Feature/enhanced reporting

examples/benchmark.rs

@@ -123,7 +123,7 @@ fn evaluate_certificate(seed: &str, offset: usize, coverage: usize) -> usize {
     measure_block!("tls_parse", {
         let len = bytes.len().max(1);
         bytes.rotate_left(offset % len);
-        if coverage % 2 == 0 {
+        if coverage.is_multiple_of(2) {
             thread::sleep(Duration::from_micros(60));
         }
     });

recon_results/chaldal.com_20251220_124726/chaldal.com_REPORT.md

@@ -0,0 +1,271 @@
+# ShadowMap Security Report
+
+**Target Domain:** `chaldal.com`
+**Scan Date:** 2025-12-20 12:47:56 +06:00
+**Generated by:** ShadowMap v0.1.0
+
+---
+
+## Executive Summary
+
+| Metric | Value |
+|--------|-------|
+| **Total Subdomains Discovered** | 21 |
+| **Live Hosts** | 21 |
+| **CORS Vulnerabilities** | 1 |
+| **Takeover Risks** | 0 |
+| **Cloud Assets Flagged** | 21 |
+| **Overall Risk Level** | **HIGH** |
+
+## Critical Security Findings
+
+### CORS Misconfigurations
+
+**Severity:** HIGH
+**Impact:** Data theft, unauthorized API access
+
+**Host:** `addrapi.chaldal.com`
+- Wildcard CORS allowed
+- Allow-Credentials: true
+- Wildcard CORS allowed
+- Allow-Credentials: true
+- Wildcard CORS allowed
+- Allow-Credentials: true
+- Wildcard CORS allowed
+- Allow-Credentials: true
+
+**Recommended Fix:**
+```nginx
+# Remove wildcard CORS
+add_header Access-Control-Allow-Origin "https://yourdomain.com" always;
+# OR remove credentials if wildcard needed
+# remove_header Access-Control-Allow-Credentials;
+```
+
+## Discovered Subdomains
+
+| # | Subdomain | Status | Server | Open Ports | Issues |
+|---|-----------|--------|--------|------------|--------|
+| 1 | `2020.chaldal.com` | SERVER_ERR 525 | cloudflare | 80, 443, 8080, 8443 | OK |
+| 2 | `addrapi.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | ISSUES: 8 |
+| 3 | `admin.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 4 | `app-updates.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 5 | `callcenter.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 6 | `catalog.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 7 | `cdvn-v2-ui.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 8 | `cdvn-v2.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 9 | `chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 10 | `eggfarm.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 11 | `eggtransport.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 12 | `eggyolk.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 13 | `email.chaldal.com` | CLIENT_ERR 404 | - | 80, 443 | OK |
+| 14 | `gogo.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 15 | `groceryintegration-api.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 16 | `mapping-ui.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 17 | `mapping.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 18 | `osm.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 19 | `pk-api.chaldal.com` | CLIENT_ERR 404 | nginx | 80, 443 | OK |
+| 20 | `pk.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+| 21 | `yearbook.chaldal.com` | OK 200 | nginx | 80, 443 | OK |
+
+## Port Analysis
+
+**Unique Open Ports:** 80, 443, 8080, 8443
+
+### Port 80 (HTTP)
+**Hosts:** 21 hosts
+- `2020.chaldal.com`
+- `addrapi.chaldal.com`
+- `admin.chaldal.com`
+- `app-updates.chaldal.com`
+- `callcenter.chaldal.com`
+- `catalog.chaldal.com`
+- `cdvn-v2-ui.chaldal.com`
+- `cdvn-v2.chaldal.com`
+- `chaldal.com`
+- `eggfarm.chaldal.com`
+- `eggtransport.chaldal.com`
+- `eggyolk.chaldal.com`
+- `email.chaldal.com`
+- `gogo.chaldal.com`
+- `groceryintegration-api.chaldal.com`
+- `mapping-ui.chaldal.com`
+- `mapping.chaldal.com`
+- `osm.chaldal.com`
+- `pk-api.chaldal.com`
+- `pk.chaldal.com`
+- `yearbook.chaldal.com`
+
+### Port 443 (HTTPS)
+**Hosts:** 21 hosts
+- `2020.chaldal.com`
+- `addrapi.chaldal.com`
+- `admin.chaldal.com`
+- `app-updates.chaldal.com`
+- `callcenter.chaldal.com`
+- `catalog.chaldal.com`
+- `cdvn-v2-ui.chaldal.com`
+- `cdvn-v2.chaldal.com`
+- `chaldal.com`
+- `eggfarm.chaldal.com`
+- `eggtransport.chaldal.com`
+- `eggyolk.chaldal.com`
+- `email.chaldal.com`
+- `gogo.chaldal.com`
+- `groceryintegration-api.chaldal.com`
+- `mapping-ui.chaldal.com`
+- `mapping.chaldal.com`
+- `osm.chaldal.com`
+- `pk-api.chaldal.com`
+- `pk.chaldal.com`
+- `yearbook.chaldal.com`
+
+### Port 8080 (HTTP Alt)
+**Hosts:** 1 hosts
+- `2020.chaldal.com`
+
+### Port 8443 (HTTPS Alt)
+**Hosts:** 1 hosts
+- `2020.chaldal.com`
+
+## Software Fingerprints
+
+**2020.chaldal.com**
+- **server:** `cloudflare`
+
+**addrapi.chaldal.com**
+- **server:** `nginx`
+
+**admin.chaldal.com**
+- **server:** `nginx`
+- **x-powered-by:** `Express`
+- **framework:** `react`
+
+**app-updates.chaldal.com**
+- **x-powered-by:** `Next.js`
+- **server:** `nginx`
+
+**callcenter.chaldal.com**
+- **server:** `nginx`
+- **framework:** `react`
+- **x-powered-by:** `Express`
+
+**catalog.chaldal.com**
+- **server:** `nginx`
+
+**cdvn-v2-ui.chaldal.com**
+- **server:** `nginx`
+- **x-powered-by:** `Express`
+
+**cdvn-v2.chaldal.com**
+- **server:** `nginx`
+
+**chaldal.com**
+- **framework:** `react`
+- **x-powered-by:** `Express`
+- **server:** `nginx`
+
+**eggfarm.chaldal.com**
+- **server:** `nginx`
+- **framework:** `react`
+- **x-powered-by:** `Express`
+
+**eggtransport.chaldal.com**
+- **server:** `nginx`
+
+**eggyolk.chaldal.com**
+- **server:** `nginx`
+
+**gogo.chaldal.com**
+- **server:** `nginx`
+
+**groceryintegration-api.chaldal.com**
+- **server:** `nginx`
+
+**mapping-ui.chaldal.com**
+- **x-powered-by:** `Express`
+- **server:** `nginx`
+
+**mapping.chaldal.com**
+- **server:** `nginx`
+
+**osm.chaldal.com**
+- **server:** `nginx`
+
+**pk-api.chaldal.com**
+- **server:** `nginx`
+
+**pk.chaldal.com**
+- **server:** `nginx`
+- **x-powered-by:** `Express`
+
+**yearbook.chaldal.com**
+- **server:** `nginx`
+
+## Cloud Infrastructure Analysis
+
+**Total Predicted Assets:** 147
+
+### Provider Breakdown
+
+- **aws_cloudfront:** 21 assets
+- **aws_s3:** 21 assets
+- **azure_blob:** 21 assets
+- **cloudflare_r2:** 21 assets
+- **digitalocean_spaces:** 21 assets
+- **gcp_storage:** 21 assets
+- **wasabi:** 21 assets
+
+## AI-Powered Threat Intelligence
+
+**Framework:** ShadowMap Codex Intelligence Framework
+**Version:** 1.0
+
+### Metrics
+- **Total Signals:** 1
+- **Correlated Assets:** 1
+- **Average Confidence:** 80%
+
+### Detected Threats
+
+#### SOC-001 - Public S3 bucket misconfig leak
+- **Severity:** HIGH
+- **Confidence:** 80%
+- **Cloud Vendors:** aws
+- **Services:** s3, object-storage
+
+### Remediation Plan
+
+#### Stabilize Public S3 bucket misconfig leak
+**Severity:** HIGH | **Due:** 3 days
+
+**Steps:**
+1. Validate intelligence context for 'Public S3 bucket misconfig leak' against live telemetry
+2. Engage impacted service owners for chaldal.com to scope blast radius
+3. Apply scp control set to mitigate s3_public_acl exposure
+4. Apply config_rules control set to mitigate s3_public_acl exposure
+5. Apply security_hub control set to mitigate s3_public_acl exposure
+
+**Rollback:**
+- Document original control state and owners before execution
+- Use change window rollback procedure if user impact detected
+
+## Recommendations
+
+### Immediate Actions (P0)
+1. **Fix CORS misconfigurations** on 1 host(s)
+
+### Short-term Actions (P1)
+1. **Validate all predicted cloud buckets** for public access
+2. **Implement Web Application Firewall (WAF)**
+3. **Set up continuous monitoring** for new subdomains
+
+### Long-term Actions (P2)
+1. **Enable DNSSEC** for domain integrity
+2. **Conduct regular penetration testing**
+3. **Security awareness training** for development teams
+
+---
+
+**Report generated by ShadowMap** • [https://shadowmap.io](https://shadowmap.io)
+*For questions or support, contact your security team.*