Beacon Management Gateway (Honeycomb BTHP)

Overview

Python-based TCP listener that accepts beacon connections from implants, handles a custom binary protocol (BTHP), manages XTEA encryption key exchange, parses beacon payloads containing system survey data, and writes structured XML (RSI) files.

Protocol Stack

[TCP Connection]
       |
  [BTHP Header]        -- Beacon Transport Header Protocol
       |
  [Random Key Exchange] -- 32 bytes each direction, XOR-derived key
       |
  [XTEA Encrypted Data] -- 32-round ECB mode, 8-byte blocks
       |
  [Beacon Payload]      -- Version + OS + type/length data fields