shellfirm 0.3.7

`shellfirm` will intercept any risky patterns (default or defined by you) and prompt you a small challenge for double verification, kinda like a captcha for your terminal.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169

---
# -- network:bring_down_interface --
- test: "ifconfig eth0 down"
  description: "match command with ifconfig"
  expect_ids: ["network:bring_down_interface"]
- test: "sudo ifconfig eth0 down"
  description: "match command with sudo and ifconfig"
  expect_ids: ["network:bring_down_interface"]
- test: "ifconfig ens33 down"
  description: "match command with modern interface name"
  expect_ids: ["network:bring_down_interface"]
- test: "ifconfig enp0s3 down"
  description: "match command with predictable interface name"
  expect_ids: ["network:bring_down_interface"]
- test: "ifconfig wlan0 down"
  description: "match command with wireless interface"
  expect_ids: ["network:bring_down_interface"]
- test: "ip link set eth0 down"
  description: "match command with ip link"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "sudo ip link set eth0 down"
  description: "match command with sudo and ip link"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "ip link set ens33 down"
  description: "match command with ip link and modern interface name"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "ifconfig eth0 up"
  description: "should not match up command"
  expect_ids: []
- test: "ip link set eth0 up"
  description: "should not match up command with ip link"
  expect_ids: []

# -- network:bring_down_interface_ip --
- test: "ip link set eth0 down"
  description: "match command with ip link"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "sudo ip link set eth0 down"
  description: "match command with sudo and ip link"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "ip link set ens33 down"
  description: "match command with modern interface name"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "ip link set enp0s3 down"
  description: "match command with predictable interface name"
  expect_ids: ["network:bring_down_interface_ip"]
- test: "ip link set eth0 up"
  description: "should not match up command"
  expect_ids: []
- test: "ip link show eth0"
  description: "should not match show command"
  expect_ids: []

# -- network:delete_custom_chains --
- test: "iptables -X"
  description: "match command"
  expect_ids: ["network:delete_custom_chains"]
- test: "sudo iptables -X"
  description: "match command with sudo"
  expect_ids: ["network:delete_custom_chains"]
- test: "iptables -X CUSTOM_CHAIN"
  description: "should not match specific chain"
  expect_ids: ["network:delete_custom_chains"]
- test: "iptables -L"
  description: "should not match list command"
  expect_ids: []

# -- network:delete_default_route --
- test: "route del default"
  description: "match command"
  expect_ids: ["network:delete_default_route"]
- test: "sudo route del default"
  description: "match command with sudo"
  expect_ids: ["network:delete_default_route"]
- test: "route add default"
  description: "should not match add command"
  expect_ids: []
- test: "route show"
  description: "should not match show command"
  expect_ids: []

# -- network:disable_firewall --
- test: "ufw disable"
  description: "match command"
  expect_ids: ["network:disable_firewall"]
- test: "sudo ufw disable"
  description: "match command with sudo"
  expect_ids: ["network:disable_firewall"]
- test: "ufw enable"
  description: "should not match enable command"
  expect_ids: []
- test: "ufw status"
  description: "should not match status command"
  expect_ids: []

# -- network:flush_iptables --
- test: "iptables -F"
  description: "match command"
  expect_ids: ["network:flush_iptables"]
- test: "sudo iptables -F"
  description: "match command with sudo"
  expect_ids: ["network:flush_iptables"]
- test: "iptables -F INPUT"
  description: "should not match specific chain"
  expect_ids: ["network:flush_iptables"]
- test: "iptables -L"
  description: "should not match list command"
  expect_ids: []

# -- network:flush_nat_rules --
- test: "iptables -t nat -F"
  description: "match command"
  expect_ids: ["network:flush_nat_rules"]
- test: "sudo iptables -t nat -F"
  description: "match command with sudo"
  expect_ids: ["network:flush_nat_rules"]
- test: "iptables -t nat -F PREROUTING"
  description: "should not match specific chain"
  expect_ids: ["network:flush_nat_rules"]
- test: "iptables -t nat -L"
  description: "should not match list command"
  expect_ids: []

# -- network:force_reset_firewall --
- test: "ufw --force reset"
  description: "match command"
  expect_ids: ["network:force_reset_firewall"]
- test: "sudo ufw --force reset"
  description: "match command with sudo"
  expect_ids: ["network:force_reset_firewall"]
- test: "ufw reset"
  description: "should not match without force flag"
  expect_ids: []
- test: "ufw status"
  description: "should not match status command"
  expect_ids: []

# -- network:stop_network_manager --
- test: "systemctl stop NetworkManager"
  description: "match command"
  expect_ids: ["network:stop_network_manager"]
- test: "sudo systemctl stop NetworkManager"
  description: "match command with sudo"
  expect_ids: ["network:stop_network_manager"]
- test: "systemctl status NetworkManager"
  description: "should not match status command"
  expect_ids: []
- test: "systemctl restart NetworkManager"
  description: "should not match restart command"
  expect_ids: []

# -- network:stop_networking --
- test: "systemctl stop networking"
  description: "match command"
  expect_ids: ["network:stop_networking"]
- test: "sudo systemctl stop networking"
  description: "match command with sudo"
  expect_ids: ["network:stop_networking"]
- test: "systemctl status networking"
  description: "should not match status command"
  expect_ids: []
- test: "systemctl restart networking"
  description: "should not match restart command"
  expect_ids: []

# -- network:force_reset_firewall — flag ordering --
- test: "ufw reset --force"
  description: "BUG: --force after reset, not matched"
  expect_ids: []