Autarch/web/templates/hack_hijack.html

{% extends "base.html" %}
{% block title %}Hack Hijack — AUTARCH{% endblock %}
{% block content %}
<div class="page-header">
    <h1>Hack Hijack</h1>
    <p class="text-muted">Scan for existing compromises and take over backdoors</p>
</div>

<div class="tabs">
    <button class="tab active" onclick="switchTab('scan')">Scan Target</button>
    <button class="tab" onclick="switchTab('results')">Results</button>
    <button class="tab" onclick="switchTab('sessions')">Sessions <span id="session-count" class="badge" style="display:none">0</span></button>
    <button class="tab" onclick="switchTab('history')">History</button>
</div>

<!-- Scan Tab -->
<div id="tab-scan" class="tab-content active">
    <div class="card" style="max-width:700px">
        <h3>Target Scan</h3>
        <div class="form-group">
            <label>Target IP Address</label>
            <input type="text" id="hh-target" class="form-control" placeholder="192.168.1.100">
        </div>
        <div class="form-group">
            <label>Scan Type</label>
            <select id="hh-scan-type" class="form-control" onchange="toggleCustomPorts()">
                <option value="quick">Quick — Backdoor signature ports only (~30 ports)</option>
                <option value="full">Full — All suspicious ports (~70 ports)</option>
                <option value="nmap">Nmap Deep — Service version + OS detection (requires nmap)</option>
                <option value="custom">Custom — Specify ports</option>
            </select>
        </div>
        <div class="form-group" id="custom-ports-group" style="display:none">
            <label>Custom Ports (comma-separated)</label>
            <input type="text" id="hh-custom-ports" class="form-control" placeholder="22,80,443,445,4444,8080">
        </div>
        <button id="hh-scan-btn" class="btn btn-primary" onclick="startScan()">Scan for Compromises</button>
        <div id="hh-scan-status" style="margin-top:1rem;display:none">
            <div class="spinner-inline"></div>
            <span id="hh-scan-msg">Scanning...</span>
        </div>
    </div>

    <div class="card" style="margin-top:1.5rem">
        <h3>What This Scans For</h3>
        <div style="display:grid;grid-template-columns:repeat(auto-fill,minmax(200px,1fr));gap:1rem;font-size:0.85rem">
            <div><strong style="color:var(--danger)">EternalBlue</strong><br>DoublePulsar SMB implant, MS17-010 vulnerability</div>
            <div><strong style="color:#f59e0b">RAT / C2</strong><br>Meterpreter, Cobalt Strike, njRAT, DarkComet, Quasar, AsyncRAT, Gh0st, Poison Ivy</div>
            <div><strong style="color:#6366f1">Shell Backdoors</strong><br>Netcat listeners, bind shells, telnet backdoors, rogue SSH</div>
            <div><strong style="color:#22c55e">Web Shells</strong><br>PHP/ASP/JSP shells on HTTP services</div>
            <div><strong style="color:#8b5cf6">Proxies</strong><br>SOCKS, HTTP proxies, tunnels used as pivot points</div>
            <div><strong style="color:#06b6d4">Miners</strong><br>Cryptocurrency mining stratum connections</div>
        </div>
    </div>
</div>

<!-- Results Tab -->
<div id="tab-results" class="tab-content" style="display:none">
    <div id="hh-no-results" class="card" style="text-align:center;color:var(--text-muted)">
        No scan results yet. Run a scan from the Scan tab.
    </div>
    <div id="hh-results" style="display:none">
        <div class="card">
            <div style="display:flex;justify-content:space-between;align-items:center">
                <h3>Scan: <span id="res-target" style="color:var(--accent)"></span></h3>
                <span id="res-time" style="font-size:0.8rem;color:var(--text-muted)"></span>
            </div>
            <div style="display:flex;gap:2rem;margin:1rem 0;font-size:0.85rem">
                <div><strong id="res-ports-count">0</strong> open ports</div>
                <div><strong id="res-backdoors-count" style="color:var(--danger)">0</strong> backdoor indicators</div>
                <div>Duration: <strong id="res-duration">0</strong>s</div>
                <div id="res-os" style="display:none">OS: <strong id="res-os-text"></strong></div>
            </div>
        </div>

        <!-- Backdoors -->
        <div id="hh-backdoors-section" class="card" style="margin-top:1rem;display:none">
            <h3 style="color:var(--danger)">Backdoor Indicators</h3>
            <table class="data-table" style="margin-top:0.5rem">
                <thead><tr>
                    <th>Confidence</th><th>Signature</th><th>Port</th>
                    <th>Category</th><th>Details</th><th>Action</th>
                </tr></thead>
                <tbody id="hh-backdoors-body"></tbody>
            </table>
        </div>

        <!-- SMB Info -->
        <div id="hh-smb-section" class="card" style="margin-top:1rem;display:none">
            <h3>SMB / EternalBlue</h3>
            <div id="hh-smb-info" style="font-size:0.85rem"></div>
        </div>

        <!-- Open Ports -->
        <div class="card" style="margin-top:1rem">
            <h3>Open Ports</h3>
            <table class="data-table" style="margin-top:0.5rem">
                <thead><tr>
                    <th>Port</th><th>Protocol</th><th>Service</th><th>Banner</th>
                </tr></thead>
                <tbody id="hh-ports-body"></tbody>
            </table>
        </div>
    </div>
</div>

<!-- Sessions Tab -->
<div id="tab-sessions" class="tab-content" style="display:none">
    <div id="hh-no-sessions" class="card" style="text-align:center;color:var(--text-muted)">
        No active sessions. Take over a detected backdoor to start a session.
    </div>
    <div id="hh-sessions-list"></div>

    <!-- Shell terminal -->
    <div id="hh-shell" class="card" style="margin-top:1rem;display:none">
        <div style="display:flex;justify-content:space-between;align-items:center">
            <h3>Shell: <span id="shell-target" style="color:var(--accent)"></span></h3>
            <button class="btn btn-sm" style="background:var(--danger);color:#fff" onclick="closeCurrentSession()">Disconnect</button>
        </div>
        <div id="shell-output" style="background:#0a0a0a;color:#0f0;font-family:monospace;font-size:0.8rem;
            padding:1rem;border-radius:var(--radius);height:400px;overflow-y:auto;white-space:pre-wrap;margin:0.5rem 0"></div>
        <div style="display:flex;gap:0.5rem;margin-top:0.5rem">
            <input type="text" id="shell-input" class="form-control" placeholder="Enter command..."
                   onkeypress="if(event.key==='Enter')shellExec()" style="font-family:monospace">
            <button class="btn btn-primary" onclick="shellExec()">Run</button>
        </div>
    </div>
</div>

<!-- History Tab -->
<div id="tab-history" class="tab-content" style="display:none">
    <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:1rem">
        <h3>Scan History</h3>
        <button class="btn btn-sm" style="background:var(--danger);color:#fff" onclick="clearHistory()">Clear All</button>
    </div>
    <div id="hh-history-list"></div>
</div>

<style>
.badge{display:inline-block;background:var(--danger);color:#fff;border-radius:10px;padding:0 6px;font-size:0.7rem;margin-left:4px;vertical-align:top}
.conf-high{color:var(--danger);font-weight:700}
.conf-medium{color:#f59e0b;font-weight:600}
.conf-low{color:var(--text-muted)}
.spinner-inline{display:inline-block;width:14px;height:14px;border:2px solid var(--border);border-top-color:var(--accent);border-radius:50%;animation:spin 0.8s linear infinite;vertical-align:middle;margin-right:6px}
@keyframes spin{to{transform:rotate(360deg)}}
.cat-eternalblue{color:var(--danger)}
.cat-rat{color:#f59e0b}
.cat-shell{color:#6366f1}
.cat-webshell{color:#22c55e}
.cat-proxy{color:#8b5cf6}
.cat-miner{color:#06b6d4}
.cat-generic{color:var(--text-secondary)}
</style>

<script>
let currentScanResult = null;
let currentSessionId = null;
let pollTimer = null;

function switchTab(name){
    document.querySelectorAll('.tab').forEach((t,i)=>t.classList.toggle('active',
        ['scan','results','sessions','history'][i]===name));
    document.querySelectorAll('.tab-content').forEach(c=>c.style.display='none');
    document.getElementById('tab-'+name).style.display='';
    if(name==='sessions') loadSessions();
    if(name==='history') loadHistory();
}

function toggleCustomPorts(){
    document.getElementById('custom-ports-group').style.display=
        document.getElementById('hh-scan-type').value==='custom'?'':'none';
}

function startScan(){
    const target=document.getElementById('hh-target').value.trim();
    if(!target){alert('Enter a target IP');return}
    const scanType=document.getElementById('hh-scan-type').value;
    let customPorts=[];
    if(scanType==='custom'){
        customPorts=document.getElementById('hh-custom-ports').value
            .split(',').map(p=>parseInt(p.trim())).filter(p=>p>0&&p<65536);
        if(!customPorts.length){alert('Enter valid ports');return}
    }
    document.getElementById('hh-scan-btn').disabled=true;
    document.getElementById('hh-scan-status').style.display='';
    document.getElementById('hh-scan-msg').textContent='Scanning '+target+'...';

    fetch('/hack-hijack/scan',{method:'POST',headers:{'Content-Type':'application/json'},
        body:JSON.stringify({target,scan_type:scanType,custom_ports:customPorts})})
    .then(r=>r.json()).then(d=>{
        if(!d.ok){showScanError(d.error);return}
        pollScan(d.job_id);
    }).catch(e=>showScanError(e.message));
}

function pollScan(jobId){
    if(pollTimer) clearInterval(pollTimer);
    pollTimer=setInterval(()=>{
        fetch('/hack-hijack/scan/'+jobId).then(r=>r.json()).then(d=>{
            if(!d.done) return;
            clearInterval(pollTimer);pollTimer=null;
            document.getElementById('hh-scan-btn').disabled=false;
            document.getElementById('hh-scan-status').style.display='none';
            if(!d.ok){showScanError(d.error);return}
            currentScanResult=d.result;
            renderResults(d.result);
            switchTab('results');
        }).catch(()=>{});
    },1500);
}

function showScanError(msg){
    document.getElementById('hh-scan-btn').disabled=false;
    document.getElementById('hh-scan-status').style.display='none';
    alert('Scan error: '+msg);
}

function renderResults(r){
    document.getElementById('hh-no-results').style.display='none';
    document.getElementById('hh-results').style.display='';
    document.getElementById('res-target').textContent=r.target;
    document.getElementById('res-time').textContent=r.scan_time.replace('T',' ').slice(0,19)+' UTC';
    document.getElementById('res-ports-count').textContent=r.open_ports.length;
    document.getElementById('res-backdoors-count').textContent=r.backdoors.length;
    document.getElementById('res-duration').textContent=r.duration;
    if(r.os_guess){
        document.getElementById('res-os').style.display='';
        document.getElementById('res-os-text').textContent=r.os_guess;
    }

    // Ports table
    const pb=document.getElementById('hh-ports-body');
    pb.innerHTML='';
    r.open_ports.forEach(p=>{
        const tr=document.createElement('tr');
        tr.innerHTML=`<td>${p.port}</td><td>${p.protocol}</td><td>${p.service||'—'}</td>
            <td style="font-family:monospace;font-size:0.75rem;max-width:400px;overflow:hidden;text-overflow:ellipsis">${esc(p.banner||'')}</td>`;
        pb.appendChild(tr);
    });

    // Backdoors
    const bs=document.getElementById('hh-backdoors-section');
    const bb=document.getElementById('hh-backdoors-body');
    if(r.backdoors.length){
        bs.style.display='';
        bb.innerHTML='';
        r.backdoors.forEach((b,i)=>{
            const tr=document.createElement('tr');
            tr.innerHTML=`<td class="conf-${b.confidence}">${b.confidence.toUpperCase()}</td>
                <td>${esc(b.signature)}</td><td>${b.port}</td>
                <td><span class="cat-${b.category}">${b.category}</span></td>
                <td style="font-size:0.8rem">${esc(b.details)}</td>
                <td><button class="btn btn-sm btn-primary" onclick="tryTakeover(${i})">Takeover</button></td>`;
            bb.appendChild(tr);
        });
    } else {
        bs.style.display='none';
    }

    // SMB
    const ss=document.getElementById('hh-smb-section');
    if(r.smb_info&&(r.smb_info.vulnerable||r.smb_info.os)){
        ss.style.display='';
        let html='';
        if(r.smb_info.vulnerable) html+='<p style="color:var(--danger);font-weight:700">MS17-010 (EternalBlue) VULNERABLE</p>';
        if(r.smb_info.os) html+=`<p>OS: ${esc(r.smb_info.os)}</p>`;
        if(r.smb_info.signing) html+=`<p>SMB Signing: ${esc(r.smb_info.signing)}</p>`;
        document.getElementById('hh-smb-info').innerHTML=html;
    } else {
        ss.style.display='none';
    }
}

function tryTakeover(idx){
    if(!currentScanResult) return;
    const bd=currentScanResult.backdoors[idx];
    const host=currentScanResult.target;
    fetch('/hack-hijack/takeover',{method:'POST',headers:{'Content-Type':'application/json'},
        body:JSON.stringify({host,backdoor:{port:bd.port,takeover_method:bd.takeover_method}})})
    .then(r=>r.json()).then(d=>{
        if(d.session_id){
            currentSessionId=d.session_id;
            switchTab('sessions');
            openShell(d.session_id,host+':'+bd.port,d.initial_output||d.message||'');
        } else {
            alert(d.message||d.error||'Takeover result received');
            if(d.msf_command){
                // Copy MSF command to clipboard
                navigator.clipboard.writeText(d.msf_command).then(()=>{
                    alert('MSF command copied to clipboard');
                }).catch(()=>{});
            }
        }
    }).catch(e=>alert('Error: '+e.message));
}

function loadSessions(){
    fetch('/hack-hijack/sessions').then(r=>r.json()).then(d=>{
        const list=document.getElementById('hh-sessions-list');
        const badge=document.getElementById('session-count');
        const sessions=d.sessions||[];
        if(!sessions.length){
            document.getElementById('hh-no-sessions').style.display='';
            list.innerHTML='';
            badge.style.display='none';
            return;
        }
        document.getElementById('hh-no-sessions').style.display='none';
        badge.style.display='';badge.textContent=sessions.length;
        list.innerHTML=sessions.map(s=>`<div class="card" style="margin-bottom:0.5rem;cursor:pointer"
            onclick="openShell('${esc(s.session_id)}','${esc(s.host)}:${s.port}','')">
            <div style="display:flex;justify-content:space-between;align-items:center">
                <div><strong>${esc(s.type)}</strong> &rarr; ${esc(s.host)}:${s.port}</div>
                <div style="font-size:0.75rem;color:var(--text-muted)">${s.connected_at.slice(0,19)}</div>
            </div></div>`).join('');
    });
}

function openShell(sessionId,label,initial){
    currentSessionId=sessionId;
    document.getElementById('hh-shell').style.display='';
    document.getElementById('shell-target').textContent=label;
    const out=document.getElementById('shell-output');
    out.textContent=initial||'Connected. Type commands below.\n';
    document.getElementById('shell-input').focus();
}

function shellExec(){
    if(!currentSessionId) return;
    const input=document.getElementById('shell-input');
    const cmd=input.value.trim();
    if(!cmd) return;
    input.value='';
    const out=document.getElementById('shell-output');
    out.textContent+='$ '+cmd+'\n';
    fetch('/hack-hijack/sessions/'+currentSessionId+'/exec',{
        method:'POST',headers:{'Content-Type':'application/json'},
        body:JSON.stringify({command:cmd})})
    .then(r=>r.json()).then(d=>{
        if(d.ok) out.textContent+=(d.output||'')+'\n';
        else out.textContent+='[error] '+(d.error||'failed')+'\n';
        out.scrollTop=out.scrollHeight;
    }).catch(e=>{out.textContent+='[error] '+e.message+'\n'});
}

function closeCurrentSession(){
    if(!currentSessionId) return;
    fetch('/hack-hijack/sessions/'+currentSessionId,{method:'DELETE'})
    .then(r=>r.json()).then(()=>{
        document.getElementById('hh-shell').style.display='none';
        currentSessionId=null;
        loadSessions();
    });
}

function loadHistory(){
    fetch('/hack-hijack/history').then(r=>r.json()).then(d=>{
        const list=document.getElementById('hh-history-list');
        const scans=d.scans||[];
        if(!scans.length){list.innerHTML='<div class="card" style="text-align:center;color:var(--text-muted)">No scan history</div>';return}
        list.innerHTML=scans.map(s=>{
            const highCount=(s.backdoors||[]).filter(b=>b.confidence==='high').length;
            const medCount=(s.backdoors||[]).filter(b=>b.confidence==='medium').length;
            return `<div class="card" style="margin-bottom:0.5rem;cursor:pointer" onclick='loadHistoryScan(${JSON.stringify(s).replace(/'/g,"&#39;")})'>
                <div style="display:flex;justify-content:space-between;align-items:center">
                    <div><strong>${esc(s.target)}</strong>
                        — ${(s.open_ports||[]).length} ports,
                        ${(s.backdoors||[]).length} indicators
                        ${highCount?'<span class="conf-high">('+highCount+' HIGH)</span>':''}
                        ${medCount?'<span class="conf-medium">('+medCount+' MED)</span>':''}
                    </div>
                    <div style="font-size:0.75rem;color:var(--text-muted)">${(s.scan_time||'').slice(0,19)} — ${s.duration}s</div>
                </div></div>`;
        }).join('');
    });
}

function loadHistoryScan(scan){
    currentScanResult=scan;
    renderResults(scan);
    switchTab('results');
}

function clearHistory(){
    if(!confirm('Clear all scan history?')) return;
    fetch('/hack-hijack/history',{method:'DELETE'}).then(r=>r.json()).then(()=>loadHistory());
}

function esc(s){return s?String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'):''}
</script>
{% endblock %}