Skip to content

WinSysMonitor 1.1.33

Latest
Latest

Choose a tag to compare

View all tags
@4sudosu 4sudosu released this 23 Aug 16:18
· 77 commits to main since this release
v1.1.33
202c7e4

WinSysMonitor v1.1.33 — Security Release

📦 Assets

  • Android APK: WinSysMonitor-v1.1.33.apk (versionCode 33)
  • Windows Agent Installer: WinSysMonitor-Setup-1.0.0.2.exe

🔐 Security Features

Android App

  • Mandatory Update Gate — App checks 4sudosu/WinSysMonitor releases on startup, blocks UI until verified
  • Owner Password Lock — App requires admin password before starting server or opening dashboard
  • Certificate Pinning Ready — Keystore fixed (winsysmonitor alias) for seamless updates
  • Network Security — Cleartext traffic disabled for production, HTTPS/WSS enforced on port 443
  • Permission Minimization — Only requests: Internet, Network State, Wake Lock, Notifications, Install Packages

Windows Agent

  • Service Hardening — Runs as LocalSystem with auto-restart (crash recovery via sc failure)
  • Config ACL Lock — agent.config.json locked to SYSTEM + Administrators only (Users read-only)
  • Token Authentication — Shared secret token required for agent registration
  • WebSocket Security — TLS (WSS) on port 443, plain WS on LAN only
  • Interactive Capture Isolation — Screenshots via scheduled task in user session (no Service Desktop access)

Server / Dashboard

  • Admin Authentication — Cookie sessions (7-day expiry) + X-Admin-Password header support
  • Brute-Force Protection — 3 failed logins → server locks until restart
  • Device Blocking — 3-strike device block (strict: passwords ignored while blocked, only dashboard unlock clears)
  • CORS/Origin Control — Locked to configured origins
  • Payload Limits — 200MB max for screenshot uploads

Network / Transport

  • LAN-First Design — No internet required, no cloud, no telemetry
  • TLS Termination — Automatic WSS on port 443 (Render/VPS), plain WS on LAN
  • Keepalive — 15s WebSocket ping + 20s app-level keepalive prevents NAT/proxy drops
  • Reconnect Cap — Exponential backoff capped at 30s

📱 Android v1.1.33 Highlights

  • 6 switchable launcher icons (Default, Emerald, Violet, Rose, Amber, Ocean)
  • 10 hand-crafted themes (light/dark)
  • Custom notification sounds + icons
  • Auto-refresh screenshots (3s/5s/10s)
  • Native Kotlin + Material Design (no WebView)
  • DownloadManager-based updates with system installer

🪟 Windows Agent 1.0.0.2

  • Silent install: WinSysMonitor-Setup-1.0.0.2.exe /VERYSILENT /SERVERIP=... /SERVERPORT=... /SERVERTOKEN=...
  • Installs to C:\Program Files\WinSysMonitor (24x7 service)
  • Auto-reloads agent.config.json on change (admin only)

🌐 Server

  • Node.js 18+ / Express + ws + SSE
  • Self-hosted on phone (embedded Node.js via libnode) or PC/VPS/Render
  • Dashboard at http://<host>:3001 (login required)

⚠️ Important

  • Keystore is fixed — same signature for all releases (enables seamless updates)
  • Default admin password: Alok@1234 — CHANGE BEFORE EXPOSING BEYOND TRUSTED LAN
  • Set ADMIN_PASSWORD env var on server to override
  • Built for trusted LANs — no internet, no cloud, no subscription
Assets 4
Loading