CellGuard: LTE/5G-NR lock + IMSI-catcher detection KSU module
- cgcap.ko: cpif CP-frame capture via kprobe/kallsyms, stock-GKI build - ratlock.sh: hold modem to LTE+NR(5G), block 2G/3G downgrade - cgdetect.sh: always-on behavioral cell-site-simulator detection - cgctl.sh + WebUI: block/detect toggles, status + alerts - build-stock-gki.sh: reproducible stock-GKI module build pipeline
This commit is contained in:
sssnake
190
webroot/css/style.css
Normal file
190
webroot/css/style.css
Normal file
@@ -0,0 +1,190 @@
|
||||
:root {
|
||||
--bg: #0b0f14;
|
||||
--panel: #11171f;
|
||||
--panel-2: #161e29;
|
||||
--line: #1f2a38;
|
||||
--text: #e6edf3;
|
||||
--muted: #8ea0b5;
|
||||
--accent: #7ee787;
|
||||
--warn: #f2cc60;
|
||||
--err: #ff7b72;
|
||||
--ok: #7ee787;
|
||||
--blue: #79c0ff;
|
||||
}
|
||||
|
||||
* { box-sizing: border-box; }
|
||||
html, body {
|
||||
margin: 0; padding: 0;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto,
|
||||
"Helvetica Neue", Arial, sans-serif;
|
||||
font-size: 15px;
|
||||
line-height: 1.4;
|
||||
overscroll-behavior-y: none;
|
||||
}
|
||||
|
||||
/* Header */
|
||||
.bar {
|
||||
position: sticky; top: 0; z-index: 10;
|
||||
display: flex; align-items: center; justify-content: space-between;
|
||||
padding: 14px 18px;
|
||||
background: rgba(11,15,20,0.92);
|
||||
backdrop-filter: blur(14px);
|
||||
border-bottom: 1px solid var(--line);
|
||||
}
|
||||
.title { display: flex; align-items: center; gap: 10px; }
|
||||
.title h1 { margin: 0; font-size: 17px; letter-spacing: 0.02em; }
|
||||
.logo { color: var(--accent); font-size: 18px; }
|
||||
.state {
|
||||
font-size: 12px; font-weight: 600;
|
||||
padding: 4px 10px; border-radius: 999px;
|
||||
background: var(--panel-2); color: var(--muted);
|
||||
border: 1px solid var(--line);
|
||||
}
|
||||
.state.on { color: var(--ok); border-color: color-mix(in srgb, var(--ok) 40%, var(--line)); }
|
||||
.state.off { color: var(--muted); }
|
||||
.state.err { color: var(--err); border-color: color-mix(in srgb, var(--err) 40%, var(--line)); }
|
||||
|
||||
main { padding: 16px; display: flex; flex-direction: column; gap: 14px; max-width: 680px; margin: 0 auto; }
|
||||
|
||||
/* Cards */
|
||||
.card {
|
||||
background: var(--panel);
|
||||
border: 1px solid var(--line);
|
||||
border-radius: 14px;
|
||||
padding: 16px 18px;
|
||||
}
|
||||
.card h2 { font-size: 15px; margin: 0 0 10px; }
|
||||
.card-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; margin-bottom: 4px; }
|
||||
.card-head h2 { margin: 0; }
|
||||
.hint { font-size: 12px; color: var(--muted); margin: 0 0 10px; }
|
||||
|
||||
/* Toggle card */
|
||||
.toggle-card { display: flex; align-items: center; justify-content: space-between; gap: 14px; }
|
||||
.toggle-copy h2 { margin: 0 0 4px; }
|
||||
.toggle-copy p { margin: 0; font-size: 13px; color: var(--muted); }
|
||||
|
||||
/* Toggle switch */
|
||||
.switch {
|
||||
position: relative; display: inline-block;
|
||||
width: 58px; height: 32px; flex-shrink: 0;
|
||||
}
|
||||
.switch input { opacity: 0; width: 0; height: 0; }
|
||||
.slider {
|
||||
position: absolute; inset: 0;
|
||||
background: #2a3646; border-radius: 999px; cursor: pointer;
|
||||
transition: background .2s;
|
||||
}
|
||||
.slider::before {
|
||||
content: "";
|
||||
position: absolute; height: 24px; width: 24px; left: 4px; top: 4px;
|
||||
background: #cdd9e5; border-radius: 50%;
|
||||
transition: transform .2s, background .2s;
|
||||
}
|
||||
.switch input:checked + .slider { background: color-mix(in srgb, var(--accent) 60%, #1d2a1f); }
|
||||
.switch input:checked + .slider::before { transform: translateX(26px); background: var(--accent); }
|
||||
.switch input:disabled + .slider { opacity: .5; cursor: not-allowed; }
|
||||
|
||||
/* Key/value rows */
|
||||
.row {
|
||||
display: flex; justify-content: space-between; align-items: center;
|
||||
padding: 8px 0;
|
||||
border-bottom: 1px solid color-mix(in srgb, var(--line) 60%, transparent);
|
||||
}
|
||||
.row:last-child { border-bottom: none; }
|
||||
.row.sub .k, .row.sub .v { color: var(--muted); font-size: 13px; }
|
||||
.k { color: var(--muted); }
|
||||
.v { font-weight: 600; }
|
||||
.v.mono { font-family: ui-monospace, "SF Mono", Menlo, monospace; font-size: 12px; font-weight: 500; }
|
||||
|
||||
.badge {
|
||||
display: inline-block; padding: 2px 8px; border-radius: 999px;
|
||||
font-size: 11px; font-weight: 600; letter-spacing: 0.02em;
|
||||
border: 1px solid var(--line);
|
||||
}
|
||||
.badge-2g { color: var(--err); background: color-mix(in srgb, var(--err) 18%, transparent); border-color: color-mix(in srgb, var(--err) 50%, var(--line)); }
|
||||
.badge-3g { color: var(--warn); background: color-mix(in srgb, var(--warn) 15%, transparent); border-color: color-mix(in srgb, var(--warn) 50%, var(--line)); }
|
||||
.badge-lte { color: var(--blue); background: color-mix(in srgb, var(--blue) 15%, transparent); border-color: color-mix(in srgb, var(--blue) 50%, var(--line)); }
|
||||
.badge-5g { color: var(--ok); background: color-mix(in srgb, var(--ok) 18%, transparent); border-color: color-mix(in srgb, var(--ok) 50%, var(--line)); }
|
||||
.badge-unk { color: var(--muted); }
|
||||
|
||||
/* Select dropdown */
|
||||
.sel {
|
||||
background: var(--panel-2);
|
||||
color: var(--text);
|
||||
border: 1px solid var(--line);
|
||||
border-radius: 10px;
|
||||
padding: 8px 34px 8px 12px;
|
||||
font: inherit; font-weight: 600;
|
||||
cursor: pointer;
|
||||
appearance: none;
|
||||
background-image: url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='10' height='6' viewBox='0 0 10 6'><path fill='%238ea0b5' d='M0 0l5 6 5-6z'/></svg>");
|
||||
background-repeat: no-repeat;
|
||||
background-position: right 12px center;
|
||||
}
|
||||
.sel:hover { background-color: #1e2838; border-color: #2a3646; }
|
||||
.sel:disabled { opacity: 0.5; cursor: not-allowed; }
|
||||
|
||||
/* Buttons */
|
||||
.btn {
|
||||
background: var(--panel-2);
|
||||
color: var(--text);
|
||||
border: 1px solid var(--line);
|
||||
border-radius: 10px;
|
||||
padding: 8px 14px;
|
||||
font: inherit; font-weight: 600;
|
||||
cursor: pointer;
|
||||
transition: background .15s, border-color .15s, opacity .15s;
|
||||
}
|
||||
.btn:hover:not(:disabled) { background: #1e2838; border-color: #2a3646; }
|
||||
.btn:disabled { opacity: 0.5; cursor: not-allowed; }
|
||||
|
||||
/* Cells list */
|
||||
.cells { display: flex; flex-direction: column; gap: 6px; }
|
||||
.carrier-group {
|
||||
background: var(--panel-2); border: 1px solid var(--line);
|
||||
border-radius: 12px; overflow: hidden;
|
||||
}
|
||||
.carrier-head {
|
||||
padding: 10px 14px;
|
||||
border-bottom: 1px solid var(--line);
|
||||
font-weight: 700; font-size: 14px;
|
||||
display: flex; justify-content: space-between; align-items: center;
|
||||
}
|
||||
.carrier-head .mccmnc { color: var(--muted); font-weight: 500; font-size: 12px; font-family: ui-monospace, Menlo, monospace; }
|
||||
.cell-row {
|
||||
display: flex; align-items: center; justify-content: space-between;
|
||||
padding: 10px 14px;
|
||||
border-top: 1px solid color-mix(in srgb, var(--line) 60%, transparent);
|
||||
font-size: 13px;
|
||||
}
|
||||
.cell-row:first-child { border-top: none; }
|
||||
.cell-row .left { display: flex; align-items: center; gap: 10px; }
|
||||
.cell-row .right { color: var(--muted); font-size: 12px; }
|
||||
|
||||
.avail-current { color: var(--accent); }
|
||||
.avail-available { color: var(--text); }
|
||||
.avail-forbidden { color: var(--err); }
|
||||
.avail-unknown { color: var(--muted); }
|
||||
|
||||
.empty { padding: 20px; text-align: center; color: var(--muted); }
|
||||
|
||||
/* Footer */
|
||||
.foot {
|
||||
text-align: center; font-size: 11px; color: var(--muted);
|
||||
padding: 10px 0 24px;
|
||||
}
|
||||
.dot { margin: 0 6px; }
|
||||
|
||||
/* Scanning spinner */
|
||||
.spin {
|
||||
display: inline-block; width: 12px; height: 12px;
|
||||
border: 2px solid color-mix(in srgb, var(--muted) 50%, transparent);
|
||||
border-top-color: var(--accent);
|
||||
border-radius: 50%;
|
||||
animation: spin 0.8s linear infinite;
|
||||
vertical-align: -2px;
|
||||
margin-right: 6px;
|
||||
}
|
||||
@keyframes spin { to { transform: rotate(360deg); } }
|
||||
69
webroot/index.html
Normal file
69
webroot/index.html
Normal file
@@ -0,0 +1,69 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
|
||||
<meta name="theme-color" content="#0b0f14">
|
||||
<title>CellGuard</title>
|
||||
<link rel="stylesheet" href="css/style.css">
|
||||
</head>
|
||||
<body>
|
||||
<header class="bar">
|
||||
<div class="title">
|
||||
<span class="logo">◉</span>
|
||||
<h1>CellGuard</h1>
|
||||
</div>
|
||||
<div class="state" id="headerState">—</div>
|
||||
</header>
|
||||
|
||||
<main>
|
||||
<!-- Primary toggle: block 2G/3G (anti-downgrade enforcement) -->
|
||||
<section class="card toggle-card">
|
||||
<div class="toggle-copy">
|
||||
<h2>Block 2G / 3G</h2>
|
||||
<p id="toggleDesc">Force LTE / 5G(NR) only. Re-locks the modem on any downgrade.</p>
|
||||
</div>
|
||||
<label class="switch">
|
||||
<input type="checkbox" id="toggle">
|
||||
<span class="slider"></span>
|
||||
</label>
|
||||
</section>
|
||||
|
||||
<!-- IMSI-catcher detection (runs in the background daemon) -->
|
||||
<section class="card">
|
||||
<div class="card-head">
|
||||
<h2>IMSI-catcher detection</h2>
|
||||
<label class="switch">
|
||||
<input type="checkbox" id="dToggle">
|
||||
<span class="slider"></span>
|
||||
</label>
|
||||
</div>
|
||||
<div class="row"><span class="k">Status</span><span class="v" id="dVerdict">—</span></div>
|
||||
<div class="row"><span class="k">Serving RAT</span><span class="v" id="sRat">—</span></div>
|
||||
<div class="row"><span class="k">Operator</span><span class="v" id="sOp">—</span></div>
|
||||
<div class="row"><span class="k">PLMN</span><span class="v mono" id="sPlmn">—</span></div>
|
||||
<div class="row sub"><span class="k">Cell CI / PCI / TAC</span><span class="v mono" id="sCell">—</span></div>
|
||||
<div class="row sub"><span class="k">EARFCN</span><span class="v mono" id="sEarfcn">—</span></div>
|
||||
<div class="row sub"><span class="k">Diag frames</span><span class="v" id="sFrames">0</span></div>
|
||||
<div class="row sub"><span class="k">RAT lock</span><span class="v" id="sLock">—</span></div>
|
||||
</section>
|
||||
|
||||
<!-- Alert log -->
|
||||
<section class="card">
|
||||
<div class="card-head">
|
||||
<h2>Alerts</h2>
|
||||
<button id="clrBtn" class="btn">Clear</button>
|
||||
</div>
|
||||
<div id="alerts" class="cells"></div>
|
||||
</section>
|
||||
|
||||
<footer class="foot">
|
||||
<span id="footVer">cellguard</span>
|
||||
<span class="dot">·</span>
|
||||
<span id="footMsg">idle</span>
|
||||
</footer>
|
||||
</main>
|
||||
|
||||
<script src="js/app.js"></script>
|
||||
</body>
|
||||
</html>
|
||||
135
webroot/js/app.js
Normal file
135
webroot/js/app.js
Normal file
@@ -0,0 +1,135 @@
|
||||
// CellGuard WebUI — KernelSU-Next ksu.exec() bridge.
|
||||
//
|
||||
// The WebUI is a viewer/controller only. All work runs in background daemons:
|
||||
// ratlock.sh — holds LTE+5G(NR) only (the 2G/3G-block toggle)
|
||||
// cgdetect.sh — always-on IMSI-catcher detection -> status + alerts files
|
||||
// cgcap.ko — raw CP-frame capture (diag)
|
||||
// It talks to them through cgctl.sh, which emits one JSON line per command.
|
||||
|
||||
(function () {
|
||||
const $ = (id) => document.getElementById(id);
|
||||
const MOD = "/data/adb/modules/cellguard";
|
||||
|
||||
const ui = {
|
||||
toggle: $("toggle"), dToggle: $("dToggle"), headerState: $("headerState"), dVerdict: $("dVerdict"),
|
||||
sRat: $("sRat"), sOp: $("sOp"), sPlmn: $("sPlmn"), sCell: $("sCell"),
|
||||
sEarfcn: $("sEarfcn"), sFrames: $("sFrames"), sLock: $("sLock"),
|
||||
alerts: $("alerts"), footMsg: $("footMsg"), clrBtn: $("clrBtn"),
|
||||
};
|
||||
|
||||
// KernelSU-Next bridge: ksu.exec(command, optionsJson, callbackFuncName).
|
||||
// Results arrive via window[callbackFuncName](errno, stdout, stderr) — the
|
||||
// callback is passed BY NAME (a string), not as a function object.
|
||||
function exec(cmd) {
|
||||
return new Promise((resolve) => {
|
||||
if (typeof ksu === "undefined" || !ksu.exec) {
|
||||
resolve({ code: -1, stdout: "", stderr: "ksu bridge missing" });
|
||||
return;
|
||||
}
|
||||
const cb = "cg_cb_" + Math.random().toString(36).slice(2);
|
||||
let done = false;
|
||||
const finish = (code, stdout, stderr) => {
|
||||
if (done) return; done = true;
|
||||
try { delete window[cb]; } catch (_) {}
|
||||
resolve({ code: (code | 0), stdout: stdout || "", stderr: stderr || "" });
|
||||
};
|
||||
window[cb] = finish;
|
||||
try {
|
||||
ksu.exec(cmd, "{}", cb);
|
||||
} catch (e) {
|
||||
// very old bridge with a direct function callback
|
||||
try { ksu.exec(cmd, (c, o, er) => finish(c, o, er)); }
|
||||
catch (_) { finish(-1, "", String(e)); }
|
||||
}
|
||||
setTimeout(() => finish(-1, "", "timeout"), 8000);
|
||||
});
|
||||
}
|
||||
|
||||
async function ctl(sub) {
|
||||
const r = await exec("sh " + MOD + "/cgctl.sh " + sub);
|
||||
try { return JSON.parse(r.stdout.trim()); }
|
||||
catch (e) { return { ok: false, error: r.stderr || r.stdout || `exit ${r.code}` }; }
|
||||
}
|
||||
|
||||
function esc(s) {
|
||||
return String(s).replace(/[&<>"']/g, c =>
|
||||
({ "&": "&", "<": "<", ">": ">", '"': """, "'": "'" }[c]));
|
||||
}
|
||||
|
||||
function ratBadge(r) {
|
||||
const cls = ({
|
||||
GSM: "badge-2g", GERAN: "badge-2g", GPRS: "badge-2g", EDGE: "badge-2g",
|
||||
UMTS: "badge-3g", WCDMA: "badge-3g", HSPA: "badge-3g", HSPAP: "badge-3g", UTRAN: "badge-3g",
|
||||
LTE: "badge-lte", NR: "badge-5g",
|
||||
})[r] || "badge-unk";
|
||||
return `<span class="badge ${cls}">${esc(r || "?")}</span>`;
|
||||
}
|
||||
|
||||
async function refresh() {
|
||||
const s = await ctl("status");
|
||||
if (!s || !s.ok) { ui.footMsg.textContent = (s && s.error) || "backend unavailable"; return; }
|
||||
|
||||
ui.toggle.checked = !!s.block;
|
||||
ui.toggle.disabled = false;
|
||||
ui.dToggle.checked = !!s.detect;
|
||||
ui.dToggle.disabled = false;
|
||||
|
||||
ui.sRat.innerHTML = ratBadge(s.rat);
|
||||
ui.sOp.textContent = (s.operator && s.operator !== "?") ? s.operator : "no service";
|
||||
ui.sPlmn.textContent = s.plmn || "?";
|
||||
ui.sCell.textContent = `${s.ci || "?"} / ${s.pci || "?"} / ${s.tac || "?"}`;
|
||||
ui.sEarfcn.textContent = s.earfcn || "?";
|
||||
ui.sFrames.textContent = s.frames || 0;
|
||||
ui.sLock.innerHTML = s.lock
|
||||
? `<span class="badge badge-5g">LTE + 5G only</span>`
|
||||
: `<span class="badge badge-2g">2G/3G allowed</span>`;
|
||||
|
||||
const bad = s.suspect && s.suspect !== "none";
|
||||
ui.dVerdict.innerHTML = bad
|
||||
? `<span class="badge badge-2g">${esc(s.suspect)}</span>`
|
||||
: `<span class="badge badge-5g">clear</span>`;
|
||||
ui.headerState.textContent = bad ? "ALERT" : (s.block ? "armed" : "off");
|
||||
ui.headerState.className = "state " + (bad ? "err" : (s.block ? "on" : "off"));
|
||||
ui.footMsg.textContent = `RAT ${s.rat || "?"} · ${s.frames || 0} frames`;
|
||||
|
||||
const a = await ctl("alerts");
|
||||
if (a && a.ok) {
|
||||
ui.alerts.innerHTML = (a.lines && a.lines.length)
|
||||
? a.lines.slice().reverse().map(l =>
|
||||
`<div class="cell-row"><div class="left">${esc(l)}</div></div>`).join("")
|
||||
: `<div class="empty">No alerts.</div>`;
|
||||
}
|
||||
}
|
||||
|
||||
async function onToggle() {
|
||||
ui.toggle.disabled = true;
|
||||
ui.footMsg.textContent = ui.toggle.checked ? "enabling 2G/3G block…" : "disabling…";
|
||||
const r = await ctl("block " + (ui.toggle.checked ? "on" : "off"));
|
||||
if (!r || !r.ok) { ui.toggle.checked = !ui.toggle.checked; ui.footMsg.textContent = "failed"; }
|
||||
ui.toggle.disabled = false;
|
||||
setTimeout(refresh, 800);
|
||||
}
|
||||
|
||||
async function onDetectToggle() {
|
||||
ui.dToggle.disabled = true;
|
||||
ui.footMsg.textContent = ui.dToggle.checked ? "enabling detection…" : "pausing detection…";
|
||||
const r = await ctl("detect " + (ui.dToggle.checked ? "on" : "off"));
|
||||
if (!r || !r.ok) { ui.dToggle.checked = !ui.dToggle.checked; ui.footMsg.textContent = "failed"; }
|
||||
ui.dToggle.disabled = false;
|
||||
setTimeout(refresh, 800);
|
||||
}
|
||||
|
||||
async function onClear() {
|
||||
await exec("sh -c ': > /data/adb/cellguard/alerts'");
|
||||
refresh();
|
||||
}
|
||||
|
||||
ui.toggle.disabled = true;
|
||||
ui.dToggle.disabled = true;
|
||||
ui.toggle.addEventListener("change", onToggle);
|
||||
ui.dToggle.addEventListener("change", onDetectToggle);
|
||||
ui.clrBtn.addEventListener("click", onClear);
|
||||
|
||||
refresh();
|
||||
setInterval(refresh, 3000);
|
||||
})();
|
||||
Reference in New Issue
Block a user