Function performPwnUpdate

web/scripts/ragnar_modern.js:7034–7086

()

                        <td class="px-2 py-1">${a.writes ? '<span class="text-red-300">RW</span>' : '<span class="text-gray-500">—</span>'}</td>
                        <td class="px-2 py-1">${a.baseline ? '<span class="text-gray-500">known</span>' : '<span class="text-amber-300">NEW</span>'}</td>
                    </tr>`;
                }).join('') + '</tbody></table>';
        }
        const comms = d.communities || [];
        if (comms.length) {
            html += '<p class="text-xs uppercase text-gray-400 mt-2 mb-1">Community strings exposed (' + comms.length + ')</p>' +
                '<table class="min-w-full text-xs text-gray-300 whitespace-nowrap"><thead>' +
                '<tr class="text-left text-gray-500"><th class="px-2 py-1">Community</th><th class="px-2 py-1">Version</th><th class="px-2 py-1">Seen</th><th class="px-2 py-1">Notes</th></tr>' +
                '</thead><tbody>' +
                comms.map(c => {
                    const notes = [];
                    if (c.default) notes.push('<span class="text-amber-300">default/guessable</span>');
                    if (c.writes) notes.push('<span class="text-red-300">write</span>');
                    return `<tr class="border-t border-slate-800">
                        <td class="px-2 py-1 font-mono text-red-300">"${escapeHtml(c.community)}"</td>
                        <td class="px-2 py-1 text-gray-400">${escapeHtml((c.versions || []).join(', '))}</td>
                        <td class="px-2 py-1 text-gray-400">×${c.count}</td>
                        <td class="px-2 py-1">${notes.join(', ') || '—'}</td>
                    </tr>`;
                }).join('') + '</tbody></table>';
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        if (d.advisories && d.advisories.length) {
            html += '<ul class="text-xs text-cyan-400/80 mt-2 list-disc pl-5">' +
                d.advisories.map(a => '<li>' + escapeHtml(a) + '</li>').join('') + '</ul>';
        }
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function snmpTrustBaseline() {
    try {
        await postAPI('/api/net/snmp-baseline', { action: 'reset' });
        addConsoleMessage('SNMP baseline reset — re-learning current agents / community strings', 'info');
        await runSnmpWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset SNMP baseline: ' + e.message, 'error');
    }
}

// ---- Cert Watch (active certificate & TLS hygiene checker) ------------------
const _CERT_VERDICT_STYLE = {
    valid:              ['bg-green-950/40 border-green-900 text-green-400', '✓ valid'],
    clean:              ['bg-green-950/40 border-green-900 text-green-400', '✓ All certificates valid, trusted and in-date'],
    expiring:           ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ expiring soon'],
    'deprecated-tls':   ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ deprecated TLS'],
    'weak-crypto':      ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ weak crypto'],
    'hostname-mismatch':['bg-red-950/60 border-red-800 text-red-300', '🛑 hostname mismatch'],
    untrusted:          ['bg-red-950/60 border-red-800 text-red-300', '🛑 untrusted chain'],
    'self-signed':      ['bg-red-950/60 border-red-800 text-red-300', '🛑 self-signed'],