Function _pwnBadgesHTML

web/scripts/ragnar_modern.js:6235–6248

(net)

            if (btn) { btn.disabled = true; btn.dataset.orig = btn.textContent; btn.textContent = 'Checking…'; }
            const name = 'example.com';
            // DNS + ARP are fast — render them right away so the button feels
            // responsive. DHCP discovery (nmap) takes a few seconds, so it's
            // fetched separately and patched into its chip when it lands.
            const [arp, dns] = await Promise.all([
                fetchAPI('/api/net/arp-check').catch(() => null),
                postAPI('/api/net/dns', { name }).catch(() => null),
            ]);
            const dnsV = dns && dns.poison ? dns.poison.verdict : 'unknown';
            const arpV = arp ? arp.verdict : 'unknown';
            const state = {
                overall: ['clean', 'suspicious', 'compromised'][Math.max(_NETINT_RANK[dnsV] || 0, _NETINT_RANK[arpV] || 0)],
                ts: new Date().toISOString(), monitor_enabled: true,
                dns: { verdict: dnsV, reasons: (dns && dns.poison && dns.poison.reasons) || [] },
                arp: { verdict: arpV, reasons: (arp && arp.reasons) || [] },
                dhcp: { verdict: 'checking…', reasons: [] },
            };
            renderNetIntegrity(state);