Update app.py

app.py

@@ -1,11 +1,11 @@
 import os
-from flask import Flask, render_template_string, request, session, redirect, url_for, send_file
 import subprocess
+from flask import Flask, render_template_string, request, session, redirect, url_for, send_file
 
 app = Flask(__name__)
-app.secret_key = os.urandom(24)
+app.secret_key = os.urandom(32)
 
-# --- CONFIGURATION & ACCESS CONTROL ---
+# --- IDENTITY & CREDENTIALS ---
 OWNER_NAME = "WhyLaugh404"
 PASSWORDS = {
     "owner": "izie19281933",
@@ -13,228 +13,286 @@ PASSWORDS = {
     "member": "jst404member"
 }
 
-# --- STYLING (HACKER ELEGANT UI) ---
+# --- ACCESS CONTROL (Member Solidarity Version) ---
+ACCESS_LEVELS = {
+    "member": ["sherlock", "socialscan", "holehe", "theharvester", "exiftool"],
+    "admin": ["sherlock", "socialscan", "holehe", "theharvester", "exiftool", "maigret", "phoneinfoga", "recon-ng"],
+    "owner": ["sherlock", "socialscan", "holehe", "theharvester", "exiftool", "maigret", "phoneinfoga", "recon-ng", "ghunt", "cloud_enum", "twint"]
+}
+
+# --- STYLING: THE DARK NODE (MR. X DESIGN) ---
 CSS = """
 :root {
-    --bg-color: #0a0a0a;
-    --accent-color: #00ff41;
-    --text-color: #d1d1d1;
-    --card-bg: #141414;
-    --border-color: #333;
+    --bg: #050505;
+    --panel: #0d0d0d;
+    --accent: #3867d6; /* Steel Blue - More Professional */
+    --text: #ececec;
+    --muted: #666;
+    --border: #1f1f1f;
+    --success: #20bf6b;
 }
+
 body {
-    background-color: var(--bg-color);
-    color: var(--text-color);
-    font-family: 'JetBrains Mono', 'Fira Code', monospace;
+    background-color: var(--bg);
+    color: var(--text);
+    font-family: 'Inter', 'JetBrains Mono', monospace;
     margin: 0;
-    display: flex;
-    flex-direction: column;
-    align-items: center;
+    padding: 0;
 }
+
 .header {
-    width: 100%;
-    padding: 20px;
-    border-bottom: 1px solid var(--border-color);
+    background: var(--panel);
+    border-bottom: 1px solid var(--border);
+    padding: 40px 20px;
     text-align: center;
-    background: rgba(0,0,0,0.8);
 }
-.logo {
-    width: 80px;
-    filter: brightness(0) invert(1);
-    margin-bottom: 10px;
+
+.mrx-logo {
+    width: 120px;
+    height: 120px;
+    margin-bottom: 15px;
+    border-radius: 50%;
+    border: 2px solid var(--accent);
+    box-shadow: 0 0 20px rgba(56, 103, 214, 0.3);
 }
+
 .container {
-    max-width: 900px;
-    width: 90%;
-    margin-top: 30px;
+    max-width: 1100px;
+    margin: 40px auto;
+    padding: 0 20px;
 }
-.tool-section {
-    background: var(--card-bg);
-    border: 1px solid var(--border-color);
-    padding: 20px;
-    margin-bottom: 20px;
-    border-radius: 4px;
+
+.grid {
+    display: grid;
+    grid-template-columns: repeat(auto-fit, minmax(320px, 1fr));
+    gap: 25px;
 }
-.tool-section h3 {
-    color: var(--accent-color);
-    border-bottom: 1px solid var(--border-color);
-    padding-bottom: 10px;
+
+.card {
+    background: var(--panel);
+    border: 1px solid var(--border);
+    padding: 25px;
+    border-radius: 2px;
+}
+
+.card h3 {
     margin-top: 0;
+    font-size: 0.9em;
+    text-transform: uppercase;
+    letter-spacing: 2px;
+    color: var(--accent);
+    border-bottom: 1px solid var(--border);
+    padding-bottom: 10px;
 }
-input, button {
+
+.input-group {
+    margin-bottom: 15px;
+}
+
+input {
     background: #000;
-    border: 1px solid var(--border-color);
-    color: var(--accent-color);
-    padding: 10px;
-    margin: 5px 0;
+    border: 1px solid var(--border);
+    color: #fff;
+    padding: 12px;
     width: 100%;
+    box-sizing: border-box;
+    outline: none;
+    font-family: monospace;
 }
-button:hover {
-    background: var(--accent-color);
-    color: #000;
+
+input:focus {
+    border-color: var(--accent);
+}
+
+button {
+    background: transparent;
+    border: 1px solid var(--accent);
+    color: var(--accent);
+    padding: 10px 20px;
+    width: 100%;
     cursor: pointer;
+    font-weight: bold;
+    text-transform: uppercase;
+    transition: 0.3s;
 }
-.footer {
-    margin-top: auto;
-    padding: 20px;
-    font-size: 0.8em;
-    color: #666;
+
+button:hover:not(:disabled) {
+    background: var(--accent);
+    color: #fff;
 }
-.result-box {
+
+button:disabled {
+    border-color: var(--muted);
+    color: var(--muted);
+    cursor: not-allowed;
+}
+
+.result-area {
     background: #000;
-    border: 1px solid var(--accent-color);
-    padding: 15px;
+    border-left: 3px solid var(--accent);
+    padding: 20px;
+    margin-top: 20px;
+    font-family: 'JetBrains Mono', monospace;
+    font-size: 0.85em;
     white-space: pre-wrap;
-    font-size: 0.9em;
-    max-height: 400px;
+    color: #ccc;
+    max-height: 500px;
     overflow-y: auto;
 }
+
+.badge {
+    font-size: 0.7em;
+    padding: 3px 8px;
+    background: var(--accent);
+    color: #fff;
+    margin-left: 10px;
+}
 """
 
-HTML_LOGIN = """
-<!DOCTYPE html>
-<html>
-<head>
-    <title>Access Point | {{ owner }}</title>
-    <style>{{ css }}</style>
-</head>
+# --- DATABASE TOOLS ---
+TOOLS_MANIFEST = {
+    "Target Identification": [
+        {"id": "sherlock", "name": "Sherlock", "ph": "Target Username"},
+        {"id": "maigret", "name": "Maigret", "ph": "Target Username (Deep)"},
+        {"id": "socialscan", "name": "SocialScan", "ph": "Username / Email"}
+    ],
+    "Signals Intelligence": [
+        {"id": "holehe", "name": "Holehe Protocol", "ph": "Target Email"},
+        {"id": "phoneinfoga", "name": "PhoneInfoga", "ph": "Phone (+62...)"},
+        {"id": "twint", "name": "Twint Intel", "ph": "Twitter Username"}
+    ],
+    "Network & Metadata": [
+        {"id": "theharvester", "name": "theHarvester", "ph": "Target Domain"},
+        {"id": "exiftool", "name": "Exif Metadata", "ph": "File URL / Path"},
+        {"id": "recon-ng", "name": "Recon-ng", "ph": "Domain/Company"}
+    ],
+    "Classified (Owner Only)": [
+        {"id": "ghunt", "name": "GHunt Recon", "ph": "Target Gmail Address"},
+        {"id": "cloud_enum", "name": "Cloud Enumerator", "ph": "Keyword / S3 Bucket"}
+    ]
+}
+
+# --- TEMPLATES ---
+T_LOGIN = """
+<!DOCTYPE html><html><head><style>{{css}}</style></head>
 <body>
     <div class="header">
-        <img src="https://upload.wikimedia.org/wikipedia/commons/a/a6/Anonymous_emblem.svg" class="logo">
-        <h2>System Authentication</h2>
+        <img src="https://i.pinimg.com/originals/11/49/09/1149098730999053805f87b8d80f8076.jpg" class="mrx-logo">
+        <h2 style="letter-spacing:5px;">SYSTEM AUTH</h2>
     </div>
     <div class="container" style="max-width: 400px;">
-        <form method="post">
-            <input type="password" name="auth_pass" placeholder="Enter Credentials" required>
-            <button type="submit">Decrypt Access</button>
-        </form>
+        <form method="post"><input type="password" name="p" placeholder="CREDENTIALS" required><button type="submit" style="margin-top:20px;">ACCESS NODE</button></form>
     </div>
-    <div class="footer">Owner: {{ owner }} | 2026 Node Intelligence</div>
-</body>
-</html>
+    <div style="text-align:center; color:var(--muted); font-size:0.8em; margin-top:50px;">PROPRIETARY OF {{owner}}</div>
+</body></html>
 """
 
-HTML_DASHBOARD = """
-<!DOCTYPE html>
-<html>
-<head>
-    <title>Dashboard | {{ owner }}</title>
-    <style>{{ css }}</style>
-</head>
+T_DASHBOARD = """
+<!DOCTYPE html><html><head><style>{{css}}</style></head>
 <body>
     <div class="header">
-        <h2>CENTRAL INTELLIGENCE SYSTEM</h2>
-        <p style="font-size: 0.8em; color: #666;">Authenticated as: {{ role.upper() }} | Operator: {{ owner }}</p>
+        <div style="font-size:0.7em; color:var(--accent);">CONNECTED TO PRIVATE NODE: 127.0.0.1</div>
+        <h2 style="margin:10px 0; letter-spacing:3px;">CENTRAL CONSOLE</h2>
+        <div style="font-size:0.8em; color:var(--muted);">OPERATOR: {{owner}} | STATUS: <span style="color:var(--success)">ENCRYPTED</span> | ROLE: {{role}}</div>
     </div>
-    
     <div class="container">
-        <div class="tool-section">
-            <h3>[01] Identity & Username OSINT</h3>
-            <form action="/scan/sherlock" method="post">
-                <input type="text" name="target" placeholder="Input Username" required>
-                <button type="submit">Execute Sherlock Scan</button>
-            </form>
-            <form action="/scan/maigret" method="post" style="margin-top:10px;">
-                <input type="text" name="target" placeholder="Input Username" required>
-                <button type="submit">Execute Maigret Depth Scan</button>
-            </form>
-        </div>
-
-        <div class="tool-section">
-            <h3>[02] Communication & Mail OSINT</h3>
-            <form action="/scan/holehe" method="post">
-                <input type="email" name="target" placeholder="Input Target Email" required>
-                <button type="submit">Execute Holehe Protocol</button>
-            </form>
-            <form action="/scan/phone" method="post" style="margin-top:10px;">
-                <input type="text" name="target" placeholder="Input Phone Number (ex: +62...)" required>
-                <button type="submit">Execute PhoneInfoga Scan</button>
-            </form>
+        <div class="grid">
+            {% for cat, tools in manifest.items() %}
+            <div class="card">
+                <h3>{{cat}}</h3>
+                {% for t in tools %}
+                <div class="input-group">
+                    {% if t.id in allowed %}
+                    <form action="/run/{{t.id}}" method="post">
+                        <input type="text" name="target" placeholder="{{t.ph}}" required>
+                        <button type="submit">EXE_{{t.id.upper()}}</button>
+                    </form>
+                    {% else %}
+                    <button disabled>LOCKED_{{role.upper()}}</button>
+                    {% endif %}
+                </div>
+                {% endfor %}
+            </div>
+            {% endfor %}
         </div>
-
-        <div class="tool-section">
-            <h3>[03] Platform Specific Recon</h3>
-            <form action="/scan/ghunt" method="post">
-                <input type="text" name="target" placeholder="Input Gmail Address" required>
-                <button type="submit">Execute GHunt Recon</button>
-            </form>
-        </div>
-        
-        <a href="/logout" style="color: red; text-decoration: none; font-size: 0.8em;">[ TERMINATE SESSION ]</a>
+        <div style="text-align:center; margin-top:40px;"><a href="/exit" style="color:var(--muted); text-decoration:none; font-size:0.8em;">[ TERMINATE_SESSION ]</a></div>
     </div>
-    <div class="footer">Proprietary System of {{ owner }}</div>
-</body>
-</html>
-"""
+</body></html>
 
-# --- ROUTES ---
+# --- SERVER LOGIC ---
 
 @app.route('/', methods=['GET', 'POST'])
-def index():
+def entry():
     if request.method == 'POST':
-        password = request.form.get('auth_pass')
-        if password == PASSWORDS['owner']:
-            session['role'] = 'owner'
-        elif password == PASSWORDS['admin']:
-            session['role'] = 'admin'
-        elif password == PASSWORDS['member']:
-            session['role'] = 'member'
-        else:
-            return "ACCESS DENIED"
-        return redirect(url_for('index'))
+        p = request.form.get('p')
+        for role, val in PASSWORDS.items():
+            if p == val:
+                session['role'] = role
+                return redirect(url_for('entry'))
+        return "INVALID ACCESS"
     
     if 'role' in session:
-        return render_template_string(HTML_DASHBOARD, css=CSS, owner=OWNER_NAME, role=session['role'])
-    return render_template_string(HTML_LOGIN, css=CSS, owner=OWNER_NAME)
+        return render_template_string(T_DASHBOARD, css=CSS, owner=OWNER_NAME, 
+                                    role=session['role'], manifest=TOOLS_MANIFEST, 
+                                    allowed=ACCESS_LEVELS[session['role']])
+    return render_template_string(T_LOGIN, css=CSS, owner=OWNER_NAME)
 
-@app.route('/scan/<tool>', methods=['POST'])
-def run_scan(tool):
-    if 'role' not in session: return redirect(url_for('index'))
+@app.route('/run/<tool_id>', methods=['POST'])
+def execute(tool_id):
+    if 'role' not in session or tool_id not in ACCESS_LEVELS[session['role']]:
+        return "UNAUTHORIZED"
+    
     target = request.form.get('target')
     
-    # Mapping command berdasarkan tool
-    commands = {
+    # Tool Command Mapping
+    cmds = {
         "sherlock": f"sherlock {target} --timeout 5",
-        "holehe": f"holehe {target}",
         "maigret": f"maigret {target} --timeout 10",
-        "phone": f"phoneinfoga scan -n {target}",
-        "ghunt": f"ghunt email {target}"
+        "socialscan": f"socialscan {target}",
+        "holehe": f"holehe {target}",
+        "phoneinfoga": f"phoneinfoga scan -n {target}",
+        "twint": f"twint -u {target}",
+        "theharvester": f"python3 /home/user/theHarvester/theHarvester.py -d {target} -l 100 -b google",
+        "exiftool": f"exiftool {target}",
+        "recon-ng": f"recon-ng -m {target}",
+        "ghunt": f"ghunt email {target}",
+        "cloud_enum": f"python3 /home/user/cloud_enum/cloud_enum.py -k {target}"
     }
-    
-    cmd = commands.get(tool)
-    if not cmd: return "Tool not found."
 
     try:
+        cmd = cmds.get(tool_id)
         process = subprocess.Popen(cmd.split(), stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True)
         stdout, stderr = process.communicate()
-        result = stdout if stdout else stderr
+        output = stdout if stdout else stderr
         
-        # Simpan hasil ke file untuk didownload
-        report_path = f"report_{tool}_{target}.txt"
-        with open(report_path, "w") as f:
-            f.write(f"SYSTEM REPORT - OWNER: {OWNER_NAME}\nTARGET: {target}\nTOOL: {tool}\n" + "="*30 + "\n" + result)
-            
+        # Auto-Report Generator
+        report_file = f"JST_REPORT_{tool_id.upper()}_{target}.txt"
+        with open(report_file, "w") as f:
+            f.write(f"SYSTEM REPORT | OPERATOR: {OWNER_NAME}\n" + "="*40 + f"\nTOOL: {tool_id}\nTARGET: {target}\n\n" + output)
+
         return f"""
         <style>{CSS}</style>
         <div class="container">
-            <h3>Scan Result: {tool.upper()}</h3>
-            <div class="result-box">{result}</div>
+            <h3 style="color:var(--accent)">>_ CONSOLE_OUTPUT: {tool_id.upper()}</h3>
+            <div class="result-area">{output}</div>
             <br>
-            <a href="/download/{report_path}"><button>Download Official Report</button></a>
-            <a href="/"><button style="background: #333; color: #fff;">Back to Console</button></a>
+            <div style="display:flex; gap:10px;">
+                <a href="/dl/{report_file}" style="flex:1"><button>DOWNLOAD_REPORT</button></a>
+                <a href="/" style="flex:1"><button style="border-color:var(--muted); color:var(--muted);">BACK_TO_CONSOLE</button></a>
+            </div>
         </div>
         """
     except Exception as e:
-        return f"System Error: {str(e)}"
+        return f"CRITICAL_FAILURE: {str(e)}"
 
-@app.route('/download/<filename>')
-def download(filename):
+@app.route('/dl/<filename>')
+def dl(filename):
     return send_file(filename, as_attachment=True)
 
-@app.route('/logout')
-def logout():
+@app.route('/exit')
+def exit_node():
     session.clear()
-    return redirect(url_for('index'))
+    return redirect(url_for('entry'))
 
 if __name__ == '__main__':
     port = int(os.environ.get("PORT", 7860))