Function runCveScan

web/scripts/ragnar_modern.js:10300–10344

({ btnId, resultsId, targetId, endpoint, label, summaryKey })

                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        (d.advisories || []).forEach(a => {
            html += `<div class="mt-2 px-3 py-2 rounded border text-xs text-gray-400 border-slate-700 bg-slate-900/40">${escapeHtml(a)}</div>`;
        });
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function eigrpTrustBaseline() {
    try {
        await postAPI('/api/net/eigrp-baseline', { action: 'reset' });
        addConsoleMessage('EIGRP baseline reset — re-learning current routers & prefixes', 'info');
        await runEigrpWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset EIGRP baseline: ' + e.message, 'error');
    }
}

// ---- FHRP Watch (passive HSRP/VRRP/GLBP/CARP hijack scanner) ----------------
const _FHRP_VERDICT_STYLE = {
    clean:              ['bg-green-950/40 border-green-900 text-green-400', '✓ FHRP groups/speakers/GLBP forwarders match the trusted baseline'],
    'weak-auth':        ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ Weak / no FHRP authentication — a forged hello can win the election'],
    'glbp-weight-skew': ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ GLBP forwarder weight changed — load-share shift steers which hosts route through an AVF'],
    'priority-change':  ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ A known FHRP speaker raised its priority — possible pre-takeover'],
    'rogue-speaker':    ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ Unexpected FHRP speaker on the segment — not in the baseline'],
    'glbp-avf-hijack':  ['bg-red-950/60 border-red-800 text-red-300', '🛑 GLBP AVF HIJACK — a forwarder (vMAC) seized: stealth per-slice MITM while the gateway election looks healthy'],
    hijack:             ['bg-red-950/60 border-red-800 text-red-300', '🛑 FHRP HIJACK — a new speaker is winning the virtual-gateway election'],
    unknown:            ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _fhrpFillIfaces() {
    const sel = document.getElementById('fhrp-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';
    }).catch(() => {});
}
async function runFhrpWatch() {
    const out = document.getElementById('fhrp-results');
    if (!out) return;