PATRICT-OSINT // WEB RECON & THREAT AUDIT

Target: {{ target_url }} (Domain: {{ domain }})

Waktu Pemindaian: {{ timestamp }}

Security Grade

Threat Level

{{ threat_data.overall_threat_level or 'LOW' }} ({{ threat_data.risk_score or 0 }}/100)

{% if origin_leak.leak_detected %}

⚠️

POTENTIAL ORIGIN IP LEAK DETECTED (CLOUDFLARE BYPASS)

Target berada di balik {{ origin_leak.cdn_provider }}, namun ditemukan IP backend origin terbuka di record unproxied:

{% for leak in origin_leak.leaked_ips %}

                    [!] {{ leak.ip }} - Sumber: {{ leak.source }} ({{ leak.risk }})
                

{% endfor %}

{% endif %}

🛡️ Executive Vulnerability & Threat Assessment {{ threat_data.total_threats_identified or 0 }} Threats

{% if threat_data.threats %} {% for th in threat_data.threats %}

[{{ th.severity }}] {{ th.title }} {{ th.category }}

Mitigasi: {{ th.mitigation }}

{% endfor %} {% else %}

✓ Tidak ditemukan ancaman kritis atau kebocoran konfigurasi pada level pemindaian saat ini.

{% endif %}

🔒 Security Headers Grader Score: {{ sec_grade.score or 0 }}/100

{% for h_name, h_val in sec_grade.evaluations.items() %} {% endfor %}

Security Header	Status	Score	Details
`{{ h_name }}`	{% if h_val.status == 'PASS' %} PASS {% elif h_val.status == 'WARN' %} WARN {% else %} FAIL {% endif %}	{{ h_val.score }}	{{ h_val.details }}

🔐 SSL/TLS Certificate Intelligence {% if ssl_info.has_ssl %}{% if ssl_info.days_remaining is not none %}{{ ssl_info.days_remaining }} Hari Tersisa{% else %}Sertifikat Valid{% endif %}{% else %}No SSL{% endif %}

Issuer Organization	{{ ssl_info.issuer.organizationName or ssl_info.issuer.commonName or 'N/A' }}
Subject CN	{{ ssl_info.subject.commonName or domain }}
Masa Berlaku	{{ ssl_info.valid_from }} s/d {{ ssl_info.valid_until }}
TLS Protocol & Cipher	`{{ ssl_info.tls_version or 'N/A' }}` ({{ ssl_info.cipher or 'N/A' }})
Subject Alt Names (SAN)	{{ ssl_info.san_list \| length }} domain terdaftar

🌐 Passive Subdomains Discovery (CT Logs via crt.sh) {{ crt_data.total_found or 0 }} Subdomain

{% if crt_data.unique_subdomains %}

{% for sub in crt_data.unique_subdomains %}

{% endfor %}

{% else %}

Tidak ada catatan subdomain publik di CT logs.

{% endif %}

📁 Sensitive File & Directory Discovery {{ sensitive_files | length }} Ditemukan

{% if sensitive_files %} {% for sf in sensitive_files %} {% endfor %}

Path	Status	Severity	Deskripsi
`{{ sf.path }}`	{{ sf.status }}	{{ sf.severity }}	{{ sf.description }} ({{ sf.size_bytes }} B)

{% else %}

Tidak ada file sensitif yang bocor secara terbuka.

{% endif %}

⚡ Stack Teknologi & Fingerprinting

Web Servers	{{ web_data.tech_stack.web_servers \| join(', ') or 'Hidden / Generic' }}
Language / Runtime	{{ web_data.tech_stack.programming_languages \| join(', ') or 'N/A' }}
Backend Framework	{{ web_data.tech_stack.backend_frameworks \| join(', ') or 'N/A' }}
CMS / Platform	{{ web_data.tech_stack.cms_and_platforms \| join(', ') or 'N/A' }}
WAF / Security	{{ web_data.tech_stack.waf_and_security \| join(', ') or 'None Detected' }}
Frontend Libraries	{{ web_data.tech_stack.frontend_libraries \| join(', ') or 'N/A' }}