Function delete_file_api

webapp_modern.py:16220–16285

Delete a file or directory

()

                            'ssid': ssid,
                            'bssid': bssid,
                            'signal': signal,
                            'description': f'Open network "{ssid}" — possible honeypot or evil twin'
                        })

        # 5. Beacon spam detection — many SSIDs from same Espressif OUI
        oui_ssid_count = {}
        for line in result.stdout.strip().split('\n'):
            if not line.strip():
                continue
            bm = _re.match(r'^([0-9A-Fa-f]{2}\\:[0-9A-Fa-f]{2}\\:[0-9A-Fa-f]{2}\\:[0-9A-Fa-f]{2}\\:[0-9A-Fa-f]{2}\\:[0-9A-Fa-f]{2})', line)
            if not bm:
                continue
            b_oui = bm.group(1).replace('\\:', ':').upper()[:8]
            if b_oui in _SUSPICIOUS_AP_OUIS:
                oui_ssid_count.setdefault(b_oui, set())
                # Extract SSID
                rem = line[bm.end():]
                if rem.startswith(':'):
                    rem = rem[1:]
                s_parts = rem.split(':')
                s_ssid = s_parts[0] if s_parts else ''
                if s_ssid:
                    oui_ssid_count[b_oui].add(s_ssid)

        for oui_prefix, ssid_set in oui_ssid_count.items():
            if len(ssid_set) >= 5:
                vendor = _SUSPICIOUS_AP_OUIS.get(oui_prefix, 'Unknown')
                key = f'beacon_spam_{oui_prefix}'
                if key not in seen:
                    seen.add(key)
                    findings.append({
                        'type': 'Beacon Spam Attack',
                        'severity': 'high',
                        'ssid': f'{len(ssid_set)} fake SSIDs',
                        'bssid': f'{oui_prefix}:*',
                        'signal': '-',
                        'description': f'{len(ssid_set)} different SSIDs from {vendor} OUI {oui_prefix} — likely beacon spam from a deauther/Marauder'
                    })

        # 6. Deauth detection from monitor-mode capture (channels 1/6/11)
        ev_thread.join(timeout=5)
        if deauth_events:
            findings.append({
                'type': 'Deauth Attack Detected',
                'severity': 'critical',
                'ssid': '(airspace)',
                'bssid': '-',
                'signal': '-',
                'description': f'{len(deauth_events)} deauth/disassoc frame(s) captured across ch 1/6/11 — active WiFi attack in progress'
            })

        # Sort by severity
        sev_order = {'critical': 0, 'high': 1, 'medium': 2, 'low': 3}
        findings.sort(key=lambda f: sev_order.get(f['severity'], 4))

        return jsonify({
            'success': True,
            'findings': findings,