Archè_Public

Archè is a mobile-first security operations console designed for controlled research, testing, and simulation environments. This repository is a read-only showcase of its architecture, UI, and design philosophy.

Archè: Advanced Mobile Security Orchestration Platform

Status: Private Beta / Engineering Prototype Architecture: React Native (Expo), Offline-First, Zero-Trust Core Domains: Identity, Intelligence, Operations, Transport

Executive Summary

Archè is a high-assurance mobile command center engineered for security research and network operations. Unlike standard administration tools, Archè allows for the orchestration of complex security workflows—from network reconnaissance to authorized remote payload delivery—directly from a mobile device. It emphasizes operational security (OpSec) through local-only encryption and a zero-trust architecture.

System Architecture

The application is built on a modular "Domain-Driven" architecture, separating concerns into distinct capability silos to ensure stability and security.

🏗️ Design System & UX

• Custom Component Library: Built on a unified Core.tsx design system, utilizing a theme-aware token engine (spacing, typography, colors) for consistent UI scaling across iOS and Android.
• Tactical UI: Dark-mode first interface with high-contrast elements for visibility in low-light environments.
• Transient State: Leverages Zustand for high-performance, atomic state management, ensuring sensitive data is handled in memory and aggressively cleared.

🔐 Security & Cryptography (The "Vault")

• Local Enclave: Secrets never leave the device. All sensitive credentials are encrypted at rest using AES-256 backed by expo-crypto and platform-native secure storage.
• MFA Implementation: Full compliance with RFC 6238 (TOTP) and RFC 4226 (HOTP) standards, featuring visual counter synchronization and QR code provisioning.
• Access Control: Bio-metric authentication (FaceID/TouchID) gating for all sensitive modules.

Operational Modules

📡 Network Reconnaissance ("Recon" & "Scope")

A suite of active and passive analysis tools for immediate situational awareness:

• Layer 3/4 Diagnostics: Real-time IP geolocation, ISP ASN resolution, and TCP/UDP port analysis.
• Infrastructure Analysis: Whois data integration and DNS propagation tracking.
• Hardware Fingerprinting: Automated MAC address OUI lookup to identify vendor hardware on local networks.

🎮 Remote Administration Nexus ("C2")

A centralized controller for managing authorized remote access workflows:

• Multi-Platform Payloads: Dynamic generation of stagers for Windows (PowerShell), Linux (Bash/Python), and macOS (Zsh).
• Session Lifecycle Management: Visual tracking of active "Beacon" sessions and disconnected "Zombie" nodes.
• Heartbeat Monitoring: Real-time latency tracking and status health checks for deployed agents.

🚇 Encrypted Transport Layer ("Tunnel" & "Arsenal")

Unified interface for managing secure ingress/egress points:

• Provider Abstraction: Seamless API integration with Cloudflare Tunnels, Ngrok, and raw SSH local/remote port forwarding.
• Connection Resilience: Automated reconnection logic and status monitoring for unstable mobile networks.
• Dynamic Configuration: On-the-fly adjustment of tunnel regions and protocol types without service restart.

📓 Immutable Audit Log ("Journal")

• Operational History: Local SQLite database recording all critical actions, generated payloads, and tunnel connections.
• Search & Retrieval: Full-text search capability across past operations for post-incident review.

Technology Stack

• Runtime: React Native 0.81.5 / Expo 54.0
• Language: TypeScript 5.9 (Strict Mode)
• Storage: SQLite (Structured Data) + SecureStore (Credentials)
• Networking: react-native-tcp-socket, react-native-udp
• Navigation: Expo Router (File-based routing)

---

Disclaimer: Archè is a portfolio project demonstrating advanced capabilities in mobile network programming and security architecture. It is developed strictly for educational purposes and authorized testing environments.