@soulofzephir/pi-skill-pentesting 1.0.2 → 1.0.5

package/skills/pentesting/tools/exposed-files-scan.ps1

@@ -1,5 +1,5 @@
-# Exposed Files Scanner v1.0
-# Detects dangerous exposed files and directories
+# Exposed Files Scanner v2.0
+# Detects dangerous exposed files with false positive detection
 
 param(
     [Parameter(Mandatory=$false)]
@@ -11,10 +11,8 @@ param(
 
 $ErrorActionPreference = "Continue"
 
-# Get current date
 $Date = Get-Date -Format "yyyy-MM-dd"
 
-# Parse target URL
 if ($Target -match "https?://") {
     $Uri = [System.Uri]$Target
     $Domain = $Uri.Host
@@ -24,122 +22,61 @@ if ($Target -match "https?://") {
     $Target = "https://$Target"
 }
 
-# Create output filename
 $OutputFile = "$OutputDir/$Domain-exposed-$Date.md"
 
-# ═══════════════════════════════════════════════════════════
-# COMMON EXPOSED PATHS
-# ═══════════════════════════════════════════════════════════
-
 $ExposedPaths = @(
-    # Configuration Files
-    @{ Path = "/.env"; Risk = "CRITICAL"; Desc = "Environment variables - may contain secrets" },
-    @{ Path = "/.env.local"; Risk = "CRITICAL"; Desc = "Local environment - secrets" },
-    @{ Path = "/.env.production"; Risk = "CRITICAL"; Desc = "Production environment" },
-    @{ Path = "/.git/config"; Risk = "CRITICAL"; Desc = "Git repository config - may expose remote" },
-    @{ Path = "/.git/HEAD"; Risk = "HIGH"; Desc = "Git branch information" },
-    @{ Path = "/.git/"; Risk = "CRITICAL"; Desc = "Full .git directory exposed" },
-    @{ Path = "/wp-config.php"; Risk = "CRITICAL"; Desc = "WordPress config - DB + keys" },
-    @{ Path = "/config.php"; Risk = "CRITICAL"; Desc = "PHP configuration" },
-    @{ Path = "/settings.py"; Risk = "CRITICAL"; Desc = "Django/Python settings" },
-    @{ Path = "/config.js"; Risk = "HIGH"; Desc = "Node.js configuration" },
-    @{ Path = "/application.properties"; Risk = "CRITICAL"; Desc = "Java Spring config" },
-    @{ Path = "/.htaccess"; Risk = "MEDIUM"; Desc = "Apache config" },
-    @{ Path = "/.htpasswd"; Risk = "CRITICAL"; Desc = "HTTP Basic Auth hashes" },
-    
-    # Backup Files
-    @{ Path = "/backup.zip"; Risk = "CRITICAL"; Desc = "Compressed backup" },
-    @{ Path = "/backups.zip"; Risk = "CRITICAL"; Desc = "Compressed backup" },
-    @{ Path = "/database.zip"; Risk = "CRITICAL"; Desc = "Database backup" },
-    @{ Path = "/db.zip"; Risk = "CRITICAL"; Desc = "Database backup" },
-    @{ Path = "/database.sql"; Risk = "CRITICAL"; Desc = "Database dump" },
-    @{ Path = "/db.sql"; Risk = "CRITICAL"; Desc = "Database dump" },
-    @{ Path = "/dump.sql"; Risk = "CRITICAL"; Desc = "Database dump" },
-    @{ Path = "/backup.sql"; Risk = "CRITICAL"; Desc = "Database backup" },
-    @{ Path = "/site.tar.gz"; Risk = "CRITICAL"; Desc = "Full site backup" },
-    @{ Path = "/backup.tar.gz"; Risk = "CRITICAL"; Desc = "Full backup archive" },
-    @{ Path = "/www.zip"; Risk = "CRITICAL"; Desc = "Web root backup" },
-    @{ Path = "/backup/"; Risk = "HIGH"; Desc = "Backup directory" },
-    @{ Path = "/backups/"; Risk = "HIGH"; Desc = "Backups directory" },
-    @{ Path = "/db/"; Risk = "HIGH"; Desc = "Database directory" },
-    @{ Path = "/*.bak"; Risk = "HIGH"; Desc = "Backup files" },
-    @{ Path = "/*.backup"; Risk = "HIGH"; Desc = "Backup files" },
-    @{ Path = "/old/"; Risk = "MEDIUM"; Desc = "Old files directory" },
-    @{ Path = "/tmp/"; Risk = "MEDIUM"; Desc = "Temporary files" },
-    
-    # Admin & Debug Panels
-    @{ Path = "/admin/"; Risk = "HIGH"; Desc = "Admin panel" },
-    @{ Path = "/wp-admin/"; Risk = "HIGH"; Desc = "WordPress admin" },
-    @{ Path = "/administrator/"; Risk = "HIGH"; Desc = "Administrator panel" },
-    @{ Path = "/manage/"; Risk = "MEDIUM"; Desc = "Management panel" },
-    @{ Path = "/phpmyadmin/"; Risk = "CRITICAL"; Desc = "Database UI - major exposure" },
-    @{ Path = "/pma/"; Risk = "CRITICAL"; Desc = "phpMyAdmin alias" },
-    @{ Path = "/mysql/"; Risk = "CRITICAL"; Desc = "MySQL admin" },
-    @{ Path = "/debug/"; Risk = "CRITICAL"; Desc = "Debug mode enabled" },
-    @{ Path = "/api/debug/"; Risk = "CRITICAL"; Desc = "API debug endpoint" },
-    @{ Path = "/console/"; Risk = "HIGH"; Desc = "Debug console" },
-    @{ Path = "/debug.php"; Risk = "CRITICAL"; Desc = "Debug script" },
-    @{ Path = "/test.php"; Risk = "HIGH"; Desc = "Test script" },
-    @{ Path = "/info.php"; Risk = "HIGH"; Desc = "PHP info exposure" },
-    @{ Path = "/phpinfo.php"; Risk = "HIGH"; Desc = "PHP info exposure" },
-    
-    # Spring Boot Actuator
-    @{ Path = "/actuator/"; Risk = "HIGH"; Desc = "Spring Boot actuator" },
-    @{ Path = "/actuator/env"; Risk = "CRITICAL"; Desc = "Environment variables" },
-    @{ Path = "/actuator/heapdump"; Risk = "CRITICAL"; Desc = "Heap dump - contains secrets" },
-    @{ Path = "/actuator/threaddump"; Risk = "HIGH"; Desc = "Thread information" },
-    @{ Path = "/actuator/metrics"; Risk = "MEDIUM"; Desc = "Application metrics" },
-    @{ Path = "/actuator/configprops"; Risk = "CRITICAL"; Desc = "Configuration properties" },
-    @{ Path = "/health"; Risk = "MEDIUM"; Desc = "Health check endpoint" },
-    
-    # API Documentation
-    @{ Path = "/swagger/"; Risk = "MEDIUM"; Desc = "Swagger UI" },
-    @{ Path = "/swagger-ui/"; Risk = "MEDIUM"; Desc = "Swagger documentation" },
-    @{ Path = "/swagger-ui.html"; Risk = "MEDIUM"; Desc = "Swagger HTML" },
-    @{ Path = "/api-docs/"; Risk = "MEDIUM"; Desc = "API documentation" },
-    @{ Path = "/v2/api-docs/"; Risk = "MEDIUM"; Desc = "OpenAPI v2" },
-    @{ Path = "/v3/api-docs/"; Risk = "MEDIUM"; Desc = "OpenAPI v3" },
-    @{ Path = "/graphiql/"; Risk = "HIGH"; Desc = "GraphQL IDE" },
-    @{ Path = "/graphql"; Risk = "MEDIUM"; Desc = "GraphQL endpoint" },
-    @{ Path = "/api/"; Risk = "LOW"; Desc = "API base path" },
-    @{ Path = "/api/v1/"; Risk = "LOW"; Desc = "API v1" },
-    
-    # Log Files
-    @{ Path = "/logs/"; Risk = "HIGH"; Desc = "Log directory" },
-    @{ Path = "/error.log"; Risk = "HIGH"; Desc = "Error log" },
-    @{ Path = "/access.log"; Risk = "HIGH"; Desc = "Access log" },
-    @{ Path = "/debug.log"; Risk = "HIGH"; Desc = "Debug log" },
-    @{ Path = "/application.log"; Risk = "HIGH"; Desc = "Application log" },
-    @{ Path = "/console.log"; Risk = "MEDIUM"; Desc = "Console log" },
-    
-    # Information Disclosure
-    @{ Path = "/robots.txt"; Risk = "LOW"; Desc = "Reveals hidden paths" },
-    @{ Path = "/sitemap.xml"; Risk = "LOW"; Desc = "Site structure" },
-    @{ Path = "/security.txt"; Risk = "LOW"; Desc = "Security contact" },
-    @{ Path = "/humans.txt"; Risk = "LOW"; Desc = "Developer information" },
-    @{ Path = "/crossdomain.xml"; Risk = "LOW"; Desc = "Flash policy" },
-    @{ Path = "/.well-known/security.txt"; Risk = "LOW"; Desc = "Security policy" }
+    @{ Path="/.env"; Risk="CRITICAL"; Desc="Environment variables with secrets" },
+    @{ Path="/.env.local"; Risk="CRITICAL"; Desc="Local environment" },
+    @{ Path="/.git/config"; Risk="CRITICAL"; Desc="Git repository config" },
+    @{ Path="/.git/HEAD"; Risk="HIGH"; Desc="Git branch info" },
+    @{ Path="/.git/"; Risk="CRITICAL"; Desc="Full .git directory" },
+    @{ Path="/wp-config.php"; Risk="CRITICAL"; Desc="WordPress config" },
+    @{ Path="/config.php"; Risk="HIGH"; Desc="PHP configuration" },
+    @{ Path="/settings.py"; Risk="HIGH"; Desc="Python/Django settings" },
+    @{ Path="/config.js"; Risk="HIGH"; Desc="Node.js config" },
+    @{ Path="/application.properties"; Risk="CRITICAL"; Desc="Java Spring config" },
+    @{ Path="/backup.zip"; Risk="CRITICAL"; Desc="Compressed backup" },
+    @{ Path="/backups.zip"; Risk="CRITICAL"; Desc="Compressed backup" },
+    @{ Path="/database.sql"; Risk="CRITICAL"; Desc="Database dump" },
+    @{ Path="/db.sql"; Risk="CRITICAL"; Desc="Database dump" },
+    @{ Path="/dump.sql"; Risk="CRITICAL"; Desc="Database dump" },
+    @{ Path="/backup.sql"; Risk="CRITICAL"; Desc="Database backup" },
+    @{ Path="/admin/"; Risk="HIGH"; Desc="Admin panel" },
+    @{ Path="/wp-admin/"; Risk="HIGH"; Desc="WordPress admin" },
+    @{ Path="/administrator/"; Risk="HIGH"; Desc="Admin panel" },
+    @{ Path="/phpmyadmin/"; Risk="CRITICAL"; Desc="Database UI" },
+    @{ Path="/pma/"; Risk="CRITICAL"; Desc="phpMyAdmin alias" },
+    @{ Path="/debug/"; Risk="CRITICAL"; Desc="Debug mode enabled" },
+    @{ Path="/api/debug/"; Risk="CRITICAL"; Desc="API debug" },
+    @{ Path="/actuator/"; Risk="HIGH"; Desc="Spring Boot actuator" },
+    @{ Path="/actuator/env"; Risk="CRITICAL"; Desc="Environment variables" },
+    @{ Path="/actuator/heapdump"; Risk="CRITICAL"; Desc="Heap dump" },
+    @{ Path="/swagger-ui/"; Risk="MEDIUM"; Desc="API documentation" },
+    @{ Path="/swagger/"; Risk="MEDIUM"; Desc="Swagger UI" },
+    @{ Path="/graphiql/"; Risk="HIGH"; Desc="GraphQL IDE" },
+    @{ Path="/graphql"; Risk="MEDIUM"; Desc="GraphQL endpoint" },
+    @{ Path="/logs/"; Risk="HIGH"; Desc="Log directory" },
+    @{ Path="/error.log"; Risk="HIGH"; Desc="Error log" },
+    @{ Path="/access.log"; Risk="MEDIUM"; Desc="Access log" },
+    @{ Path="/robots.txt"; Risk="LOW"; Desc="Reveals paths" },
+    @{ Path="/sitemap.xml"; Risk="LOW"; Desc="Site structure" }
 )
 
-# ═══════════════════════════════════════════════════════════
-# SCAN FUNCTION
-# ═══════════════════════════════════════════════════════════
-
-Write-Host ""
-Write-Host "╔═══════════════════════════════════════════════════╗" -ForegroundColor Cyan
-Write-Host "║  🔍 Exposed Files Scanner v1.0                    ║" -ForegroundColor Cyan
-Write-Host "╚═══════════════════════════════════════════════════╝" -ForegroundColor Cyan
 Write-Host ""
-Write-Host "Target: $Target" -ForegroundColor White
+Write-Host "========================================" -ForegroundColor Cyan
+Write-Host "  Exposed Files Scanner v2.0" -ForegroundColor Cyan
+Write-Host "  Target: $Domain" -ForegroundColor Cyan
+Write-Host "========================================" -ForegroundColor Cyan
 Write-Host ""
 
-$FoundIssues = @()
+$TrueIssues = @()
+$FalsePositives = @()
 $Scanned = 0
 
 foreach ($item in $ExposedPaths) {
     $Scanned++
     $Progress = [math]::Round(($Scanned / $ExposedPaths.Count) * 100)
-    Write-Progress -Activity "Scanning exposed files..." -Status "$Progress% complete" -PercentComplete $Progress
+    Write-Progress -Activity "Scanning..." -Status "$Progress% complete" -PercentComplete $Progress
     
     $URL = "$Target$($item.Path)"
     
@@ -147,187 +84,153 @@ foreach ($item in $ExposedPaths) {
         $Response = Invoke-WebRequest -Uri $URL -Method Head -TimeoutSec 5 -ErrorAction SilentlyContinue
         
         if ($Response.StatusCode -ne 404 -and $Response.StatusCode -ne 403) {
-            $ContentType = $Response.Headers["Content-Type"] -join ", "
+            $ContentType = $Response.Headers["Content-Type"]
             
-            $Finding = [PSCustomObject]@{
-                Path = $item.Path
-                StatusCode = $Response.StatusCode
-                Risk = $item.Risk
-                Description = $item.Desc
-                ContentType = $ContentType
+            # Check for false positive (SPA routing)
+            $IsFalsePositive = $false
+            if ($item.Path -notmatch "\.(zip|sql|env|tar|gz|bak|backup)" -and 
+                $ContentType -match "text/html|application/octet-stream") {
+                # Check if it's actually HTML content
+                try {
+                    $BodyResp = Invoke-WebRequest -Uri $URL -TimeoutSec 5 -ErrorAction SilentlyContinue
+                    $Body = $BodyResp.Content.Substring(0, [Math]::Min(500, $BodyResp.Content.Length))
+                    
+                    if ($Body -match "<html|<!doctype|<head|<body|root|<div" -and $Body.Length -lt 2000) {
+                        $IsFalsePositive = $true
+                    }
+                    
+                    # Check for actual sensitive content
+                    if ($Body -match "DB_HOST|DB_PASS|PASSWORD|SECRET|API_KEY|aws_key|database|backup") {
+                        $IsFalsePositive = $false
+                    }
+                } catch {}
             }
-            $FoundIssues += $Finding
             
-            $Color = switch ($item.Risk) {
-                "CRITICAL" { "Red" }
-                "HIGH" { "Yellow" }
-                "MEDIUM" { "Cyan" }
-                "LOW" { "Gray" }
+            if ($IsFalsePositive) {
+                $FalsePositives += $item
+                Write-Host "[FP] $($item.Path) (HTTP $($Response.StatusCode)) - Likely SPA" -ForegroundColor Gray
+            } else {
+                $TrueIssues += $item
+                $Color = switch ($item.Risk) {
+                    "CRITICAL" { "Red" }
+                    "HIGH" { "Yellow" }
+                    "MEDIUM" { "Cyan" }
+                    "LOW" { "Gray" }
+                }
+                Write-Host "[!] FOUND: $($item.Path) ($($item.Risk))" -ForegroundColor $Color
             }
-            
-            Write-Host "⚠️  FOUND [$($item.Risk)]: $($item.Path)" -ForegroundColor $Color
-            Write-Host "   Status: $($Response.StatusCode) | Type: $($ContentType.Substring(0, [Math]::Min(50, $ContentType.Length)))" -ForegroundColor Gray
         }
-    } catch {
-        # Connection error or timeout - not found
-    }
+    } catch {}
 }
 
 Write-Progress -Activity "Scanning" -Completed
 
-# ═══════════════════════════════════════════════════════════
-# SUMMARY
-# ═══════════════════════════════════════════════════════════
+$CriticalCount = ($TrueIssues | Where-Object { $_.Risk -eq "CRITICAL" }).Count
+$HighCount = ($TrueIssues | Where-Object { $_.Risk -eq "HIGH" }).Count
+$MediumCount = ($TrueIssues | Where-Object { $_.Risk -eq "MEDIUM" }).Count
+$LowCount = ($TrueIssues | Where-Object { $_.Risk -eq "LOW" }).Count
+$FPCount = $FalsePositives.Count
 
 Write-Host ""
-Write-Host "═══════════════════════════════════════════════════" -ForegroundColor Cyan
-Write-Host "📊 SCAN SUMMARY" -ForegroundColor Cyan
-Write-Host "═══════════════════════════════════════════════════" -ForegroundColor Cyan
+Write-Host "========================================" -ForegroundColor Cyan
+Write-Host "  SCAN SUMMARY" -ForegroundColor Cyan
+Write-Host "========================================" -ForegroundColor Cyan
 Write-Host ""
-
-$CriticalCount = ($FoundIssues | Where-Object { $_.Risk -eq "CRITICAL" }).Count
-$HighCount = ($FoundIssues | Where-Object { $_.Risk -eq "HIGH" }).Count
-$MediumCount = ($FoundIssues | Where-Object { $_.Risk -eq "MEDIUM" }).Count
-$LowCount = ($FoundIssues | Where-Object { $_.Risk -eq "LOW" }).Count
-
 Write-Host "Files Scanned: $Scanned" -ForegroundColor White
-Write-Host "Issues Found: $($FoundIssues.Count)" -ForegroundColor Yellow
+Write-Host "True Issues:   $($TrueIssues.Count)" -ForegroundColor $(if($TrueIssues.Count -gt 0){"Red"}else{"Green"})
+Write-Host "False Positives: $FPCount" -ForegroundColor Gray
 Write-Host ""
-Write-Host "🔴 CRITICAL: $CriticalCount" -ForegroundColor Red
-Write-Host "🟠 HIGH:     $HighCount" -ForegroundColor Yellow
-Write-Host "🟡 MEDIUM:   $MediumCount" -ForegroundColor Cyan
-Write-Host "🟢 LOW:      $LowCount" -ForegroundColor Gray
-
-# ═══════════════════════════════════════════════════════════
-# GENERATE REPORT
-# ═══════════════════════════════════════════════════════════
+Write-Host "CRITICAL: $CriticalCount" -ForegroundColor Red
+Write-Host "HIGH:     $HighCount" -ForegroundColor Yellow
+Write-Host "MEDIUM:   $MediumCount" -ForegroundColor Cyan
+Write-Host "LOW:      $LowCount" -ForegroundColor Gray
+
+# Generate Report
+$TrueSection = if ($TrueIssues.Count -gt 0) {
+    $t = "| Path | Risk | Description |`n|------|------|-------------|`n"
+    foreach ($i in $TrueIssues) {
+        $t += "| $($i.Path) | $($i.Risk) | $($i.Desc) |`n"
+    }
+    $t
+} else {
+    "No sensitive files exposed."
+}
 
-if (-not (Test-Path $OutputDir)) {
-    New-Item -ItemType Directory -Path $OutputDir -Force | Out-Null
+$FPSection = if ($FalsePositives.Count -gt 0) {
+    $f = "These paths returned HTML/SPA content, not actual sensitive files:`n`n"
+    foreach ($i in $FalsePositives) {
+        $f += "- $($i.Path) - HTTP 200 (SPA routing)`n"
+    }
+    $f
+} else {
+    "None detected."
 }
 
+$Remediation = @()
+if ($CriticalCount -gt 0) { $Remediation += "1. **URGENT**: Remove or protect critical files" }
+if ($HighCount -gt 0) { $Remediation += "2. Add authentication to admin/debug panels" }
+if ($FPCount -gt 0) { $Remediation += "3. (Info) False positives detected - not real issues" }
+
 $Report = @"
-# 🔍 Exposed Files Report
+# Exposed Files Report
 
 **Target:** $Target
+**Domain:** $Domain
 **Date:** $Date
-**Scanner:** Exposed Files Scanner v1.0
+**Scanner:** Exposed Files Scanner v2.0
+**Author:** Rz (@soulofzephir)
 
 ---
 
-## 📋 Summary
+## Summary
 
 | Metric | Value |
 |--------|-------|
 | Files Scanned | $Scanned |
-| Issues Found | $($FoundIssues.Count) |
-| 🔴 CRITICAL | $CriticalCount |
-| 🟠 HIGH | $HighCount |
-| 🟡 MEDIUM | $MediumCount |
-| 🟢 LOW | $LowCount |
+| True Issues | $($TrueIssues.Count) |
+| False Positives | $FPCount |
+| CRITICAL | $CriticalCount |
+| HIGH | $HighCount |
+| MEDIUM | $MediumCount |
+| LOW | $LowCount |
 
 ---
 
-## 🚨 Critical Issues
-
-$(if ($CriticalCount -gt 0) {
-    $FoundIssues | Where-Object { $_.Risk -eq "CRITICAL" } | ForEach-Object {
-        @"
-### Found: $($_.Path)
-
-| Field | Value |
-|-------|-------|
-| Status Code | $($_.StatusCode) |
-| Risk Level | 🔴 $($_.Risk) |
-| Content Type | $($_.ContentType) |
-
-**Description:** $($_.Description)
+## True Security Issues
 
-**Recommendation:** Immediate action required. Remove or restrict access.
+$TrueSection
 
 ---
-"@
-    }
-} else {
-    "✅ No critical issues found"
-})
-
-## 🟠 High Risk Issues
-
-$(if ($HighCount -gt 0) {
-    $FoundIssues | Where-Object { $_.Risk -eq "HIGH" } | ForEach-Object {
-        @"
-- **$($_.Path)** - $($_.Description) (HTTP $($_.StatusCode))
-"@
-    }
-} else {
-    "✅ No high-risk issues found"
-})
-
-## 🟡 Medium Risk Issues
-
-$(if ($MediumCount -gt 0) {
-    $FoundIssues | Where-Object { $_.Risk -eq "MEDIUM" } | ForEach-Object {
-        @"
-- **$($_.Path)** - $($_.Description) (HTTP $($_.StatusCode))
-"@
-    }
-} else {
-    "✅ No medium-risk issues found"
-})
-
-## 🟢 Low Risk Issues
-
-$(if ($LowCount -gt 0) {
-    $FoundIssues | Where-Object { $_.Risk -eq "LOW" } | ForEach-Object {
-        @"
-- **$($_.Path)** - $($_.Description) (HTTP $($_.StatusCode))
-"@
-    }
-} else {
-    "✅ No low-risk issues found"
-})
 
----
-
-## 📝 All Findings
+## False Positives
 
-| Path | Status | Risk | Description |
-|------|--------|------|-------------|
-$(foreach ($issue in $FoundIssues) {
-    "| $($issue.Path) | $($issue.StatusCode) | $($issue.Risk) | $($issue.Description) |"
-})
+$FPSection
 
 ---
 
-## 🛡️ Remediation Checklist
+## Remediation
 
-- [ ] Block .env files in web server config
-- [ ] Disable .git directory listing
-- [ ] Remove backup files from web root
-- [ ] Protect admin panels with IP restriction
-- [ ] Disable debug mode in production
-- [ ] Secure Spring Boot actuator endpoints
-- [ ] Add authentication to API documentation
-- [ ] Disable directory listing
-- [ ] Remove test/debug files
+$(if ($Remediation.Count -gt 0) { $Remediation -join "`n" } else { "No immediate action required." })
 
 ---
 
-**Report Generated:** $(Get-Date -Format "yyyy-MM-dd HH:mm:ss")
+**Generated:** $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')
 "@
 
-# Save report
+if (-not (Test-Path $OutputDir)) {
+    New-Item -ItemType Directory -Path $OutputDir -Force | Out-Null
+}
+
 $Report | Out-File -FilePath $OutputFile -Encoding UTF8
 
 Write-Host ""
-Write-Host "═══════════════════════════════════════════════════" -ForegroundColor Cyan
-Write-Host "✅ Scan Complete!" -ForegroundColor Green
-Write-Host "═══════════════════════════════════════════════════" -ForegroundColor Cyan
+Write-Host "========================================" -ForegroundColor Green
+Write-Host "  Scan Complete!" -ForegroundColor Green
+Write-Host "========================================" -ForegroundColor Green
 Write-Host ""
-Write-Host "📄 Report: $OutputFile" -ForegroundColor White
+Write-Host "Report: $OutputFile" -ForegroundColor White
 Write-Host ""
 
 if ($CriticalCount -gt 0) {
-    Write-Host "⚠️  IMMEDIATE ACTION REQUIRED for critical findings!" -ForegroundColor Red
+    Write-Host "IMMEDIATE ACTION REQUIRED!" -ForegroundColor Red
 }