Function savePwnConfig

web/scripts/ragnar_modern.js:6155–6212

()

function onNetDiagDisplayToggled(cb) {
    const note = document.getElementById('netdiag-display-note');
    if (note) note.classList.toggle('hidden', !cb.checked);
    postAPI('/api/config', { network_diagnostic_mode: cb.checked })
        .then(() => addConsoleMessage(
            cb.checked ? 'E-Paper: network diagnostic mode ON' : 'E-Paper: network diagnostic mode OFF',
            'info'))
        .catch(err => {
            addConsoleMessage('Failed to toggle network diagnostic mode: ' + err.message, 'error');
            cb.checked = !cb.checked;
            if (note) note.classList.toggle('hidden', !cb.checked);
        });
}

// ---- Network Integrity Monitor (DNS poisoning + ARP spoofing) --------------
const _NETINT_STYLE = {
    clean:       ['bg-green-950/40 border-green-900 text-green-400', '✓'],
    suspicious:  ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠'],
    compromised: ['bg-red-950/60 border-red-800 text-red-300', '🛑'],
    hijacked:    ['bg-red-950/60 border-red-800 text-red-300', '🛑'],
    spoofed:     ['bg-red-950/60 border-red-800 text-red-300', '🛑'],
    rogue:       ['bg-red-950/60 border-red-800 text-red-300', '🛑'],
    starvation:  ['bg-red-950/60 border-red-800 text-red-300', '🛑'],
    unknown:     ['bg-slate-800 border-slate-700 text-slate-400', '—'],
};
// A verdict is clean/informational, an active attack (critical, red), or — anything
// else non-clean — a suspicious finding (amber). Mirrors the server's _ni_rank so the
// chips colour every scanner's verdicts without enumerating them all.
const _NETINT_CLEAN = new Set(['clean', 'unknown', 'ok', 'none', 'hardened', 'learned', 'n/a', 'no-traffic', 'disabled']);
const _NETINT_CRITICAL = new Set(['hijacked', 'spoofed', 'rogue', 'starvation', 'compromised', 'root-hijack', 'bpdu-flood', 'vlan-hop', 'hijack', 'injection', 'rogue-router', 'poisoning', 'spoof-conflict', 'smbv1-active', 'coercion-attempt', 'relay-suspected', 'rogue-speaker', 'rogue-redirect', 'rogue-ra', 'rogue-irdp']);
function _netintRank(verdict) {
    const v = verdict || 'unknown';
    if (_NETINT_CLEAN.has(v)) return 0;
    if (_NETINT_CRITICAL.has(v)) return 2;
    return 1;
}
function _netintStyleFor(verdict) {
    if (_NETINT_STYLE[verdict]) return _NETINT_STYLE[verdict];
    return [_NETINT_STYLE.clean, _NETINT_STYLE.suspicious, _NETINT_STYLE.compromised][_netintRank(verdict)];
}
function _netintChip(label, verdict) {
    const [cls, icon] = _netintStyleFor(verdict);
    return `<span class="px-2.5 py-1 rounded border ${cls}">${icon} ${label}: ${escapeHtml(verdict || 'unknown')}</span>`;
}
function renderNetIntegrity(d) {
    const out = document.getElementById('netint-status');
    if (!out) return;
    if (!d || d.success === false) { out.innerHTML = ''; return; }
    // Prefer the full per-check map (extended monitor); fall back to dns/arp/dhcp.
    let entries;
    if (d.checks && Object.keys(d.checks).length) {
        const order = ['dns', 'arp', 'dhcp', 'raguard', 'stp', 'dtp', 'cdp', 'vtp', 'igmp', 'ipv6', 'ndp', 'fhrp', 'ospf', 'eigrp', 'isis', 'bgp', 'smb', 'relay', 'ntp', 'icmp', 'snmp', 'cert', 'tls', 'ldap'];
        entries = Object.keys(d.checks).sort((a, b) => (order.indexOf(a) + 1 || 99) - (order.indexOf(b) + 1 || 99))
            .map(k => [d.checks[k].label || k.toUpperCase(), d.checks[k].verdict, d.checks[k].reasons || []]);
    } else {
        entries = [['DNS', (d.dns && d.dns.verdict), (d.dns && d.dns.reasons) || []],
                   ['ARP', (d.arp && d.arp.verdict), (d.arp && d.arp.reasons) || []],
                   ['DHCP', (d.dhcp && d.dhcp.verdict), (d.dhcp && d.dhcp.reasons) || []]];
    }
    // Worst-first so bad findings lead.