Skip to content

czconsole v0.1.0

Choose a tag to compare

View all tags
@n0xa n0xa released this 07 Jun 07:59
v0.1.0
3f68bb7

First packaged release of czconsole — the phone-served field console for the
M5 Cardputer Zero.

Install (arm64 — Kali graft or stock Raspberry Pi OS)

sudo apt install ./czconsole_0.1.0_arm64.deb

apt pulls the pamtester dependency automatically. The postinstall runs the
full privsep setup (dedicated worker user, group-scoped sockets, capabilities)
and starts the services. A login is required by default — sign in with a
device account; edit /etc/czconsole/czconsole.conf to change. Then open the
URL it prints (default http://<device-ip>:8080) from your phone.

What's inside

  • Pure-Go, static, no cgo. OS-agnostic (RaspiOS + Kali).
  • Dashboard, LCD mirror, sysinfo, adapter inventory; files and wardrive
    modules (sdr/netrecon are placeholders that grey out without their tools).
  • Privilege separation: a powerless web worker, a files agent that runs as
    the operator, and a root PAM auth agent — the worker never holds privilege or
    reads /etc/shadow.
  • PAM login via pamtester, HMAC session cookies, pam_faillock + a per-IP
    rate limit; shared-token and LAN-trusted modes also available.

Verify

sha256  a6eb2f1a1d13e5f0f7234936b3839cd1933646f97c221bfa50c1112d85dcf8c1

Built and install-tested on the Kali Cardputer Zero graft.

Assets 3
Loading