XERXES KNOW EVERY BOT · SEE EVERY REQUEST · CONTROL EVERY ACCESS

What Xerxes Is

Xerxes is a bot traffic reality controller. It does not reduce every automated request to a binary block/allow decision. It observes, classifies, scores, records, routes, and gives the operator a deliberate response surface.

Architecture

Xerxes separates fast routing, application intelligence, storage, analytics, and operator tooling so each layer has one job.

INTERNET / CLIENT
      │
      ▼
APACHE + .htaccess
      │
      ├── Active Bot Rules
      ├── Internal endpoint protections
      └── Hard-block section
      │
      ▼
XERXES PHP ENGINE
      │
      ├── detect.php
      ├── scoring / classification
      ├── analytics
      ├── payload routing
      └── AI tool bridge
      │
      ▼
SQLITE + LOG STORES
      │
      ├── bot rules
      ├── request telemetry
      └── settings
      │
      ├──────────────► BrainSurgeon
      │
      └──────────────► Ollama Operator Analysis

AI-Assisted, Not AI-Controlled

Xerxes 0.5.1 uses a hybrid operator model: deterministic application tools answer facts directly, while Ollama is reserved for interpretation and analysis.

BrainSurgeon

BrainSurgeon is Xerxes' deeper analysis utility. It reads the live Xerxes data stores, profiles IP behavior, reassesses scores, identifies attack paths, builds block candidates, and exports operator-reviewable reports.

Xerxes UI
   ↓
BrainSurgeon Report
   ↓
run_report.php
   ↓
run.sh
   ↓
Python analyzer
   ↓
LIVE Xerxes data
   ↓
reports/brain_surgeon_report.html

OXIDE · Network Messaging Interface

OXIDE replaces the earlier XMS/Snugglez client with one transport core and two front ends: GUI and CLI.

OXIDE
Network Messaging Interface
OXIDE/1.0 (XIDE-Transport; CLI)

./launch.sh
./cli.sh --check
./cli.sh --status

Active Bot Rules + Hard Blocks

The locked 0.5.1 baseline preserves predefined Active Bot Rules while keeping accumulated traffic state separate. Rule identity and intent survive a fresh start; collected observations do not.

Live Detect

detect.php is the direct live diagnostic endpoint. It classifies the current request and returns structured JSON without redirecting or blocking the operator's diagnostic request.

{
  "ok": true,
  "user_agent": "Mozilla/5.0 ...",
  "result": {
    "classification": {
      "category": "likely_human",
      "score": 0.79,
      "signals": [
        "ua:version-token",
        "req:runtime-endpoint"
      ],
      "decision": "allow"
    },
    "matched_bot": null,
    "engine": "scoring"
  }
}

Installation + Permissions

Xerxes is designed for a conventional Apache/PHP deployment with writable runtime directories and protected internal files.

/var/www/html/xerxes/

data/
logs/
utilities/BrainSurgeon/reports/

sudo chown -R www-data:www-data data logs
sudo chmod 775 data logs
sudo chmod 664 data/xerxes.sqlite

sudo chown -R www-data:www-data utilities/BrainSurgeon/reports
sudo chmod 775 utilities/BrainSurgeon/reports
sudo chmod 664 utilities/BrainSurgeon/reports/*

Testing

curl -i \
  -A "Mozilla/5.0" \
  http://localhost/xerxes/detect.php

curl -i \
  -A "Googlebot/2.1" \
  http://localhost/xerxes/detect.php

curl -i \
  http://localhost/xerxes/api/dashboard.php

Remember that Apache rules may intentionally route known automation before PHP sees it. Test both the direct diagnostic endpoint and real application routes.

Current Project Shape

/xerxes/
├── index.php
├── detect.php
├── payload_router.php
├── config.php
├── .htaccess
│
├── api/
│   ├── dashboard.php
│   ├── ollama.php
│   └── ai_tools.php
│
├── includes/
│   ├── ai_bridge.php
│   ├── analytics.php
│   ├── db.php
│   ├── functions.php
│   ├── htaccess.php
│   └── log_parser.php
│
├── templates/
│   ├── header.php
│   ├── footer.php
│   ├── images/
│   │   ├── icon.png
│   │   └── ogimage.png
│   └── css/
│       └── style.css
│
├── data/
│   ├── xerxes.sqlite
│   └── external.log
│
├── logs/
│   ├── access.log
│   └── hits.log
│
├── payloads/
│
└── utilities/
    ├── BrainSurgeon/
    └── OXIDE/

Operator First

Xerxes 0.5.1

Version 0.5.1 is the current locked baseline: a clean-data, preserved-rules build with repaired diagnostics, stable storage permissions, improved hard-block handling, shared visual identity, working BrainSurgeon integration, OXIDE transport, and a useful hybrid AI/tool layer.

XERXES 0.5.1
STATUS: LOCKED
MODE: OPERATOR CONTROLLED
INTELLIGENCE: ACTIVE
AUTONOMOUS CONFIG CHANGES: DISABLED

Road Forward