hao/websafe-kb
1
0
派生 0
代码 工单 合并请求 1 工作流 软件包 项目 发布 百科 活动

更新: 89 个文件 - 2026-03-17 02:00:01

浏览代码
这个提交包含在：
hao
2026-03-17 02:00:01 -07:00
父节点 300c840509
当前提交 72c6782c45
共修改 89 个文件，包含 16931 行新增和 373 行删除
下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件

5938
08-threat-intel/generated/dashboard/architecture.json 普通文件
查看文件

文件差异内容过多而无法显示 加载差异

376
08-threat-intel/generated/dashboard/assets/app.js
查看文件

@@ -4,6 +4,7 @@ const state = {
systems: [],
advisories: {},
profiles: {},
architecture: null,
selectedRunId: null,
selectedArtifact: null,
refreshHandle: null,
@@ -21,12 +22,33 @@ const state = {
evidence: true,
logs: true,
sources: true,
architecture: true,
run_json: false,
advisory_json: false,
profile_json: false
}
};
const STATUS_LABELS = {
"verified-real": "真实版本已实证",
"verified-synthetic": "合成靶场已实证",
"blocked-artifact": "制品阻塞",
"blocked-destructive": "破坏性风险阻塞",
"triage-manual": "人工分诊",
suspected: "仅疑似命中",
completed: "已完成",
failed: "失败",
skipped: "已跳过",
planned: "已规划",
unknown: "未知"
};
const ARTIFACT_KIND_LABELS = {
image: "图片",
text: "文本",
link: "链接"
};
const $ = (id) => document.getElementById(id);
const icon = (name, className = "icon") =>
`<svg class="${className}" aria-hidden="true"><use href="./assets/icons.svg#${name}"></use></svg>`;
@@ -37,7 +59,7 @@ const statusClass = (status) => ({
"blocked-artifact": "status-pill status-blocked-artifact",
"blocked-destructive": "status-pill status-blocked-destructive",
"triage-manual": "status-pill status-triage-manual",
"suspected": "status-pill status-suspected",
suspected: "status-pill status-suspected",
completed: "status-pill status-verified-real",
failed: "status-pill status-blocked-artifact",
skipped: "status-pill status-triage-manual"
@@ -52,21 +74,37 @@ function escapeHtml(value) {
}
function formatStatus(value) {
return String(value || "unknown").replaceAll("-", " ");
return STATUS_LABELS[value] || String(value || "unknown").replaceAll("-", " ");
}
function formatDateTime(value) {
if (!value) return "-";
const date = new Date(value);
if (Number.isNaN(date.getTime())) return String(value);
return date.toLocaleString("zh-CN", {
hour12: false,
year: "numeric",
month: "2-digit",
day: "2-digit",
hour: "2-digit",
minute: "2-digit",
second: "2-digit"
});
}
function timeAgo(value) {
if (!value) return "-";
const diff = Date.now() - new Date(value).getTime();
if (Number.isNaN(diff)) return value;
if (Number.isNaN(diff)) return String(value);
const seconds = Math.floor(diff / 1000);
if (seconds < 60) return `${seconds}s ago`;
if (seconds <= 5) return "刚刚";
if (seconds < 60) return `${seconds} 秒前`;
const minutes = Math.floor(seconds / 60);
if (minutes < 60) return `${minutes}m ago`;
if (minutes < 60) return `${minutes} 分钟前`;
const hours = Math.floor(minutes / 60);
if (hours < 24) return `${hours}h ago`;
if (hours < 24) return `${hours} 小时前`;
const days = Math.floor(hours / 24);
return `${days}d ago`;
return `${days} 天前`;
}
async function fetchJson(url) {
@@ -94,30 +132,30 @@ function metricCards() {
return [
{
label: "Total Runs",
label: "运行总数",
value: state.summary?.run_count || 0,
note: `${state.summary?.advisory_count || 0} advisories indexed`,
note: `已索引漏洞条目 ${state.summary?.advisory_count || 0} 条`,
color: "var(--accent-purple)",
iconName: "report"
},
{
label: "Success",
label: "实证成功",
value: successCount,
note: "verified-real + verified-synthetic",
note: "真实版本 + 合成靶场",
color: "var(--accent-green)",
iconName: "shield"
},
{
label: "Blocked",
label: "当前阻塞",
value: blockedCount,
note: "artifact or destructive blockers",
note: "制品阻塞或破坏性风险阻塞",
color: "var(--accent-red)",
iconName: "failure"
},
{
label: "In Progress",
label: "待处理 / 进行中",
value: inProgressCount,
note: "manual review or incomplete verification",
note: "人工分诊、待补证据或未完成实证",
color: "var(--accent-blue)",
iconName: "timeline"
}
@@ -149,11 +187,16 @@ function renderSyncState(kind, title, detail) {
$("syncState").dataset.kind = kind;
}
function optionLabel(kind, value) {
if (kind === "status") return formatStatus(value);
return value;
}
function hydrateFilters() {
const controls = [
["systemFilter", "system", state.runs.map((item) => item.system_id), "All systems"],
["statusFilter", "status", state.runs.map((item) => item.verification_status), "All statuses"],
["profileFilter", "profile", state.runs.map((item) => item.repro_profile_id), "All profiles"]
["systemFilter", "system", state.runs.map((item) => item.system_id), "全部系统"],
["statusFilter", "status", state.runs.map((item) => item.verification_status), "全部状态"],
["profileFilter", "profile", state.runs.map((item) => item.repro_profile_id), "全部复现档案"]
];
for (const [id, key, values, label] of controls) {
@@ -161,7 +204,7 @@ function hydrateFilters() {
const current = state.filters[key];
control.innerHTML = `<option value="">${label}</option>`;
control.innerHTML += distinct(values)
.map((value) => `<option value="${escapeHtml(value)}">${escapeHtml(value)}</option>`)
.map((value) => `<option value="${escapeHtml(value)}">${escapeHtml(optionLabel(key, value))}</option>`)
.join("");
control.value = current;
}
@@ -198,20 +241,20 @@ function renderSystems() {
<article class="system-card">
<div class="timeline-head">
<strong class="system-title">${escapeHtml(system.display_name || system.system_id)}</strong>
<span class="section-chip">${escapeHtml(system.browser_present || 0)}/${escapeHtml(system.browser_required || 0)} browser</span>
<span class="section-chip">${escapeHtml(system.browser_present || 0)}/${escapeHtml(system.browser_required || 0)} 浏览器证据</span>
</div>
<div class="muted">${escapeHtml(system.system_id)} · latest ${escapeHtml(system.latest_update || "-")}</div>
<div class="muted">${escapeHtml(system.system_id)} · 最近更新 ${escapeHtml(formatDateTime(system.latest_update || "-"))}</div>
<div class="tag-row" style="margin-top:10px;">
<span class="tag">real ${escapeHtml(system.verified_real || 0)}</span>
<span class="tag">synthetic ${escapeHtml(system.verified_synthetic || 0)}</span>
<span class="tag">blocked ${escapeHtml(system.blocked || 0)}</span>
<span class="tag">真实 ${escapeHtml(system.verified_real || 0)}</span>
<span class="tag">合成 ${escapeHtml(system.verified_synthetic || 0)}</span>
<span class="tag">阻塞 ${escapeHtml(system.blocked || 0)}</span>
</div>
<div class="meter"><span style="--fill:${coverage}%"></span></div>
</article>
`;
})
.join("")
: `<div class="empty-state">No system coverage data.</div>`;
: `<div class="empty-state">暂无系统覆盖数据。</div>`;
}
function renderRecentFailures() {
@@ -226,23 +269,24 @@ function renderRecentFailures() {
<span class="${statusClass(item.status)}">${escapeHtml(formatStatus(item.status))}</span>
</div>
<div class="muted" style="margin-top:8px;">${escapeHtml(item.title || item.advisory_id)}</div>
<div class="failure-reason" style="margin-top:8px;">${escapeHtml(item.blocked_reason || "-")}</div>
<div class="failure-reason" style="margin-top:8px;">${escapeHtml(item.blocked_reason || "未提供失败原因。")}</div>
</article>
`
)
.join("")
: `<div class="empty-state">No recent blockers.</div>`;
: `<div class="empty-state">当前没有最近失败记录。</div>`;
}
function renderRunQueue() {
const runs = filteredRuns();
$("runCount").textContent = `${runs.length} shown`;
$("runCount").textContent = `${runs.length} 条`;
$("runQueue").innerHTML = runs.length
? runs
.map((item) => {
const active = item.run_id === state.selectedRunId ? "is-active" : "";
const browserState = item.browser_evidence?.present ? "ready" : (item.browser_evidence?.required ? "required" : "optional");
const browserState = item.browser_evidence?.present ? "已采集" : (item.browser_evidence?.required ? "必需待补" : "可选");
const lead = item.reasoning_lines?.[0] || item.blocked_reason || item.advisory_meta?.summary || "";
const artifactCount = (item.artifact_groups || []).reduce((sum, group) => sum + Number(group.count || 0), 0);
return `
<button class="run-card ${active}" type="button" data-run-id="${escapeHtml(item.run_id)}">
<div class="run-topline">
@@ -256,15 +300,15 @@ function renderRunQueue() {
<span>${escapeHtml(timeAgo(item.finished_at))}</span>
</div>
<div class="tag-row" style="margin-top:10px;">
<span class="tag">artifacts ${escapeHtml((item.artifact_groups || []).reduce((sum, group) => sum + group.count, 0))}</span>
<span class="tag">browser ${escapeHtml(browserState)}</span>
<span class="tag">证据 ${escapeHtml(artifactCount)}</span>
<span class="tag">浏览器 ${escapeHtml(browserState)}</span>
</div>
<div class="muted" style="margin-top:10px;">${escapeHtml(lead)}</div>
</button>
`;
})
.join("")
: `<div class="empty-state">No runs match the current filters.</div>`;
: `<div class="empty-state">当前筛选条件下没有匹配的运行。</div>`;
document.querySelectorAll("[data-run-id]").forEach((button) => {
button.addEventListener("click", () => {
@@ -278,18 +322,18 @@ function renderRunQueue() {
function progressSegments(progress) {
const order = [
["completed", "Completed", "progress-completed"],
["blocked", "Blocked", "progress-blocked"],
["failed", "Failed", "progress-failed"],
["skipped", "Skipped", "progress-skipped"],
["planned", "Planned", "progress-planned"],
["other", "Other", "progress-other"]
["completed", "已完成", "progress-completed"],
["blocked", "已阻塞", "progress-blocked"],
["failed", "失败", "progress-failed"],
["skipped", "已跳过", "progress-skipped"],
["planned", "已规划", "progress-planned"],
["other", "其他", "progress-other"]
];
const total = order.reduce((sum, [key]) => sum + Number(progress?.[key] || 0), 0);
if (!total) {
return {
bar: `<div class="progress-segment progress-other" style="width:100%"></div>`,
legend: `<span class="tag"><span class="swatch progress-other"></span>no progress</span>`
legend: `<span class="tag"><span class="swatch progress-other"></span>暂无进度</span>`
};
}
const bar = order
@@ -379,7 +423,7 @@ async function openArtifact(href, label, kind) {
}
viewer.innerHTML = `<pre>${escapeHtml(formatted)}</pre>`;
} catch (error) {
viewer.innerHTML = `<pre>Artifact load failed: ${escapeHtml(error.message)}</pre>`;
viewer.innerHTML = `<pre>加载 artifact 失败：${escapeHtml(error.message)}</pre>`;
}
}
@@ -396,16 +440,147 @@ function bindPanelToggles() {
});
}
function renderArchitectureFields(fields = []) {
if (!fields.length) return "";
return `
<div class="arch-field-grid">
${fields
.map(
(field) => `
<article class="arch-field">
<span class="arch-field-label">${escapeHtml(field.label || "-")}</span>
<div class="arch-field-value">${escapeHtml(field.value || "-")}</div>
</article>
`
)
.join("")}
</div>
`;
}
function renderArchitectureStats(stats = []) {
if (!stats.length) return "";
return `
<div class="arch-stat-grid">
${stats
.map(
(item) => `
<article class="arch-stat">
<span class="arch-stat-label">${escapeHtml(item.label || "-")}</span>
<strong class="arch-stat-value">${escapeHtml(item.value || "-")}</strong>
</article>
`
)
.join("")}
</div>
`;
}
function renderArchitectureLinks(links = []) {
if (!links.length) return "";
return `
<div class="arch-link-grid">
${links
.map(
(linkItem) => `
<a class="arch-link-card" href="${escapeHtml(linkItem.href || "#")}" target="_blank" rel="noreferrer">
<span class="arch-link-label">${escapeHtml(linkItem.label || "打开链接")}</span>
<span class="arch-link-copy">${escapeHtml(linkItem.description || linkItem.href || "")}</span>
</a>
`
)
.join("")}
</div>
`;
}
function renderArchitectureNode(node, depth = 0) {
if (!node) return "";
const children = (node.items || []).map((item) => renderArchitectureNode(item, depth + 1)).join("");
const fields = renderArchitectureFields(node.fields || []);
const stats = renderArchitectureStats(node.stats || []);
const links = renderArchitectureLinks(node.links || []);
const badges = (node.badges || [])
.map((badge) => `<span class="tag">${escapeHtml(badge)}</span>`)
.join("");
const hasBody = Boolean(children || fields || stats || links || node.summary || badges);
const summaryBlock = `
<div class="arch-summary-main">
<strong class="arch-title">${escapeHtml(node.title || "未命名节点")}</strong>
${node.summary ? `<span class="arch-summary-copy">${escapeHtml(node.summary)}</span>` : ""}
</div>
<div class="arch-summary-meta">
${node.items?.length ? `<span class="section-chip">${escapeHtml(node.items.length)} 个子项</span>` : ""}
${node.fields?.length ? `<span class="section-chip">${escapeHtml(node.fields.length)} 个字段</span>` : ""}
${node.links?.length ? `<span class="section-chip">${escapeHtml(node.links.length)} 个链接</span>` : ""}
</div>
`;
if (!hasBody) {
return `
<article class="arch-leaf" data-depth="${escapeHtml(depth)}">
${summaryBlock}
</article>
`;
}
const openAttr = node.open === false ? "" : "open";
return `
<details class="arch-node" data-depth="${escapeHtml(depth)}" ${openAttr}>
<summary class="arch-summary">
${summaryBlock}
</summary>
<div class="arch-body">
${badges ? `<div class="tag-row arch-badges">${badges}</div>` : ""}
${stats}
${fields}
${links}
${children ? `<div class="arch-children">${children}</div>` : ""}
</div>
</details>
`;
}
function renderArchitecturePanel() {
const architecture = state.architecture;
if (!architecture) {
return renderPanel("architecture", "当前架构库", "未生成", "systems", `<div class="empty-state">尚未找到架构 JSON，请先执行渲染命令。</div>`);
}
const sections = architecture.sections || [];
const content = `
<div class="callout architecture-callout">
<strong>${escapeHtml(architecture.title || "当前架构库")}</strong>
<div class="plan-copy">${escapeHtml(architecture.summary || "当前工作台的结构化真值视图。")}</div>
<div class="tag-row" style="margin-top:10px;">
<span class="tag">生成时间 ${escapeHtml(formatDateTime(architecture.generated_at))}</span>
<a class="tag" href="./architecture.json" target="_blank" rel="noreferrer">架构 JSON</a>
<a class="tag" href="./docs/architecture-library.html" target="_blank" rel="noreferrer">镜像页</a>
<a class="tag" href="./docs/root-readme.html" target="_blank" rel="noreferrer">仓库入口镜像</a>
</div>
</div>
<div class="architecture-tree">
${sections.length ? sections.map((section) => renderArchitectureNode(section, 0)).join("") : `<div class="empty-state">架构库目前没有可展示的分区。</div>`}
</div>
`;
return renderPanel("architecture", "当前架构库", `${sections.length} 个分区`, "systems", content);
}
function renderEmptyWorkspace() {
$("detailWorkspace").innerHTML = `
<div class="workspace-empty">
${icon("shield", "icon icon-xl")}
<h2>选择一个运行</h2>
<p class="empty-copy">左侧队列用于切换 run。即使当前没有选中运行，你也可以直接展开下方“当前架构库”查看仓库控制面、数据层、系统分组、授权边界与本地入口。</p>
</div>
${renderArchitecturePanel()}
`;
bindPanelToggles();
}
function renderDetail() {
const run = state.runs.find((item) => item.run_id === state.selectedRunId);
if (!run) {
$("detailWorkspace").innerHTML = `
<div class="workspace-empty">
${icon("shield", "icon icon-xl")}
<h2>Select a run</h2>
<p class="empty-copy">Pick a run from the left queue to inspect timeline, evidence, logs and raw JSON.</p>
</div>
`;
renderEmptyWorkspace();
return;
}
@@ -413,7 +588,7 @@ function renderDetail() {
const profile = run.profile_meta || {};
const screenshotItems = ((run.artifact_groups || []).find((group) => group.key === "browser")?.items || []).filter((item) => item.kind === "image");
const segments = progressSegments(run.progress || {});
const browserStatus = run.browser_evidence?.present ? "Ready" : (run.browser_evidence?.required ? "Required" : "Optional");
const browserStatus = run.browser_evidence?.present ? "已采集" : (run.browser_evidence?.required ? "必需待补" : "可选");
const artifactCount = (run.artifact_groups || []).reduce((sum, group) => sum + Number(group.count || 0), 0);
const timelineContent = `
@@ -426,42 +601,42 @@ function renderDetail() {
<span class="timeline-dot"></span>
<div class="timeline-head">
<strong>${escapeHtml(item.step || "-")}</strong>
<span class="timeline-time">${escapeHtml(item.at || "-")}</span>
<span class="timeline-time">${escapeHtml(formatDateTime(item.at || "-"))}</span>
</div>
<div class="${statusClass(item.status || "default")}" style="margin-top:8px;">${escapeHtml(formatStatus(item.status || "unknown"))}</div>
<div class="timeline-detail">${escapeHtml(item.detail || "-")}</div>
</article>
`)
.join("") || `<div class="empty-state">No timeline items recorded.</div>`}
.join("") || `<div class="empty-state">当前运行没有记录时间线。</div>`}
</div>
`;
const reasoningCards = [
{
label: "Summary",
copy: advisory.summary || "No advisory summary available."
label: "概要",
copy: advisory.summary || "当前漏洞条目没有摘要。"
},
{
label: "Success Criteria",
copy: (profile.success_criteria || []).join(" | ") || "No success criteria defined."
label: "成功判据",
copy: (profile.success_criteria || []).join(" | ") || "当前 profile 没有定义成功判据。"
},
{
label: "Seed / Attack Notes",
copy: (run.reasoning_lines || []).join("\n\n") || "No reasoning lines recorded."
label: "Seed / 攻击思路",
copy: (run.reasoning_lines || []).join("\n\n") || "当前运行没有记录思路说明。"
},
{
label: "Allowed Targets",
copy: (profile.allowed_target_types || []).join(", ") || "No target scope declared."
label: "允许目标",
copy: (profile.allowed_target_types || []).join(", ") || "当前 profile 没有声明允许目标类型。"
}
];
const reasoningContent = `
${run.blocked_reason ? `<div class="callout"><strong>Failure reason</strong><div class="plan-copy">${escapeHtml(run.blocked_reason)}</div></div>` : ""}
${run.blocked_reason ? `<div class="callout"><strong>失败原因</strong><div class="plan-copy">${escapeHtml(run.blocked_reason)}</div></div>` : ""}
<div class="tag-row" style="margin-bottom:14px;">
<span class="tag">vuln family ${escapeHtml(profile.vuln_family || "unknown")}</span>
<span class="tag">cleanup ${escapeHtml(profile.cleanup_policy || "-")}</span>
<span class="tag">destructive risk ${escapeHtml(profile.destructive_risk || "-")}</span>
<span class="tag">artifact ${escapeHtml(run.artifact_mode || "-")}</span>
<span class="tag">漏洞家族 ${escapeHtml(profile.vuln_family || "未定义")}</span>
<span class="tag">清理策略 ${escapeHtml(profile.cleanup_policy || "-")}</span>
<span class="tag">破坏性风险 ${escapeHtml(profile.destructive_risk || "-")}</span>
<span class="tag">制品模式 ${escapeHtml(run.artifact_mode || "-")}</span>
</div>
<div class="plan-grid">
${reasoningCards
@@ -490,7 +665,7 @@ function renderDetail() {
(item) => `
<button class="artifact-button" type="button" data-artifact data-href="${escapeHtml(item.href)}" data-kind="${escapeHtml(item.kind)}" data-label="${escapeHtml(item.label)}">
<span>${escapeHtml(item.label)}</span>
<span class="artifact-kind">${escapeHtml(item.kind)}</span>
<span class="artifact-kind">${escapeHtml(ARTIFACT_KIND_LABELS[item.kind] || item.kind)}</span>
</button>
`
)
@@ -499,7 +674,7 @@ function renderDetail() {
</section>
`
)
.join("") || `<div class="empty-state">No artifact groups for this run.</div>`}
.join("") || `<div class="empty-state">当前运行没有可浏览的产物分组。</div>`}
${
screenshotItems.length
@@ -524,27 +699,31 @@ function renderDetail() {
<div class="viewer-card">
<div class="viewer-toolbar">
<div>
<div id="viewerLabel" class="viewer-label">${escapeHtml(state.selectedArtifact?.label || "Select an artifact")}</div>
<div id="viewerMeta" class="viewer-meta">${escapeHtml(state.selectedArtifact?.href || "Artifact preview will appear here.")}</div>
<div id="viewerLabel" class="viewer-label">${escapeHtml(state.selectedArtifact?.label || "选择一个产物")}</div>
<div id="viewerMeta" class="viewer-meta">${escapeHtml(state.selectedArtifact?.href || "这里会显示 JSON、文本、HTML 报告、截图和其他日志的预览。")}</div>
</div>
<div class="detail-actions">
<a id="viewerOpen" class="button button-secondary" href="${escapeHtml(state.selectedArtifact?.href || run.dashboard_refs.report_html)}" target="_blank" rel="noreferrer">${icon("link")}<span>Open artifact</span></a>
<button id="viewerRefresh" class="button button-secondary" type="button">${icon("refresh")}<span>Refresh preview</span></button>
<a id="viewerOpen" class="button button-secondary" href="${escapeHtml(state.selectedArtifact?.href || run.dashboard_refs.report_html)}" target="_blank" rel="noreferrer">${icon("link")}<span>打开产物</span></a>
<button id="viewerRefresh" class="button button-secondary" type="button">${icon("refresh")}<span>刷新预览</span></button>
</div>
</div>
<div id="viewerFrame" class="viewer-frame"><pre>Select a report, log, screenshot, JSON or HTML artifact to preview it here.</pre></div>
<div id="viewerFrame" class="viewer-frame"><pre>选择报告、日志、截图、JSON 或 HTML 产物后，会在这里直接预览。</pre></div>
</div>
`;
const sourceLinks = [
advisory.official_source_url
? `<a href="${escapeHtml(advisory.official_source_url)}" target="_blank" rel="noreferrer">${escapeHtml(advisory.official_source_url)}</a>`
: `<span class="muted">当前漏洞条目没有关联官方来源。</span>`,
...(advisory.secondary_source_urls || []).map((url) => `<a href="${escapeHtml(url)}" target="_blank" rel="noreferrer">${escapeHtml(url)}</a>`)
].join("");
const sourcesContent = `
<div class="tag-row">
${(advisory.aliases || []).map((alias) => `<span class="tag">${escapeHtml(alias)}</span>`).join("")}
${(advisory.secure_code_topics || []).map((topic) => `<a class="tag" href="./docs/secure-code-index.html" target="_blank" rel="noreferrer">${escapeHtml(topic)}</a>`).join("")}
</div>
<div class="source-links">
${advisory.official_source_url ? `<a href="${escapeHtml(advisory.official_source_url)}" target="_blank" rel="noreferrer">${escapeHtml(advisory.official_source_url)}</a>` : `<span class="muted">No official source linked.</span>`}
${(advisory.secondary_source_urls || []).map((url) => `<a href="${escapeHtml(url)}" target="_blank" rel="noreferrer">${escapeHtml(url)}</a>`).join("")}
</div>
<div class="source-links">${sourceLinks}</div>
`;
const rawRunContent = `<article class="json-card"><pre>${escapeHtml(JSON.stringify(run, null, 2))}</pre></article>`;
@@ -563,42 +742,43 @@ function renderDetail() {
</div>
</div>
<h2 class="detail-title">${escapeHtml(advisory.title || run.advisory_id)}</h2>
<div class="detail-subtitle">${escapeHtml(advisory.summary || "No advisory summary available.")}</div>
<div class="detail-subtitle">${escapeHtml(advisory.summary || "当前漏洞条目没有摘要。")}</div>
<div class="detail-actions">
<a class="button button-primary" href="${escapeHtml(run.dashboard_refs.report_html)}" target="_blank" rel="noreferrer">${icon("report")}<span>HTML report</span></a>
<a class="button button-secondary" href="${escapeHtml(run.dashboard_refs.report_md)}" target="_blank" rel="noreferrer">${icon("markdown")}<span>Markdown</span></a>
<a class="button button-secondary" href="${escapeHtml(run.dashboard_refs.bundle)}" target="_blank" rel="noreferrer">${icon("json")}<span>Run JSON</span></a>
<a class="button button-primary" href="${escapeHtml(run.dashboard_refs.report_html)}" target="_blank" rel="noreferrer">${icon("report")}<span>HTML 报告</span></a>
<a class="button button-secondary" href="${escapeHtml(run.dashboard_refs.report_md)}" target="_blank" rel="noreferrer">${icon("markdown")}<span>Markdown 报告</span></a>
<a class="button button-secondary" href="${escapeHtml(run.dashboard_refs.bundle)}" target="_blank" rel="noreferrer">${icon("json")}<span>运行 JSON</span></a>
</div>
<div class="detail-stat-grid">
<article class="detail-stat">
<strong>Timeline Steps</strong>
<strong>时间线步骤</strong>
<span>${escapeHtml(run.timeline?.length || 0)}</span>
</article>
<article class="detail-stat">
<strong>Artifacts</strong>
<strong>Artifact 数</strong>
<span>${escapeHtml(artifactCount)}</span>
</article>
<article class="detail-stat">
<strong>Browser Evidence</strong>
<strong>浏览器证据</strong>
<span>${escapeHtml(browserStatus)}</span>
</article>
<article class="detail-stat">
<strong>Finished</strong>
<strong>完成时间</strong>
<span>${escapeHtml(timeAgo(run.finished_at))}</span>
</article>
</div>
</section>
${renderPanel("timeline", "Progress Timeline", `${escapeHtml(run.timeline?.length || 0)} steps`, "timeline", timelineContent)}
${renderPanel("reasoning", "Attack Plan & Reasoning", escapeHtml(profile.vuln_family || "unknown"), "reasoning", reasoningContent)}
${renderPanel("evidence", "Evidence Explorer", `${escapeHtml(run.artifact_groups?.length || 0)} groups`, "evidence", evidenceContent)}
${renderPanel("logs", "Live Log Viewer", state.selectedArtifact ? "active" : "idle", "logs", logContent)}
${renderPanel("sources", "Sources & Fix Topics", `${escapeHtml((advisory.secondary_source_urls || []).length + (advisory.official_source_url ? 1 : 0))} links`, "sources", sourcesContent)}
${renderPanel("run_json", "Run JSON", "raw", "json", rawRunContent)}
${renderPanel("advisory_json", "Advisory JSON", "raw", "json", rawAdvisoryContent)}
${renderPanel("profile_json", "Profile JSON", "raw", "json", rawProfileContent)}
${renderPanel("timeline", "进度时间线", `${escapeHtml(run.timeline?.length || 0)} 步`, "timeline", timelineContent)}
${renderPanel("reasoning", "攻击方案与推理", escapeHtml(profile.vuln_family || "未定义"), "reasoning", reasoningContent)}
${renderPanel("evidence", "证据浏览器", `${escapeHtml(run.artifact_groups?.length || 0)} 组`, "evidence", evidenceContent)}
${renderPanel("logs", "实时日志查看器", state.selectedArtifact ? "已选产物" : "等待选择", "logs", logContent)}
${renderPanel("sources", "来源与修复主题", `${escapeHtml((advisory.secondary_source_urls || []).length + (advisory.official_source_url ? 1 : 0))} 条链接`, "sources", sourcesContent)}
${renderArchitecturePanel()}
${renderPanel("run_json", "运行 JSON", "原始数据", "json", rawRunContent)}
${renderPanel("advisory_json", "漏洞条目 JSON", "原始数据", "json", rawAdvisoryContent)}
${renderPanel("profile_json", "复现档案 JSON", "原始数据", "json", rawProfileContent)}
`;
bindPanelToggles();
@@ -663,15 +843,16 @@ function startRefreshLoop() {
async function loadData(preserveSelection = true) {
const previous = state.selectedRunId;
renderSyncState("loading", "Refreshing", new Date().toLocaleTimeString());
renderSyncState("loading", "刷新中", `本地时间 ${new Date().toLocaleTimeString("zh-CN", { hour12: false })}`);
try {
const [summary, runs, systems, advisories, profiles] = await Promise.all([
const [summary, runs, systems, advisories, profiles, architecture] = await Promise.all([
fetchJson("./summary.json"),
fetchJson("./runs.json"),
fetchJson("./systems.json"),
fetchJson("./advisories.json"),
fetchJson("./profiles.json")
fetchJson("./profiles.json"),
fetchJson("./architecture.json")
]);
state.summary = summary;
@@ -679,6 +860,7 @@ async function loadData(preserveSelection = true) {
state.systems = systems;
state.advisories = advisories;
state.profiles = profiles;
state.architecture = architecture;
hydrateFilters();
const hashRun = location.hash.startsWith("#run=") ? location.hash.replace("#run=", "") : null;
@@ -690,11 +872,11 @@ async function loadData(preserveSelection = true) {
}
renderAll();
renderSyncState("live", "Live", summary.generated_at || new Date().toISOString());
renderSyncState("live", "实时同步", `最近生成 ${formatDateTime(summary.generated_at || new Date().toISOString())}`);
} catch (error) {
$("runQueue").innerHTML = `<div class="empty-state">Dashboard load failed: ${escapeHtml(error.message)}</div>`;
$("detailWorkspace").innerHTML = `<div class="workspace-empty"><h2>Load failed</h2><p class="empty-copy">${escapeHtml(error.message)}</p></div>`;
renderSyncState("error", "Load Failed", error.message);
$("runQueue").innerHTML = `<div class="empty-state">工作台加载失败：${escapeHtml(error.message)}</div>`;
$("detailWorkspace").innerHTML = `<div class="workspace-empty"><h2>加载失败</h2><p class="empty-copy">${escapeHtml(error.message)}</p></div>`;
renderSyncState("error", "加载失败", error.message);
}
}

168
08-threat-intel/generated/dashboard/assets/styles.css
查看文件

@@ -963,6 +963,171 @@ select {
text-underline-offset: 3px;
}
.architecture-tree {
display: grid;
gap: 14px;
}
.architecture-callout {
border-color: rgba(77, 141, 255, 0.28);
background: rgba(77, 141, 255, 0.08);
}
.arch-node,
.arch-leaf {
border: 1px solid rgba(148, 163, 184, 0.14);
border-radius: 16px;
background: rgba(255, 255, 255, 0.025);
}
.arch-node + .arch-node,
.arch-leaf + .arch-node,
.arch-node + .arch-leaf,
.arch-leaf + .arch-leaf {
margin-top: 12px;
}
.arch-node summary {
list-style: none;
}
.arch-node summary::-webkit-details-marker {
display: none;
}
.arch-summary {
display: flex;
justify-content: space-between;
gap: 14px;
padding: 15px 16px;
cursor: pointer;
}
.arch-summary::after {
content: "";
width: 9px;
height: 9px;
margin-top: 6px;
border-right: 2px solid rgba(255, 255, 255, 0.72);
border-bottom: 2px solid rgba(255, 255, 255, 0.72);
transform: rotate(45deg);
transition: transform 0.2s ease;
}
.arch-node[open] > .arch-summary::after {
transform: rotate(225deg);
}
.arch-summary-main {
display: grid;
gap: 6px;
min-width: 0;
}
.arch-title {
font-size: 0.98rem;
}
.arch-summary-copy {
color: var(--text-secondary);
line-height: 1.5;
font-size: 0.88rem;
}
.arch-summary-meta {
display: flex;
flex-wrap: wrap;
justify-content: flex-end;
gap: 8px;
}
.arch-body {
display: grid;
gap: 14px;
padding: 0 16px 16px;
}
.arch-badges {
margin-top: -2px;
}
.arch-stat-grid,
.arch-field-grid,
.arch-link-grid {
display: grid;
gap: 12px;
}
.arch-stat-grid {
grid-template-columns: repeat(auto-fit, minmax(150px, 1fr));
}
.arch-stat,
.arch-field,
.arch-link-card {
border: 1px solid rgba(148, 163, 184, 0.14);
border-radius: 14px;
background: rgba(255, 255, 255, 0.03);
}
.arch-stat,
.arch-field {
padding: 12px 14px;
}
.arch-stat-label,
.arch-field-label,
.arch-link-label {
display: block;
color: var(--text-secondary);
text-transform: uppercase;
letter-spacing: 0.06em;
font-size: 0.72rem;
}
.arch-stat-value {
display: block;
margin-top: 8px;
font-size: 1.1rem;
}
.arch-field-value,
.arch-link-copy {
margin-top: 8px;
color: var(--text-primary);
line-height: 1.58;
white-space: pre-wrap;
word-break: break-word;
font-size: 0.9rem;
}
.arch-link-grid {
grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
}
.arch-link-card {
display: block;
padding: 12px 14px;
transition: transform 0.18s ease, border-color 0.18s ease, background 0.18s ease;
}
.arch-link-card:hover {
transform: translateY(-1px);
border-color: rgba(77, 141, 255, 0.42);
background: rgba(77, 141, 255, 0.08);
}
.arch-children {
display: grid;
gap: 12px;
padding-left: 14px;
border-left: 1px solid rgba(148, 163, 184, 0.12);
}
.arch-leaf {
padding: 14px 16px;
}
.json-card pre {
margin: 0;
max-height: 420px;
@@ -1050,7 +1215,8 @@ select {
.tag-row,
.panel-meta,
.viewer-toolbar,
.dashboard-footer {
.dashboard-footer,
.arch-summary {
flex-direction: column;
align-items: stretch;
}

6030
08-threat-intel/generated/dashboard/docs/architecture-library.html 普通文件
查看文件

文件差异内容过多而无法显示 加载差异

123
08-threat-intel/generated/dashboard/docs/authorization-model.html 普通文件
查看文件

@@ -0,0 +1,123 @@
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>授权模型镜像</title>
<style>
:root {
--bg: #08111f;
--panel: rgba(9, 18, 32, 0.9);
--border: rgba(137, 171, 214, 0.2);
--text: #f7fafc;
--muted: #9fb3ca;
--accent: #5eead4;
}
* { box-sizing: border-box; }
body {
margin: 0;
min-height: 100vh;
font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
color: var(--text);
background:
radial-gradient(circle at top left, rgba(94, 234, 212, 0.12), transparent 26%),
linear-gradient(160deg, #050c16 0%, #091526 50%, #10233d 100%);
}
main {
max-width: 1080px;
margin: 0 auto;
padding: 32px 20px 40px;
}
.panel {
background: var(--panel);
border: 1px solid var(--border);
border-radius: 20px;
padding: 24px;
box-shadow: 0 24px 80px rgba(1, 7, 20, 0.45);
}
.actions {
display: flex;
flex-wrap: wrap;
gap: 12px;
margin-bottom: 18px;
}
.chip {
display: inline-flex;
align-items: center;
gap: 8px;
border-radius: 999px;
border: 1px solid var(--border);
padding: 10px 14px;
color: var(--text);
background: rgba(255,255,255,0.05);
text-decoration: none;
}
.chip:hover { border-color: rgba(94, 234, 212, 0.42); }
h1 {
margin: 0 0 12px;
font-family: "IBM Plex Serif", Georgia, serif;
font-size: clamp(1.8rem, 4vw, 3rem);
line-height: 1.08;
}
.meta {
color: var(--muted);
margin-bottom: 18px;
}
pre {
margin: 0;
padding: 20px;
overflow: auto;
border-radius: 16px;
border: 1px solid rgba(137, 171, 214, 0.12);
background: rgba(2, 8, 22, 0.84);
color: #d6e5f5;
font-family: "IBM Plex Mono", "SFMono-Regular", monospace;
font-size: 0.92rem;
line-height: 1.6;
white-space: pre-wrap;
}
</style>
</head>
<body>
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>授权模型镜像</h1>
<div class="meta">工作台内置镜像页：目标范围、授权模型、最小化验证建议和记录要求。</div>
<pre># 授权模型
## 目标分类
| 类型 | 定义 | 允许动作 |
|------|------|----------|
| `lab-local` | 本地集群、Docker 靶场、隔离内网实验节点 | 完整实验、漏洞复现、修复对照 |
| `lab-public` | 你方自建且可公网访问的测试站点、服务器、设备 | 验证性探测、最小化注入、关联面分析 |
| `authorized-third-party` | 已明确授权的外部验证目标 | 以授权边界为准的最小必要实验 |
| `out-of-scope` | 无归属证明、无授权、公共知名站点、泛互联网目标 | 不允许使用本仓库内容发起验证 |
## 全局原则
1. 任何公网验证都必须先确认资产归属或授权关系。
2. 优先采用只读探测、最小化回显验证和低频实验。
3. 涉及账户、令牌、敏感数据和业务写入时，应选择最小必要动作并保留记录。
4. 不做泛互联网枚举，不做对无关公共站点的同类操作复用。
## 最小化验证建议
- 注入类: 先做上下文识别，再做无害回显或布尔差异，不直接进入破坏性利用。
- 认证类: 优先验证限速、锁定和失败处理，不以接管真实账户为目标。
- 端口与关联面类: 先缩到单主机、单证书、单代理边界，再扩展分析。
- 前端类: 优先验证敏感数据暴露和保护头缺失，不触碰真实用户数据。
## 记录要求
- 公网实验必须回填 [测试记录模板](/Users/x/websafe/09-scope-and-targeting/test-record-template.md)
- 目标资产必须登记在 [资产清单模板](/Users/x/websafe/09-scope-and-targeting/asset-inventory-template.md)
- 新工具和新案例应附带对应元数据模板
</pre>
</div>
</main>
</body>
</html>

159
08-threat-intel/generated/dashboard/docs/coverage-matrix.html 普通文件
查看文件

@@ -0,0 +1,159 @@
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>覆盖矩阵镜像</title>
<style>
:root {
--bg: #08111f;
--panel: rgba(9, 18, 32, 0.9);
--border: rgba(137, 171, 214, 0.2);
--text: #f7fafc;
--muted: #9fb3ca;
--accent: #5eead4;
}
* { box-sizing: border-box; }
body {
margin: 0;
min-height: 100vh;
font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
color: var(--text);
background:
radial-gradient(circle at top left, rgba(94, 234, 212, 0.12), transparent 26%),
linear-gradient(160deg, #050c16 0%, #091526 50%, #10233d 100%);
}
main {
max-width: 1080px;
margin: 0 auto;
padding: 32px 20px 40px;
}
.panel {
background: var(--panel);
border: 1px solid var(--border);
border-radius: 20px;
padding: 24px;
box-shadow: 0 24px 80px rgba(1, 7, 20, 0.45);
}
.actions {
display: flex;
flex-wrap: wrap;
gap: 12px;
margin-bottom: 18px;
}
.chip {
display: inline-flex;
align-items: center;
gap: 8px;
border-radius: 999px;
border: 1px solid var(--border);
padding: 10px 14px;
color: var(--text);
background: rgba(255,255,255,0.05);
text-decoration: none;
}
.chip:hover { border-color: rgba(94, 234, 212, 0.42); }
h1 {
margin: 0 0 12px;
font-family: "IBM Plex Serif", Georgia, serif;
font-size: clamp(1.8rem, 4vw, 3rem);
line-height: 1.08;
}
.meta {
color: var(--muted);
margin-bottom: 18px;
}
pre {
margin: 0;
padding: 20px;
overflow: auto;
border-radius: 16px;
border: 1px solid rgba(137, 171, 214, 0.12);
background: rgba(2, 8, 22, 0.84);
color: #d6e5f5;
font-family: "IBM Plex Mono", "SFMono-Regular", monospace;
font-size: 0.92rem;
line-height: 1.6;
white-space: pre-wrap;
}
</style>
</head>
<body>
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>覆盖矩阵镜像</h1>
<div class="meta">工作台内置镜像页：当前覆盖矩阵生成结果。</div>
<pre># 覆盖矩阵
| 系统 | 分类 | 覆盖策略 | 历史全量 | 近两年全量 | 全量 registry | 重点案例 Markdown | secure-code 关联 | 自动同步状态 | 本地实证状态 | 浏览器证据 | run bundle | triage | 最近更新 |
|------|------|----------|----------|------------|--------------|--------------------|------------------|--------------|--------------|------------|-----------|--------|----------|
| Adminer | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Adobe Commerce | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `4` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Angular | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Apache HTTP Server | `servers` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Apache Tomcat | `servers` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| ASP.NET Core | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Astro | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Caddy | `servers` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Directus | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Discourse | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Django | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Drupal | `cms` | `history-full` | `yes` | `yes` | `0` | `0` | `4` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Echo | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| esbuild | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Express | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Fastify | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Flask | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Ghost | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Gin | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Gitea | `platforms` | `rolling-24m` | `-` | `yes` | `37` | `37` | `3` | `seeded` | `real:0/synthetic:0/blocked:1` | `0` | `1` | `0` | `2026-03-03T04:57:57.697708Z` |
| GitLab CE | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Grafana | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Hapi | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| HAProxy | `servers` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Jenkins | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Joomla | `cms` | `history-full` | `yes` | `yes` | `0` | `0` | `4` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Kibana | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Koa | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Laravel | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Magento Open Source | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Mattermost | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| MediaWiki | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Medusa | `ecommerce` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Moodle | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| NestJS | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Next.js | `frameworks` | `history-full` | `yes` | `yes` | `26` | `26` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `1` | `0` | `2026-03-13T22:14:13.665535Z` |
| Nginx | `servers` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Node.js | `frameworks` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Nuxt | `frameworks` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| OpenCart | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| OpenMage / Mage-OS | `ecommerce` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| phpMyAdmin | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| PrestaShop | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Ruby on Rails | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| React | `frameworks` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Redmine | `platforms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Saleor | `ecommerce` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Shopware | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Spring Boot | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Spring Framework | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Spring Security | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Strapi | `cms` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| SvelteKit | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Symfony | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Traefik | `servers` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Undici | `frameworks` | `rolling-24m` | `-` | `yes` | `14` | `14` | `2` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-03-14T09:19:54.772219Z` |
| Vite | `frameworks` | `history-full` | `yes` | `yes` | `12` | `12` | `3` | `seeded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `2026-02-04T04:37:24.129476Z` |
| Vue | `frameworks` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| webpack | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| Werkzeug | `frameworks` | `rolling-24m` | `-` | `yes` | `0` | `0` | `2` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| WooCommerce | `ecommerce` | `history-full` | `yes` | `yes` | `0` | `0` | `3` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
| WordPress | `cms` | `history-full` | `yes` | `yes` | `0` | `0` | `4` | `scaffolded` | `real:0/synthetic:0/blocked:0` | `0` | `0` | `0` | `` |
</pre>
</div>
</main>
</body>
</html>

4
08-threat-intel/generated/dashboard/docs/design-source.html
查看文件

@@ -82,10 +82,10 @@
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">Back to dashboard</a>
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>Lovart 设计来源与本地化清单</h1>
<div class="meta">Local vendor manifest for the Lovart-derived dashboard shell.</div>
<div class="meta">工作台内置镜像页：Lovart 来源文件、本地 vendor 路径和本地化说明。</div>
<pre>{
&quot;template_id&quot;: &quot;lovart-authorized-lab-dashboard&quot;,
&quot;source_url&quot;: &quot;https://assets-persist.lovart.ai/agent_images/464011bb-fbbc-4bd4-98f8-90897dd43612.html&quot;,

12
08-threat-intel/generated/dashboard/docs/frontend-dashboard-design.html
查看文件

@@ -82,10 +82,10 @@
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">Back to dashboard</a>
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>本地前端工作台设计文档</h1>
<div class="meta">Dashboard-local mirror of the UI and interaction specification.</div>
<div class="meta">工作台内置镜像页：前端交互、展示结构和视觉规范。</div>
<pre># 本地前端工作台设计文档
&gt; `LAB ONLY` | `AUTHORIZED TARGETS ONLY`
@@ -134,7 +134,8 @@ flowchart LR
D --&gt; G[&quot;Evidence Explorer&quot;]
D --&gt; H[&quot;Live Log Viewer&quot;]
D --&gt; I[&quot;Sources &amp; Fix Topics&quot;]
D --&gt; J[&quot;Raw JSON Panels&quot;]
D --&gt; J[&quot;当前架构库&quot;]
D --&gt; K[&quot;Raw JSON Panels&quot;]
```
## 4. 页面布局
@@ -207,6 +208,11 @@ flowchart LR
- secondary sources
- aliases
- secure code topics
- 当前架构库
- 项目定位、授权边界、控制面、数据层、地址入口
- source-map / repro-map 派生的系统分组与默认复现策略
- 当前生成态、状态分布、最近失败
- 可折叠查看任意层级信息并打开本地镜像页 / JSON
- Raw JSON
- run JSON
- advisory JSON

8
08-threat-intel/generated/dashboard/docs/project-features.html
查看文件

@@ -82,10 +82,10 @@
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">Back to dashboard</a>
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>项目功能与特性总览</h1>
<div class="meta">Dashboard-local mirror of the repo feature guide.</div>
<div class="meta">工作台内置镜像页：仓库功能、目录和自动化链路说明。</div>
<pre># 项目功能与特性总览
&gt; `LAB ONLY` | `AUTHORIZED TARGETS ONLY`
@@ -151,7 +151,8 @@
- 静态前端工作台
- `/index.html` 为本地化 Lovart 正式 UI
- `/legacy/index.html` 为旧版工作台回退入口
- `/docs/*.html` 为本地可访问的说明与设计镜像页
- `/docs/*.html` 为本地可访问的说明、真值配置与设计镜像页
- `architecture.json` 为当前架构库结构化真值
- `07-framework-security/`
- 系统级 README、INDEX、案例页，自动显示本地实证状态
@@ -244,6 +245,7 @@ python3 /Users/x/websafe/scripts/lab/main.py serve-dashboard --port 8734
- 快速定位系统 / advisory / repro profile
- 折叠与展开 timeline、evidence、sources、raw JSON
- 折叠与展开“当前架构库”，查看控制面、数据层、地址入口、授权边界和系统分组
- 直接查看 compose、JSON、日志、截图、报告
- 高亮失败原因、当前 blocker、利用思路、成功判据
- 自动刷新生成数据，适配正在进行中的本地 run

838
08-threat-intel/generated/dashboard/docs/repro-map.html 普通文件
查看文件

@@ -0,0 +1,838 @@
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>repro-map 真值镜像</title>
<style>
:root {
--bg: #08111f;
--panel: rgba(9, 18, 32, 0.9);
--border: rgba(137, 171, 214, 0.2);
--text: #f7fafc;
--muted: #9fb3ca;
--accent: #5eead4;
}
* { box-sizing: border-box; }
body {
margin: 0;
min-height: 100vh;
font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
color: var(--text);
background:
radial-gradient(circle at top left, rgba(94, 234, 212, 0.12), transparent 26%),
linear-gradient(160deg, #050c16 0%, #091526 50%, #10233d 100%);
}
main {
max-width: 1080px;
margin: 0 auto;
padding: 32px 20px 40px;
}
.panel {
background: var(--panel);
border: 1px solid var(--border);
border-radius: 20px;
padding: 24px;
box-shadow: 0 24px 80px rgba(1, 7, 20, 0.45);
}
.actions {
display: flex;
flex-wrap: wrap;
gap: 12px;
margin-bottom: 18px;
}
.chip {
display: inline-flex;
align-items: center;
gap: 8px;
border-radius: 999px;
border: 1px solid var(--border);
padding: 10px 14px;
color: var(--text);
background: rgba(255,255,255,0.05);
text-decoration: none;
}
.chip:hover { border-color: rgba(94, 234, 212, 0.42); }
h1 {
margin: 0 0 12px;
font-family: "IBM Plex Serif", Georgia, serif;
font-size: clamp(1.8rem, 4vw, 3rem);
line-height: 1.08;
}
.meta {
color: var(--muted);
margin-bottom: 18px;
}
pre {
margin: 0;
padding: 20px;
overflow: auto;
border-radius: 16px;
border: 1px solid rgba(137, 171, 214, 0.12);
background: rgba(2, 8, 22, 0.84);
color: #d6e5f5;
font-family: "IBM Plex Mono", "SFMono-Regular", monospace;
font-size: 0.92rem;
line-height: 1.6;
white-space: pre-wrap;
}
</style>
</head>
<body>
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>repro-map 真值镜像</h1>
<div class="meta">工作台内置镜像页：默认漏洞家族、浏览器要求和日志策略真值。</div>
<pre>systems:
- system_id: wordpress
default_repro_family: xss-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: drupal
default_repro_family: xss-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: joomla
default_repro_family: xss-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: ghost
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: strapi
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: directus
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: mediawiki
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: moodle
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: discourse
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: adobe-commerce
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: magento-open-source
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: openmage
default_repro_family: plugin-extension-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: woocommerce
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: prestashop
default_repro_family: file-upload-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: shopware
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: opencart
default_repro_family: file-upload-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: saleor
default_repro_family: session-token-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: medusa
default_repro_family: session-token-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: react
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: nextjs
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-source
- synthetic
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: vue
default_repro_family: xss-generic
provisioning_mode_preference:
- official-source
- synthetic
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: nuxt
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-source
- synthetic
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: vite
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-source
- synthetic
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: angular
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: sveltekit
default_repro_family: session-token-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: astro
default_repro_family: authz-bypass-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: express
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: nestjs
default_repro_family: ssrf-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: koa
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: fastify
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: hapi
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: nodejs
default_repro_family: ssrf-generic
provisioning_mode_preference:
- official-source
- synthetic
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: undici
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: webpack
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: esbuild
default_repro_family: file-upload-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: spring-framework
default_repro_family: deserialization-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: spring-security
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: spring-boot
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: laravel
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: symfony
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: django
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: flask
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: werkzeug
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: rails
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: aspnet-core
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: gin
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: echo
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: nginx
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: apache-httpd
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: apache-tomcat
default_repro_family: authz-bypass-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: caddy
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: traefik
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: haproxy
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: false
seed_strategy: minimal-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: phpmyadmin
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: adminer
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: gitea
default_repro_family: proxy-boundary-generic
provisioning_mode_preference:
- official-image
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: gitlab-ce
default_repro_family: deserialization-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: jenkins
default_repro_family: deserialization-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: grafana
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: kibana
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: mattermost
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
- system_id: redmine
default_repro_family: xss-generic
provisioning_mode_preference:
- synthetic
- official-source
- synthetic
browser_required_default: true
seed_strategy: default-seed
log_collectors:
- docker-logs
- http-snapshot
report_template: default-lab-report
</pre>
</div>
</main>
</body>
</html>

212
08-threat-intel/generated/dashboard/docs/root-readme.html 普通文件
查看文件

@@ -0,0 +1,212 @@
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>仓库 README 镜像</title>
<style>
:root {
--bg: #08111f;
--panel: rgba(9, 18, 32, 0.9);
--border: rgba(137, 171, 214, 0.2);
--text: #f7fafc;
--muted: #9fb3ca;
--accent: #5eead4;
}
* { box-sizing: border-box; }
body {
margin: 0;
min-height: 100vh;
font-family: "IBM Plex Sans", "Segoe UI", sans-serif;
color: var(--text);
background:
radial-gradient(circle at top left, rgba(94, 234, 212, 0.12), transparent 26%),
linear-gradient(160deg, #050c16 0%, #091526 50%, #10233d 100%);
}
main {
max-width: 1080px;
margin: 0 auto;
padding: 32px 20px 40px;
}
.panel {
background: var(--panel);
border: 1px solid var(--border);
border-radius: 20px;
padding: 24px;
box-shadow: 0 24px 80px rgba(1, 7, 20, 0.45);
}
.actions {
display: flex;
flex-wrap: wrap;
gap: 12px;
margin-bottom: 18px;
}
.chip {
display: inline-flex;
align-items: center;
gap: 8px;
border-radius: 999px;
border: 1px solid var(--border);
padding: 10px 14px;
color: var(--text);
background: rgba(255,255,255,0.05);
text-decoration: none;
}
.chip:hover { border-color: rgba(94, 234, 212, 0.42); }
h1 {
margin: 0 0 12px;
font-family: "IBM Plex Serif", Georgia, serif;
font-size: clamp(1.8rem, 4vw, 3rem);
line-height: 1.08;
}
.meta {
color: var(--muted);
margin-bottom: 18px;
}
pre {
margin: 0;
padding: 20px;
overflow: auto;
border-radius: 16px;
border: 1px solid rgba(137, 171, 214, 0.12);
background: rgba(2, 8, 22, 0.84);
color: #d6e5f5;
font-family: "IBM Plex Mono", "SFMono-Regular", monospace;
font-size: 0.92rem;
line-height: 1.6;
white-space: pre-wrap;
}
</style>
</head>
<body>
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>仓库 README 镜像</h1>
<div class="meta">工作台内置镜像页：仓库定位、能力矩阵、入口和自动化入口。</div>
<pre># 授权攻防实验与研究知识库
&gt; `LAB ONLY` | `AUTHORIZED TARGETS ONLY` | `非生产安全基线`
本仓库定位为“授权攻防实验库”，覆盖本地靶场、自建公网测试资产和已明确授权的验证目标。内容允许出现验证性攻击演示、测试性注入、同服务器站点排查、真实漏洞映射和自动化订阅，但所有语境都绑定到自有或授权目标，不面向无关第三方站点或公共知名网站。
## 入口
- [项目文档总览](/Users/x/websafe/docs/README.md)
- [目标边界与授权模型](/Users/x/websafe/09-scope-and-targeting/authorization-model.md)
- [主流开源 Web 系统安全总览](/Users/x/websafe/07-framework-security/README.md)
- [漏洞情报与自动入库总览](/Users/x/websafe/08-threat-intel/README.md)
- [覆盖矩阵](/Users/x/websafe/08-threat-intel/generated/coverage-matrix.md)
- [最新同步摘要](/Users/x/websafe/08-threat-intel/generated/latest-ingest.md)
- [唯一真值配置 `source-map.yaml`](/Users/x/websafe/08-threat-intel/source-map.yaml)
## 仓库结构
```text
websafe/
├── 00-environments/ # 系统 catalog、真实版本/当前版本 profile、synthetic 模板
├── 01-sql-injection/ # SQL 注入实验
├── 02-xss/ # XSS 与浏览器端注入实验
├── 03-authentication/ # 认证、会话与 JWT 实验
├── 04-server-security/ # 服务器、TLS、暴露面与关联面实验
├── 05-defense/ # 检测、观测、实验对照与代码修复示例
├── 06-case-studies/ # 授权案例与 run bundle / 报告归档
├── 07-framework-security/ # CMS、电商、框架、服务器、平台系统安全
├── 08-threat-intel/ # source-map、repro-map、registry、dashboard、订阅规则、自动入库
├── 09-scope-and-targeting/ # 授权模型、资产模板、测试记录模板
├── docs/ # 项目功能文档、前端设计文档与展示规范
├── requirements-intel.txt # intel + lab 自动化依赖（含 Playwright Python 包）
├── scripts/intel/ # hotlane / ingest / reconcile / backfill / open-pr CLI
└── scripts/lab/ # provision / baseline / attack / browser / evidence / render / queue CLI
```
## 能力矩阵
| 覆盖域 | 历史全量策略 | 近两年策略 | 全量 registry | 重点案例 Markdown | secure-code 关联 | 本地实证状态 | 浏览器证据 | run bundle | 看板展示 | 自动同步状态 |
|--------|--------------|------------|---------------|--------------------|------------------|--------------|------------|-----------|----------|--------------|
| CMS / 内容平台 | `WordPress`, `Drupal`, `Joomla` | `Ghost`, `Strapi`, `Directus`, `MediaWiki`, `Moodle`, `Discourse` | `registry/advisories + registry/systems` | `core 全量 + 高价值 extension` | `yes` | `verified-real / verified-synthetic / blocked-* / triage-manual` | `前端类强制` | `06-case-studies/generated-runs` | `dashboard + report` | `render / ingest / hotlane / reconcile ready` |
| 电商系统 | `Adobe Commerce`, `Magento Open Source`, `WooCommerce`, `PrestaShop`, `Shopware`, `OpenCart` | `OpenMage`, `Saleor`, `Medusa` | `registry/advisories + registry/systems` | `core 全量 + 高价值 module` | `yes` | `同上` | `前台/后台面板类强制` | `run bundle + logs` | `dashboard + report` | `render / ingest / hotlane / reconcile ready` |
| Web 框架与运行时 | `React`, `Next.js`, `Vue`, `Nuxt`, `Vite`, `Node.js`, `Nginx`, `Apache HTTP Server`, `Apache Tomcat` | 其余主流框架与运行时按 `rolling-24m` | `registry/advisories + registry/systems` | `core 全量 + 高价值 package` | `yes` | `family runner + advisory profile` | `浏览器/HTTP 混合` | `run bundle + timeline` | `dashboard + report` | `render / ingest / hotlane / reconcile ready` |
| 开源平台与后台系统 | `history-full` 不强制 | `phpMyAdmin`, `Adminer`, `Gitea`, `GitLab CE`, `Jenkins`, `Grafana`, `Kibana`, `Mattermost`, `Redmine` | `registry/advisories + registry/systems` | `高价值案例输出` | `yes` | `真实版本优先` | `Web 面板类强制` | `run bundle + screenshots` | `dashboard + report` | `render / ingest / hotlane / reconcile ready` |
| 修复示例库 | 不适用 | 不适用 | 不适用 | 由案例页反向链接 | `javascript-typescript`, `nodejs`, `java`, `php`, `python`, `ruby`, `csharp`, `go` | `由案例反向映射` | `不适用` | `不适用` | `索引页` | `render ready` |
| 自动化入库与实证 | `backfill --tier history-full` | `ingest --since`, `reconcile` | `registry + generated + registry/runs` | `基于 render_policy` | `front matter 反向链接` | `queue + run-case / run-batch` | `Playwright required for browser cases` | `report.md / report.html / timeline.mmd` | `serve-dashboard` | `open-pr / cron ready` |
## 当前覆盖对象
当前 `source-map.yaml` 已纳入 62 个主流开源 Web 系统，分为五组：
- CMS / 内容平台：WordPress、Drupal、Joomla、Ghost、Strapi、Directus、MediaWiki、Moodle、Discourse
- 电商系统：Adobe Commerce、Magento Open Source、OpenMage / Mage-OS、WooCommerce、PrestaShop、Shopware、OpenCart、Saleor、Medusa
- Web 框架与运行时：React、Next.js、Vue、Nuxt、Vite、Angular、SvelteKit、Astro、Express、NestJS、Koa、Fastify、Hapi、Node.js、Undici、webpack、esbuild、Spring Framework、Spring Security、Spring Boot、Laravel、Symfony、Django、Flask、Werkzeug、Rails、ASP.NET Core、Gin、Echo
- 服务器与边界层：Nginx、Apache HTTP Server、Apache Tomcat、Caddy、Traefik、HAProxy
- 常见开源平台：phpMyAdmin、Adminer、Gitea、GitLab CE、Jenkins、Grafana、Kibana、Mattermost、Redmine
## 自动化入口
```bash
python3 /Users/x/websafe/scripts/intel/main.py render
python3 /Users/x/websafe/scripts/intel/main.py validate
python3 /Users/x/websafe/scripts/intel/main.py hotlane
python3 /Users/x/websafe/scripts/intel/main.py ingest --since last-success
python3 /Users/x/websafe/scripts/intel/main.py reconcile
python3 /Users/x/websafe/scripts/intel/main.py backfill --tier history-full --dry-run
python3 /Users/x/websafe/scripts/intel/main.py open-pr --dry-run
python3 /Users/x/websafe/scripts/lab/main.py catalog sync
python3 /Users/x/websafe/scripts/lab/main.py validate
python3 /Users/x/websafe/scripts/lab/main.py run-case --case nextjs--CVE-2025-29927 --dry-run
python3 /Users/x/websafe/scripts/lab/main.py run-batch --only-hotlane --limit 10
python3 /Users/x/websafe/scripts/lab/main.py serve-dashboard --port 8734
```
本地 dashboard 路由：
- `/index.html`
- 默认正式 UI，使用本地化 Lovart 视觉壳层
- `/legacy/index.html`
- 旧版工作台回退入口
- `/docs/design-source.html`
- 设计来源与本地化说明
- `/docs/architecture-library.html`
- 当前架构库结构化镜像页
计划中的本机 cron 入口：
- [run-hourly.sh](/Users/x/websafe/scripts/intel/run-hourly.sh) 处理 KEV / 在野利用 / 极高优先级更新，并触发 hotlane 实证队列
- [run-nightly.sh](/Users/x/websafe/scripts/intel/run-nightly.sh) 处理常规增量同步、批量实证、dashboard 渲染和 PR
- [run-weekly-reconcile.sh](/Users/x/websafe/scripts/intel/run-weekly-reconcile.sh) 对齐最近 30 天更新，并重跑失败/阻塞任务
## 本地实证链路
每条 advisory 的自动链路固定为：
1. `registry/advisories/*.json` 选中 case。
2. `repro-map.yaml + repro-profiles/` 解析到 repro family / advisory profile。
3. `00-environments/catalog + profiles` 生成 compose 拓扑和靶站参数。
4. `scripts/lab/main.py run-case` 拉起环境、收集 baseline、执行受控攻击链。
5. 前端类 case 强制走 Playwright 浏览器回放，生成截图、DOM、console、network 证据。
6. 生成 `06-case-studies/generated-runs/&lt;run-id&gt;/` 报告和 `08-threat-intel/registry/runs/&lt;run-id&gt;.json`。
7. 自动回写 registry、系统 INDEX、案例页和 dashboard。
## 实验边界
- `05-defense/` 下的配置样例用于实验观测、对抗演示、修复映射和反例说明，不应被误当成生产安全基线。
- `07-framework-security/` 下的系统页默认绑定 `lab-local`、`lab-public`、`authorized-third-party` 三类目标，并明确禁止未授权公网使用。
- `08-threat-intel/registry/` 是“所有具体 advisory”的正式载体；并非所有记录都强制生成独立 Markdown 页面。
- `08-threat-intel/generated/` 是人类可读摘要层，实际覆盖和路由以 `source-map.yaml` 与 `registry/` 为准。
## 使用前提
- 在运行任何工具前，先阅读 [授权模型](/Users/x/websafe/09-scope-and-targeting/authorization-model.md)。
- 对公网目标执行验证性测试时，必须能证明资产归属，或已获得明确授权。
- 优先采用只读探测、最小化注入、可回滚验证和可审计日志。
## 免责声明
本仓库仅用于授权安全测试、安全研究和教学实验。未经授权对第三方系统执行扫描、注入、爆破、绕过或枚举行为可能违法。
</pre>
</div>
</main>
</body>
</html>

4
08-threat-intel/generated/dashboard/docs/secure-code-index.html
查看文件

@@ -82,10 +82,10 @@
<main>
<div class="panel">
<div class="actions">
<a class="chip" href="../index.html">Back to dashboard</a>
<a class="chip" href="../index.html">返回工作台</a>
</div>
<h1>安全编码修复库索引</h1>
<div class="meta">Dashboard-local mirror of the secure-code library index.</div>
<div class="meta">工作台内置镜像页：secure-code 修复主题索引。</div>
<pre># 安全编码修复库
&gt; `LAB ONLY` | 修复主题用于把实验发现映射回代码整改，不代表默认生产基线。

2096
08-threat-intel/generated/dashboard/docs/source-map.html 普通文件
查看文件

文件差异内容过多而无法显示 加载差异

59
08-threat-intel/generated/dashboard/index.html
查看文件

@@ -3,7 +3,7 @@
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Authorized Lab Dashboard</title>
<title>授权攻防实验工作台</title>
<link rel="stylesheet" href="./assets/styles.css">
</head>
<body>
@@ -17,22 +17,22 @@
<div class="hero-copy">
<div class="hero-eyebrow">
<svg class="icon"><use href="./assets/icons.svg#spark"></use></svg>
<span>Authorized Lab Dashboard</span>
<span>授权攻防实验工作台</span>
</div>
<h1>本地攻防实证工作台</h1>
<p>
Lovart 设计外壳已本地化并接入真实 run bundle 数据。页面只面向授权实验资产，
聚合 advisory、timeline、evidence、logs、sources、raw JSON 与失败原因。
聚合漏洞条目、时间线、证据、日志、来源、原始 JSON、当前架构库与失败原因。
</p>
</div>
<div class="hero-actions">
<button id="refreshDashboard" class="button button-primary" type="button">
<svg class="icon"><use href="./assets/icons.svg#refresh"></use></svg>
<span>Refresh</span>
<span>立即刷新</span>
</button>
<label class="toggle-card">
<span class="toggle-label">Auto Refresh</span>
<span class="toggle-label">自动刷新</span>
<span class="toggle-switch">
<input id="autoRefresh" type="checkbox" checked>
<span class="toggle-slider"></span>
@@ -41,22 +41,26 @@
<div id="syncState" class="sync-state">
<svg class="icon icon-sync"><use href="./assets/icons.svg#sync"></use></svg>
<div>
<strong>Booting</strong>
<span>Loading generated JSON</span>
<strong>启动中</strong>
<span>正在载入本地生成数据</span>
</div>
</div>
<div class="hero-links">
<a class="button button-secondary" href="./docs/project-features.html" target="_blank" rel="noreferrer">
<svg class="icon"><use href="./assets/icons.svg#docs"></use></svg>
<span>Feature Docs</span>
<span>功能文档</span>
</a>
<a class="button button-secondary" href="./docs/frontend-dashboard-design.html" target="_blank" rel="noreferrer">
<svg class="icon"><use href="./assets/icons.svg#playbook"></use></svg>
<span>UI Spec</span>
<span>前端设计</span>
</a>
<a class="button button-secondary" href="./docs/architecture-library.html" target="_blank" rel="noreferrer">
<svg class="icon"><use href="./assets/icons.svg#systems"></use></svg>
<span>架构镜像</span>
</a>
<a class="button button-secondary" href="./legacy/index.html" target="_blank" rel="noreferrer">
<svg class="icon"><use href="./assets/icons.svg#legacy"></use></svg>
<span>Legacy UI</span>
<span>旧版工作台</span>
</a>
</div>
</div>
@@ -71,38 +75,38 @@
<div class="section-header">
<span>
<svg class="icon"><use href="./assets/icons.svg#filter"></use></svg>
Filters
筛选器
</span>
<span id="runCount" class="section-badge">0 shown</span>
<span id="runCount" class="section-badge">0 条</span>
</div>
<div class="filter-group">
<label class="field">
<span>Search</span>
<span>搜索</span>
<div class="search-box">
<svg class="icon"><use href="./assets/icons.svg#search"></use></svg>
<input id="searchInput" type="text" placeholder="Search run id, advisory, title">
<input id="searchInput" type="text" placeholder="搜索 run id、advisory、标题、概要">
</div>
</label>
<label class="field">
<span>System</span>
<span>系统</span>
<select id="systemFilter" class="filter-select">
<option value="">All systems</option>
<option value="">全部系统</option>
</select>
</label>
<label class="field">
<span>Status</span>
<span>状态</span>
<select id="statusFilter" class="filter-select">
<option value="">All statuses</option>
<option value="">全部状态</option>
</select>
</label>
<label class="field">
<span>Profile</span>
<select id="profileFilter" class="filter-select">
<option value="">All profiles</option>
<option value="">全部 Profile</option>
</select>
</label>
</div>
@@ -112,7 +116,7 @@
<div class="section-header">
<span>
<svg class="icon"><use href="./assets/icons.svg#systems"></use></svg>
Systems
系统概览
</span>
</div>
<div id="systemStats" class="system-stats"></div>
@@ -122,7 +126,7 @@
<div class="section-header">
<span>
<svg class="icon"><use href="./assets/icons.svg#failure"></use></svg>
Recent Failures
最近失败
</span>
</div>
<div id="recentFailures" class="failure-list"></div>
@@ -132,7 +136,7 @@
<div class="section-header">
<span>
<svg class="icon"><use href="./assets/icons.svg#queue"></use></svg>
Run Queue
运行队列
</span>
</div>
<div id="runQueue" class="run-list"></div>
@@ -142,8 +146,8 @@
<section id="detailWorkspace" class="workspace">
<div class="workspace-empty">
<svg class="icon icon-xl"><use href="./assets/icons.svg#shield"></use></svg>
<h2>Select a run</h2>
<p>Pick a run from the left queue to inspect timeline, evidence, logs, sources and raw JSON.</p>
<h2>选择一个运行</h2>
<p>从左侧队列选择 run，即可查看时间线、证据、日志、来源、原始 JSON 和当前架构库。</p>
</div>
</section>
</main>
@@ -152,13 +156,14 @@
<div class="footer-left">
<span class="footer-note">
<svg class="icon"><use href="./assets/icons.svg#source"></use></svg>
UI shell is vendorized from a local Lovart source copy, not an online runtime dependency.
当前 UI 壳层来自本地化 Lovart 模板副本，运行期不依赖任何远端 HTML、字体或图标 CDN。
</span>
</div>
<div class="footer-links">
<a href="./docs/design-source.html" target="_blank" rel="noreferrer">Design source</a>
<a href="./docs/design-source.html" target="_blank" rel="noreferrer">设计来源</a>
<a href="./assets/design-source.json" target="_blank" rel="noreferrer">Manifest JSON</a>
<a href="./summary.json" target="_blank" rel="noreferrer">Summary JSON</a>
<a href="./architecture.json" target="_blank" rel="noreferrer">架构 JSON</a>
<a href="./summary.json" target="_blank" rel="noreferrer">摘要 JSON</a>
</div>
</footer>
</div>

1
08-threat-intel/generated/dashboard/legacy/architecture.json 符号链接
查看文件

@@ -0,0 +1 @@
../architecture.json

14
08-threat-intel/generated/dashboard/runs.json
查看文件

@@ -197,7 +197,7 @@
"artifact_groups": [
{
"key": "reports",
"label": "Reports",
"label": "\u62a5\u544a\u4e0e\u8fd0\u884c\u4ea7\u7269",
"count": 4,
"items": [
{
@@ -224,7 +224,7 @@
},
{
"key": "compose",
"label": "Compose",
"label": "Compose \u7f16\u6392",
"count": 1,
"items": [
{
@@ -378,7 +378,7 @@
"artifact_groups": [
{
"key": "reports",
"label": "Reports",
"label": "\u62a5\u544a\u4e0e\u8fd0\u884c\u4ea7\u7269",
"count": 4,
"items": [
{
@@ -405,7 +405,7 @@
},
{
"key": "requests",
"label": "Request Logs",
"label": "\u8bf7\u6c42\u4e0e\u63a2\u6d4b\u65e5\u5fd7",
"count": 2,
"items": [
{
@@ -576,7 +576,7 @@
"artifact_groups": [
{
"key": "reports",
"label": "Reports",
"label": "\u62a5\u544a\u4e0e\u8fd0\u884c\u4ea7\u7269",
"count": 4,
"items": [
{
@@ -603,7 +603,7 @@
},
{
"key": "baseline",
"label": "Baseline Snapshots",
"label": "\u57fa\u7ebf\u5feb\u7167",
"count": 1,
"items": [
{
@@ -615,7 +615,7 @@
},
{
"key": "requests",
"label": "Request Logs",
"label": "\u8bf7\u6c42\u4e0e\u63a2\u6d4b\u65e5\u5fd7",
"count": 1,
"items": [
{

2
08-threat-intel/generated/dashboard/summary.json
查看文件

@@ -1,5 +1,5 @@
{
"generated_at": "2026-03-17T08:20:30+00:00",
"generated_at": "2026-03-17T08:59:56+00:00",
"advisory_count": 89,
"run_count": 3,
"statuses": {

2
08-threat-intel/generated/latest-ingest.md
查看文件

@@ -1,6 +1,6 @@
# 最新同步摘要
- 渲染时间: `2026-03-17T08:20:30+00:00`
- 渲染时间: `2026-03-17T08:59:56+00:00`
- 系统数量: `62`
- Advisory 数量: `89`
- 重点 Markdown 数量: `89`

2
08-threat-intel/generated/run-summary.json
查看文件

@@ -1,5 +1,5 @@
{
"generated_at": "2026-03-17T08:20:30+00:00",
"generated_at": "2026-03-17T08:59:56+00:00",
"system_count": 62,
"advisory_count": 89,
"markdown_count": 89,