Skip to content

Commit 7ac9020

Browse files
mdabir1203mdabir1203
authored
Merge pull request #74 from senseix21/feature/enhanced-reporting
Feature/enhanced reporting
2 parents b197e6d + 4354974 commit 7ac9020

24 files changed

Lines changed: 6137 additions & 3 deletions

‎examples/benchmark.rs‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -123,7 +123,7 @@ fn evaluate_certificate(seed: &str, offset: usize, coverage: usize) -> usize {
123123
measure_block!("tls_parse", {
124124
let len = bytes.len().max(1);
125125
bytes.rotate_left(offset % len);
126-
if coverage % 2 == 0 {
126+
if coverage.is_multiple_of(2) {
127127
thread::sleep(Duration::from_micros(60));
128128
}
129129
});

‎profile.json.gz‎

1.34 KB
Binary file not shown.

‎recon_results/chaldal.com_20251220_124726/chaldal.com_REPORT.md‎

Lines changed: 271 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,271 @@
1+
# ShadowMap Security Report
2+
3+
**Target Domain:** `chaldal.com`
4+
**Scan Date:** 2025-12-20 12:47:56 +06:00
5+
**Generated by:** ShadowMap v0.1.0
6+
7+
---
8+
9+
## Executive Summary
10+
11+
| Metric | Value |
12+
|--------|-------|
13+
| **Total Subdomains Discovered** | 21 |
14+
| **Live Hosts** | 21 |
15+
| **CORS Vulnerabilities** | 1 |
16+
| **Takeover Risks** | 0 |
17+
| **Cloud Assets Flagged** | 21 |
18+
| **Overall Risk Level** | **HIGH** |
19+
20+
## Critical Security Findings
21+
22+
### CORS Misconfigurations
23+
24+
**Severity:** HIGH
25+
**Impact:** Data theft, unauthorized API access
26+
27+
**Host:** `addrapi.chaldal.com`
28+
- Wildcard CORS allowed
29+
- Allow-Credentials: true
30+
- Wildcard CORS allowed
31+
- Allow-Credentials: true
32+
- Wildcard CORS allowed
33+
- Allow-Credentials: true
34+
- Wildcard CORS allowed
35+
- Allow-Credentials: true
36+
37+
**Recommended Fix:**
38+
```nginx
39+
# Remove wildcard CORS
40+
add_header Access-Control-Allow-Origin "https://yourdomain.com" always;
41+
# OR remove credentials if wildcard needed
42+
# remove_header Access-Control-Allow-Credentials;
43+
```
44+
45+
## Discovered Subdomains
46+
47+
| # | Subdomain | Status | Server | Open Ports | Issues |
48+
|---|-----------|--------|--------|------------|--------|
49+
| 1 | `2020.chaldal.com` | SERVER_ERR 525 | cloudflare | 80, 443, 8080, 8443 | OK |
50+
| 2 | `addrapi.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | ISSUES: 8 |
51+
| 3 | `admin.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
52+
| 4 | `app-updates.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
53+
| 5 | `callcenter.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
54+
| 6 | `catalog.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
55+
| 7 | `cdvn-v2-ui.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
56+
| 8 | `cdvn-v2.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
57+
| 9 | `chaldal.com` | OK 200 | nginx | 80, 443 | OK |
58+
| 10 | `eggfarm.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
59+
| 11 | `eggtransport.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
60+
| 12 | `eggyolk.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
61+
| 13 | `email.chaldal.com` | CLIENT_ERR 404 | - | 80, 443 | OK |
62+
| 14 | `gogo.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
63+
| 15 | `groceryintegration-api.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
64+
| 16 | `mapping-ui.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
65+
| 17 | `mapping.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
66+
| 18 | `osm.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
67+
| 19 | `pk-api.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
68+
| 20 | `pk.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
69+
| 21 | `yearbook.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
70+
71+
## Port Analysis
72+
73+
**Unique Open Ports:** 80, 443, 8080, 8443
74+
75+
### Port 80 (HTTP)
76+
**Hosts:** 21 hosts
77+
- `2020.chaldal.com`
78+
- `addrapi.chaldal.com`
79+
- `admin.chaldal.com`
80+
- `app-updates.chaldal.com`
81+
- `callcenter.chaldal.com`
82+
- `catalog.chaldal.com`
83+
- `cdvn-v2-ui.chaldal.com`
84+
- `cdvn-v2.chaldal.com`
85+
- `chaldal.com`
86+
- `eggfarm.chaldal.com`
87+
- `eggtransport.chaldal.com`
88+
- `eggyolk.chaldal.com`
89+
- `email.chaldal.com`
90+
- `gogo.chaldal.com`
91+
- `groceryintegration-api.chaldal.com`
92+
- `mapping-ui.chaldal.com`
93+
- `mapping.chaldal.com`
94+
- `osm.chaldal.com`
95+
- `pk-api.chaldal.com`
96+
- `pk.chaldal.com`
97+
- `yearbook.chaldal.com`
98+
99+
### Port 443 (HTTPS)
100+
**Hosts:** 21 hosts
101+
- `2020.chaldal.com`
102+
- `addrapi.chaldal.com`
103+
- `admin.chaldal.com`
104+
- `app-updates.chaldal.com`
105+
- `callcenter.chaldal.com`
106+
- `catalog.chaldal.com`
107+
- `cdvn-v2-ui.chaldal.com`
108+
- `cdvn-v2.chaldal.com`
109+
- `chaldal.com`
110+
- `eggfarm.chaldal.com`
111+
- `eggtransport.chaldal.com`
112+
- `eggyolk.chaldal.com`
113+
- `email.chaldal.com`
114+
- `gogo.chaldal.com`
115+
- `groceryintegration-api.chaldal.com`
116+
- `mapping-ui.chaldal.com`
117+
- `mapping.chaldal.com`
118+
- `osm.chaldal.com`
119+
- `pk-api.chaldal.com`
120+
- `pk.chaldal.com`
121+
- `yearbook.chaldal.com`
122+
123+
### Port 8080 (HTTP Alt)
124+
**Hosts:** 1 hosts
125+
- `2020.chaldal.com`
126+
127+
### Port 8443 (HTTPS Alt)
128+
**Hosts:** 1 hosts
129+
- `2020.chaldal.com`
130+
131+
## Software Fingerprints
132+
133+
**2020.chaldal.com**
134+
- **server:** `cloudflare`
135+
136+
**addrapi.chaldal.com**
137+
- **server:** `nginx`
138+
139+
**admin.chaldal.com**
140+
- **server:** `nginx`
141+
- **x-powered-by:** `Express`
142+
- **framework:** `react`
143+
144+
**app-updates.chaldal.com**
145+
- **x-powered-by:** `Next.js`
146+
- **server:** `nginx`
147+
148+
**callcenter.chaldal.com**
149+
- **server:** `nginx`
150+
- **framework:** `react`
151+
- **x-powered-by:** `Express`
152+
153+
**catalog.chaldal.com**
154+
- **server:** `nginx`
155+
156+
**cdvn-v2-ui.chaldal.com**
157+
- **server:** `nginx`
158+
- **x-powered-by:** `Express`
159+
160+
**cdvn-v2.chaldal.com**
161+
- **server:** `nginx`
162+
163+
**chaldal.com**
164+
- **framework:** `react`
165+
- **x-powered-by:** `Express`
166+
- **server:** `nginx`
167+
168+
**eggfarm.chaldal.com**
169+
- **server:** `nginx`
170+
- **framework:** `react`
171+
- **x-powered-by:** `Express`
172+
173+
**eggtransport.chaldal.com**
174+
- **server:** `nginx`
175+
176+
**eggyolk.chaldal.com**
177+
- **server:** `nginx`
178+
179+
**gogo.chaldal.com**
180+
- **server:** `nginx`
181+
182+
**groceryintegration-api.chaldal.com**
183+
- **server:** `nginx`
184+
185+
**mapping-ui.chaldal.com**
186+
- **x-powered-by:** `Express`
187+
- **server:** `nginx`
188+
189+
**mapping.chaldal.com**
190+
- **server:** `nginx`
191+
192+
**osm.chaldal.com**
193+
- **server:** `nginx`
194+
195+
**pk-api.chaldal.com**
196+
- **server:** `nginx`
197+
198+
**pk.chaldal.com**
199+
- **server:** `nginx`
200+
- **x-powered-by:** `Express`
201+
202+
**yearbook.chaldal.com**
203+
- **server:** `nginx`
204+
205+
## Cloud Infrastructure Analysis
206+
207+
**Total Predicted Assets:** 147
208+
209+
### Provider Breakdown
210+
211+
- **aws_cloudfront:** 21 assets
212+
- **aws_s3:** 21 assets
213+
- **azure_blob:** 21 assets
214+
- **cloudflare_r2:** 21 assets
215+
- **digitalocean_spaces:** 21 assets
216+
- **gcp_storage:** 21 assets
217+
- **wasabi:** 21 assets
218+
219+
## AI-Powered Threat Intelligence
220+
221+
**Framework:** ShadowMap Codex Intelligence Framework
222+
**Version:** 1.0
223+
224+
### Metrics
225+
- **Total Signals:** 1
226+
- **Correlated Assets:** 1
227+
- **Average Confidence:** 80%
228+
229+
### Detected Threats
230+
231+
#### SOC-001 - Public S3 bucket misconfig leak
232+
- **Severity:** HIGH
233+
- **Confidence:** 80%
234+
- **Cloud Vendors:** aws
235+
- **Services:** s3, object-storage
236+
237+
### Remediation Plan
238+
239+
#### Stabilize Public S3 bucket misconfig leak
240+
**Severity:** HIGH | **Due:** 3 days
241+
242+
**Steps:**
243+
1. Validate intelligence context for 'Public S3 bucket misconfig leak' against live telemetry
244+
2. Engage impacted service owners for chaldal.com to scope blast radius
245+
3. Apply scp control set to mitigate s3_public_acl exposure
246+
4. Apply config_rules control set to mitigate s3_public_acl exposure
247+
5. Apply security_hub control set to mitigate s3_public_acl exposure
248+
249+
**Rollback:**
250+
- Document original control state and owners before execution
251+
- Use change window rollback procedure if user impact detected
252+
253+
## Recommendations
254+
255+
### Immediate Actions (P0)
256+
1. **Fix CORS misconfigurations** on 1 host(s)
257+
258+
### Short-term Actions (P1)
259+
1. **Validate all predicted cloud buckets** for public access
260+
2. **Implement Web Application Firewall (WAF)**
261+
3. **Set up continuous monitoring** for new subdomains
262+
263+
### Long-term Actions (P2)
264+
1. **Enable DNSSEC** for domain integrity
265+
2. **Conduct regular penetration testing**
266+
3. **Security awareness training** for development teams
267+
268+
---
269+
270+
**Report generated by ShadowMap** • [https://shadowmap.io](https://shadowmap.io)
271+
*For questions or support, contact your security team.*

0 commit comments

Comments
 (0)