Skip to main content
☠
DEATHOPSv1.0Linux Anti-Mortem System
KERNEL TELEMETRY CORE // ARMED•
COOLDOWN: 60M•WHATSAPP: OPENWA LIVE

LINUX HOST SECURITY &
TELEMETRY RADAR.

Continuous kernel observation, acute CVE detection, and instant WhatsApp dispatch before host mortality. Zero external pip modules, 100% Python 3 standard library.

Agent Footprint
0 External Pip
100% Python 3 Stdlib
Acute CVE Detection
RegreSSHion, Baron, PwnKit
Immediate Severity Matching
Resource Thresholds
Disk > 90% | RAM > 95%
OOM & Disk Freeze Prevention
Incident Auto-Clear
WhatsApp Auto-Entwarnung
Automated Resolution Feed
00 // CLIENT AGENT ONBOARDING
Target API Key:
ROOT SHELL / BASH EXECUTIONSHA-256 VERIFIED
curl -sSL "https://deathops.muc.cloud/install.sh" | sudo bash -s -- --api-key sec_agent_prod_alpha_7f
Zero Pip Dependencies
Python 3 Stdlib Only
Systemd Hardened Sandbox
Autostart + Auto-Recovery

01 // LIVE FLEET TELEMETRY MATRIX

4 NODES TRACKED
edge-gateway-01.infra.internalCRITICAL2 ACUTE
Debian GNU/Linux 12 (bookworm)•6.1.0-25-amd64•x86_64
Load (1m)1.84
RAM38.4%
Disk (/)92.4%
Details
CRITICAL: Disk Space Critical: / at 92.4% (38.2 GB free of 503.2 GB); 1 CRITICAL CVE Vulnerability(ies) Detected: openssh-server (CVE-2024-6387)
storage-vault-01.storage.internalOK
Debian GNU/Linux 12 (bookworm)•6.1.0-28-amd64•x86_64
Load (1m)0.42
RAM28.7%
Disk (/)28.4%
Details
ci-runner-node-01.build.internalOK
Ubuntu 22.04.4 LTS (jammy)•5.15.0-119-generic•x86_64
Load (1m)0.88
RAM27.8%
Disk (/)36.1%
Details
staging-worker-02.ops.internalWARNING
Rocky Linux 9.4 (Blue Onyx)•5.14.0-427.35.1.el9_4.x86_64•x86_64
Load (1m)1.05
RAM61.2%
Disk (/)81.2%
Details
WARNING: Security updates pending (2 packages); Disk / at 81.2%

02 // ACUTE INCIDENT RESOLUTION & CVE KILL-CHAIN

LIVE HEURISTICS ACTIVE
CRITICAL9.8 CRITICAL
CVE-2024-6387 : RegreSSHion
openssh-server (1:9.2p1-2+deb12u2)
CRITICAL
Mountpoint Saturation: / at 92.4%
edge-gateway-01.infra.internal: /dev/sda1 (465.0 / 503.2 GB)
CRITICAL7.8 HIGH
CVE-2021-4034 : PwnKit
policykit-1 / pkexec
HIGH7.8 HIGH
CVE-2021-3156 : Baron Samedit
sudo (1.8.27-1+deb10u3)
Target Subject
openssh-server (1:9.2p1-2+deb12u2)
CRITICAL
Threat Analysis & Exploit Mechanism

Signal handler race condition in OpenSSH sshd daemon allows unauthenticated remote root code execution.

Host Impact
Full remote compromise of Linux server without credentials.
Verified Remediation Command
sudo apt-get update && sudo apt-get --only-upgrade install openssh-server

03 // OPENWA WHATSAPP NOTIFICATION ENGINE

Target Gateway:gateway.openwa.internal
Intelligent Incident Cooldown

DeathOps combines acute telemetry evaluation with deduplicated alerting. Alerts are throttled across a 60-minute cooldown window to eliminate alert fatigue.

Auto-Entwarnung:Enabled
Cooldown Interval:60 Minutes
Default Recipient:491701234567@c.us
Trigger Live WhatsApp Ping
☠
DeathOps Guardian
OpenWA Verified Bot • Online
🚨 *DeathOps Alarm: edge-gateway-01.infra.internal*
🖥️ System: Debian GNU/Linux 12 (6.1.0-25-amd64)
⏰ Zeit: 04.11.2026 08:30:15
*Folgende akute Probleme erfordern sofortige Aufmerksamkeit:*
🔴 *Disk Space Critical: / at 92.4%*
  ↳ Mountpoint '/' capacity 92.4%. Only 38.2 GB remaining of 503.2 GB.
🔴 *1 CRITICAL CVE Vulnerability(ies) Detected*
  ↳ Immediate patching recommended: openssh-server (CVE-2024-6387)
🔧 *Empfohlene Schritte:*
• sudo apt-get --only-upgrade install openssh-server
• journalctl --vacuum-time=3d && docker system prune
08:30

04 // ZERO-DEPENDENCY CLIENT AGENT ARCHITECTURE

100% PYTHON 3 STDLIB
Zero Third-Party Pip Packages

Unlike heavyweight monitoring agents that require megabytes of pip packages, virtual environments or C-compilers, DeathOps runs instantly on bare-metal and container hosts with stock Python 3.

urllib.request
HTTPS Transport (Zero curl/requests dependency)
json
JSON Serialization & Deserialization
subprocess
APT / DNF / Systemctl package audit execution
os / statvfs
Filesystem mountpoints & disk capacity analysis
platform / socket
Kernel, architecture & FQDN identification
logging
Structured journald logging
Systemd Service-Hardening Security Sandbox

The agent runs encapsulated under strict Linux namespace and filesystem protection boundaries inside /lib/systemd/system/deathops-agent.service.

[Unit] & [Service] HARDENING DIRECTIVES
ProtectSystem=full
ProtectHome=read-only
PrivateTmp=true
NoNewPrivileges=false
Restart=always
RestartSec=30
Automated Package Generators:dpkg-deb (.deb) + rpmbuild (.rpm)