PATRICT-OSINT // ENTERPRISE WEB RECON & THREAT ENGINE

Target FQDN: {{ web_data.domain_identity.target_fqdn or web_data.domain }} | Apex Domain: {{ web_data.domain_identity.root_domain or web_data.domain }}

Waktu Analisis: {{ timestamp }} | Scope: {% if web_data.domain_identity.is_subdomain %}Subdomain ({{ web_data.domain_identity.subdomain_prefix }}){% else %}Apex Root Domain (Full Infrastructure){% endif %}

Security Grade

Threat Level

{{ threat_data.overall_threat_level or 'LOW' }} ({{ threat_data.risk_score or 0 }}/100)

{% if origin_leak.leak_detected %}

⚠️

POTENTIAL ORIGIN IP LEAK DETECTED (CLOUDFLARE BYPASS)

Target berada di balik {{ origin_leak.cdn_provider }}, namun ditemukan IP backend origin terbuka di record unproxied:

{% for leak in origin_leak.leaked_ips %}

                    [!] {{ leak.ip }} - Sumber: {{ leak.source }} ({{ leak.risk }})
                

{% endfor %}

{% endif %}

🛡️ Executive Vulnerability & Threat Assessment {{ threat_data.total_threats_identified or 0 }} Threats

{% if threat_data.threats %} {% for th in threat_data.threats %}

[{{ th.severity }}] {{ th.title }} {{ th.category }}

Mitigasi: {{ th.mitigation }}

{% endfor %} {% else %}

✓ Tidak ditemukan ancaman kritis atau kebocoran konfigurasi pada level pemindaian saat ini.

{% endif %}

🌐 Domain Identity & Infrastructure Scope {{ web_data.final_status }} OK

Target FQDN	`{{ web_data.domain_identity.target_fqdn or web_data.domain }}`
Apex / Root Domain	`{{ web_data.domain_identity.root_domain or web_data.domain }}`
Server IP Publik	{{ server_geoip.ip or 'N/A' }}
Lokasi Server	{{ server_geoip.city or '' }} {{ server_geoip.country or 'Unknown' }}
ISP / Organisasi	{{ server_geoip.isp or 'Unknown ISP' }} (ASN: {{ server_geoip.asn or 'N/A' }})
Auth Architecture	{{ web_data.auth_intelligence.auth_architecture or 'Stateless' }}

🔍 Passive Subdomains Discovery (Multi-Source) {{ web_data.passive_subdomains.total_found or 0 }} Ditemukan

{% if web_data.passive_subdomains.subdomains %}

{% for sub in web_data.passive_subdomains.subdomains %} {% endfor %}

Subdomain	Resolved IP	Provider
`{{ sub.subdomain }}` {% if sub.is_target_fqdn %}TARGET{% endif %}	{{ sub.ip }}	{{ sub.cdn_provider }}

{% else %}

Tidak ditemukan subdomain pasif tambahan di CT logs / DNS records.

{% endif %}

🔑 Authentication & Token Fingerprinting {{ web_data.auth_intelligence.auth_types_detected | length }} Mode

Arsitektur Autentikasi	{{ web_data.auth_intelligence.auth_architecture }}
Laravel Sanctum SPA	{% if web_data.auth_intelligence.laravel_sanctum.is_sanctum_active %} ACTIVE (/sanctum/csrf-cookie) {% else %} NOT ACTIVE / STANDARD {% endif %}
Cookie Security Audit	HttpOnly: {% if web_data.auth_intelligence.cookie_audit.httponly_all %}PASS{% else %}FAIL{% endif %} \| Secure: {% if web_data.auth_intelligence.cookie_audit.secure_all %}PASS{% else %}FAIL{% endif %}

{% if web_data.auth_intelligence.jwt_tokens %}

Decoded JSON Web Tokens (JWT):

{% for jwt in web_data.auth_intelligence.jwt_tokens %}

Location: {{ jwt.found_in }} | Alg: {{ jwt.algorithm }}

Issuer: {{ jwt.issuer }} | Subject: {{ jwt.subject }}

Expiration: {{ jwt.expiration }} ({% if jwt.is_expired %}EXPIRED{% else %}VALID{% endif %})

{% endfor %}

{% endif %}

📁 Content Discovery & Sensitive Endpoints (Soft-404 Filtered) {{ web_data.content_discovery.total_discovered or 0 }} Ditemukan

{% if web_data.content_discovery.endpoints %}

{% for ep in web_data.content_discovery.endpoints %} {% endfor %}

Path	Status Badge	Severity	Kategori / Deskripsi	Content-Type	Ukuran
`{{ ep.path }}`	{{ ep.status_badge }}	{{ ep.severity }}	{{ ep.description }}	{{ ep.content_type }}	{{ ep.size_bytes }} B

{% else %}

Tidak ditemukan file sensitif yang bocor secara terbuka pada path yang dipindai.

{% endif %} {% if web_data.content_discovery.cdx_historical_paths_found %}

Wayback Machine Historical Endpoints: {{ web_data.content_discovery.cdx_historical_paths_found | join(', ') }}

{% endif %}

🔐 SSL/TLS Certificate Intelligence {% if ssl_info.has_ssl %}{% if ssl_info.days_remaining is not none %}{{ ssl_info.days_remaining }} Hari Tersisa{% else %}Sertifikat Valid{% endif %}{% else %}No SSL{% endif %}

Issuer Organization	{{ ssl_info.issuer.organizationName or ssl_info.issuer.commonName or 'N/A' }}
Subject CN	{{ ssl_info.subject.commonName or web_data.domain }}
Masa Berlaku	{{ ssl_info.valid_from }} s/d {{ ssl_info.valid_until }}
TLS Protocol & Cipher	`{{ ssl_info.tls_version or 'N/A' }}` ({{ ssl_info.cipher or 'N/A' }})
Wildcard Status	{% if ssl_info.has_wildcard %}WILDCARD (*.) ACTIVE{% else %}Single/Multi-Host{% endif %}
Subject Alt Names (SAN)	{{ ssl_info.san_list \| length }} domain terdaftar

⚡ Stack Teknologi & Fingerprinting

Web Servers	{{ web_data.tech_stack.web_servers \| join(', ') or 'Hidden / Generic' }}
Language / Runtime	{{ web_data.tech_stack.programming_languages \| join(', ') or 'N/A' }}
Backend Framework	{{ web_data.tech_stack.backend_frameworks \| join(', ') or 'N/A' }}
CMS / Platform	{{ web_data.tech_stack.cms_and_platforms \| join(', ') or 'N/A' }}
WAF / Security	{{ web_data.tech_stack.waf_and_security \| join(', ') or 'None Detected' }}
Frontend Libraries	{{ web_data.tech_stack.frontend_libraries \| join(', ') or 'N/A' }}