Infection

machine info

• startup time
• current user
• hostname
• version
• arch
• cpu core
• gpu
• memory
• disk partion part
• network card
• outboud ip
• location
• bandwidth

human info

• keyboard hitting input
• browser(firefox chrome) url user password

IoT Infection

• router
• mobile
• iot device

reverse tunnel

• over the tls tcp/udp protocol open the shell tunnel for login control

config reload

• watch the etcd

transfer

• limit the proxy rate when over the 1 hours
• p2p lookup the flow
• compute task handle

Other

• icon daemon
• hot update
• screenshot
• keepalive
• mq message