@profullstack/threatcrush 0.1.1 โ†’ 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +112 -23
  2. package/package.json +2 -2
package/README.md CHANGED
@@ -1,8 +1,45 @@
1
- # @profullstack/threatcrush
1
+ <p align="center">
2
+ <img src="https://img.shields.io/npm/v/@profullstack/threatcrush?color=00ff41&style=flat-square&label=version" alt="npm version" />
3
+ <img src="https://img.shields.io/npm/dm/@profullstack/threatcrush?color=00ff41&style=flat-square&label=downloads" alt="downloads" />
4
+ <img src="https://img.shields.io/github/license/profullstack/threatcrush?color=00ff41&style=flat-square" alt="license" />
5
+ <img src="https://img.shields.io/node/v/@profullstack/threatcrush?color=00ff41&style=flat-square" alt="node" />
6
+ <img src="https://img.shields.io/github/stars/profullstack/threatcrush?color=00ff41&style=flat-square" alt="stars" />
7
+ <img src="https://img.shields.io/badge/platform-linux-00ff41?style=flat-square" alt="platform" />
8
+ <img src="https://img.shields.io/badge/security-agent-00ff41?style=flat-square" alt="security agent" />
9
+ </p>
10
+
11
+ <h1 align="center">
12
+ <br>
13
+ ๐Ÿ›ก๏ธ ThreatCrush
14
+ <br>
15
+ </h1>
16
+
17
+ <h4 align="center">All-in-one security agent โ€” monitor, detect, scan, and protect servers in real-time.</h4>
18
+
19
+ <p align="center">
20
+ <a href="https://threatcrush.com">Website</a> โ€ข
21
+ <a href="#install">Install</a> โ€ข
22
+ <a href="#usage">Usage</a> โ€ข
23
+ <a href="#features">Features</a> โ€ข
24
+ <a href="#modules">Modules</a> โ€ข
25
+ <a href="https://github.com/profullstack/threatcrush">GitHub</a>
26
+ </p>
27
+
28
+ ---
29
+
30
+ ThreatCrush is a security daemon that runs on your server, monitoring **every connection on every port**. It detects live attacks, scans your codebase, pentests your APIs, and alerts you in real-time.
2
31
 
3
- > All-in-one security agent โ€” monitor, detect, scan, and protect servers in real-time.
4
-
5
- ThreatCrush is a security daemon that runs on your server, monitoring every connection on every port. It detects live attacks, scans your codebase, pentests your APIs, and alerts you in real-time.
32
+ ```
33
+ $ threatcrush monitor
34
+
35
+ [12:03:41] โœ“ Monitoring all ports ยท nginx ยท sshd ยท postgres
36
+ [12:03:42] โœ“ Loaded 1,247 attack signatures
37
+ [12:03:45] โš  SQLi attempt โ€” :443 185.43.21.8 โ†’ /api/users?id=1 OR 1=1
38
+ [12:03:47] โœ— SSH brute force โ€” :22 91.232.105.3 โ†’ 47 failed attempts
39
+ [12:03:50] โš  Port scan โ€” 45.33.32.156 scanning :21-:8080 (SYN flood)
40
+ [12:03:52] โš  DNS tunneling โ€” :53 suspicious TXT queries from 103.44.8.2
41
+ [12:04:01] โœ“ 3,891 connections analyzed ยท 4 threats ยท 1 blocked
42
+ ```
6
43
 
7
44
  ## Install
8
45
 
@@ -10,48 +47,100 @@ ThreatCrush is a security daemon that runs on your server, monitoring every conn
10
47
  npm i -g @profullstack/threatcrush
11
48
  ```
12
49
 
50
+ Or with your preferred package manager:
51
+
52
+ ```bash
53
+ pnpm add -g @profullstack/threatcrush
54
+ yarn global add @profullstack/threatcrush
55
+ ```
56
+
13
57
  ## Usage
14
58
 
15
59
  ```bash
16
60
  threatcrush # Get started
17
- threatcrush monitor # Real-time security monitoring
61
+ threatcrush monitor # Real-time security monitoring (all ports)
18
62
  threatcrush tui # Interactive dashboard (htop for security)
19
- threatcrush scan ./src # Scan code for vulnerabilities
20
- threatcrush pentest URL # Penetration test a URL
63
+ threatcrush scan ./src # Scan code for vulnerabilities & secrets
64
+ threatcrush pentest URL # Penetration test a URL/API
21
65
  threatcrush init # Auto-detect services, generate config
66
+ threatcrush status # Show daemon status & loaded modules
22
67
  threatcrush modules # Manage security modules
23
68
  threatcrush store # Browse the module marketplace
69
+ threatcrush update # Update CLI & all modules
24
70
  ```
25
71
 
26
- ## What It Does
72
+ ## Features
27
73
 
28
- - **Live Attack Detection** โ€” Monitors all inbound connections on every port. Detects SQLi, XSS, brute force, SSH attacks, port scans, DNS tunneling.
29
- - **Code Security Scanner** โ€” Scan your codebase for vulnerabilities, secrets, and misconfigurations.
30
- - **Pentest Engine** โ€” Automated penetration testing on your URLs and APIs.
31
- - **Network Monitor** โ€” Watches all TCP/UDP traffic across every port.
32
- - **Real-time Alerts** โ€” Slack, email, webhook notifications when threats are detected.
33
- - **systemd Daemon** โ€” Runs as a background service, auto-starts on boot.
74
+ | Feature | Description |
75
+ |---------|-------------|
76
+ | ๐Ÿ” **Live Attack Detection** | Monitors all inbound connections on every port. Detects SQLi, XSS, brute force, SSH attacks, port scans, DNS tunneling. |
77
+ | ๐Ÿ›ก๏ธ **Code Security Scanner** | Scan your codebase for vulnerabilities, hardcoded secrets, and misconfigurations. |
78
+ | ๐Ÿ’ฅ **Pentest Engine** | Automated penetration testing on your URLs and APIs. |
79
+ | ๐Ÿ”€ **Network Monitor** | Watches all TCP/UDP traffic across every port โ€” HTTP, SSH, DNS, FTP, databases. |
80
+ | ๐Ÿ”” **Real-time Alerts** | Slack, email, webhook notifications the instant a threat is detected. |
81
+ | โš™๏ธ **systemd Daemon** | Runs as a background service on your server. Auto-starts on boot, monitors 24/7. |
82
+ | ๐Ÿ“Š **TUI Dashboard** | Interactive terminal dashboard โ€” htop for security. |
34
83
 
35
- ## Modular Architecture
84
+ ## Modules
36
85
 
37
- ThreatCrush uses a pluggable module system. Install modules from the marketplace or build your own:
86
+ ThreatCrush uses a pluggable module system. Install from the marketplace or build your own:
38
87
 
39
88
  ```bash
40
- threatcrush modules install ssh-guard
89
+ threatcrush modules list # List installed
90
+ threatcrush modules install ssh-guard # Install a module
41
91
  threatcrush modules install docker-monitor
42
- threatcrush store search "firewall"
92
+ threatcrush store search "firewall" # Search marketplace
93
+ threatcrush store publish ./my-module # Publish your own
94
+ ```
95
+
96
+ ### Core Modules (included)
97
+
98
+ | Module | What it monitors |
99
+ |--------|-----------------|
100
+ | `network-monitor` | All TCP/UDP traffic, port scans, SYN floods |
101
+ | `log-watcher` | nginx, Apache, syslog, journald |
102
+ | `ssh-guard` | Failed logins, brute force, tunneling |
103
+ | `code-scanner` | Vulnerabilities, secrets, dependency CVEs |
104
+ | `pentest-engine` | SQLi, XSS, SSRF, API fuzzing |
105
+ | `dns-monitor` | DNS tunneling, DGA detection |
106
+ | `firewall-rules` | Auto-blocks via iptables/nftables |
107
+ | `alert-system` | Slack, Discord, email, webhook, PagerDuty |
108
+
109
+ ### Community Modules
110
+
111
+ Build and sell your own modules on the ThreatCrush marketplace:
112
+ - `docker-monitor` โ€” Container escape detection
113
+ - `k8s-watcher` โ€” Kubernetes cluster security
114
+ - `honeypot` โ€” Deploy decoy services
115
+ - `geo-blocker` โ€” Block traffic by country/ASN
116
+ - `compliance-reporter` โ€” SOC2, HIPAA, PCI-DSS reports
117
+
118
+ ## Configuration
119
+
120
+ ```bash
121
+ threatcrush init # Auto-detect & generate config
43
122
  ```
44
123
 
124
+ Config lives at `/etc/threatcrush/threatcrushd.conf` with module configs in `/etc/threatcrush/threatcrushd.conf.d/`.
125
+
45
126
  ## Pricing
46
127
 
47
- - **Lifetime Access** โ€” $499 one-time (or $249 with a referral)
48
- - Pay once, access forever. All core modules included.
128
+ | Tier | Price |
129
+ |------|-------|
130
+ | **Lifetime Access** | $499 one-time |
131
+ | **With Referral** | $249 (both you and your friend) |
132
+
133
+ Pay once, access forever. All core modules, CLI, daemon, API, and lifetime updates included.
134
+
135
+ ๐Ÿ‘‰ [Get lifetime access at threatcrush.com](https://threatcrush.com)
49
136
 
50
137
  ## Links
51
138
 
52
- - **Website:** [threatcrush.com](https://threatcrush.com)
53
- - **GitHub:** [github.com/profullstack/threatcrush](https://github.com/profullstack/threatcrush)
139
+ - ๐ŸŒ **Website:** [threatcrush.com](https://threatcrush.com)
140
+ - ๐Ÿ“ฆ **npm:** [@profullstack/threatcrush](https://www.npmjs.com/package/@profullstack/threatcrush)
141
+ - ๐Ÿ™ **GitHub:** [profullstack/threatcrush](https://github.com/profullstack/threatcrush)
142
+ - ๐Ÿ› **Issues:** [GitHub Issues](https://github.com/profullstack/threatcrush/issues)
54
143
 
55
144
  ## License
56
145
 
57
- Proprietary. See [LICENSE](https://github.com/profullstack/threatcrush/blob/master/LICENSE) for details.
146
+ MIT ยฉ [Profullstack, Inc.](https://profullstack.com)
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@profullstack/threatcrush",
3
- "version": "0.1.1",
3
+ "version": "0.1.2",
4
4
  "description": "All-in-one security agent daemon โ€” monitor, detect, scan, and protect servers in real-time",
5
5
  "bin": {
6
6
  "threatcrush": "./dist/index.js"
@@ -23,7 +23,7 @@
23
23
  "cli",
24
24
  "cybersecurity"
25
25
  ],
26
- "license": "SEE LICENSE IN LICENSE",
26
+ "license": "MIT",
27
27
  "dependencies": {
28
28
  "@iarna/toml": "^2.2.5",
29
29
  "better-sqlite3": "^11.7.0",