diff --git a/web/api/views.py b/web/api/views.py index 89242fa5..e52a1e7b 100644 --- a/web/api/views.py +++ b/web/api/views.py @@ -23,8 +23,11 @@ class ListTodoNotes(APIView): req = self.request notes = TodoNote.objects.all().order_by('-id') scan_id = req.query_params.get('scan_id') + todo_id = req.query_params.get('todo_id') if scan_id: notes = notes.filter(scan_history__id=scan_id) + if todo_id: + notes = notes.filter(id=todo_id) notes = ReconNoteSerializer(notes, many=True) return Response({'notes': notes.data}) diff --git a/web/startScan/static/startScan/js/detail_scan.js b/web/startScan/static/startScan/js/detail_scan.js index e65e34d5..162451fa 100644 --- a/web/startScan/static/startScan/js/detail_scan.js +++ b/web/startScan/static/startScan/js/detail_scan.js @@ -1227,21 +1227,32 @@ function get_recon_notes(scan_id){ $('#tasks-count').empty(); $('#recon-task-list').empty(); rand_id = get_randid(); + $('#recon-task-list').append(`
`); for (var val in data['notes']){ note = data['notes'][val]; - $('#recon-task-list').append(``); - $(`#${rand_id}`).append(`
  • ${note['title']}
    • `); - } - for (var val in data['notes']){ - note = data['notes'][val]; - $('#recon-task-list').append(``); - $(`#${rand_id}`).append(`
  • ${note['title']}
    • `); - } - for (var val in data['notes']){ - note = data['notes'][val]; - $('#recon-task-list').append(``); - $(`#${rand_id}`).append(`
  • ${note['title']}
    • `); + div_id = 'todo_' + note['id']; + $(`#${rand_id}`).append(` +
    + + +

    ${truncate(note['description'], 100)}

    +
    +
    + `); } $('#tasks-count').html(`${data['notes'].length}`); }); } + + +function get_task_details(todo_id){ + $('#exampleModal').modal('show'); + $('.modal-text').empty(); + $('.modal-text').append(``); + $.getJSON(`/api/listTodoNotes/?todo_id=${todo_id}&format=json`, function(data) { + $('.modal-text').empty(); + note = data['notes'][0]; + $('.modal-title').html(`${split(note['title'], 80)}`); + $('#modal-text-content').append(`

    ${note['description']}

    `); + }); +} diff --git a/web/startScan/templates/startScan/detail_scan.html b/web/startScan/templates/startScan/detail_scan.html index 6e2f71ff..0796528e 100644 --- a/web/startScan/templates/startScan/detail_scan.html +++ b/web/startScan/templates/startScan/detail_scan.html @@ -23,12 +23,14 @@ Detailed Scan - + + + {% endblock custom_js_css_link %} @@ -374,121 +376,70 @@ Detailed Scan Results for {{history.domain.name}}
    - Recon Note/Todo
    -
    -
    -
    -
    -
    -
    + Recon Note/Todo +
    +
    +
    +
    +
    +
    +
    +
    -
    - -
    -
    -
    -
    IP Addresses
    - *IP Addresses highlighted with yellow are CDN IP +
    +
    +
    +
    IP Addresses
    + *IP Addresses highlighted with yellow are CDN IP +
    +
    +
    +
    +
    +
    +
    -
    -
    -
    +
    +
    +
    +
    +
    Discovered Ports
    + *Ports highlighted with red are uncommon Ports. +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    +
    Discovered Technologies
    +
    +
    +
    +
    +
    -
    -
    -
    -
    Discovered Ports
    - *Ports highlighted with red are uncommon Ports. -
    -
    -
    -
    -
    + {% if history.osint %} +
    +
    +
    +
    +
    Dork Categories
    -
    -
    -
    -
    -
    -
    -
    Discovered Technologies
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    - {% if history.osint %} -
    -
    -
    -
    -
    Dork Categories
    -
    -
    -
    -
    -
    -
    -
    -
    -
    -
    - {% endif %} - {% if history.vulnerability_scan %} -
    -
    -
    -
    -
    Vulnerability Scan Summary
    -
    -
    -
    -
    -
    -
    -
    -
    - - - - - - - - - - {% for vulnerability in vulnerability_list %} - - - - - - {% endfor %} - -
    Vulnerability
    Severity
    Vulnerable URL
    {{vulnerability.name}}{% if vulnerability.severity == 0 %} - Info - {% elif vulnerability.severity == 1 %} - Low - {% elif vulnerability.severity == 2 %} - Medium - {% elif vulnerability.severity == 3 %} - High - {% elif vulnerability.severity == 4 %} - Critical - {% endif %}{{vulnerability.http_url|truncatechars:50}}
    -
    - *Vulnerability list sorted by severity +
    +
    +
    @@ -496,334 +447,118 @@ Detailed Scan Results for {{history.domain.name}}
    {% endif %} + {% if history.vulnerability_scan %}
    - {% include 'base/_items/interesting_recon.html' %} -
    -
    -
    -
    -
    +
    -
    - -   Subdomain Changes -
    -

    Comparing against the scan performed on {{last_scan.start_scan_date}}

    -

    During this scan - - -

    +
    Vulnerability Scan Summary
    -
    - - - - - - - - - - -
    Subdomain
    Page Title
    Status
    Content Length
    Change
    -
    -
    -
    -
    -
    -
    -
    -
    - -   Endpoint Changes -
    -

    Comparing against the scan performed on {{last_scan.start_scan_date}}

    -

    During this scan - - -

    -
    -
    -
    - - - - - - - - - - -
    URL
    Page Title
    Status
    Content Length
    Change
    -
    -
    -
    -
    -
    -
    -
    -
    -
    - - - - - - - - - - - - - - - - - - - - - - - - - - -
    StatusSubdomainEndpointsVulnerabilitiesStatusTitleIP AddressPortsContent LengthScreenshotResponse TimeTechnologyCheckedHTTP URLCNAMEis_interestingInfoLowMediumHighCritical
    -
    -
    -
    - {% if history.screenshot %} -
    -
    -
    - -
    -
    -
    -
    -
    -
    -
    - -
    -
    Loading Screenshots...
    -
    - -
    -
    - {% endif %} - {% if history.dir_file_search %} -
    -
    -
    - - - - - - - - - - - - - -
    StatusSubdomainStatusPage TitleDirectoriesHTTP URLIs InteretingChecked
    + {% endif %} +
    +
    + {% include 'base/_items/interesting_recon.html' %} +
    -
    -
    - {% endif %} -
    -
    -
    - - - - - - - - - - - - - - - -
    HTTP URLStatusPage TitleTagsContent TypeContent LengthTechnologyWebserverResponse timeDefault URL
    -
    -
    -
    - {% if history.vulnerability_scan %} -
    -
    -
    - - - - - - - - - - - - - - -
    StatusTitleSeverityVulnerable URLDetailStatusMatcher NameTagsReference
    -
    -
    -
    - {% endif %} - {% if history.osint %} -
    -
    -
    -
    -
    -
    Employees/People associated with {{history.domain.name}}
    -
    -
    -
    -
    +
    +
    +
    +
    +
    + +   Subdomain Changes +
    +

    Comparing against the scan performed on {{last_scan.start_scan_date}}

    +

    During this scan + + +

    +
    +
    - +
    - - + + + + + - -
    Employee Name
    Designation
    Subdomain
    Page Title
    Status
    Content Length
    Change
    -
    -
    -
    -
    -
    Discovered Email addresses
    -
    -
    -
    -
    +
    +
    +
    +
    + +   Endpoint Changes +
    +

    Comparing against the scan performed on {{last_scan.start_scan_date}}

    +

    During this scan + + +

    +
    +
    - +
    - - - - - - -
    Email Address
    Esposed Credentials
    -
    -
    -
    -
    -
    -
    -
    -
    -
    Discovered Metadata
    -
    -
    -
    -
    -
    - - - - - - - - - - -
    Document
    User
    Metadata
    -
    -
    -
    -
    -
    -
    -
    -
    -
    Dork Data
    -
    -
    -
    -
    -
    -
    -
    - - - - - + + + + - -
    Dork Type
    Description
    URL
    Page Title
    Status
    Content Length
    Change
    @@ -831,38 +566,306 @@ Detailed Scan Results for {{history.domain.name}}
    -
    - {% endif %} -
    -
    -
    -
    -
    -
    - -
    -
    +
    +
    +
    + + + + + + + + + + + + + + + + + + + + + + + + + + +
    StatusSubdomainEndpointsVulnerabilitiesStatusTitleIP AddressPortsContent LengthScreenshotResponse TimeTechnologyCheckedHTTP URLCNAMEis_interestingInfoLowMediumHighCritical
    +
    +
    +
    + {% if history.screenshot %} +
    +
    +
    + +
    +
    +
    +
    +
    +
    +

    -
    Loading Recon Visualization...
    +
    Loading Screenshots...
    +
    + +
    +
    +
    -
    -
    +
    +
    +
    + {% endif %} + {% if history.dir_file_search %} +
    +
    +
    + + + + + + + + + + + + + +
    StatusSubdomainStatusPage TitleDirectoriesHTTP URLIs InteretingChecked
    +
    +
    +
    + {% endif %} +
    +
    +
    + + + + + + + + + + + + + + + +
    HTTP URLStatusPage TitleTagsContent TypeContent LengthTechnologyWebserverResponse timeDefault URL
    +
    +
    +
    + {% if history.vulnerability_scan %} +
    +
    +
    + + + + + + + + + + + + + + +
    StatusTitleSeverityVulnerable URLDetailStatusMatcher NameTagsReference
    +
    +
    +
    + {% endif %} + {% if history.osint %} +
    +
    +
    +
    +
    +
    Employees/People associated with {{history.domain.name}}
    -
    - *Subdomains highlighted with green are 20X (OK) HTTP status - *Subdomains highlighted with orange are 30X (Redirect) HTTP status - *Subdomains highlighted with red are 40X (Not found) HTTP status +
    +
    +
    +
    + + + + + + + + + +
    Employee Name
    Designation
    +
    +
    +
    +
    +
    +
    +
    +
    +
    Discovered Email addresses
    +
    +
    +
    +
    +
    + + + + + + + + + +
    Email Address
    Esposed Credentials
    +
    +
    +
    +
    +
    +
    +
    +
    +
    Discovered Metadata
    +
    +
    +
    +
    +
    + + + + + + + + + + +
    Document
    User
    Metadata
    +
    +
    +
    +
    +
    +
    +
    +
    +
    Dork Data
    +
    +
    +
    +
    +
    +
    +
    + + + + + + + + + + +
    Dork Type
    Description
    URL
    +
    +
    +
    +
    +
    +
    +
    + {% endif %} +
    +
    +
    +
    +
    +
    + +
    +
    + +
    +
    Loading Recon Visualization...
    +
    +
    +
    +
    +
    +
    +
    + *Subdomains highlighted with green are 20X (OK) HTTP status + *Subdomains highlighted with orange are 30X (Redirect) HTTP status + *Subdomains highlighted with red are 40X (Not found) HTTP status +
    @@ -872,759 +875,759 @@ Detailed Scan Results for {{history.domain.name}}
    -
    - {# modal #} - {% include 'base/_items/tab_modal.html' %} - {% endblock main_content %} + {# modal #} + {% include 'base/_items/tab_modal.html' %} + {% endblock main_content %} - {% block page_level_script %} - - - - - - - - - - - + {% block page_level_script %} + + + + + + + + + + + + - + get_dork_summary({{scan_history_id}}); -{% endblock page_level_script %} + get_recon_notes({{scan_history_id}}); + + {% if history.fetch_url and history.used_gf_patterns %} + // gf patterns + {% for pattern in history.used_gf_patterns|split:"," %} + $("#pills-{{pattern}}-tab").click(function() { + get_endpoints({{scan_history_id}}, '{{pattern}}'); + }); + {% endfor %} + {% endif %} + + + + {% endblock page_level_script %} diff --git a/web/static/assets/css/custom.css b/web/static/assets/css/custom.css index 39a73d8c..5068c49c 100644 --- a/web/static/assets/css/custom.css +++ b/web/static/assets/css/custom.css @@ -497,3 +497,9 @@ div.dataTables_wrapper div.dataTables_filter { .inner-div { display: inline-block; } + + +.text-strike { + text-decoration: line-through; + text-decoration-color: #6c757d; +}