Function getPwnStateVisuals

web/scripts/ragnar_modern.js:6681–6729

(status)

        const d = await fetchAPI('/api/net/raguard');
        if (!d || d.success === false) { out.innerHTML = '<p class="text-sm text-red-400">Error: ' + escapeHtml((d && d.error) || 'failed') + '</p>'; return; }
        _raguardRender(d, out);
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally { _ndBusy(btn, false); }
}
async function raGuardHarden() {
    if (!confirm('Harden this host\'s IPv6 first-hop settings?\n\nSets accept_redirects=0 and accept_ra_rtr_pref=0 (live + persisted to /etc/sysctl.d). accept_ra is left untouched, so SLAAC connectivity keeps working.')) return;
    const out = document.getElementById('raguard-results');
    if (!out) return;
    const btn = (typeof event !== 'undefined' && event && event.target) ? event.target : null;
    _ndBusy(btn, true, 'Hardening…');
    out.classList.remove('hidden');
    try {
        const d = await postAPI('/api/net/raguard', { action: 'harden' });
        if (!d || d.success === false) { out.innerHTML = '<p class="text-sm text-red-400">Error: ' + escapeHtml((d && d.error) || 'failed') + '</p>'; return; }
        addConsoleMessage('IPv6 RA Guard: host hardened (accept_redirects=0, accept_ra_rtr_pref=0)', 'success');
        _raguardRender(d, out);
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally { _ndBusy(btn, false); }
}

// ---- IPv6 First-Hop Watch (rogue RA / DHCPv6, passive) ---------------------
const _IPV6_VERDICT_STYLE = {
    clean:          ['bg-green-950/40 border-green-900 text-green-400', '✓ No rogue IPv6 first-hop activity detected'],
    anomaly:        ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ IPv6 first-hop anomaly — conflicting / deprecating RA'],
    'rogue-dhcpv6': ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue DHCPv6 server — mitm6 DNS-takeover signature'],
    'rogue-redirect':['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue ICMPv6 Redirect — Layer-3 IPv6 MITM'],
    'rogue-ra':     ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue Router Advertisement — SLAAC gateway/DNS takeover'],
    storm:          ['bg-red-950/60 border-red-800 text-red-300', '🛑 Router Advertisement flood (RA-flood DoS)'],
    unknown:        ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _ipv6FillIfaces() {
    const sel = document.getElementById('ipv6-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runIpv6Watch() {
    const out = document.getElementById('ipv6-results');
    if (!out) return;
    const btn = (typeof event !== 'undefined' && event && event.target) ? event.target : null;
    const ifaceSel = document.getElementById('ipv6-iface');
    const iface = ifaceSel && ifaceSel.value ? ifaceSel.value : '';