Backdoor Detected v2 | Backdoor Detected tools for your serv

BackdoorDetector-v2 1.1.1

Overview: Version 1.1.1 is a major upgrade focused on a brand-new AI backend architecture, improved LMX detection accuracy, and a smarter scan flow. The Node.js backend is not open-source. --- ## What's New v1.1.1 introduces a private Node.js backend as an intermediary instead of calling Gemini API directly: - Hybrid Encryption (AES-256-GCM + RSA-4096): All payloads are encrypted before transmission. - Client fetches the RSA public key from the server (/api/public-key) - Generates a random AES-256 key, encrypts the payload with AES-GCM - Encrypts the AES key with RSA-OAEP, sent with header X-Encrypted: hybrid - Replay Attack Protection: Server validates the timestamp header with a max clock skew of 5 minutes. - Proof of Work (PoW) DDoS Prevention: Client must solve a SHA-256 challenge before submitting a scan. - Difficulty automatically adjusts based on server load - Client automatically retries when the challenge expires (HTTP 403 → re-solve) - Multi-tiered Rate Limiting: IP-based (30/min), per-client AI (10/min), server-wide global (1/sec) Real-time Web Dashboard (Not Open-Source) - Stats: total requests, bytes processed, unique plugins scanned - Safe vs Malicious ratio chart - Real-time feed (refreshes every 8s) showing the last 10 scans with risk scores, verdicts, and indicators --- ## Config Updates - Gemini model 1: gemini-2.5-pro → gemini-3.5-flash - Gemini model 2: gemini-2.5-flash → gemini-3-flash-preview - primary_ai default: (none) → backend — prioritizes the private backend; falls back to Gemini API on failure. Set to empty or any other value to prioritize Gemini instead. --- ## Disclaimer - The AI Backend (Node.js server + Web Dashboard) is not open-source. - This SAST tool cannot guarantee 100% detection of all backdoor types.