lookyloo/website/web/templates/macros.html

{% macro known_content_details(details) %}
<div>
{% if details is string %}
  <b>{{ details }} </b>
{% else %}
  This file is known as part of <b>{{ details[0] }}</b>
  version <b>{{ details[1] }}</b>: <b>{{ details[2] }}</b>.
  {% if details[3] > 1%}
    It is also present in <b>{{ details[3] -1 }}</b> other libraries.
  {%endif%}
{%endif%}
</div>
{% endmacro %}

{% macro context_form(tree_uuid, urlnode_uuid, hostnode_uuid, hash, callback_str) %}
<button class="btn btn-primary collapsed" type="button" data-toggle="collapse" data-target="#context_response_{{ urlnode_uuid }}" aria-expanded="false" aria-controls="collapseContextForm">
  <span class="if-collapsed">Add context</span>
  <span class="if-not-collapsed">Hide context form</span>
</button>
<div class="collapse" id="context_response_{{ urlnode_uuid }}">
  <div class="card card-body">
      <form role="form" action="{{ url_for('add_context', tree_uuid=tree_uuid, urlnode_uuid=urlnode_uuid) }}" method=post enctype=multipart/form-data>
        <div class="form-group">
          <div class="form-check">
            <input class="form-check-input" type="checkbox" name="legitimate" id="legitimate">
            <label for="legitimate" class="form-check-label">Legitimate</label>
          </div>
        </div>
        <div class="form-group">
          <label for="legitimate_domain">Domain serving the file when considered legitimate:</label>
          <input type="text" class="form-control" name="legitimate_domain" id="legitimate_domain" placeholder="Domain name">
        </div>
        <div class="form-group">
          <label for="legitimate_description">Other context for this content (library name, owner, ...):</label>
          <input type="text" class="form-control" name="legitimate_description" id="legitimate_description" placeholder="Description">
        </div>
        <div class="form-group">
          <div class="form-check">
            <input class="form-check-input" type="checkbox" name="malicious"></input>
            <label for="malicious" class="form-check-label">Malicious</label>
          </div>
        </div>
        <div class="form-group">
          <label for="malicious_type">Type of malicious content (phishing, malware, ...):</label>
          <input type="text" class="form-control" name="malicious_type" id="malicious_type" placeholder="Type of malicious content">
        </div>
        <div class="form-group">
          <label for="malicious_target">Legitimate target of the malicious content (expecially for phishing):</label>
          <input type="text" class="form-control" name="malicious_target" id="malicious_target" placeholder="Target">
        </div>
        <input type="hidden" id="hash_to_contextualize" name="hash_to_contextualize" value="{{ hash }}">
        <input type="hidden" id="hostnode_uuid" name="hostnode_uuid" value="{{ hostnode_uuid }}">
        <input type="hidden" id="callback_str" name="callback_str" value="{{ callback_str }}">
        <button type="submit" class="btn btn-primary" id="btn-looking">Submit context</button>
      </form>
  </div>
</div>
{% endmacro %}

{% macro get_ressource_button(capture_uuid, urlnode_uuid, hash, text) %}
<form method="post" action="{{ url_for('get_ressource', tree_uuid=capture_uuid, node_uuid=urlnode_uuid) }}">
  <button class="btn btn-primary" name="ressource_hash" value="{{ hash }}">{{ text }}</button>
</form>
{% endmacro %}

{% macro ressource_legitimacy_details(details, ressource_size) %}
{% if details and details[0] == False %}
  <img src="/static/bomb.svg" title="Known malicious content in the response." width="21" height="21"/>
{%endif%}
Body size: {{ sizeof_fmt(ressource_size) }}
{% if details %}
  {% if details[0] %}
  - This file is known <b>legitimate</b> on the following domains: {{ ', '.join(details[1]) }}.
  {% elif details[0] == False %}
    </br>
    The response sould be considered as
    {% if details[1] is mapping and details[1].get('tag') %}
    <b>{{ ', '.join(details[1]['tag']) }}</b>
    {% else %}
    <b>phishing</b>
    {%endif%}
    {% if details[1] is mapping and details[1].get('target') %}
      unless it is served by <b>the following domain(s)</b>: {{ ', '.join(details[1]['target']) }}
    {% else %}
      unless it is served by <b>the following domain(s)</b>: {{ ', '.join(details[1]) }}
    {%endif%}
    </br>
  {%endif%}
{%endif%}
{% endmacro %}

{% macro indexed_hash(details, identifier_for_toggle) %}
{% set total_captures = details[0] %}
{% set other_captures = details[1] %}
{# Only show details if the hits are in an other capture #}
{% if total_captures > 0  %}
<p>
  The same file was seen in <b>{{ total_captures }}</b> other captures.
  <button class="btn btn-primary collapsed" type="button" data-toggle="collapse" data-target="#captureslist_{{ identifier_for_toggle }}" aria-expanded="false" aria-controls="collapseExample">
    <span class="if-collapsed">Show other captures</span>
    <span class="if-not-collapsed">Hide other captures</span>
  </button>
</p>
{# Lists of other captures loading the same content... #}
<div class="collapse" id="captureslist_{{ identifier_for_toggle }}">
  <div class="card card-body">
    {% if other_captures['different_url']|length > 0 %}
    {# ... on other URLs #}
    <div>
      <p>The following captures get the same file from a <b>different URL</b></p>
      {{ other_captures_table(other_captures['different_url']) }}
    </div>
    {% endif %}
    </br>
    {% if other_captures['same_url']|length > 0 %}
    {# ... on the same URL #}
    <div>
      <p>The following captures get the same file from the <b>same URL</b></p>
      {{ other_captures_table(other_captures['same_url']) }}
    </div>
    {% endif %}
  </div>
</div>
{% else %}
<p>This file is loaded multiple times in this capture.</p>
{% endif %}
{% endmacro %}

{% macro other_captures_table(entries) %}
<div class="table-responsive">
  <table id="table_other_captures" class="table">
  <thead>
    <tr>
      <th>Title</th>
      <th>Timestamp</th>
      <th>Domain</th>
    </tr>
  </thead>
  <tbody>
  {% for capture_uuid, urlnode_uuid, title, timestamp, hostname in entries %}
  <tr>
    <td>
      <a href="#/" onclick="openTreeInNewTab('{{ capture_uuid }}', '{{ urlnode_uuid }}')">{{ title }}</a>
    </td>
    <td>{{ timestamp }}</td>
    <td>{{ hostname }}</td>
  </tr>
  {% endfor %}
  </tbody>
  </table>
</div>
{% endmacro %}

{% macro indexed_cookies(header_text, button_text, cookies) %}
{% if cookies %}
<div>{{ header_text }}</div>
<ul>
{% for cookie, details in cookies.items() %}
  {% set cookie_name_value = cookie.split('=', 1) %}
  {% for detail in details %}
    {% if detail|length == 1 %}
    <li>
        {{ detail[0] }}: <a href="{{ url_for('cookies_name_detail', cookie_name=cookie_name_value[0]) }}">
            {{ cookie_name_value[0] }}</a>={{ shorten_string(cookie_name_value[1], 200) }}
    </li>
    {% else %}
    <li>
        {{ detail[0] }}: <a href="{{ url_for('cookies_name_detail', cookie_name=cookie_name_value[0]) }}">
          {{ cookie_name_value[0] }}</a>={{ shorten_string(cookie_name_value[1], 200) }} -
        </br>
        {{ button_text }}
        <button type="button" class="btn btn-info" onclick="whereAmI('{{ detail[1] }}')">Locate</button>
    </li>
    {% endif %}
  {% endfor %}
{% endfor %}
</ul>
{% endif %}
{% endmacro %}

{% macro popup_icons(lookup_dict, urlnode, tree_uuid) %}
<div>
{% for key, path in lookup_dict.items() %}
  {% if urlnode[key] %}
    {% if key == "request_cookie" %}
    <a href="{{ url_for('urlnode_request_cookies', tree_uuid=tree_uuid, node_uuid=urlnode.uuid) }}" title="Download all the cookies in the request to the server">
     <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
    </a>
    {% elif key == "response_cookie"%}
    <a href="{{ url_for('urlnode_response_cookies', tree_uuid=tree_uuid, node_uuid=urlnode.uuid) }}" title="Download all the cookies in the response from the server">
      <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
    </a>
    {% elif key in ["js", "exe", "css", "font", "html", "json", "image", "video", "unknown_mimetype", "text", "unset_mimetype", "octet-stream", "livestream"] and not urlnode.empty_response %}
      <a href="{{ url_for('get_ressource', tree_uuid=tree_uuid, node_uuid=urlnode.uuid) }}" title="Download the content of the response">
        <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
      </a>
    {% elif key == "redirect" %}
      {% for child in urlnode.children if child.name == urlnode.redirect_url %}
      <a href="#/" role="button" onclick="whereAmI('{{ child.hostnode_uuid }}')" title="See the node the URL redirects to.">
        <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
      </a>
      {% else %}
      <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
      {% endfor %}
      {% if urlnode.redirect_url %}
      <div title='{{ urlnode.redirect_url }}'>Redirect to: {{ shorten_string(urlnode.redirect_url, 50) }}</div>
      {%endif%}
    {% else %}
    <img src="{{ path }}" alt="{{ key }}" width="21" height="21"/>
    {%endif%}
  {%endif%}
{% endfor %}
</div>
{% endmacro %}

{% macro shorten_string(string, cut_length) %}
{% if string|length > cut_length %}
  {{ string[:cut_length] }} [...]
{% else %}
  {{ string }}
{%endif%}
{% endmacro %}