CVE-RAY/options.html at main · ByteRay-Labs/CVE-RAY · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
<!DOCTYPE html>
<html lang="en">
<head>
    <title>CVE-RAY - Settings</title>
    <meta charset="UTF-8">
    <style>
        /* General Dark Mode Body Styles */
        body { background-color: #1e1e1e; color: #e0e0e0; font-family: sans-serif; margin: 0; }
        .container { width: 500px; margin: 40px auto; padding: 20px 30px; background-color: #2a2a2a; border-radius: 8px; border: 1px solid #444; }

        /* Stile für den Logo-Container */
        .logo-container {
            text-align: center;
            margin-top: 25px; /* Abstand nach oben zu den letzten Elementen */
            padding-top: 25px; /* Abstand innerhalb des Containers */
            border-top: 1px solid #444; /* Trennlinie über dem Logo */
        }
        .logo-container img {
            width: 150px; /* Etwas kleiner für eine dezentere Optik am Ende */
            height: auto;
        }

        h1, h2 { text-align: center; color: #ffffff; border-bottom: 1px solid #444; padding-bottom: 10px; margin-top: 10px; }
        h1 { border-bottom: none; }
        p { text-align: center; font-size: 0.9em; color: #aaa; }
        .warning-box { background-color: #4d1c20; color: #f8d7da; border: 1px solid #f5c6cb; border-radius: 5px; padding: 15px; margin: 20px 0; font-size: 0.9em; line-height: 1.4; }
        hr { border: none; border-top: 1px solid #444; margin: 25px 0; }
        div { margin-bottom: 15px; }
        label { display: block; margin-bottom: 5px; font-weight: bold; color: #bbb; }
        input[type="text"], input[type="password"], select { width: 100%; padding: 12px; box-sizing: border-box; background-color: #333; color: #e0e0e0; border: 1px solid #555; border-radius: 4px; font-size: 1em; }
        input:focus, select:focus { outline: none; border-color: #007bff; }
        button { padding: 10px 15px; cursor: pointer; border: none; border-radius: 4px; font-size: 1em; font-weight: bold; transition: background-color 0.2s; }
        #save-settings { background-color: #007bff; color: white; width: 100%; }
        #save-settings:hover { background-color: #0056b3; }
        #status { margin-top: 15px; font-weight: bold; color: #66bb6a; text-align: center; height: 20px; }
        .auth-method-choice { display: flex; gap: 20px; justify-content: center; margin-bottom: 20px; }
        #exclusion-list { list-style: none; padding: 0; margin-top: 20px; }
        #exclusion-list li { display: flex; justify-content: space-between; align-items: center; padding: 8px; background-color: #333; border-radius: 4px; margin-bottom: 5px; }
        #exclusion-list button { background-color: #d9534f; color: white; padding: 5px 10px; font-size: 0.9em; }
        .exclusion-input-group { display: flex; gap: 10px; }
        .aws-link { color: #6cb6ff; text-decoration: none; }
        .aws-link:hover { text-decoration: underline; }
    </style>
</head>
<body>
    <div class="container">

        <h1>Settings</h1>

        <h2>CrowdStrike Region</h2>
        <p>This setting applies to all connection methods.</p>
        <div>
            <label for="global-region">Region</label>
            <select id="global-region">
                <option value="us-1">US-1</option>
                <option value="us-2">US-2</option>
                <option value="eu-1">EU-1</option>
                <option value="us-gov-1">US GOV-1</option>
            </select>
        </div>
        <hr>

        <h2>Authentication Method</h2>
        <div class="auth-method-choice">
            <label><input type="radio" name="authMethod" value="direct" checked> Direct API</label>
            <label><input type="radio" name="authMethod" value="aws"> AWS API Gateway</label>
        </div>

        <div id="direct-api-fields">
            <h3>Direct API Settings</h3>
            <div class="warning-box">
                For security reasons, use an API key with only <strong>vulnerabilities:read</strong> permission.<br>
                Storing credentials in the browser isn't fully secure. We recommend using the AWS API Gateway setup to avoid storing API keys locally.
            </div>
            <div>
                <input type="text" id="clientId" placeholder="Client ID">
            </div>
            <div>
                <input type="password" id="clientSecret" placeholder="Client Secret">
            </div>
        </div>

        <div id="aws-gateway-fields" style="display: none;">
            <h3>AWS API Gateway Settings</h3>
            <p>Most secure method. <a href="https://github.com/ByteRay-Labs/CVE-RAY/blob/main/AWS_Setup_Guide.md" target="_blank" class="aws-link">Requires setup in AWS.</a></p>
            <div>
                <input type="text" id="gatewayUrl" placeholder="API Gateway Invoke URL">
            </div>
        </div>

        <hr>
        <button id="save-settings">Save All Settings</button>
        <div id="status"></div>

        <hr>

        <h2>Exclusion List</h2>
        <p>Sites (domains) that should not be scanned. E.g., 'example.com'</p>
        <div class="exclusion-input-group">
            <input type="text" id="new-exclusion" placeholder="Add domain...">
            <button id="add-exclusion">Add</button>
        </div>
        <ul id="exclusion-list"></ul>

        <div class="logo-container">
           <img src="images/byteray.png" alt="Company Logo">
        </div>

    </div> <script src="options.js"></script>
</body>
</html>