feat(security): deploy OpenCanary honeypot on VLAN 50 with Gotify and Discord alerting

scripts/read_heimdall_keys.py

@@ -0,0 +1,32 @@
+import paramiko
+import sys
+
+sys.stdout.reconfigure(encoding='utf-8')
+key_path = r'C:\Users\Snarf\.ssh\id_ed25519_snarfnet'
+
+c = paramiko.SSHClient()
+c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+c.connect("140.44.4.75", username="root", key_filename=key_path, timeout=10)
+
+py_script = """
+import sqlite3
+conn = sqlite3.connect('/var/lib/docker/volumes/heimdall_heimdall_config/_data/www/app.sqlite')
+cur = conn.cursor()
+for tbl in ['items', 'settings', 'setting_user', 'applications']:
+    print('=== Table:', tbl, '===')
+    cur.execute(f'PRAGMA table_info({tbl})')
+    print([c[1] for c in cur.fetchall()])
+    cur.execute(f'SELECT * FROM {tbl} WHERE 1')
+    for r in cur.fetchall():
+        row_str = str(r)
+        if any(w in row_str.lower() for w in ['home', 'assist', 'snarf', 'token', 'key']):
+            print(r)
+"""
+c.exec_command("cat << 'EOF' > /tmp/read_h_settings.py\n" + py_script + "\nEOF\n")
+stdin, stdout, stderr = c.exec_command("python3 /tmp/read_h_settings.py")
+print(stdout.read().decode())
+err = stderr.read().decode()
+if err: print("Stderr:", err)
+
+c.close()
+