Function verifyServiceRestart

web/scripts/ragnar_modern.js:7817–7880

()

                    const poison = (r.protos || []).some(p => p === 'llmnr' || p === 'nbtns') || r.highvalue.length;
                    const badge = poison ? '<span class="text-red-300">poisoner</span>' : (r.known ? '<span class="text-green-400">known mDNS</span>' : '<span class="text-amber-300">mDNS</span>');
                    const names = (r.names || []).join(', ') + (r.highvalue.length ? ' ⚠WPAD' : '');
                    return `<tr class="border-t border-slate-800">
                        <td class="px-2 py-1 font-mono ${poison ? 'text-red-300' : ''}">${escapeHtml(r.ip)}</td>
                        <td class="px-2 py-1 text-gray-400">${escapeHtml((r.protos || []).join('/').toUpperCase())}</td>
                        <td class="px-2 py-1 font-mono text-gray-400">${escapeHtml(names || '—')}</td>
                        <td class="px-2 py-1">${badge}</td>
                    </tr>`;
                }).join('') +
                '</tbody></table>';
        }
        (nr.conflicts || []).forEach(c => {
            html += `<div class="mt-2 px-3 py-2 rounded border text-xs text-red-300 border-red-800 bg-red-950/40">Name <span class="font-mono">${escapeHtml(c.name)}</span> answered with conflicting IPs: <span class="font-mono">${escapeHtml((c.answers || []).join(', '))}</span></div>`;
        });
        const krb = d.kerberos || {};
        const kc = krb.counts || {};
        const krbTotal = Object.values(kc).reduce((a, b) => a + (b || 0), 0);
        if (krbTotal || (krb.kdcs || []).length) {
            html += `<p class="text-xs uppercase text-gray-400 mt-3 mb-1">Kerberos (KDC tcp+udp/88)</p>`;
            html += `<p class="text-xs text-gray-500 mb-1">AS-REQ ${kc['as-req'] || 0} · AS-REP ${kc['as-rep'] || 0} · TGS-REQ ${kc['tgs-req'] || 0} · TGS-REP ${kc['tgs-rep'] || 0} · errors ${krb.errors || 0}${(krb.realms || []).length ? ' · realms: ' + escapeHtml(krb.realms.join(', ')) : ''}</p>`;
            if ((krb.kdcs || []).length) {
                html += '<p class="text-xs text-gray-500 mb-1">KDCs: ' + krb.kdcs.map(k =>
                    `<span class="font-mono ${k.known ? 'text-gray-400' : 'text-amber-300'}">${escapeHtml(k.ip)}${k.known ? '' : ' (new)'}</span>`).join(', ') + '</p>';
            }
            if ((krb.findings || []).length) {
                html += '<table class="min-w-full text-xs text-gray-300 whitespace-nowrap"><thead>' +
                    '<tr class="text-left text-gray-500"><th class="px-2 py-1">Finding</th><th class="px-2 py-1">Principal / SPN</th><th class="px-2 py-1">Etypes</th></tr>' +
                    '</thead><tbody>' +
                    krb.findings.map(f => {
                        const cls = _KRB_FINDING_STYLE[f.type] || 'text-gray-300';
                        const who = f.sname || f.principal || '—';
                        return `<tr class="border-t border-slate-800">
                            <td class="px-2 py-1 ${cls}">${escapeHtml(f.type)}</td>
                            <td class="px-2 py-1 font-mono">${escapeHtml(who)}</td>
                            <td class="px-2 py-1 font-mono text-gray-400">${escapeHtml((f.etypes || []).join(', ') || '—')}</td>
                        </tr>`;
                    }).join('') +
                    '</tbody></table>';
            } else {
                html += '<p class="text-xs text-green-400/80">No Kerberos downgrade, kerberoasting, or AS-REP roasting seen (AES only).</p>';
            }
        }
        if (d.reasons && d.reasons.length) {
            html += '<ul class="text-xs text-gray-400 mt-2 list-disc pl-5">' +
                d.reasons.map(r => '<li>' + escapeHtml(r) + '</li>').join('') + '</ul>';
        }
        (d.advisories || []).forEach(a => {
            html += `<div class="mt-2 px-3 py-2 rounded border text-xs text-gray-400 border-slate-700 bg-slate-900/40">${escapeHtml(a)}</div>`;
        });
        out.innerHTML = html;
    } catch (e) {
        out.innerHTML = '<p class="text-sm text-red-400">Failed: ' + escapeHtml(e.message) + '</p>';
    } finally {
        _ndBusy(btn, false);
    }
}
async function smbTrustBaseline() {
    try {
        await postAPI('/api/net/smb-baseline', { action: 'reset' });