add default-creds-tui and local cache

Signed-off-by: Hadi <[email protected]>

flake.lock

@@ -117,7 +117,7 @@
         "flake-parts": "flake-parts_2",
         "import-tree": "import-tree_2",
         "nixpkgs": [
-          "default-creds",
+          "default-creds-web",
           "nixpkgs"
         ],
         "systems": "systems_2",
@@ -138,16 +138,13 @@
       }
     },
     "default-creds": {
-      "inputs": {
-        "bun2nix": "bun2nix_2",
-        "nixpkgs": "nixpkgs_2"
-      },
+      "flake": false,
       "locked": {
-        "lastModified": 1780323652,
-        "narHash": "sha256-Ol1ygle0M95z0gOIYGD9WK4gl5xsWi7TvS7IgnK/WJQ=",
+        "lastModified": 1787774968,
+        "narHash": "sha256-hkri5ZScV47HZOYUNd4E4UpPP54i34fhfTNaso+TSuE=",
         "owner": "anotherhadi",
         "repo": "default-creds",
-        "rev": "98b207fe54e07086346f5d77c7a5ec6044e67cca",
+        "rev": "d65bf35676d0d8364fc372917aa3d60109e74fde",
         "type": "github"
       },
       "original": {
@@ -156,6 +153,25 @@
         "type": "github"
       }
     },
+    "default-creds-web": {
+      "inputs": {
+        "bun2nix": "bun2nix_2",
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1787818431,
+        "narHash": "sha256-CNXlYP22cJ9pOgCnZXDWA2nX6KevbtPIbQ4mpz7Qb+Q=",
+        "owner": "anotherhadi",
+        "repo": "default-creds-web",
+        "rev": "f376048495395ec58197281fc10bfb96ecd56019",
+        "type": "github"
+      },
+      "original": {
+        "owner": "anotherhadi",
+        "repo": "default-creds-web",
+        "type": "github"
+      }
+    },
     "disko": {
       "inputs": {
         "nixpkgs": [
@@ -701,11 +717,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1787315761,
-        "narHash": "sha256-1ze3fFnH7GhN6P3e76Ved2OGNLU/r1Pgo59TbPi9Pg8=",
+        "lastModified": 1787821287,
+        "narHash": "sha256-/Ob/9a6whpsyrksdbmMX1EQkirE+0ASelmmH6/zKwYM=",
         "owner": "nix-community",
         "repo": "nur",
-        "rev": "9fd3c9b18edddb6c611fcbee9974d3b6de5443a7",
+        "rev": "f37cbf879053cce9e6d483fb977f57004273c026",
         "type": "github"
       },
       "original": {
@@ -782,6 +798,7 @@
       "inputs": {
         "blog": "blog",
         "default-creds": "default-creds",
+        "default-creds-web": "default-creds-web",
         "disko": "disko",
         "git-hooks": "git-hooks",
         "helium-browser": "helium-browser",
@@ -987,7 +1004,7 @@
     "treefmt-nix_2": {
       "inputs": {
         "nixpkgs": [
-          "default-creds",
+          "default-creds-web",
           "bun2nix",
           "nixpkgs"
         ]

flake.nix

@@ -48,10 +48,14 @@
       url = "github:cachix/git-hooks.nix";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    default-creds = {
+      url = "github:anotherhadi/default-creds";
+      flake = false;
+    };
 
     # Server
     nixarr.url = "github:nix-media-server/nixarr";
-    default-creds.url = "github:anotherhadi/default-creds";
+    default-creds-web.url = "github:anotherhadi/default-creds-web";
     blog.url = "github:anotherhadi/blog";
   };
 

home/programs/group/cybersecurity-packages.nix

@@ -1,5 +1,6 @@
 {pkgs}: (with pkgs; [
   # Web
+  pkgs.nur.repos.anotherhadi.spilltea
   dirb
   ffuf
   katana
@@ -17,24 +18,25 @@
   redis
 
   # Network
-  inetutils
   termshark # wireshark in TUI
+  wtfis # Passive hostname, domain and IP lookup tool
+  inetutils
   whois
   dig
   nmap
   samba
   hydra
+  pkgs.nur.repos.anotherhadi.revshell
 
   # Misc
   metasploit
   nuclei
   openvpn
-
-  # Secrets
-  trufflehog
+  zizmor # CI/CD Pipelines
+  trufflehog # Look for secrets
+  pkgs.nur.repos.anotherhadi.jwt-tui
+  pkgs.nur.repos.anotherhadi.default-creds-tui
 
   # Forensics
   binwalk
-  pkgs.nur.repos.anotherhadi.spilltea
-  pkgs.nur.repos.anotherhadi.jwt-tui
 ])

home/programs/group/cybersecurity.nix

@@ -2,6 +2,7 @@
   pkgs,
   config,
   lib,
+  inputs,
   ...
 }: {
   home.packages = import ./cybersecurity-packages.nix {
@@ -41,6 +42,8 @@
       url = "https://raw.githubusercontent.com/CarlosLannister/OwadeReborn/refs/heads/master/owade/fileAnalyze/hashcatLib/best64.rule%7E";
       hash = "sha256-T0XkMHJZQiy63/j25nGTkaiDFjc+blmgEVGTAFgVylU=";
     };
+
+    ".cache/default-creds".source = inputs.default-creds;
   };
 
   home.persistence."/persist" = lib.mkIf (config.var.impermanenceEnabled or false) {

hosts/server/flake.nix

@@ -17,7 +17,7 @@ nixpkgs.lib.nixosSystem {
     inputs.sops-nix.nixosModules.sops
     inputs.nixarr.nixosModules.default
     inputs.nix-index-database.nixosModules.default
-    inputs.default-creds.nixosModules.default
+    inputs.default-creds-web.nixosModules.default
     inputs.impermanence.nixosModules.impermanence
     ./configuration.nix
   ];

server-modules/default-creds.nix

@@ -13,7 +13,7 @@ in {
       hostIp = "10.233.6.1";
       containerIp = "10.233.6.2";
       nixosConfig = {...}: {
-        imports = [inputs.default-creds.nixosModules.default];
+        imports = [inputs.default-creds-web.nixosModules.default];
         services.default-creds = {
           enable = true;
           port = 8087;
@@ -31,6 +31,7 @@ in {
     })
   ];
 
+  # TODO: ??
   services.default-creds.enable = lib.mkForce false;
   services.cloudflared.tunnels."${config.var.tunnelId}".ingress."default-creds.${config.var.domain}" = "http://10.233.6.2:8087";
 }