Ockam is a framework for building secure, interconnected systems that provides identity-based end-to-end encrypted communication, secure channel establishment, and policy-based access control. The architecture features clear separation of concerns with modules for core types, identity management, secure channels, transport abstractions, vault cryptography, API orchestration, and a command-line interface. Implemented primarily in Rust with Elixir components, it uses async/await and OTP patterns for concurrency. Key entry points include the ockam CLI, node builder/context, and orchestrator API. The system enables secure multi-hop routing, message forwarding, and service integration with external systems like Kafka and InfluxDB.
BYOB (Build Your Own Botnet) is an open-source post-exploitation framework that provides a command-and-control (C2) server, a custom payload generator, and a suite of post-exploitation modules. It is designed for security researchers and developers to simulate botnet operations for educational purposes. The system consists of a console-based C2 server (Python) and a Flask-based web GUI for managing sessions, payloads, and exfiltrated data. The architecture follows a classic botnet pattern: clients (reverse TCP shells) connect to the C2 server, authenticate via Diffie-Hellman key exchange with AES-256-CBC encryption, and receive tasks (modules) that are remotely loaded and executed. Modules include keylogging, screenshot capture, privilege escalation, packet sniffing, port scanning, persistence mechanisms, and interaction with iCloud/Outlook. The web GUI offers a dashboard, payload generator, terminal interface, and file management. The codebase shows signs of significant duplication (identical modules exist in both the core and web-gui directories) and relies on heavily outdated third-party frontend libraries (CKEditor 2013, FullCalendar 2014, CodeMirror addons). The project appears to be in a stale maintenance state with known incomplete features (e.g., unencrypted remote imports, limited transport types). While the core concepts (remote module loading, encrypted C2, cross-compilation) are technically interesting, the implementation quality is uneven, with Python 2/3 compatibility hacks, security-sensitive patterns (exec usage, SimpleHTTPServer without auth), and a large volume of unused/purely vendored assets inflating the repository. It is best treated as a reference architecture for botnet design rather than production-ready software.