AuntieHecker: Exposing a Long-Term Digital Intrusion
The AuntieHecker repository by Deppy04 is more than just code—it’s a personal and technical chronicle of uncovering and documenting a sustained digital compromise. This public repository serves as both a journal and a toolset, aiming to invite community insight, validation, and assistance.
Repository Overview
- Purpose: The project is focused on “Finding my hacker. Publishing redacted evidence and SpiderFoot results from a long-term digital compromise affecting multiple devices.”1
- Technology Stack:
- Built using React, TypeScript, and Vite—offering fast development setup and hot module reloading.2
- Structured across multiple directories including:
analysis
, data
, evidence
, iocs
, public
, reports
, scripts/iocs
, src
- Plus config files like
README.md
, SECURITY.md
, and organizational metadata (ORGANIZATION.md
).3
Key Components & Structure
Directories
- Evidence & IOCs:
evidence/
likely contains redacted proof of intrusion.
iocs/
presumably holds Indicators of Compromise—an invaluable resource for incident response.
scripts/iocs/
may provide tooling to process or analyze IOCs.
analysis/
and reports/
indicate structured documentation and findings.
- Data & Automation:
data/
, reports/
, and public/
folders hint at aggregated data and possibly a web-facing dashboard or report.
src/
likely underpins a web interface or presentation layer for the documented findings.
- Project Setup:
- Standard project scaffolding:
package.json
, tsconfig.*
, vite.config.ts
, ESLint configs, and various gitignore/type config files.4
Purpose & Intent
The repository is explicitly framed as a public exposition of intrusion artifacts in order to:
- Seek validation of findings.
- Gain insight from security professionals or the broader community.
- Solicit support, possibly in identifying threat actors or strengthening defenses.5
Snapshot Summary
| Attribute | Details |
|------------------------|-------------------------------------------------------------------------|
| Project Name | AuntieHecker (by Deppy04) |
| Core Objective | Document and expose evidence of long-term digital compromise |
| Tech Stack | React, TypeScript, Vite (front-end build system) |
| Repository Structure | Evidence, IOCs, analysis, reports, data scripting—plus standard configs |
| Public Visibility | Open for community view, commentary, assistance |
| Current Status | Active (45 commits, 1 star, 1 fork)6 |
Broader Significance
- Real-World Security Insight: Publicly presenting intrusion evidence is rare and helps demystify threat activity.
- Community Vigilance: Open sourcing such investigations invites peer review and collaborative detection.
- Empowerment Through Transparency: By sharing findings, the project helps educate others and foster collective security awareness.
- Toolchain for Incident Response: Structured IoC and evidence analysis can serve as a template for similar investigations.
Final Thoughts
The AuntieHecker repository is a courageous and technically rich project capturing the journey of uncovering a deep digital compromise. With modular analysis files, evidence frameworks, and open tooling, it demonstrates the power of transparency and collaboration in cybersecurity. Whether you're a developer, analyst, or security advocate, this project offers a unique window into real-world intrusion and remediation efforts.
Consider exploring the repo if you're interested in OSINT, intrusion detection, or forensic investigation frameworks.7