WinSysMonitor 1.1.33

WinSysMonitor v1.1.33 — Security Release

📦 Assets

• Android APK: WinSysMonitor-v1.1.33.apk (versionCode 33)
• Windows Agent Installer: WinSysMonitor-Setup-1.0.0.2.exe

---

🔐 Security Features

Android App

• Mandatory Update Gate — App checks 4sudosu/WinSysMonitor releases on startup, blocks UI until verified
• Owner Password Lock — App requires admin password before starting server or opening dashboard
• Certificate Pinning Ready — Keystore fixed (winsysmonitor alias) for seamless updates
• Network Security — Cleartext traffic disabled for production, HTTPS/WSS enforced on port 443
• Permission Minimization — Only requests: Internet, Network State, Wake Lock, Notifications, Install Packages

Windows Agent

• Service Hardening — Runs as LocalSystem with auto-restart (crash recovery via sc failure)
• Config ACL Lock — agent.config.json locked to SYSTEM + Administrators only (Users read-only)
• Token Authentication — Shared secret token required for agent registration
• WebSocket Security — TLS (WSS) on port 443, plain WS on LAN only
• Interactive Capture Isolation — Screenshots via scheduled task in user session (no Service Desktop access)

Server / Dashboard

• Admin Authentication — Cookie sessions (7-day expiry) + X-Admin-Password header support
• Brute-Force Protection — 3 failed logins → server locks until restart
• Device Blocking — 3-strike device block (strict: passwords ignored while blocked, only dashboard unlock clears)
• CORS/Origin Control — Locked to configured origins
• Payload Limits — 200MB max for screenshot uploads

Network / Transport

• LAN-First Design — No internet required, no cloud, no telemetry
• TLS Termination — Automatic WSS on port 443 (Render/VPS), plain WS on LAN
• Keepalive — 15s WebSocket ping + 20s app-level keepalive prevents NAT/proxy drops
• Reconnect Cap — Exponential backoff capped at 30s

---

📱 Android v1.1.33 Highlights

• 6 switchable launcher icons (Default, Emerald, Violet, Rose, Amber, Ocean)
• 10 hand-crafted themes (light/dark)
• Custom notification sounds + icons
• Auto-refresh screenshots (3s/5s/10s)
• Native Kotlin + Material Design (no WebView)
• DownloadManager-based updates with system installer

---

🪟 Windows Agent 1.0.0.2

• Silent install: WinSysMonitor-Setup-1.0.0.2.exe /VERYSILENT /SERVERIP=... /SERVERPORT=... /SERVERTOKEN=...
• Installs to C:\Program Files\WinSysMonitor (24x7 service)
• Auto-reloads agent.config.json on change (admin only)

---

🌐 Server

• Node.js 18+ / Express + ws + SSE
• Self-hosted on phone (embedded Node.js via libnode) or PC/VPS/Render
• Dashboard at http://<host>:3001 (login required)

---

⚠️ Important

• Keystore is fixed — same signature for all releases (enables seamless updates)
• Default admin password: Alok@1234 — CHANGE BEFORE EXPOSING BEYOND TRUSTED LAN
• Set ADMIN_PASSWORD env var on server to override
• Built for trusted LANs — no internet, no cloud, no subscription

libnode binaries

Prebuilt libnode for Android builds