalk": "5.6.2",
+    "commander": "15.0.0",
+    "express": "4.22.2",
+    "express-rate-limit": "7.5.1",
+    "execa": "9.6.1",
+    "helmet": "8.2.0",
+    "inquirer": "12.11.1",
+    "ora": "9.4.1",
+    "ws": "8.21.0"
   },
   "devDependencies": {
     "nodemon": "^3.1.4"
   },
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.12.0"
   },
   "type": "module"
 }

package/src/cli.js

@@ -29,6 +29,7 @@ import { fileURLToPath } from 'node:url';
 import { detectOS, checkDependencies } from './lib/platform.js';
 import { cleanupAll, installShutdownHandlers, executePanicMode } from './lib/cleanup.js';
 import { cleanupSessionLog } from './lib/session-log.js';
+import { getSocketFirewallStatus, runProtectedNpmInstall } from './lib/socket-firewall.js';
 import { startHostMode } from './modes/host.js';
 import { startClientMode } from './modes/client.js';
 import { startAIMode } from './modes/ai.js';
@@ -330,10 +331,19 @@ program
 
 program
   .command('panic')
-  .description('🚨 Self-destruct mode: wipe all configs, kill tunnels, and remove traces')
+  .description('🚨 Stop resources owned by the current iPingYou session')
   .action(async () => {
     try {
       showBanner();
+      const { confirmation } = await inquirer.prompt([{
+        type: 'input',
+        name: 'confirmation',
+        message: 'Type STOP CURRENT SESSION to confirm:',
+      }]);
+      if (confirmation !== 'STOP CURRENT SESSION') {
+        console.log(chalk.yellow('  Emergency shutdown cancelled.'));
+        return;
+      }
       await executePanicMode();
     } catch (err) {
       fatal('panic', err);
@@ -352,8 +362,8 @@ program
       const { execa } = await import('execa');
       
       if (action === 'install') {
-        console.log(chalk.dim('  Installing PM2 globally and starting host...'));
-        await execa('npm', ['install', '-g', 'pm2'], { stdio: 'inherit' });
+        console.log(chalk.dim('  Scanning and installing PM2 through Socket Firewall...'));
+        await runProtectedNpmInstall(['-g', 'pm2'], { stdio: 'inherit' });
         await execa('pm2', ['start', 'ipingyou', '--name', 'ipingyou-host', '--', 'host'], { stdio: 'inherit' });
         await execa('pm2', ['save'], { stdio: 'inherit' });
         await execa('pm2', ['startup'], { stdio: 'inherit' });
@@ -373,6 +383,26 @@ program
     }
   });
 
+program
+  .command('security-status')
+  .description('Check Socket Firewall protection for future npm installations')
+  .action(async () => {
+    try {
+      showBanner();
+      const status = await getSocketFirewallStatus();
+      if (!status.available) {
+        console.log(chalk.yellow('  ⚠️  Socket Firewall is not available.'));
+        console.log(chalk.dim('     Install it with: npm install -g sfw'));
+        process.exitCode = 1;
+        return;
+      }
+      console.log(chalk.green(`  ✅ Socket Firewall active${status.version ? ` (${status.version})` : ''}`));
+      console.log(chalk.dim('     In-app npm installations are routed through: sfw npm install'));
+    } catch (err) {
+      fatal('security-status', err);
+    }
+  });
+
 program
   .command('allowlist')
   .description('Manage AI command allowlist — add, remove, or list safe regex patterns')

package/src/lib/ai/safety.js

@@ -1,3 +1,5 @@
+import { getAllowlistRegexes } from '../allowlist.js';
+
 const SECRET_PATTERNS = [
   /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
   /\b(gsk_[A-Za-z0-9_-]{20,})\b/g,
@@ -20,6 +22,31 @@ const BLOCKED_PATH_PATTERNS = [
   /id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/,
 ];
 
+const BLOCKED_PATH_SEGMENTS = new Set([
+  '.ssh',
+  '.gnupg',
+  '.aws',
+  '.ipingyou',
+  '.kube',
+  '.docker',
+]);
+
+const BLOCKED_PATH_BASENAMES = new Set([
+  '.npmrc',
+  '.netrc',
+  '.pypirc',
+  'credentials',
+  'credentials.json',
+  'known_hosts',
+  'authorized_keys',
+  'shadow',
+  'sudoers',
+]);
+
+const PRIVATE_KEY_BASENAME = /^id_(rsa|dsa|ecdsa|ed25519)(\.pub)?$/i;
+const ENV_BASENAME = /^\.env(?:\.|$)/i;
+const CONTROL_CHARACTERS = /[\u0000-\u001f\u007f]/;
+
 const BLOCKED_COMMAND_PATTERNS = [
   /^\s*(env|printenv|set)\b/,
   /\b(export|declare)\s+-p\b/,
@@ -41,8 +68,7 @@ const DANGEROUS_COMMAND_PATTERNS = [
   /\b(curl|wget)\b/,
   />|>>|\btee\b/,
 ];
-
-import { getAllowlistRegexes } from '../allowlist.js';
+const SHELL_SYNTAX_PATTERN = /(?:[;&|`$()]|\\\r?\n)/;
 
 const READ_ONLY_COMMAND_PATTERNS = [
   /^\s*(pwd|ls|find|rg|grep|sed|cat|head|tail|wc|git status|git diff|git log|git show|node --version|npm --version|which|date|uname)\b/,
@@ -66,6 +92,33 @@ export function commandTouchesBlockedPath(command) {
   return BLOCKED_PATH_PATTERNS.some(pattern => pattern.test(command));
 }
 
+export function assertSafeReadablePath(filePath) {
+  const value = String(filePath ?? '');
+  if (!value || value.length > 4096) {
+    throw new Error('Invalid file path');
+  }
+  if (CONTROL_CHARACTERS.test(value)) {
+    throw new Error('File path contains control characters');
+  }
+
+  const normalized = value.replace(/\\/g, '/').replace(/\/+/g, '/');
+  const segments = normalized.toLowerCase().split('/').filter(Boolean);
+  const basename = segments.at(-1) || '';
+
+  if (
+    segments.some(segment => BLOCKED_PATH_SEGMENTS.has(segment))
+    || BLOCKED_PATH_BASENAMES.has(basename)
+    || PRIVATE_KEY_BASENAME.test(basename)
+    || ENV_BASENAME.test(basename)
+    || normalized.toLowerCase().includes('/.config/gh/')
+    || normalized.toLowerCase().includes('/proc/') && basename === 'environ'
+  ) {
+    throw new Error('Path references a protected secret/config location');
+  }
+
+  return value;
+}
+
 export function classifyCommand(command) {
   const text = String(command || '').trim();
   if (!text) return { blocked: true, needsApproval: true, reason: 'Empty command' };
@@ -78,16 +131,6 @@ export function classifyCommand(command) {
     };
   }
 
-  // Check user-provided allowlist first (if present)
-  try {
-    const userPatterns = getAllowlistRegexes();
-    if (Array.isArray(userPatterns) && userPatterns.some(p => p.test(text))) {
-      return { blocked: false, needsApproval: false, reason: 'Matched user allowlist' };
-    }
-  } catch {
-    // ignore allowlist errors and fall back to defaults
-  }
-
   if (BLOCKED_COMMAND_PATTERNS.some(pattern => pattern.test(text))) {
     return {
       blocked: true,
@@ -100,6 +143,20 @@ export function classifyCommand(command) {
     return { blocked: false, needsApproval: true, reason: 'Command may modify files, install packages, or access the network' };
   }
 
+  if (SHELL_SYNTAX_PATTERN.test(text)) {
+    return { blocked: false, needsApproval: true, reason: 'Command uses shell syntax and requires explicit approval' };
+  }
+
+  // User allowlists may suppress prompts only after non-bypassable safety checks.
+  try {
+    const userPatterns = getAllowlistRegexes();
+    if (Array.isArray(userPatterns) && userPatterns.some(pattern => pattern.test(text))) {
+      return { blocked: false, needsApproval: false, reason: 'Matched user allowlist' };
+    }
+  } catch {
+    // Ignore allowlist errors and fall back to defaults.
+  }
+
   if (READ_ONLY_COMMAND_PATTERNS.some(pattern => pattern.test(text))) {
     return { blocked: false, needsApproval: false, reason: 'Read-only command' };
   }

package/src/lib/chat.js

@@ -1,6 +1,6 @@
 import http from 'node:http';
 import { WebSocketServer } from 'ws';
-import open from 'open';
+import { openUrl } from './open-url.js';
 import chalk from 'chalk';
 import { secureSensitiveUrl } from './secure-print.js';
 
@@ -97,9 +97,17 @@ const HTML_CONTENT = `
     let username = isHost ? 'Host' : prompt('Enter your name for the chat:', 'Client_' + Math.floor(Math.random()*1000));
     if (!username) username = 'Anonymous';
 
+    function showBodyMessage(text, color) {
+      const message = document.createElement('h2');
+      message.style.cssText = 'text-align:center;margin-top:20vh';
+      if (color) message.style.color = color;
+      message.textContent = text;
+      document.body.replaceChildren(message);
+    }
+
     const sessionPassword = window.location.hash.substring(1);
     if (!sessionPassword) {
-      document.body.innerHTML = '<h2 style="text-align:center; margin-top:20vh; color:red;">Fatal: Missing session password in URL hash. Cannot decrypt E2E chat.</h2>';
+      showBodyMessage('Fatal: Missing session password in URL hash. Cannot decrypt E2E chat.', 'red');
       throw new Error("Missing password");
     }
 
@@ -181,7 +189,7 @@ const HTML_CONTENT = `
     }
 
     function updateUsers(users) {
-      usersList.innerHTML = '';
+      usersList.replaceChildren();
       users.forEach(u => {
         const li = document.createElement('li');
         li.className = 'user-item';
@@ -252,7 +260,7 @@ const HTML_CONTENT = `
       } else {
         ws.close();
         window.close();
-        document.body.innerHTML = '<h2 style="text-align:center; margin-top:20vh;">You have left the chat. You can close this tab.</h2>';
+        showBodyMessage('You have left the chat. You can close this tab.');
       }
     };
   </script>
@@ -327,7 +335,7 @@ export async function startChatServer(onClose) {
 export async function openLocalChatUI(port, password) {
   try {
     const chatUrl = `http://localhost:${port}#${password}`;
-    await open(chatUrl);
+    await openUrl(chatUrl);
   } catch {
     console.log(chalk.dim(`     Unable to auto-open browser. Visit ${secureSensitiveUrl(`http://localhost:${port}`, password)}`));
   }

package/src/lib/cleanup.js

@@ -3,18 +3,13 @@
  *  Graceful Cleanup & Process Killer
  * ============================================================
  *  Tracks all spawned child processes (cloudflared, ssh, etc.)
- *  and kills them on SIGINT/exit using tree-kill to ensure
+ *  and kills them on SIGINT/exit to ensure
  *  no orphan processes linger.
  * ============================================================
  */
 
-import treeKill from 'tree-kill';
 import chalk from 'chalk';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
 import { execa } from 'execa';
-import { TMUX_SESSION_NAME, TMUX_SESSION_PREFIX, tmuxSocketArgs } from './tmux.js';
 
 /** @type {Set<number>} — Active child PIDs we manage */
 const trackedPIDs = new Set();
@@ -74,15 +69,61 @@ export function setRevokeOnExit(uid, brokerUrl, getHostToken = null) {
  * @returns {Promise<void>}
  */
 export function killProcessTree(pid, signal = 'SIGTERM') {
-  return new Promise((resolve) => {
-    treeKill(pid, signal, (err) => {
-      if (err) {
-        treeKill(pid, 'SIGKILL', () => resolve());
-      } else {
-        resolve();
-      }
+  return killProcessTreeSafely(pid, signal);
+}
+
+async function killProcessTreeSafely(pid, signal) {
+  const rootPid = Number.parseInt(pid, 10);
+  if (!Number.isSafeInteger(rootPid) || rootPid <= 0 || rootPid === process.pid) {
+    throw new Error('Invalid child process PID');
+  }
+
+  if (process.platform === 'win32') {
+    await execa('taskkill', ['/PID', String(rootPid), '/T', '/F'], {
+      reject: false,
+      timeout: 5000,
+      maxBuffer: 64 * 1024,
     });
-  });
+    return;
+  }
+
+  const descendants = [];
+  const visited = new Set([rootPid]);
+  const pending = [rootPid];
+  while (pending.length > 0 && visited.size <= 1024) {
+    const parentPid = pending.pop();
+    const result = await execa('pgrep', ['-P', String(parentPid)], {
+      reject: false,
+      timeout: 2000,
+      maxBuffer: 64 * 1024,
+    }).catch(() => ({ stdout: '' }));
+    for (const value of String(result.stdout || '').split(/\s+/)) {
+      const childPid = Number.parseInt(value, 10);
+      if (!Number.isSafeInteger(childPid) || childPid <= 0 || visited.has(childPid)) continue;
+      visited.add(childPid);
+      descendants.push(childPid);
+      pending.push(childPid);
+    }
+  }
+
+  const targets = [...descendants.reverse(), rootPid];
+  for (const targetPid of targets) {
+    try {
+      process.kill(targetPid, signal);
+    } catch (err) {
+      if (err.code !== 'ESRCH') throw err;
+    }
+  }
+
+  await new Promise(resolve => setTimeout(resolve, 300));
+  for (const targetPid of targets) {
+    try {
+      process.kill(targetPid, 0);
+      process.kill(targetPid, 'SIGKILL');
+    } catch (err) {
+      if (err.code !== 'ESRCH') throw err;
+    }
+  }
 }
 
 /**
@@ -174,85 +215,11 @@ export function installShutdownHandlers() {
 }
 
 /**
- * Get count of tracked PIDs.
- * @returns {number}
- */
-/**
- * Execute Panic Mode (Self-Destruct)
- * Wipes all configs, keys, and forcefully kills associated processes.
+ * Execute a scoped emergency shutdown.
+ * Only resources registered by this process are touched.
  */
 export async function executePanicMode() {
-  console.log(chalk.bold.red('\n  🚨 INITIATING SECURELINK PANIC MODE 🚨\n'));
-  
-  // 1. Force kill all cloudflared & ipingyou processes
-  console.log(chalk.dim('  [1/4] Terminating all tunnel and host processes...'));
-  try {
-    if (process.platform === 'win32') {
-      // taskkill expects a command string on Windows; pass args safely
-      await execa('taskkill', ['/F', '/IM', 'cloudflared.exe'], { reject: false });
-    } else {
-      // Use argument arrays to avoid shell interpolation
-      await execa('pkill', ['-9', '-f', 'cloudflared'], { reject: false });
-      await execa('pkill', ['-9', '-f', 'sshd:.*@'], { reject: false });
-
-      const socketArgs = Array.isArray(tmuxSocketArgs) ? tmuxSocketArgs() : [];
-      // Ensure socketArgs are strings and safe-ish before passing to execa
-      const safeSocketArgs = (socketArgs || []).map(a => String(a));
-      await execa('tmux', [...safeSocketArgs, 'kill-server'], { reject: false });
-
-      const { stdout } = await execa('tmux', ['list-sessions', '-F', '#{session_name}'], { reject: false });
-      const legacyNames = stdout
-        .split(/\r?\n/)
-        .filter(Boolean)
-        .filter(name => name === TMUX_SESSION_NAME || name.startsWith(TMUX_SESSION_PREFIX));
-      for (const name of legacyNames) {
-        await execa('tmux', ['kill-session', '-t', name], { reject: false });
-      }
-    }
-  } catch (err) {
-    // Best-effort cleanup; log debug info without exposing stack in normal flow
-    // (keep behavior unchanged otherwise)
-  }
-
-  // 2. Delete configuration and aliases
-  console.log(chalk.dim('  [2/4] Wiping configuration files...'));
-  const configPath = path.join(os.homedir(), '.ipingyou', 'config.json');
-  try {
-    if (fs.existsSync(configPath)) {
-      fs.unlinkSync(configPath);
-    }
-    const configDir = path.join(os.homedir(), '.ipingyou');
-    if (fs.existsSync(configDir)) {
-      fs.rmSync(configDir, { recursive: true, force: true });
-    }
-  } catch {}
-
-  // 3. Delete ephemeral keys and temp files
-  console.log(chalk.dim('  [3/4] Purging ephemeral keys and temporary files...'));
-  try {
-    const tmpDir = os.tmpdir();
-    const files = fs.readdirSync(tmpDir);
-    for (const file of files) {
-      if (file.startsWith('ipingyou_') || file.startsWith('ipingyou-')) {
-        fs.unlinkSync(path.join(tmpDir, file));
-      }
-    }
-  } catch {}
-
-  console.log(chalk.dim('  [4/4] Scrubbing injected SSH keys...'));
-  try {
-    const authKeysPath = path.join(os.homedir(), '.ssh', 'authorized_keys');
-    if (fs.existsSync(authKeysPath)) {
-      const current = fs.readFileSync(authKeysPath, 'utf8');
-      const cleaned = current
-        .split(/\r?\n/)
-        .filter(line => !line.includes('ipingyou-ephemeral'))
-        .join('\n')
-        .replace(/\n{3,}/g, '\n\n');
-      if (cleaned !== current) fs.writeFileSync(authKeysPath, cleaned);
-    }
-  } catch {}
-
-  console.log(chalk.bold.green('\n  ✅ Panic Mode Complete. All traces removed.\n'));
-  process.exit(0);
+  console.log(chalk.bold.red('\n  🚨 INITIATING SCOPED EMERGENCY SHUTDOWN 🚨\n'));
+  await cleanupAll();
+  console.log(chalk.bold.green('  ✅ Current iPingYou session stopped safely.\n'));
 }

package/src/lib/open-url.js

@@ -0,0 +1,28 @@
+import { execa } from 'execa';
+
+export async function openUrl(value) {
+  let url;
+  try {
+    url = new URL(String(value));
+  } catch {
+    throw new Error('Cannot open an invalid URL');
+  }
+  if (!['http:', 'https:'].includes(url.protocol) || url.href.length > 4096) {
+    throw new Error('Only HTTP(S) URLs can be opened');
+  }
+
+  const [command, args] = process.platform === 'darwin'
+    ? ['open', [url.href]]
+    : process.platform === 'win32'
+      ? ['explorer.exe', [url.href]]
+      : ['xdg-open', [url.href]];
+
+  const result = await execa(command, args, {
+    reject: false,
+    stdio: 'ignore',
+    timeout: 10000,
+  });
+  if (result.failed && result.exitCode !== 0) {
+    throw new Error(`Could not open URL with ${command}`);
+  }
+}