1599 lines
70 KiB
HTML
1599 lines
70 KiB
HTML
|
{% extends "base.html" %}
|
||
|
|
{% block title %}Security{% endblock %}
|
||
|
|
{% block content %}
|
||
|
|
<h1>[!] Security Center</h1>
|
||
|
|
|
||
|
|
<!-- Tab navigation -->
|
||
|
|
<div class="toolbar" id="tabs">
|
||
|
|
<button class="btn" onclick="showTab('hardening')" id="tab-hardening">Hardening</button>
|
||
|
|
<button class="btn" onclick="showTab('apps')" id="tab-apps">Security Apps</button>
|
||
|
|
<button class="btn" onclick="showTab('ids')" id="tab-ids">IDS / Monitoring</button>
|
||
|
|
<button class="btn" onclick="showTab('ddos')" id="tab-ddos">DDoS Protection</button>
|
||
|
|
<button class="btn" onclick="showTab('ssl')" id="tab-ssl">SSL Audit</button>
|
||
|
|
<button class="btn" onclick="showTab('clamav')" id="tab-clamav">ClamAV</button>
|
||
|
|
<button class="btn" onclick="showTab('rkhunter')" id="tab-rkhunter">rkhunter</button>
|
||
|
|
<button class="btn" onclick="showTab('chkrootkit')" id="tab-chkrootkit">chkrootkit</button>
|
||
|
|
<button class="btn" onclick="showTab('lynis')" id="tab-lynis">Lynis</button>
|
||
|
|
<button class="btn" onclick="showTab('ossec')" id="tab-ossec">OSSEC</button>
|
||
|
|
<button class="btn" onclick="showTab('modsec')" id="tab-modsec">ModSecurity</button>
|
||
|
|
<button class="btn" onclick="showTab('aide')" id="tab-aide">AIDE</button>
|
||
|
|
<button class="btn" onclick="showTab('cowrie')" id="tab-cowrie">Cowrie</button>
|
||
|
|
<button class="btn" onclick="showTab('backup')" id="tab-backup">Backup</button>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ HARDENING TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-hardening">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">SSH Hardening</div>
|
||
|
|
<div id="ssh-status" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<label>SSH Port</label>
|
||
|
|
<input type="number" id="ssh-port" value="22" style="width:80px;">
|
||
|
|
<label><input type="checkbox" id="ssh-noroot" checked> Disable root login</label>
|
||
|
|
<label><input type="checkbox" id="ssh-nopasswd" checked> Disable password auth</label>
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="sshStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="sshHarden()">Apply Hardening</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Kernel Hardening</div>
|
||
|
|
<div id="kernel-status" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="kernelStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="kernelHarden()">Apply Hardening</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Automatic Security Updates</div>
|
||
|
|
<div id="updates-status" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="updatesStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="updatesEnable()">Enable Auto-Updates</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">User & Permission Audit</div>
|
||
|
|
<div id="audit-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="userAudit()">Run Audit</button>
|
||
|
|
<button class="btn" onclick="suidAudit()">SUID Binaries</button>
|
||
|
|
<button class="btn" onclick="worldWritable()">World-Writable</button>
|
||
|
|
<button class="btn" onclick="cronAudit()">Cron Jobs</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">.sec Patch Updates</div>
|
||
|
|
<div id="sec-out" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div style="margin-bottom:8px;">
|
||
|
|
<label>.sec filename</label>
|
||
|
|
<input type="text" id="sec-filename" placeholder="e.g. ubuntu2404_0326.sec" style="width:280px;">
|
||
|
|
</div>
|
||
|
|
<div class="toolbar" style="flex-wrap:wrap;gap:5px;">
|
||
|
|
<button class="btn" onclick="secDetect()">Detect OS</button>
|
||
|
|
<button class="btn" onclick="secCheck()">Check Updates</button>
|
||
|
|
<button class="btn" onclick="secList()">List All</button>
|
||
|
|
<button class="btn" onclick="secDownload()">Download</button>
|
||
|
|
<button class="btn" onclick="secPreview()">Preview</button>
|
||
|
|
<button class="btn btn-warn" onclick="secApply()">Apply</button>
|
||
|
|
<button class="btn" onclick="secHistory()">History</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Open Port Scan</div>
|
||
|
|
<div id="ports-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<button class="btn" onclick="portScan()" style="margin-top:10px;">Scan Ports</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ SECURITY APPS TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-apps" style="display:none;">
|
||
|
|
<div id="apps-list"></div>
|
||
|
|
<div class="card" style="margin-top:15px;">
|
||
|
|
<div class="card-title">Output</div>
|
||
|
|
<div id="apps-out" class="output" style="max-height:500px;"></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ IDS / MONITORING TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-ids" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Login Tracker</div>
|
||
|
|
<div id="login-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="loginTracker()">Check Logins</button>
|
||
|
|
<button class="btn" onclick="activeSessions()">Active Sessions</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Security Logs</div>
|
||
|
|
<div id="seclog-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<button class="btn" onclick="securityLogs()" style="margin-top:10px;">Load Logs</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">File Integrity Monitoring</div>
|
||
|
|
<div id="integrity-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="integrityCheck()">Check Integrity</button>
|
||
|
|
<button class="btn btn-warn" onclick="integrityInit()">Initialize Baseline</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Process Audit</div>
|
||
|
|
<div id="process-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<button class="btn" onclick="processAudit()" style="margin-top:10px;">Audit Processes</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Alert Configuration</div>
|
||
|
|
<div id="alert-out" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<label>Alert Email</label>
|
||
|
|
<input type="email" id="alert-email" placeholder="admin@example.com" style="width:250px;">
|
||
|
|
<label>Webhook URL (optional)</label>
|
||
|
|
<input type="text" id="alert-webhook" placeholder="https://hooks.slack.com/..." style="width:100%;">
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="alertStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="alertSetup()">Enable Alerts</button>
|
||
|
|
<button class="btn btn-danger" onclick="alertRemove()">Disable Alerts</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ DDOS TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-ddos" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Connection Statistics</div>
|
||
|
|
<div id="conn-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<button class="btn" onclick="connStats()" style="margin-top:10px;">Refresh</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Bandwidth</div>
|
||
|
|
<div id="bw-out" class="output" style="max-height:300px;"></div>
|
||
|
|
<button class="btn" onclick="bwStats()" style="margin-top:10px;">Refresh</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">SYN Flood Detection</div>
|
||
|
|
<div id="syn-out" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="synCheck()">Check Now</button>
|
||
|
|
<button class="btn btn-warn" onclick="synProtect()">Enable SYN Protection</button>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Nginx Rate Limiting</div>
|
||
|
|
<div id="rate-out" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<label>Requests/sec</label>
|
||
|
|
<input type="number" id="rate-rps" value="10" style="width:60px;">
|
||
|
|
<label>Burst</label>
|
||
|
|
<input type="number" id="rate-burst" value="20" style="width:60px;">
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="rateStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="rateEnable()">Enable</button>
|
||
|
|
<button class="btn btn-danger" onclick="rateRemove()">Remove</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Auto-Blacklist</div>
|
||
|
|
<div id="blacklist-out" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<label>Threshold (connections per IP)</label>
|
||
|
|
<input type="number" id="bl-threshold" value="100" style="width:80px;">
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="blacklistStatus()">Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="blacklistEnable()">Enable</button>
|
||
|
|
<button class="btn btn-danger" onclick="blacklistDisable()">Disable</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Manual IP Block</div>
|
||
|
|
<input type="text" id="block-ip" placeholder="1.2.3.4" style="width:150px;">
|
||
|
|
<button class="btn btn-danger" onclick="blockIP()">Block</button>
|
||
|
|
<button class="btn" onclick="unblockIP()">Unblock</button>
|
||
|
|
<div id="block-out" class="output" style="max-height:150px;margin-top:10px;"></div>
|
||
|
|
<button class="btn" onclick="showBlacklist()" style="margin-top:5px;">Show All Blocked</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Tor Exit Node Blocking</div>
|
||
|
|
<div id="tor-out" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn btn-warn" onclick="torBlock(true)">Block Tor Exits</button>
|
||
|
|
<button class="btn" onclick="torBlock(false)">Unblock</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Cloudflare Integration</div>
|
||
|
|
<label>Zone ID</label>
|
||
|
|
<input type="text" id="cf-zone" placeholder="Cloudflare Zone ID" style="width:250px;">
|
||
|
|
<label>API Token</label>
|
||
|
|
<input type="password" id="cf-token" placeholder="Cloudflare API Token" style="width:250px;">
|
||
|
|
<div id="cf-out" class="output" style="max-height:150px;margin:10px 0;"></div>
|
||
|
|
<button class="btn" onclick="cfStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-danger" onclick="cfAttack(true)">Under Attack Mode ON</button>
|
||
|
|
<button class="btn" onclick="cfAttack(false)">Under Attack Mode OFF</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ SSL AUDIT TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-ssl" style="display:none;">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Certificate Status</div>
|
||
|
|
<div id="ssl-certs" class="output" style="max-height:400px;"></div>
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="sslAll()">All Certificates</button>
|
||
|
|
<button class="btn" onclick="sslAutoRenew()">Auto-Renew Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="sslRenewDry()">Dry Run Renewal</button>
|
||
|
|
<button class="btn btn-danger" onclick="sslRenew()">Force Renew All</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Domain SSL Audit</div>
|
||
|
|
<label>Domain</label>
|
||
|
|
<input type="text" id="ssl-domain" placeholder="example.com" style="width:250px;">
|
||
|
|
<div id="ssl-out" class="output" style="max-height:400px;margin:10px 0;"></div>
|
||
|
|
<button class="btn" onclick="sslCheck()">Check Certificate</button>
|
||
|
|
<button class="btn" onclick="sslExpiry()">Check Expiry</button>
|
||
|
|
<button class="btn" onclick="sslGrade()">Grade TLS Config</button>
|
||
|
|
<button class="btn btn-warn" onclick="sslHeaders()">Add Security Headers</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ CLAMAV TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-clamav" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">ClamAV Status</div>
|
||
|
|
<div id="clam-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="clamStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="clamInstall()">Install ClamAV</button>
|
||
|
|
<button class="btn btn-danger" onclick="clamUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Virus Definitions</div>
|
||
|
|
<div id="clam-defs" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn btn-warn" onclick="clamUpdateDefs()">Update Definitions</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scan</div>
|
||
|
|
<div id="clam-scan" class="output" style="max-height:400px;margin-bottom:10px;"></div>
|
||
|
|
<div style="margin-bottom:8px;">
|
||
|
|
<label>Scan Path</label>
|
||
|
|
<input type="text" id="clam-path" value="/var/www" style="width:300px;">
|
||
|
|
</div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="clamScan()">Scan Path</button>
|
||
|
|
<button class="btn" onclick="clamScanQuick()">Quick Scan</button>
|
||
|
|
<button class="btn btn-warn" onclick="clamScanFull()">Full System Scan</button>
|
||
|
|
<button class="btn btn-danger" onclick="clamQuarantineScan()">Scan + Quarantine</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Quarantine</div>
|
||
|
|
<div id="clam-quarantine" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="clamQuarantineList()">List Quarantined</button>
|
||
|
|
<button class="btn btn-danger" onclick="clamQuarantineDelete()">Purge Quarantine</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs</div>
|
||
|
|
<div id="clam-log" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="clamLog()">View Logs</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scheduled Scans</div>
|
||
|
|
<div id="clam-schedule" class="output" style="max-height:200px;margin-bottom:10px;"></div>
|
||
|
|
<label>Frequency</label>
|
||
|
|
<select id="clam-freq" style="width:120px;">
|
||
|
|
<option value="daily">Daily</option>
|
||
|
|
<option value="weekly">Weekly</option>
|
||
|
|
<option value="monthly">Monthly</option>
|
||
|
|
</select>
|
||
|
|
<label>Paths</label>
|
||
|
|
<input type="text" id="clam-sched-paths" value="/" style="width:200px;">
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="clamSchedStatus()">Check Schedule</button>
|
||
|
|
<button class="btn btn-warn" onclick="clamSchedSet()">Set Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="clamSchedRemove()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Configuration</div>
|
||
|
|
<div id="clam-config" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="clamConfig()">View Config</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ RKHUNTER TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-rkhunter" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">rkhunter Status</div>
|
||
|
|
<div id="rkh-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="rkhStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="rkhInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="rkhUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Signature Updates</div>
|
||
|
|
<div id="rkh-update" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn btn-warn" onclick="rkhUpdate()">Update Signatures + Properties</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Rootkit Scan</div>
|
||
|
|
<div id="rkh-scan" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="rkhCheck()">Full Scan</button>
|
||
|
|
<button class="btn" onclick="rkhCheckQuick()">Quick Scan</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Whitelist</div>
|
||
|
|
<div id="rkh-whitelist" class="output" style="max-height:250px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="rkhWhitelist()">Show Whitelist</button>
|
||
|
|
<div style="margin-top:8px;">
|
||
|
|
<input type="text" id="rkh-wl-item" placeholder="/usr/bin/something" style="width:250px;">
|
||
|
|
<button class="btn btn-warn" onclick="rkhWhitelistAdd()">Add to Whitelist</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs & Config</div>
|
||
|
|
<div id="rkh-log" class="output" style="max-height:250px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="rkhLog()">View Log</button>
|
||
|
|
<button class="btn" onclick="rkhConfig()">View Config</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scheduled Scans</div>
|
||
|
|
<div id="rkh-schedule" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<label>Frequency</label>
|
||
|
|
<select id="rkh-freq" style="width:120px;">
|
||
|
|
<option value="daily">Daily</option>
|
||
|
|
<option value="weekly">Weekly</option>
|
||
|
|
</select>
|
||
|
|
<div class="toolbar" style="margin-top:8px;">
|
||
|
|
<button class="btn" onclick="rkhSchedStatus()">Check Schedule</button>
|
||
|
|
<button class="btn btn-warn" onclick="rkhSchedSet()">Set Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="rkhSchedRemove()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ CHKROOTKIT TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-chkrootkit" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">chkrootkit Status</div>
|
||
|
|
<div id="chk-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="chkStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="chkInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="chkUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs & Config</div>
|
||
|
|
<div id="chk-log" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="chkLog()">View Log</button>
|
||
|
|
<button class="btn" onclick="chkConfig()">View Config</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Rootkit Scan</div>
|
||
|
|
<div id="chk-scan" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="chkRun()">Standard Scan</button>
|
||
|
|
<button class="btn" onclick="chkExpert()">Expert Mode</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scheduled Scans</div>
|
||
|
|
<div id="chk-schedule" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<label>Frequency</label>
|
||
|
|
<select id="chk-freq" style="width:120px;">
|
||
|
|
<option value="daily">Daily</option>
|
||
|
|
<option value="weekly">Weekly</option>
|
||
|
|
</select>
|
||
|
|
<div class="toolbar" style="margin-top:8px;">
|
||
|
|
<button class="btn" onclick="chkSchedStatus()">Check Schedule</button>
|
||
|
|
<button class="btn btn-warn" onclick="chkSchedSet()">Set Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="chkSchedRemove()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ LYNIS TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-lynis" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Lynis Status</div>
|
||
|
|
<div id="lyn-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="lynStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="lynInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="lynUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Hardening Index</div>
|
||
|
|
<div id="lyn-index" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="lynIndex()">Get Hardening Score</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Security Audit</div>
|
||
|
|
<div id="lyn-audit" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="lynAuditQuick()">Quick Audit</button>
|
||
|
|
<button class="btn btn-warn" onclick="lynAuditFull()">Full Audit</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Findings</div>
|
||
|
|
<div id="lyn-findings" class="output" style="max-height:400px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn btn-danger" onclick="lynWarnings()">Warnings</button>
|
||
|
|
<button class="btn btn-warn" onclick="lynSuggestions()">Suggestions</button>
|
||
|
|
<button class="btn" onclick="lynReport()">Full Report</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs & Profile</div>
|
||
|
|
<div id="lyn-log" class="output" style="max-height:400px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="lynLog()">View Log</button>
|
||
|
|
<button class="btn" onclick="lynProfile()">Audit Profile</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scheduled Audits</div>
|
||
|
|
<div id="lyn-schedule" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<label>Frequency</label>
|
||
|
|
<select id="lyn-freq" style="width:120px;">
|
||
|
|
<option value="weekly" selected>Weekly</option>
|
||
|
|
<option value="daily">Daily</option>
|
||
|
|
<option value="monthly">Monthly</option>
|
||
|
|
</select>
|
||
|
|
<div class="toolbar" style="margin-top:8px;">
|
||
|
|
<button class="btn" onclick="lynSchedStatus()">Check Schedule</button>
|
||
|
|
<button class="btn btn-warn" onclick="lynSchedSet()">Set Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="lynSchedRemove()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ OSSEC TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-ossec" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">OSSEC Status</div>
|
||
|
|
<div id="osc-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="oscStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="oscInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="oscUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Service Control</div>
|
||
|
|
<div id="osc-control" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="oscStart()">Start</button>
|
||
|
|
<button class="btn" onclick="oscStop()">Stop</button>
|
||
|
|
<button class="btn btn-warn" onclick="oscRestart()">Restart</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Alerts</div>
|
||
|
|
<div id="osc-alerts" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="oscAlerts()">Recent Alerts</button>
|
||
|
|
<button class="btn" onclick="oscAlertsToday()">Today's Alerts</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">File Integrity (Syscheck)</div>
|
||
|
|
<div id="osc-syscheck" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="oscSyscheck()">Show Changes</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Active Response</div>
|
||
|
|
<div id="osc-ar" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="oscActiveResponse()">Show Active Response</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs</div>
|
||
|
|
<div id="osc-log" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="oscLog()">View OSSEC Log</button>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Configuration & Rules</div>
|
||
|
|
<div id="osc-config" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="oscConfig()">View Config</button>
|
||
|
|
<button class="btn" onclick="oscRules()">List Rules</button>
|
||
|
|
<button class="btn" onclick="oscAgents()">List Agents</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ MODSECURITY TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-modsec" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">ModSecurity Status</div>
|
||
|
|
<div id="mod-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="modStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="modInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="modUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">WAF Mode</div>
|
||
|
|
<div id="mod-mode" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn btn-warn" onclick="modEnable()">Enable (Block)</button>
|
||
|
|
<button class="btn" onclick="modDisable()">Detection Only</button>
|
||
|
|
<button class="btn" onclick="modNginxStatus()">Nginx Integration</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Audit Log</div>
|
||
|
|
<div id="mod-audit" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="modAuditLog()">Audit Log</button>
|
||
|
|
<button class="btn" onclick="modDebugLog()">Debug Log</button>
|
||
|
|
<button class="btn btn-warn" onclick="modTest()">Test WAF (XSS/SQLi)</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">OWASP CRS Rules</div>
|
||
|
|
<div id="mod-rules" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="modRulesList()">List Rules</button>
|
||
|
|
<button class="btn btn-warn" onclick="modCrsUpdate()">Update CRS</button>
|
||
|
|
<div style="margin-top:8px;">
|
||
|
|
<input type="text" id="mod-rule-id" placeholder="Rule ID (e.g. 941100)" style="width:180px;">
|
||
|
|
<button class="btn btn-danger" onclick="modRuleDisable()">Disable Rule</button>
|
||
|
|
<button class="btn" onclick="modRuleEnable()">Enable Rule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Configuration</div>
|
||
|
|
<div id="mod-config" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="modConfig()">ModSec Config</button>
|
||
|
|
<button class="btn" onclick="modCrsConfig()">CRS Config</button>
|
||
|
|
<button class="btn" onclick="modExclusions()">Exclusions</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ AIDE TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-aide" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">AIDE Status</div>
|
||
|
|
<div id="aide-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="aideStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="aideInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="aideUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Database</div>
|
||
|
|
<div id="aide-db" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn btn-warn" onclick="aideInit()">Initialize DB</button>
|
||
|
|
<button class="btn" onclick="aideUpdate()">Update DB (Accept Changes)</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Integrity Check</div>
|
||
|
|
<div id="aide-check" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="aideCheck()">Run Check</button>
|
||
|
|
<button class="btn" onclick="aideCompare()">Compare DBs</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs & Config</div>
|
||
|
|
<div id="aide-log" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="aideLog()">View Log</button>
|
||
|
|
<button class="btn" onclick="aideConfig()">View Config</button>
|
||
|
|
<button class="btn" onclick="aideRules()">View Rules</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Scheduled Checks</div>
|
||
|
|
<div id="aide-schedule" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<label>Frequency</label>
|
||
|
|
<select id="aide-freq" style="width:120px;">
|
||
|
|
<option value="daily">Daily</option>
|
||
|
|
<option value="weekly">Weekly</option>
|
||
|
|
</select>
|
||
|
|
<div class="toolbar" style="margin-top:8px;">
|
||
|
|
<button class="btn" onclick="aideSchedStatus()">Check Schedule</button>
|
||
|
|
<button class="btn btn-warn" onclick="aideSchedSet()">Set Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="aideSchedRemove()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ COWRIE TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-cowrie" style="display:none;">
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Cowrie Status</div>
|
||
|
|
<div id="cow-status" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="cowStatus()">Check Status</button>
|
||
|
|
<button class="btn btn-warn" onclick="cowInstall()">Install</button>
|
||
|
|
<button class="btn btn-danger" onclick="cowUninstall()">Uninstall</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Service Control</div>
|
||
|
|
<div id="cow-control" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="cowStart()">Start</button>
|
||
|
|
<button class="btn" onclick="cowStop()">Stop</button>
|
||
|
|
<button class="btn btn-warn" onclick="cowRestart()">Restart</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Honeypot Activity</div>
|
||
|
|
<div id="cow-activity" class="output" style="max-height:500px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="cowSessions()">Recent Sessions</button>
|
||
|
|
<button class="btn" onclick="cowTopAttackers()">Top Attackers</button>
|
||
|
|
<button class="btn" onclick="cowCredentials()">Credentials Tried</button>
|
||
|
|
<button class="btn" onclick="cowDownloads()">Downloads</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="grid grid-2">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Logs</div>
|
||
|
|
<div id="cow-log" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn" onclick="cowLog()">Text Log</button>
|
||
|
|
<button class="btn" onclick="cowLogJson()">JSON Log</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Configuration</div>
|
||
|
|
<div id="cow-config" class="output" style="max-height:300px;margin-bottom:10px;"></div>
|
||
|
|
<button class="btn" onclick="cowConfig()">View Config</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Port Redirection</div>
|
||
|
|
<div id="cow-port" class="output" style="max-height:150px;margin-bottom:10px;"></div>
|
||
|
|
<div class="toolbar">
|
||
|
|
<button class="btn btn-warn" onclick="cowPortEnable()">Redirect 22 → 2222</button>
|
||
|
|
<button class="btn btn-danger" onclick="cowPortDisable()">Remove Redirect</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
<!-- ═══════════════════════ BACKUP TAB ═══════════════════════ -->
|
||
|
|
<div class="tab-content" id="panel-backup" style="display:none;">
|
||
|
|
<div class="card">
|
||
|
|
<div class="card-title">Encrypted Backup</div>
|
||
|
|
<div id="backup-out" class="output" style="max-height:400px;margin-bottom:10px;"></div>
|
||
|
|
<label>Backup paths (space-separated)</label>
|
||
|
|
<input type="text" id="bk-paths" value="/etc /var/www /home" style="width:100%;">
|
||
|
|
<label>Encryption passphrase</label>
|
||
|
|
<input type="password" id="bk-pass" placeholder="strong passphrase" style="width:250px;">
|
||
|
|
<label>Remote destination (optional, scp format: user@host:/path)</label>
|
||
|
|
<input type="text" id="bk-remote" placeholder="user@backup-server:/backups/" style="width:100%;">
|
||
|
|
<div style="margin-top:10px;">
|
||
|
|
<button class="btn" onclick="backupStatus()">List Backups</button>
|
||
|
|
<button class="btn btn-warn" onclick="backupRun()">Run Backup Now</button>
|
||
|
|
<button class="btn" onclick="backupSchedule()">Setup Daily Schedule</button>
|
||
|
|
<button class="btn btn-danger" onclick="backupRemoveSchedule()">Remove Schedule</button>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
|
||
|
|
{% endblock %}
|
||
|
|
|
||
|
|
{% block scripts %}
|
||
|
|
<script>
|
||
|
|
// ── Tab switching ──
|
||
|
|
function showTab(name) {
|
||
|
|
document.querySelectorAll('.tab-content').forEach(el => el.style.display = 'none');
|
||
|
|
document.querySelectorAll('#tabs .btn').forEach(el => el.style.background = '');
|
||
|
|
document.getElementById('panel-' + name).style.display = 'block';
|
||
|
|
document.getElementById('tab-' + name).style.background = '#1a2a1a';
|
||
|
|
}
|
||
|
|
showTab('hardening');
|
||
|
|
|
||
|
|
// ── Hardening ──
|
||
|
|
async function sshStatus() {
|
||
|
|
const r = await apiGet('/api/security/ssh/status');
|
||
|
|
showResult(r, 'ssh-status');
|
||
|
|
}
|
||
|
|
async function sshHarden() {
|
||
|
|
if (!confirm('This will modify SSH config. Make sure you have console access as backup!')) return;
|
||
|
|
const r = await apiPost('/api/security/ssh/harden', {
|
||
|
|
port: parseInt(document.getElementById('ssh-port').value),
|
||
|
|
disable_root: document.getElementById('ssh-noroot').checked,
|
||
|
|
disable_password: document.getElementById('ssh-nopasswd').checked
|
||
|
|
});
|
||
|
|
showResult(r, 'ssh-status');
|
||
|
|
}
|
||
|
|
async function kernelStatus() {
|
||
|
|
const r = await apiGet('/api/security/kernel/status');
|
||
|
|
showResult(r, 'kernel-status');
|
||
|
|
}
|
||
|
|
async function kernelHarden() {
|
||
|
|
const r = await apiPost('/api/security/kernel/harden');
|
||
|
|
showResult(r, 'kernel-status');
|
||
|
|
}
|
||
|
|
async function updatesStatus() {
|
||
|
|
const r = await apiGet('/api/security/kernel/status');
|
||
|
|
showResult(r, 'updates-status');
|
||
|
|
}
|
||
|
|
async function updatesEnable() {
|
||
|
|
const r = await apiPost('/api/security/auto-updates');
|
||
|
|
showResult(r, 'updates-status');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── .sec Updates ──
|
||
|
|
let _secDistro = '';
|
||
|
|
let _secVersion = '';
|
||
|
|
async function secDetect() {
|
||
|
|
const r = await apiGet('/api/security/updates/detect');
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
// Parse distro/version from output for auto-check
|
||
|
|
if (r.ok && r.data && r.data.stdout) {
|
||
|
|
const lines = r.data.stdout.split('\n');
|
||
|
|
for (const line of lines) {
|
||
|
|
if (line.startsWith('DISTRO_ID=')) _secDistro = line.split('=')[1];
|
||
|
|
if (line.startsWith('DISTRO_VERSION=')) _secVersion = line.split('=')[1];
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
async function secCheck() {
|
||
|
|
if (!_secDistro || !_secVersion) {
|
||
|
|
await secDetect();
|
||
|
|
}
|
||
|
|
if (!_secDistro || !_secVersion) {
|
||
|
|
document.getElementById('sec-out').innerHTML = '<span class="error">Run Detect OS first</span>';
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
const r = await apiPost('/api/security/updates/check', {distro_id: _secDistro, version_id: _secVersion});
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function secList() {
|
||
|
|
const r = await apiGet('/api/security/updates/list');
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function secDownload() {
|
||
|
|
const fn = document.getElementById('sec-filename').value;
|
||
|
|
if (!fn) { document.getElementById('sec-out').innerHTML = '<span class="error">Enter a .sec filename</span>'; return; }
|
||
|
|
const r = await apiPost('/api/security/updates/download', {filename: fn});
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function secPreview() {
|
||
|
|
const fn = document.getElementById('sec-filename').value;
|
||
|
|
if (!fn) { document.getElementById('sec-out').innerHTML = '<span class="error">Enter a .sec filename</span>'; return; }
|
||
|
|
const r = await apiPost('/api/security/updates/preview', {filename: fn});
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function secApply() {
|
||
|
|
const fn = document.getElementById('sec-filename').value;
|
||
|
|
if (!fn) { document.getElementById('sec-out').innerHTML = '<span class="error">Enter a .sec filename</span>'; return; }
|
||
|
|
if (!confirm('Apply security update ' + fn + '? This will modify system packages and configuration.')) return;
|
||
|
|
document.getElementById('sec-out').innerHTML = '<span class="info">Applying ' + fn + '... this may take a few minutes</span>';
|
||
|
|
const r = await apiPost('/api/security/updates/apply', {filename: fn});
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function secHistory() {
|
||
|
|
const r = await apiGet('/api/security/updates/history');
|
||
|
|
showResult(r, 'sec-out');
|
||
|
|
}
|
||
|
|
async function userAudit() {
|
||
|
|
const r = await apiGet('/api/security/user-audit');
|
||
|
|
showResult(r, 'audit-out');
|
||
|
|
}
|
||
|
|
async function suidAudit() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/suid-audit');
|
||
|
|
showResult(r, 'audit-out');
|
||
|
|
}
|
||
|
|
async function worldWritable() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/world-writable');
|
||
|
|
showResult(r, 'audit-out');
|
||
|
|
}
|
||
|
|
async function cronAudit() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/cron-audit');
|
||
|
|
showResult(r, 'audit-out');
|
||
|
|
}
|
||
|
|
async function portScan() {
|
||
|
|
const r = await apiGet('/api/security/port-scan');
|
||
|
|
showResult(r, 'ports-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── Security Apps ──
|
||
|
|
async function loadApps() {
|
||
|
|
const r = await apiGet('/api/security/apps');
|
||
|
|
if (!r.ok) return;
|
||
|
|
const el = document.getElementById('apps-list');
|
||
|
|
var html = '<div class="grid grid-2">';
|
||
|
|
for (var i = 0; i < r.data.length; i++) {
|
||
|
|
var a = r.data[i];
|
||
|
|
html += '<div class="card">' +
|
||
|
|
'<div class="card-title">' + a.name + ' <span style="color:#888;font-size:11px;">[' + a.cat + ']</span></div>' +
|
||
|
|
'<p style="font-size:12px;color:#888;margin-bottom:10px;">' + a.desc + '</p>' +
|
||
|
|
'<button class="btn" onclick="appCheck(\'' + a.name + '\')">Check</button> ' +
|
||
|
|
'<button class="btn btn-warn" onclick="appInstall(\'' + a.name + '\')">Install</button> ' +
|
||
|
|
'<button class="btn" onclick="appScan(\'' + a.name + '\')">Scan/Run</button> ' +
|
||
|
|
'<button class="btn btn-danger" onclick="appUninstall(\'' + a.name + '\')">Uninstall</button>' +
|
||
|
|
'</div>';
|
||
|
|
}
|
||
|
|
html += '</div>';
|
||
|
|
el.innerHTML = html;
|
||
|
|
}
|
||
|
|
async function appCheck(name) {
|
||
|
|
const r = await apiPost('/api/security/apps/check', {name: name});
|
||
|
|
showResult(r, 'apps-out');
|
||
|
|
}
|
||
|
|
async function appInstall(name) {
|
||
|
|
if (!confirm('Install ' + name + '? This may take a few minutes.')) return;
|
||
|
|
document.getElementById('apps-out').innerHTML = '<span class="info">Installing ' + name + '...</span>';
|
||
|
|
const r = await apiPost('/api/security/apps/install', {name: name});
|
||
|
|
showResult(r, 'apps-out');
|
||
|
|
}
|
||
|
|
async function appScan(name) {
|
||
|
|
document.getElementById('apps-out').innerHTML = '<span class="info">Running ' + name + '...</span>';
|
||
|
|
const r = await apiPost('/api/security/apps/scan', {name: name});
|
||
|
|
showResult(r, 'apps-out');
|
||
|
|
}
|
||
|
|
async function appUninstall(name) {
|
||
|
|
if (!confirm('Uninstall ' + name + '?')) return;
|
||
|
|
const r = await apiPost('/api/security/apps/uninstall', {name: name});
|
||
|
|
showResult(r, 'apps-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── IDS / Monitoring ──
|
||
|
|
async function loginTracker() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/login-tracker');
|
||
|
|
showResult(r, 'login-out');
|
||
|
|
}
|
||
|
|
async function activeSessions() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/active-sessions');
|
||
|
|
showResult(r, 'login-out');
|
||
|
|
}
|
||
|
|
async function securityLogs() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/security-log');
|
||
|
|
showResult(r, 'seclog-out');
|
||
|
|
}
|
||
|
|
async function integrityCheck() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/file-integrity');
|
||
|
|
showResult(r, 'integrity-out');
|
||
|
|
}
|
||
|
|
async function integrityInit() {
|
||
|
|
if (!confirm('Initialize file integrity baseline? This will overwrite any existing baseline.')) return;
|
||
|
|
const r = await apiPost('/api/security/monitoring/file-integrity/init');
|
||
|
|
showResult(r, 'integrity-out');
|
||
|
|
}
|
||
|
|
async function processAudit() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/process-audit');
|
||
|
|
showResult(r, 'process-out');
|
||
|
|
}
|
||
|
|
async function alertStatus() {
|
||
|
|
const r = await apiGet('/api/security/monitoring/alerts/status');
|
||
|
|
showResult(r, 'alert-out');
|
||
|
|
}
|
||
|
|
async function alertSetup() {
|
||
|
|
const r = await apiPost('/api/security/monitoring/alerts/setup', {
|
||
|
|
email: document.getElementById('alert-email').value,
|
||
|
|
webhook: document.getElementById('alert-webhook').value
|
||
|
|
});
|
||
|
|
showResult(r, 'alert-out');
|
||
|
|
}
|
||
|
|
async function alertRemove() {
|
||
|
|
const r = await apiPost('/api/security/monitoring/alerts/remove');
|
||
|
|
showResult(r, 'alert-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── DDoS ──
|
||
|
|
async function connStats() {
|
||
|
|
const r = await apiGet('/api/security/ddos/connection-stats');
|
||
|
|
showResult(r, 'conn-out');
|
||
|
|
}
|
||
|
|
async function bwStats() {
|
||
|
|
const r = await apiGet('/api/security/ddos/bandwidth');
|
||
|
|
showResult(r, 'bw-out');
|
||
|
|
}
|
||
|
|
async function synCheck() {
|
||
|
|
const r = await apiGet('/api/security/ddos/syn-flood');
|
||
|
|
showResult(r, 'syn-out');
|
||
|
|
}
|
||
|
|
async function synProtect() {
|
||
|
|
const r = await apiPost('/api/security/ddos/syn-protection');
|
||
|
|
showResult(r, 'syn-out');
|
||
|
|
}
|
||
|
|
async function rateStatus() {
|
||
|
|
const r = await apiGet('/api/security/ddos/rate-limit/status');
|
||
|
|
showResult(r, 'rate-out');
|
||
|
|
}
|
||
|
|
async function rateEnable() {
|
||
|
|
const r = await apiPost('/api/security/ddos/rate-limit/enable', {
|
||
|
|
requests_per_second: parseInt(document.getElementById('rate-rps').value),
|
||
|
|
burst: parseInt(document.getElementById('rate-burst').value)
|
||
|
|
});
|
||
|
|
showResult(r, 'rate-out');
|
||
|
|
}
|
||
|
|
async function rateRemove() {
|
||
|
|
const r = await apiPost('/api/security/ddos/rate-limit/remove');
|
||
|
|
showResult(r, 'rate-out');
|
||
|
|
}
|
||
|
|
async function blacklistStatus() {
|
||
|
|
const r = await apiGet('/api/security/ddos/auto-blacklist/status');
|
||
|
|
showResult(r, 'blacklist-out');
|
||
|
|
}
|
||
|
|
async function blacklistEnable() {
|
||
|
|
const r = await apiPost('/api/security/ddos/auto-blacklist/enable', {
|
||
|
|
threshold: parseInt(document.getElementById('bl-threshold').value)
|
||
|
|
});
|
||
|
|
showResult(r, 'blacklist-out');
|
||
|
|
}
|
||
|
|
async function blacklistDisable() {
|
||
|
|
const r = await apiPost('/api/security/ddos/auto-blacklist/remove');
|
||
|
|
showResult(r, 'blacklist-out');
|
||
|
|
}
|
||
|
|
async function blockIP() {
|
||
|
|
const ip = document.getElementById('block-ip').value;
|
||
|
|
const r = await apiPost('/api/security/ddos/blacklist/add', {ip: ip});
|
||
|
|
showResult(r, 'block-out');
|
||
|
|
}
|
||
|
|
async function unblockIP() {
|
||
|
|
const ip = document.getElementById('block-ip').value;
|
||
|
|
const r = await apiPost('/api/security/ddos/blacklist/remove', {ip: ip});
|
||
|
|
showResult(r, 'block-out');
|
||
|
|
}
|
||
|
|
async function showBlacklist() {
|
||
|
|
const r = await apiGet('/api/security/ddos/blacklist/list');
|
||
|
|
showResult(r, 'block-out');
|
||
|
|
}
|
||
|
|
async function torBlock(enable) {
|
||
|
|
const r = await apiPost('/api/security/ddos/tor-block', {enable: enable});
|
||
|
|
showResult(r, 'tor-out');
|
||
|
|
}
|
||
|
|
async function cfStatus() {
|
||
|
|
const r = await apiPost('/api/security/ddos/cloudflare/status', {
|
||
|
|
zone_id: document.getElementById('cf-zone').value,
|
||
|
|
api_token: document.getElementById('cf-token').value
|
||
|
|
});
|
||
|
|
showResult(r, 'cf-out');
|
||
|
|
}
|
||
|
|
async function cfAttack(enable) {
|
||
|
|
const r = await apiPost('/api/security/ddos/cloudflare/toggle', {
|
||
|
|
zone_id: document.getElementById('cf-zone').value,
|
||
|
|
api_token: document.getElementById('cf-token').value,
|
||
|
|
enable: enable
|
||
|
|
});
|
||
|
|
showResult(r, 'cf-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── SSL ──
|
||
|
|
async function sslAll() {
|
||
|
|
const r = await apiGet('/api/security/ssl/expiry-all');
|
||
|
|
showResult(r, 'ssl-certs');
|
||
|
|
}
|
||
|
|
async function sslAutoRenew() {
|
||
|
|
const r = await apiGet('/api/security/ssl/autorenew-status');
|
||
|
|
showResult(r, 'ssl-certs');
|
||
|
|
}
|
||
|
|
async function sslRenewDry() {
|
||
|
|
const r = await apiGet('/api/security/ssl/renew-dry');
|
||
|
|
showResult(r, 'ssl-certs');
|
||
|
|
}
|
||
|
|
async function sslRenew() {
|
||
|
|
if (!confirm('Force renew ALL certificates?')) return;
|
||
|
|
const r = await apiPost('/api/security/ssl/renew');
|
||
|
|
showResult(r, 'ssl-certs');
|
||
|
|
}
|
||
|
|
async function sslCheck() {
|
||
|
|
const d = document.getElementById('ssl-domain').value;
|
||
|
|
const r = await apiPost('/api/security/ssl/check', {domain: d});
|
||
|
|
showResult(r, 'ssl-out');
|
||
|
|
}
|
||
|
|
async function sslExpiry() {
|
||
|
|
const d = document.getElementById('ssl-domain').value;
|
||
|
|
const r = await apiPost('/api/security/ssl/expiry', {domain: d});
|
||
|
|
showResult(r, 'ssl-out');
|
||
|
|
}
|
||
|
|
async function sslGrade() {
|
||
|
|
const d = document.getElementById('ssl-domain').value;
|
||
|
|
const r = await apiPost('/api/security/ssl/grade', {domain: d});
|
||
|
|
showResult(r, 'ssl-out');
|
||
|
|
}
|
||
|
|
async function sslHeaders() {
|
||
|
|
const d = document.getElementById('ssl-domain').value;
|
||
|
|
if (!confirm('Add security headers to nginx for ' + d + '?')) return;
|
||
|
|
const r = await apiPost('/api/security/ssl/security-headers', {domain: d});
|
||
|
|
showResult(r, 'ssl-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── ClamAV ──
|
||
|
|
async function clamStatus() {
|
||
|
|
const r = await apiGet('/api/security/clamav/status');
|
||
|
|
showResult(r, 'clam-status');
|
||
|
|
}
|
||
|
|
async function clamInstall() {
|
||
|
|
if (!confirm('Install ClamAV? This may take a few minutes.')) return;
|
||
|
|
document.getElementById('clam-status').innerHTML = '<span class="info">Installing ClamAV...</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/install');
|
||
|
|
showResult(r, 'clam-status');
|
||
|
|
}
|
||
|
|
async function clamUninstall() {
|
||
|
|
if (!confirm('Uninstall ClamAV?')) return;
|
||
|
|
const r = await apiPost('/api/security/clamav/uninstall');
|
||
|
|
showResult(r, 'clam-status');
|
||
|
|
}
|
||
|
|
async function clamUpdateDefs() {
|
||
|
|
document.getElementById('clam-defs').innerHTML = '<span class="info">Updating virus definitions...</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/update-defs');
|
||
|
|
showResult(r, 'clam-defs');
|
||
|
|
}
|
||
|
|
async function clamScan() {
|
||
|
|
const path = document.getElementById('clam-path').value;
|
||
|
|
document.getElementById('clam-scan').innerHTML = '<span class="info">Scanning ' + path + '...</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/scan', {path: path});
|
||
|
|
showResult(r, 'clam-scan');
|
||
|
|
}
|
||
|
|
async function clamScanQuick() {
|
||
|
|
document.getElementById('clam-scan').innerHTML = '<span class="info">Quick scan running...</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/scan-quick');
|
||
|
|
showResult(r, 'clam-scan');
|
||
|
|
}
|
||
|
|
async function clamScanFull() {
|
||
|
|
if (!confirm('Full system scan may take a long time. Continue?')) return;
|
||
|
|
document.getElementById('clam-scan').innerHTML = '<span class="info">Full system scan running... this will take a while</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/scan-full');
|
||
|
|
showResult(r, 'clam-scan');
|
||
|
|
}
|
||
|
|
async function clamQuarantineScan() {
|
||
|
|
const path = document.getElementById('clam-path').value;
|
||
|
|
if (!confirm('Scan ' + path + ' and quarantine infected files?')) return;
|
||
|
|
document.getElementById('clam-scan').innerHTML = '<span class="info">Scanning + quarantining...</span>';
|
||
|
|
const r = await apiPost('/api/security/clamav/quarantine-scan', {path: path});
|
||
|
|
showResult(r, 'clam-scan');
|
||
|
|
}
|
||
|
|
async function clamQuarantineList() {
|
||
|
|
const r = await apiGet('/api/security/clamav/quarantine/list');
|
||
|
|
showResult(r, 'clam-quarantine');
|
||
|
|
}
|
||
|
|
async function clamQuarantineDelete() {
|
||
|
|
if (!confirm('Delete all quarantined files permanently?')) return;
|
||
|
|
const r = await apiPost('/api/security/clamav/quarantine/delete');
|
||
|
|
showResult(r, 'clam-quarantine');
|
||
|
|
}
|
||
|
|
async function clamLog() {
|
||
|
|
const r = await apiGet('/api/security/clamav/log');
|
||
|
|
showResult(r, 'clam-log');
|
||
|
|
}
|
||
|
|
async function clamSchedStatus() {
|
||
|
|
const r = await apiGet('/api/security/clamav/schedule/status');
|
||
|
|
showResult(r, 'clam-schedule');
|
||
|
|
}
|
||
|
|
async function clamSchedSet() {
|
||
|
|
const freq = document.getElementById('clam-freq').value;
|
||
|
|
const paths = document.getElementById('clam-sched-paths').value;
|
||
|
|
const r = await apiPost('/api/security/clamav/schedule', {schedule: freq, paths: paths});
|
||
|
|
showResult(r, 'clam-schedule');
|
||
|
|
}
|
||
|
|
async function clamSchedRemove() {
|
||
|
|
const r = await apiPost('/api/security/clamav/schedule/remove');
|
||
|
|
showResult(r, 'clam-schedule');
|
||
|
|
}
|
||
|
|
async function clamConfig() {
|
||
|
|
const r = await apiGet('/api/security/clamav/config');
|
||
|
|
showResult(r, 'clam-config');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── rkhunter ──
|
||
|
|
async function rkhStatus() {
|
||
|
|
const r = await apiGet('/api/security/rkhunter/status');
|
||
|
|
showResult(r, 'rkh-status');
|
||
|
|
}
|
||
|
|
async function rkhInstall() {
|
||
|
|
if (!confirm('Install rkhunter?')) return;
|
||
|
|
document.getElementById('rkh-status').innerHTML = '<span class="info">Installing rkhunter...</span>';
|
||
|
|
const r = await apiPost('/api/security/rkhunter/install');
|
||
|
|
showResult(r, 'rkh-status');
|
||
|
|
}
|
||
|
|
async function rkhUninstall() {
|
||
|
|
if (!confirm('Uninstall rkhunter?')) return;
|
||
|
|
const r = await apiPost('/api/security/rkhunter/uninstall');
|
||
|
|
showResult(r, 'rkh-status');
|
||
|
|
}
|
||
|
|
async function rkhUpdate() {
|
||
|
|
document.getElementById('rkh-update').innerHTML = '<span class="info">Updating signatures...</span>';
|
||
|
|
const r = await apiPost('/api/security/rkhunter/update');
|
||
|
|
showResult(r, 'rkh-update');
|
||
|
|
}
|
||
|
|
async function rkhCheck() {
|
||
|
|
document.getElementById('rkh-scan').innerHTML = '<span class="info">Running full scan...</span>';
|
||
|
|
const r = await apiPost('/api/security/rkhunter/check');
|
||
|
|
showResult(r, 'rkh-scan');
|
||
|
|
}
|
||
|
|
async function rkhCheckQuick() {
|
||
|
|
document.getElementById('rkh-scan').innerHTML = '<span class="info">Running quick scan...</span>';
|
||
|
|
const r = await apiPost('/api/security/rkhunter/check-quick');
|
||
|
|
showResult(r, 'rkh-scan');
|
||
|
|
}
|
||
|
|
async function rkhWhitelist() {
|
||
|
|
const r = await apiGet('/api/security/rkhunter/whitelist');
|
||
|
|
showResult(r, 'rkh-whitelist');
|
||
|
|
}
|
||
|
|
async function rkhWhitelistAdd() {
|
||
|
|
const item = document.getElementById('rkh-wl-item').value;
|
||
|
|
if (!item) return;
|
||
|
|
const r = await apiPost('/api/security/rkhunter/whitelist/add', {item: item});
|
||
|
|
showResult(r, 'rkh-whitelist');
|
||
|
|
}
|
||
|
|
async function rkhLog() {
|
||
|
|
const r = await apiGet('/api/security/rkhunter/log');
|
||
|
|
showResult(r, 'rkh-log');
|
||
|
|
}
|
||
|
|
async function rkhConfig() {
|
||
|
|
const r = await apiGet('/api/security/rkhunter/config');
|
||
|
|
showResult(r, 'rkh-log');
|
||
|
|
}
|
||
|
|
async function rkhSchedStatus() {
|
||
|
|
const r = await apiGet('/api/security/rkhunter/schedule/status');
|
||
|
|
showResult(r, 'rkh-schedule');
|
||
|
|
}
|
||
|
|
async function rkhSchedSet() {
|
||
|
|
const freq = document.getElementById('rkh-freq').value;
|
||
|
|
const r = await apiPost('/api/security/rkhunter/schedule', {schedule: freq});
|
||
|
|
showResult(r, 'rkh-schedule');
|
||
|
|
}
|
||
|
|
async function rkhSchedRemove() {
|
||
|
|
const r = await apiPost('/api/security/rkhunter/schedule/remove');
|
||
|
|
showResult(r, 'rkh-schedule');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── chkrootkit ──
|
||
|
|
async function chkStatus() {
|
||
|
|
const r = await apiGet('/api/security/chkrootkit/status');
|
||
|
|
showResult(r, 'chk-status');
|
||
|
|
}
|
||
|
|
async function chkInstall() {
|
||
|
|
if (!confirm('Install chkrootkit?')) return;
|
||
|
|
document.getElementById('chk-status').innerHTML = '<span class="info">Installing...</span>';
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/install');
|
||
|
|
showResult(r, 'chk-status');
|
||
|
|
}
|
||
|
|
async function chkUninstall() {
|
||
|
|
if (!confirm('Uninstall chkrootkit?')) return;
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/uninstall');
|
||
|
|
showResult(r, 'chk-status');
|
||
|
|
}
|
||
|
|
async function chkRun() {
|
||
|
|
document.getElementById('chk-scan').innerHTML = '<span class="info">Running scan...</span>';
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/check');
|
||
|
|
showResult(r, 'chk-scan');
|
||
|
|
}
|
||
|
|
async function chkExpert() {
|
||
|
|
document.getElementById('chk-scan').innerHTML = '<span class="info">Running expert mode...</span>';
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/check-expert');
|
||
|
|
showResult(r, 'chk-scan');
|
||
|
|
}
|
||
|
|
async function chkLog() {
|
||
|
|
const r = await apiGet('/api/security/chkrootkit/log');
|
||
|
|
showResult(r, 'chk-log');
|
||
|
|
}
|
||
|
|
async function chkConfig() {
|
||
|
|
const r = await apiGet('/api/security/chkrootkit/config');
|
||
|
|
showResult(r, 'chk-log');
|
||
|
|
}
|
||
|
|
async function chkSchedStatus() {
|
||
|
|
const r = await apiGet('/api/security/chkrootkit/schedule/status');
|
||
|
|
showResult(r, 'chk-schedule');
|
||
|
|
}
|
||
|
|
async function chkSchedSet() {
|
||
|
|
const freq = document.getElementById('chk-freq').value;
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/schedule', {schedule: freq});
|
||
|
|
showResult(r, 'chk-schedule');
|
||
|
|
}
|
||
|
|
async function chkSchedRemove() {
|
||
|
|
const r = await apiPost('/api/security/chkrootkit/schedule/remove');
|
||
|
|
showResult(r, 'chk-schedule');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── Lynis ──
|
||
|
|
async function lynStatus() {
|
||
|
|
const r = await apiGet('/api/security/lynis/status');
|
||
|
|
showResult(r, 'lyn-status');
|
||
|
|
}
|
||
|
|
async function lynInstall() {
|
||
|
|
if (!confirm('Install Lynis?')) return;
|
||
|
|
document.getElementById('lyn-status').innerHTML = '<span class="info">Installing...</span>';
|
||
|
|
const r = await apiPost('/api/security/lynis/install');
|
||
|
|
showResult(r, 'lyn-status');
|
||
|
|
}
|
||
|
|
async function lynUninstall() {
|
||
|
|
if (!confirm('Uninstall Lynis?')) return;
|
||
|
|
const r = await apiPost('/api/security/lynis/uninstall');
|
||
|
|
showResult(r, 'lyn-status');
|
||
|
|
}
|
||
|
|
async function lynIndex() {
|
||
|
|
const r = await apiGet('/api/security/lynis/hardening-index');
|
||
|
|
showResult(r, 'lyn-index');
|
||
|
|
}
|
||
|
|
async function lynAuditQuick() {
|
||
|
|
document.getElementById('lyn-audit').innerHTML = '<span class="info">Running quick audit...</span>';
|
||
|
|
const r = await apiPost('/api/security/lynis/audit-quick');
|
||
|
|
showResult(r, 'lyn-audit');
|
||
|
|
}
|
||
|
|
async function lynAuditFull() {
|
||
|
|
if (!confirm('Full audit may take several minutes. Continue?')) return;
|
||
|
|
document.getElementById('lyn-audit').innerHTML = '<span class="info">Running full audit... this will take a while</span>';
|
||
|
|
const r = await apiPost('/api/security/lynis/audit-full');
|
||
|
|
showResult(r, 'lyn-audit');
|
||
|
|
}
|
||
|
|
async function lynWarnings() {
|
||
|
|
const r = await apiGet('/api/security/lynis/warnings');
|
||
|
|
showResult(r, 'lyn-findings');
|
||
|
|
}
|
||
|
|
async function lynSuggestions() {
|
||
|
|
const r = await apiGet('/api/security/lynis/suggestions');
|
||
|
|
showResult(r, 'lyn-findings');
|
||
|
|
}
|
||
|
|
async function lynReport() {
|
||
|
|
const r = await apiGet('/api/security/lynis/report');
|
||
|
|
showResult(r, 'lyn-findings');
|
||
|
|
}
|
||
|
|
async function lynLog() {
|
||
|
|
const r = await apiGet('/api/security/lynis/log');
|
||
|
|
showResult(r, 'lyn-log');
|
||
|
|
}
|
||
|
|
async function lynProfile() {
|
||
|
|
const r = await apiGet('/api/security/lynis/profile');
|
||
|
|
showResult(r, 'lyn-log');
|
||
|
|
}
|
||
|
|
async function lynSchedStatus() {
|
||
|
|
const r = await apiGet('/api/security/lynis/schedule/status');
|
||
|
|
showResult(r, 'lyn-schedule');
|
||
|
|
}
|
||
|
|
async function lynSchedSet() {
|
||
|
|
const freq = document.getElementById('lyn-freq').value;
|
||
|
|
const r = await apiPost('/api/security/lynis/schedule', {schedule: freq});
|
||
|
|
showResult(r, 'lyn-schedule');
|
||
|
|
}
|
||
|
|
async function lynSchedRemove() {
|
||
|
|
const r = await apiPost('/api/security/lynis/schedule/remove');
|
||
|
|
showResult(r, 'lyn-schedule');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── OSSEC ──
|
||
|
|
async function oscStatus() {
|
||
|
|
const r = await apiGet('/api/security/ossec/status');
|
||
|
|
showResult(r, 'osc-status');
|
||
|
|
}
|
||
|
|
async function oscInstall() {
|
||
|
|
if (!confirm('Install OSSEC? This compiles from source and may take several minutes.')) return;
|
||
|
|
document.getElementById('osc-status').innerHTML = '<span class="info">Installing OSSEC from source...</span>';
|
||
|
|
const r = await apiPost('/api/security/ossec/install');
|
||
|
|
showResult(r, 'osc-status');
|
||
|
|
}
|
||
|
|
async function oscUninstall() {
|
||
|
|
if (!confirm('Uninstall OSSEC? This removes /var/ossec completely.')) return;
|
||
|
|
const r = await apiPost('/api/security/ossec/uninstall');
|
||
|
|
showResult(r, 'osc-status');
|
||
|
|
}
|
||
|
|
async function oscStart() {
|
||
|
|
const r = await apiPost('/api/security/ossec/start');
|
||
|
|
showResult(r, 'osc-control');
|
||
|
|
}
|
||
|
|
async function oscStop() {
|
||
|
|
const r = await apiPost('/api/security/ossec/stop');
|
||
|
|
showResult(r, 'osc-control');
|
||
|
|
}
|
||
|
|
async function oscRestart() {
|
||
|
|
const r = await apiPost('/api/security/ossec/restart');
|
||
|
|
showResult(r, 'osc-control');
|
||
|
|
}
|
||
|
|
async function oscAlerts() {
|
||
|
|
const r = await apiGet('/api/security/ossec/alerts');
|
||
|
|
showResult(r, 'osc-alerts');
|
||
|
|
}
|
||
|
|
async function oscAlertsToday() {
|
||
|
|
const r = await apiGet('/api/security/ossec/alerts-today');
|
||
|
|
showResult(r, 'osc-alerts');
|
||
|
|
}
|
||
|
|
async function oscSyscheck() {
|
||
|
|
const r = await apiGet('/api/security/ossec/syscheck');
|
||
|
|
showResult(r, 'osc-syscheck');
|
||
|
|
}
|
||
|
|
async function oscActiveResponse() {
|
||
|
|
const r = await apiGet('/api/security/ossec/active-response');
|
||
|
|
showResult(r, 'osc-ar');
|
||
|
|
}
|
||
|
|
async function oscLog() {
|
||
|
|
const r = await apiGet('/api/security/ossec/log');
|
||
|
|
showResult(r, 'osc-log');
|
||
|
|
}
|
||
|
|
async function oscConfig() {
|
||
|
|
const r = await apiGet('/api/security/ossec/config');
|
||
|
|
showResult(r, 'osc-config');
|
||
|
|
}
|
||
|
|
async function oscRules() {
|
||
|
|
const r = await apiGet('/api/security/ossec/rules');
|
||
|
|
showResult(r, 'osc-config');
|
||
|
|
}
|
||
|
|
async function oscAgents() {
|
||
|
|
const r = await apiGet('/api/security/ossec/agents');
|
||
|
|
showResult(r, 'osc-config');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── ModSecurity ──
|
||
|
|
async function modStatus() {
|
||
|
|
const r = await apiGet('/api/security/modsec/status');
|
||
|
|
showResult(r, 'mod-status');
|
||
|
|
}
|
||
|
|
async function modInstall() {
|
||
|
|
if (!confirm('Install ModSecurity with OWASP CRS?')) return;
|
||
|
|
document.getElementById('mod-status').innerHTML = '<span class="info">Installing ModSecurity...</span>';
|
||
|
|
const r = await apiPost('/api/security/modsec/install');
|
||
|
|
showResult(r, 'mod-status');
|
||
|
|
}
|
||
|
|
async function modUninstall() {
|
||
|
|
if (!confirm('Uninstall ModSecurity? Remember to remove modsecurity directives from nginx configs.')) return;
|
||
|
|
const r = await apiPost('/api/security/modsec/uninstall');
|
||
|
|
showResult(r, 'mod-status');
|
||
|
|
}
|
||
|
|
async function modEnable() {
|
||
|
|
const r = await apiPost('/api/security/modsec/enable');
|
||
|
|
showResult(r, 'mod-mode');
|
||
|
|
}
|
||
|
|
async function modDisable() {
|
||
|
|
const r = await apiPost('/api/security/modsec/disable');
|
||
|
|
showResult(r, 'mod-mode');
|
||
|
|
}
|
||
|
|
async function modNginxStatus() {
|
||
|
|
const r = await apiGet('/api/security/modsec/nginx-status');
|
||
|
|
showResult(r, 'mod-mode');
|
||
|
|
}
|
||
|
|
async function modAuditLog() {
|
||
|
|
const r = await apiGet('/api/security/modsec/audit-log');
|
||
|
|
showResult(r, 'mod-audit');
|
||
|
|
}
|
||
|
|
async function modDebugLog() {
|
||
|
|
const r = await apiGet('/api/security/modsec/debug-log');
|
||
|
|
showResult(r, 'mod-audit');
|
||
|
|
}
|
||
|
|
async function modTest() {
|
||
|
|
const r = await apiPost('/api/security/modsec/test');
|
||
|
|
showResult(r, 'mod-audit');
|
||
|
|
}
|
||
|
|
async function modRulesList() {
|
||
|
|
const r = await apiGet('/api/security/modsec/rules');
|
||
|
|
showResult(r, 'mod-rules');
|
||
|
|
}
|
||
|
|
async function modCrsUpdate() {
|
||
|
|
document.getElementById('mod-rules').innerHTML = '<span class="info">Updating CRS...</span>';
|
||
|
|
const r = await apiPost('/api/security/modsec/crs-update');
|
||
|
|
showResult(r, 'mod-rules');
|
||
|
|
}
|
||
|
|
async function modRuleDisable() {
|
||
|
|
const id = document.getElementById('mod-rule-id').value;
|
||
|
|
if (!id) return;
|
||
|
|
const r = await apiPost('/api/security/modsec/rule/disable', {rule_id: id});
|
||
|
|
showResult(r, 'mod-rules');
|
||
|
|
}
|
||
|
|
async function modRuleEnable() {
|
||
|
|
const id = document.getElementById('mod-rule-id').value;
|
||
|
|
if (!id) return;
|
||
|
|
const r = await apiPost('/api/security/modsec/rule/enable', {rule_id: id});
|
||
|
|
showResult(r, 'mod-rules');
|
||
|
|
}
|
||
|
|
async function modConfig() {
|
||
|
|
const r = await apiGet('/api/security/modsec/config');
|
||
|
|
showResult(r, 'mod-config');
|
||
|
|
}
|
||
|
|
async function modCrsConfig() {
|
||
|
|
const r = await apiGet('/api/security/modsec/crs-config');
|
||
|
|
showResult(r, 'mod-config');
|
||
|
|
}
|
||
|
|
async function modExclusions() {
|
||
|
|
const r = await apiGet('/api/security/modsec/exclusions');
|
||
|
|
showResult(r, 'mod-config');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── AIDE ──
|
||
|
|
async function aideStatus() {
|
||
|
|
const r = await apiGet('/api/security/aide/status');
|
||
|
|
showResult(r, 'aide-status');
|
||
|
|
}
|
||
|
|
async function aideInstall() {
|
||
|
|
if (!confirm('Install AIDE? Database initialization may take a few minutes.')) return;
|
||
|
|
document.getElementById('aide-status').innerHTML = '<span class="info">Installing AIDE...</span>';
|
||
|
|
const r = await apiPost('/api/security/aide/install');
|
||
|
|
showResult(r, 'aide-status');
|
||
|
|
}
|
||
|
|
async function aideUninstall() {
|
||
|
|
if (!confirm('Uninstall AIDE?')) return;
|
||
|
|
const r = await apiPost('/api/security/aide/uninstall');
|
||
|
|
showResult(r, 'aide-status');
|
||
|
|
}
|
||
|
|
async function aideInit() {
|
||
|
|
if (!confirm('Re-initialize AIDE database? This overwrites the existing baseline.')) return;
|
||
|
|
document.getElementById('aide-db').innerHTML = '<span class="info">Initializing database...</span>';
|
||
|
|
const r = await apiPost('/api/security/aide/init');
|
||
|
|
showResult(r, 'aide-db');
|
||
|
|
}
|
||
|
|
async function aideUpdate() {
|
||
|
|
document.getElementById('aide-db').innerHTML = '<span class="info">Updating database...</span>';
|
||
|
|
const r = await apiPost('/api/security/aide/update');
|
||
|
|
showResult(r, 'aide-db');
|
||
|
|
}
|
||
|
|
async function aideCheck() {
|
||
|
|
document.getElementById('aide-check').innerHTML = '<span class="info">Running integrity check...</span>';
|
||
|
|
const r = await apiPost('/api/security/aide/check');
|
||
|
|
showResult(r, 'aide-check');
|
||
|
|
}
|
||
|
|
async function aideCompare() {
|
||
|
|
const r = await apiPost('/api/security/aide/compare');
|
||
|
|
showResult(r, 'aide-check');
|
||
|
|
}
|
||
|
|
async function aideLog() {
|
||
|
|
const r = await apiGet('/api/security/aide/log');
|
||
|
|
showResult(r, 'aide-log');
|
||
|
|
}
|
||
|
|
async function aideConfig() {
|
||
|
|
const r = await apiGet('/api/security/aide/config');
|
||
|
|
showResult(r, 'aide-log');
|
||
|
|
}
|
||
|
|
async function aideRules() {
|
||
|
|
const r = await apiGet('/api/security/aide/rules');
|
||
|
|
showResult(r, 'aide-log');
|
||
|
|
}
|
||
|
|
async function aideSchedStatus() {
|
||
|
|
const r = await apiGet('/api/security/aide/schedule/status');
|
||
|
|
showResult(r, 'aide-schedule');
|
||
|
|
}
|
||
|
|
async function aideSchedSet() {
|
||
|
|
const freq = document.getElementById('aide-freq').value;
|
||
|
|
const r = await apiPost('/api/security/aide/schedule', {schedule: freq});
|
||
|
|
showResult(r, 'aide-schedule');
|
||
|
|
}
|
||
|
|
async function aideSchedRemove() {
|
||
|
|
const r = await apiPost('/api/security/aide/schedule/remove');
|
||
|
|
showResult(r, 'aide-schedule');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── Cowrie ──
|
||
|
|
async function cowStatus() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/status');
|
||
|
|
showResult(r, 'cow-status');
|
||
|
|
}
|
||
|
|
async function cowInstall() {
|
||
|
|
if (!confirm('Install Cowrie honeypot? This will listen on port 2222.')) return;
|
||
|
|
document.getElementById('cow-status').innerHTML = '<span class="info">Installing Cowrie...</span>';
|
||
|
|
const r = await apiPost('/api/security/cowrie/install');
|
||
|
|
showResult(r, 'cow-status');
|
||
|
|
}
|
||
|
|
async function cowUninstall() {
|
||
|
|
if (!confirm('Uninstall Cowrie? This removes /opt/cowrie and the cowrie user.')) return;
|
||
|
|
const r = await apiPost('/api/security/cowrie/uninstall');
|
||
|
|
showResult(r, 'cow-status');
|
||
|
|
}
|
||
|
|
async function cowStart() {
|
||
|
|
const r = await apiPost('/api/security/cowrie/start');
|
||
|
|
showResult(r, 'cow-control');
|
||
|
|
}
|
||
|
|
async function cowStop() {
|
||
|
|
const r = await apiPost('/api/security/cowrie/stop');
|
||
|
|
showResult(r, 'cow-control');
|
||
|
|
}
|
||
|
|
async function cowRestart() {
|
||
|
|
const r = await apiPost('/api/security/cowrie/restart');
|
||
|
|
showResult(r, 'cow-control');
|
||
|
|
}
|
||
|
|
async function cowSessions() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/sessions');
|
||
|
|
showResult(r, 'cow-activity');
|
||
|
|
}
|
||
|
|
async function cowTopAttackers() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/top-attackers');
|
||
|
|
showResult(r, 'cow-activity');
|
||
|
|
}
|
||
|
|
async function cowCredentials() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/credentials');
|
||
|
|
showResult(r, 'cow-activity');
|
||
|
|
}
|
||
|
|
async function cowDownloads() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/downloads');
|
||
|
|
showResult(r, 'cow-activity');
|
||
|
|
}
|
||
|
|
async function cowLog() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/log');
|
||
|
|
showResult(r, 'cow-log');
|
||
|
|
}
|
||
|
|
async function cowLogJson() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/log-json');
|
||
|
|
showResult(r, 'cow-log');
|
||
|
|
}
|
||
|
|
async function cowConfig() {
|
||
|
|
const r = await apiGet('/api/security/cowrie/config');
|
||
|
|
showResult(r, 'cow-config');
|
||
|
|
}
|
||
|
|
async function cowPortEnable() {
|
||
|
|
if (!confirm('Redirect port 22 to Cowrie on 2222? Make sure your real SSH is on a different port!')) return;
|
||
|
|
const r = await apiPost('/api/security/cowrie/port-redirect', {enable: true});
|
||
|
|
showResult(r, 'cow-port');
|
||
|
|
}
|
||
|
|
async function cowPortDisable() {
|
||
|
|
const r = await apiPost('/api/security/cowrie/port-redirect', {enable: false});
|
||
|
|
showResult(r, 'cow-port');
|
||
|
|
}
|
||
|
|
|
||
|
|
// ── Backup ──
|
||
|
|
async function backupStatus() {
|
||
|
|
const r = await apiGet('/api/security/backup/list');
|
||
|
|
showResult(r, 'backup-out');
|
||
|
|
}
|
||
|
|
async function backupRun() {
|
||
|
|
document.getElementById('backup-out').innerHTML = '<span class="info">Running backup... this may take a while</span>';
|
||
|
|
const r = await apiPost('/api/security/backup/now', {
|
||
|
|
paths: document.getElementById('bk-paths').value,
|
||
|
|
encrypt_pass: document.getElementById('bk-pass').value
|
||
|
|
});
|
||
|
|
showResult(r, 'backup-out');
|
||
|
|
}
|
||
|
|
async function backupSchedule() {
|
||
|
|
const r = await apiPost('/api/security/backup/schedule', {
|
||
|
|
paths: document.getElementById('bk-paths').value,
|
||
|
|
encrypt_pass: document.getElementById('bk-pass').value,
|
||
|
|
schedule: 'daily',
|
||
|
|
keep: 7
|
||
|
|
});
|
||
|
|
showResult(r, 'backup-out');
|
||
|
|
}
|
||
|
|
async function backupRemoveSchedule() {
|
||
|
|
const r = await apiPost('/api/security/backup/schedule/remove');
|
||
|
|
showResult(r, 'backup-out');
|
||
|
|
}
|
||
|
|
|
||
|
|
// Load apps on tab switch
|
||
|
|
document.getElementById('tab-apps').addEventListener('click', loadApps);
|
||
|
|
</script>
|
||
|
|
{% endblock %}
|