<p align="center"> <h1 align="center">🛰️ S H A D O W B R O K E R</h1> <p align="center"><strong>Global Threat Intercept — Real-Time Geospatial Intelligence Platform</strong></p> <p align="center"> </p> </p>

https://github.com/user-attachments/assets/248208ec-62f7-49d1-831d-4bd0a1fa6852

ShadowBroker is a real-time, multi-domain OSINT dashboard that aggregates live data from dozens of open-source intelligence feeds and renders them on a unified dark-ops map interface. It tracks aircraft, ships, satellites, earthquakes, conflict zones, CCTV networks, GPS jamming, and breaking geopolitical events — all updating in real time.

Built with Next.js, MapLibre GL, FastAPI, and Python, it's designed for analysts, researchers, and enthusiasts who want a single-pane-of-glass view of global activity.

Why This Exists

A surprising amount of global telemetry is already public:

Aircraft ADS-B broadcasts
Maritime AIS signals
Satellite orbital data
Earthquake sensors
Environmental monitoring networks

This data is scattered across dozens of tools and APIs. ShadowBroker began as an experiment to see what the world looks like when these signals are combined into a single interface.

The project does not introduce new surveillance capabilities — it aggregates and visualizes existing public datasets, including public aircraft registration records. It is fully open-source so anyone can audit exactly what data is accessed and how. No user data is collected or transmitted — the dashboard runs entirely in your browser against a self-hosted backend.

Interesting Use Cases

Track everything from Air Force One to the private jets of billionaires, dictators, and corporations
Monitor satellites passing overhead and see high-resolution satellite imagery
Nose around local emergency scanners
Watch naval traffic worldwide
Detect GPS jamming zones
Follow earthquakes and other natural disasters in real time

⚡ Quick Start (Docker or Podman)

Linux/Mac

git clone https://github.com/BigBodyCobain/Shadowbroker.git
cd Shadowbroker
./compose.sh up -d

Windows

git clone https://github.com/BigBodyCobain/Shadowbroker.git
cd Shadowbroker
docker-compose up -d

Open http://localhost:3000 to view the dashboard! (Requires Docker or Podman)

compose.sh auto-detects docker compose, docker-compose, podman compose, and podman-compose. If both runtimes are installed, you can force Podman with ./compose.sh --engine podman up -d. Do not append a trailing . to that command; Compose treats it as a service name.

🔄 How to Update

If you are coming from v0.9.5 or older, you must pull the new code and rebuild your containers to see the latest data layers and performance fixes.

🐧 Linux & 🍎 macOS (Terminal / Zsh / Bash)

Since these systems are Unix-based, you can use the helper script directly.

Pull the latest code:

git pull origin main

Run the update script:

./compose.sh down
./compose.sh up --build -d

🪟 Windows (Command Prompt or PowerShell)

Windows handles scripts differently. You have two ways to update:

Method A: The Direct Way (Recommended) Use the docker compose commands directly. This works in any Windows terminal (CMD, PowerShell, or Windows Terminal).

Pull the latest code:

git pull origin main

Rebuild the containers:

docker compose down
docker compose up --build -d

Method B: Using the Script (Git Bash)

If you prefer using the ./compose.sh script on Windows, you must use Git Bash (installed with Git for Windows).

Open your project folder, Right-Click, and select "Open Git Bash here".

Run the Linux commands:

./compose.sh down
./compose.sh up --build -d

⚠️ Stuck on the old version?

If the dashboard still shows old data after updating:

Clear Docker Cache: docker compose build --no-cache

Prune Images: docker image prune -f

Check Logs: ./compose.sh logs -f backend (or docker compose logs -f backend)

☸️ Kubernetes / Helm (Advanced)

For high-availability deployments or home-lab clusters, ShadowBroker supports deployment via Helm. This chart is based on the bjw-s-labs template and provides a robust, modular setup for both the backend and frontend.

1. Add the Repository:

helm repo add bjw-s-labs https://bjw-s-labs.github.io/helm-charts/
helm repo update

2. Install the Chart:

# Install from the local helm/chart directory
helm install shadowbroker ./helm/chart --create-namespace --namespace shadowbroker

3. Key Features:

Modular Architecture: Individually scale the intelligence backend and the HUD frontend.
Security Context: Runs with restricted UIDs (1001) for container hardening.
Ingress Ready: Compatible with Traefik, Cert-Manager, and Gateway API for secure, external access to your intelligence node.

Special thanks to @chr0n1x for contributing the initial Kubernetes architecture.

✨ Features

🛩️ Aviation Tracking

Commercial Flights — Real-time positions via OpenSky Network (~5,000+ aircraft)
Private Aircraft — Light GA, turboprops, bizjets tracked separately
Private Jets — High-net-worth individual aircraft with owner identification
Military Flights — Tankers, ISR, fighters, transports via adsb.lol military endpoint
Flight Trail Accumulation — Persistent breadcrumb trails for all tracked aircraft
Holding Pattern Detection — Automatically flags aircraft circling (>300° total turn)
Aircraft Classification — Shape-accurate SVG icons: airliners, turboprops, bizjets, helicopters
Grounded Detection — Aircraft below 100ft AGL rendered with grey icons

🚢 Maritime Tracking

AIS Vessel Stream — 25,000+ vessels via aisstream.io WebSocket (real-time)
Ship Classification — Cargo, tanker, passenger, yacht, military vessel types with color-coded icons
Carrier Strike Group Tracker — All 11 active US Navy aircraft carriers with OSINT-estimated positions
- Automated GDELT news scraping for carrier movement intelligence
- 50+ geographic region-to-coordinate mappings
- Disk-cached positions, auto-updates at 00:00 & 12:00 UTC
Cruise & Passenger Ships — Dedicated layer for cruise liners and ferries
Clustered Display — Ships cluster at low zoom with count labels, decluster on zoom-in

🛰️ Space & Satellites

Orbital Tracking — Real-time satellite positions via CelesTrak TLE data + SGP4 propagation (2,000+ active satellites, no API key required)
Mission-Type Classification — Color-coded by mission: military recon (red), SAR (cyan), SIGINT (white), navigation (blue), early warning (magenta), commercial imaging (green), space station (gold)

🌍 Geopolitics & Conflict

Global Incidents — GDELT-powered conflict event aggregation (last 8 hours, ~1,000 events)
Ukraine Frontline — Live warfront GeoJSON from DeepState Map
SIGINT/RISINT News Feed — Real-time RSS aggregation from multiple intelligence-focused sources with user-customizable feeds (up to 20 sources, configurable priority weights 1-5)
Region Dossier — Right-click anywhere on the map for:
- Country profile (population, capital, languages, currencies, area)
- Head of state & government type (Wikidata SPARQL)
- Local Wikipedia summary with thumbnail

🛰️ Satellite Imagery

NASA GIBS (MODIS Terra) — Daily true-color satellite imagery overlay with 30-day time slider, play/pause animation, and opacity control (~250m/pixel)
High-Res Satellite (Esri) — Sub-meter resolution imagery via Esri World Imagery — zoom into buildings and terrain detail (zoom 18+)
Sentinel-2 Intel Card — Right-click anywhere on the map for a floating intel card showing the latest Sentinel-2 satellite photo with capture date, cloud cover %, and clickable full-resolution image (10m resolution, updated every ~5 days)
SATELLITE Style Preset — Quick-toggle high-res imagery via the STYLE button (DEFAULT → SATELLITE → FLIR → NVG → CRT)

📻 Software-Defined Radio (SDR)

KiwiSDR Receivers — 500+ public SDR receivers plotted worldwide with clustered amber markers
Live Radio Tuner — Click any KiwiSDR node to open an embedded SDR tuner directly in the SIGINT panel
Metadata Display — Node name, location, antenna type, frequency bands, active users

📷 Surveillance

CCTV Mesh — 4,400+ live traffic cameras from:
- 🇬🇧 Transport for London JamCams
- 🇺🇸 Austin, TX TxDOT
- 🇺🇸 NYC DOT
- 🇸🇬 Singapore LTA
- 🇪🇸 Spanish DGT (national roads)
- 🇪🇸 Madrid City Hall
- 🇪🇸 Málaga City
- 🇪🇸 Vigo City
- 🇪🇸 Vitoria-Gasteiz
- Custom URL ingestion
Feed Rendering — Automatic detection & rendering of video, MJPEG, HLS, embed, satellite tile, and image feeds
Clustered Map Display — Green dots cluster with count labels, decluster on zoom

📡 Signal Intelligence

GPS Jamming Detection — Real-time analysis of aircraft NAC-P (Navigation Accuracy Category) values
- Grid-based aggregation identifies interference zones
- Red overlay squares with "GPS JAM XX%" severity labels
Radio Intercept Panel — Scanner-style UI for monitoring communications

🔥 Environmental & Infrastructure Monitoring

NASA FIRMS Fire Hotspots (24h) — 5,000+ global thermal anomalies from NOAA-20 VIIRS satellite, updated every cycle. Flame-shaped icons color-coded by fire radiative power (FRP): yellow (low), orange, red, dark red (intense). Clustered at low zoom with fire-shaped cluster markers.
Space Weather Badge — Live NOAA geomagnetic storm indicator in the bottom status bar. Color-coded Kp index: green (quiet), yellow (active), red (storm G1–G5). Data from SWPC planetary K-index 1-minute feed.
Internet Outage Monitoring — Regional int

Shadowbroker

Install / Use

README