mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
57 lines
1.8 KiB
Markdown
57 lines
1.8 KiB
Markdown
# Software-Defined Perimeter — API Reference
|
|
|
|
## Core SDP Concepts
|
|
|
|
| Component | Description |
|
|
|-----------|-------------|
|
|
| SDP Controller | Central policy engine managing authentication and authorization |
|
|
| SDP Gateway | Enforces access policies, terminates encrypted tunnels |
|
|
| SDP Client | End-user agent performing Single Packet Authorization (SPA) |
|
|
| SPA (Single Packet Authorization) | Cryptographic knock before TCP connection allowed |
|
|
|
|
## Appgate SDP Admin API
|
|
|
|
| Method | Endpoint | Description |
|
|
|--------|----------|-------------|
|
|
| POST | `/admin/login` | Authenticate and get Bearer token |
|
|
| GET | `/admin/sites` | List configured sites |
|
|
| GET | `/admin/policies` | List access policies |
|
|
| GET | `/admin/entitlements` | List entitlements (resource access rules) |
|
|
| GET | `/admin/appliances` | List SDP gateways and controllers |
|
|
| GET | `/admin/identity-providers` | List identity providers |
|
|
| POST | `/admin/entitlements` | Create new entitlement |
|
|
|
|
## Dark Port Scanning
|
|
|
|
```python
|
|
import socket
|
|
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
sock.settimeout(5)
|
|
result = sock.connect_ex((host, port)) # Non-zero = port dark (SDP enforced)
|
|
```
|
|
|
|
## Mutual TLS Verification
|
|
|
|
```python
|
|
import ssl
|
|
ctx = ssl.create_default_context()
|
|
ctx.load_cert_chain("client.crt", "client.key")
|
|
with ctx.wrap_socket(socket.socket(), server_hostname=host) as s:
|
|
s.connect((host, 443))
|
|
```
|
|
|
|
## SPA Packet Structure
|
|
|
|
| Field | Description |
|
|
|-------|-------------|
|
|
| Random Data | 16 bytes of random padding |
|
|
| Username | SDP client identity |
|
|
| Timestamp | Prevents replay attacks |
|
|
| HMAC | SHA-256 authentication code |
|
|
|
|
## External References
|
|
|
|
- [Appgate SDP API Docs](https://sdphelp.appgate.com/adminguide/rest-api-guide.html)
|
|
- [CSA SDP Specification](https://cloudsecurityalliance.org/research/sdp/)
|
|
- [fwknop SPA Tool](https://www.cipherdyne.org/fwknop/)
|