Function autoStashAndUpdate

web/scripts/ragnar_modern.js:7763–7815

()

// ---- LDAP Watch (Active Directory / LDAP, passive) -------------------------
const _LDAP_VERDICT_STYLE = {
    clean:        ['bg-green-950/40 border-green-900 text-green-400', '✓ No LDAP/AD exposure or attack observed'],
    suspicious:   ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ Weak LDAP posture / recon — anonymous binds, enumeration, or CLDAP exposure'],
    compromised:  ['bg-red-950/60 border-red-800 text-red-300', '🛑 LDAP CREDENTIAL EXPOSURE / ATTACK — cleartext creds, StartTLS strip, injection, or brute force'],
    unknown:      ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
const _LDAP_SEV_STYLE = { high: 'text-red-300', warn: 'text-amber-300', low: 'text-gray-400', info: 'text-gray-500' };
function _ldapFillIfaces() {
    const sel = document.getElementById('ldap-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runLdapWatch() {
    const out = document.getElementById('ldap-results');
    if (!out) return;
    const btn = (typeof event !== 'undefined' && event && event.target) ? event.target : null;
    const ifaceSel = document.getElementById('ldap-iface');
    const iface = ifaceSel && ifaceSel.value ? ifaceSel.value : '';
    const secsEl = document.getElementById('ldap-secs');
    const secs = secsEl && secsEl.value ? secsEl.value : '15';
    _ndBusy(btn, true, 'Listening…');
    out.classList.remove('hidden');
    out.innerHTML = '<p class="text-sm text-gray-400">Passively capturing LDAP / CLDAP…</p>';
    try {
        _ldapFillIfaces();
        const qs = '?seconds=' + encodeURIComponent(secs) + (iface ? '&interface=' + encodeURIComponent(iface) : '');
        const d = await fetchAPI('/api/net/ldap-watch' + qs);
        if (!d || d.success === false) {
            const msg = (d && d.error) || 'failed';
            let extra = '';
            if (d && d.missing_tool === 'scapy') extra = ' — install Scapy via Detector Self-Test';
            out.innerHTML = '<p class="text-sm text-red-400">Error: ' + escapeHtml(msg) + escapeHtml(extra) + '</p>';
            return;
        }
        const [cls, label] = _LDAP_VERDICT_STYLE[d.verdict] || _LDAP_VERDICT_STYLE.unknown;
        const st = d.stats || {};
        let html = `<div class="mb-2 px-3 py-2 rounded border ${cls} text-sm">${label}</div>`;
        html += `<p class="text-xs text-gray-500 mb-2">Interface: ${escapeHtml(d.interface || '—')} · ${d.seconds}s · ${st.ldap_messages || 0} messages · ${st.binds || 0} binds · ${st.searches || 0} searches · ${st.extended || 0} extended · ${st.cldap || 0} CLDAP · ${st.flows || 0} flows</p>`;
        const findings = d.findings || [];
        if (findings.length) {
            html += '<table class="min-w-full text-xs text-gray-300 whitespace-nowrap"><thead>' +
                '<tr class="text-left text-gray-500"><th class="px-2 py-1">Sev</th><th class="px-2 py-1">Finding</th><th class="px-2 py-1">Source → Target</th><th class="px-2 py-1">Detail</th></tr>' +
                '</thead><tbody>' +
                findings.map(f => {
                    const sev = _LDAP_SEV_STYLE[f.severity] || 'text-gray-400';
                    return `<tr class="border-t border-slate-800 align-top">
                        <td class="px-2 py-1 ${sev} uppercase">${escapeHtml(f.severity || '')}</td>
                        <td class="px-2 py-1 ${sev}">${escapeHtml(f.code || '')}</td>