omen-sec-cli 1.0.19 → 1.0.21

package/core/discover/stack-detector.js

@@ -1,6 +1,7 @@
 import fs from 'fs/promises';
 import path from 'path';
-import { glob } from 'glob';
+import axios from 'axios';
+import * as cheerio from 'cheerio';
 
 export async function runDiscovery(projectPath = process.cwd()) {
   const discovery = {
@@ -9,18 +10,27 @@ export async function runDiscovery(projectPath = process.cwd()) {
     entrypoints: [],
     boot_strategy: null,
     critical_files: [],
-    dependencies: {}
+    dependencies: {},
+    is_remote: false
   };
 
+  // Check if it's a URL
+  if (projectPath.startsWith('http')) {
+    discovery.is_remote = true;
+    return await runRemoteDiscovery(projectPath, discovery);
+  }
+
   // 1. Load package.json if exists
   try {
     const pkgPath = path.join(projectPath, 'package.json');
-    const pkgData = JSON.parse(await fs.readFile(pkgPath, 'utf-8'));
+    const pkgContent = await fs.readFile(pkgPath, 'utf-8');
+    const pkgData = JSON.parse(pkgContent);
     discovery.dependencies = { ...pkgData.dependencies, ...pkgData.devDependencies };
     
     if (discovery.dependencies['next']) discovery.stack = 'Next.js';
     else if (discovery.dependencies['express']) discovery.stack = 'Node/Express';
     else if (discovery.dependencies['react']) discovery.stack = 'React SPA';
+    else discovery.stack = 'Node.js';
     
     // Boot strategy for Node
     if (pkgData.scripts) {
@@ -33,7 +43,7 @@ export async function runDiscovery(projectPath = process.cwd()) {
   try {
     const requirementsPath = path.join(projectPath, 'requirements.txt');
     await fs.access(requirementsPath);
-    discovery.stack = discovery.stack === 'Unknown' ? 'Python' : discovery.stack;
+    if (discovery.stack === 'Unknown') discovery.stack = 'Python';
     discovery.critical_files.push('requirements.txt');
   } catch (e) {}
 
@@ -46,7 +56,7 @@ export async function runDiscovery(projectPath = process.cwd()) {
   } catch (e) {}
 
   // 4. Find entrypoints
-  const commonEntrypoints = ['server.js', 'app.js', 'index.js', 'src/index.js', 'main.py', 'app.py'];
+  const commonEntrypoints = ['server.js', 'app.js', 'index.js', 'src/index.js', 'main.py', 'app.py', 'index.php'];
   for (const entry of commonEntrypoints) {
     try {
       await fs.access(path.join(projectPath, entry));
@@ -55,13 +65,52 @@ export async function runDiscovery(projectPath = process.cwd()) {
   }
 
   // 5. Critical Security Files
-  const securityFiles = ['.env', '.env.local', '.env.production', '.git/config', 'docker-compose.yml', 'Dockerfile'];
+  const securityFiles = ['.env', '.env.local', '.env.production', '.git/config', 'docker-compose.yml', 'Dockerfile', 'package.json', 'composer.json', 'requirements.txt'];
   for (const file of securityFiles) {
     try {
       await fs.access(path.join(projectPath, file));
-      discovery.critical_files.push(file);
+      if (!discovery.critical_files.includes(file)) discovery.critical_files.push(file);
     } catch (e) {}
   }
 
   return discovery;
 }
+
+async function runRemoteDiscovery(url, discovery) {
+  try {
+    const response = await axios.get(url, {
+      timeout: 10000,
+      validateStatus: () => true,
+      headers: { 'User-Agent': 'OMEN-SEC-CLI/1.0.20 (Discovery)' }
+    });
+
+    const headers = response.headers;
+    const html = response.data || '';
+
+    // Header-based detection
+    if (headers['x-powered-by']) discovery.stack = headers['x-powered-by'];
+    if (headers['server']) discovery.stack = headers['server'];
+
+    // HTML-based detection
+    if (html.includes('next-head') || html.includes('_next/static')) discovery.stack = 'Next.js';
+    else if (html.includes('react-root') || html.includes('data-react')) discovery.stack = 'React';
+    else if (html.includes('wp-content')) discovery.stack = 'WordPress';
+    else if (html.includes('nuxt')) discovery.stack = 'Nuxt.js';
+
+    // Entrypoints as routes
+    const $ = cheerio.load(html);
+    $('a').each((i, el) => {
+      const href = $(el).attr('href');
+      if (href && !href.startsWith('#') && !href.startsWith('http') && discovery.entrypoints.length < 5) {
+        discovery.entrypoints.push(href);
+      }
+    });
+
+    discovery.entrypoints = [...new Set(discovery.entrypoints)];
+    discovery.boot_strategy = 'Remote URL';
+
+  } catch (err) {
+    discovery.stack = 'Unknown (Remote unreachable)';
+  }
+  return discovery;
+}

package/core/engine-v2.js

@@ -23,33 +23,49 @@ export async function plan() {
   const state = await loadState();
   const discovery = state.discovery;
 
-  if (!discovery || !discovery.stack) {
+  if (!discovery || !discovery.stack || discovery.stack === 'Unknown') {
     console.log(chalk.red('No discovery data found. Run "omen discover" first.'));
     return;
   }
 
   const plan = {
     steps: [
-      { id: 'static', action: 'Static Analysis', status: 'pending' },
-      { id: 'dependencies', action: 'Dependency Audit', status: 'pending' }
+      { id: 'static', action: 'Static Analysis', status: 'pending' }
     ]
   };
 
-  if (discovery.boot_strategy) {
+  // If local, check for dependencies
+  if (!discovery.is_remote) {
+    plan.steps.push({ id: 'dependencies', action: 'Dependency Audit', status: 'pending' });
+  }
+
+  if (discovery.boot_strategy && discovery.boot_strategy !== 'Remote URL') {
     plan.steps.push({ id: 'boot', action: `Boot App (${discovery.boot_strategy})`, status: 'pending' });
     plan.steps.push({ id: 'dynamic', action: 'Dynamic Analysis (Localhost)', status: 'pending' });
+  } else if (discovery.is_remote) {
+    plan.steps.push({ id: 'dynamic', action: 'Dynamic Analysis (Remote)', status: 'pending' });
   }
 
   console.log(chalk.white(`Plan generated with ${plan.steps.length} steps.`));
+  // IMPORTANTE: Retornar o plano e salvar no estado
   await saveState({ plan });
   return plan;
 }
 
 export async function execute() {
   console.log(chalk.bold.cyan('\n--- Phase 3: Execution ---'));
-  const state = await loadState();
+  
+  // Recarregar o estado para garantir que temos o plano
+  let state = await loadState();
+  
+  if (!state.plan || !state.plan.steps || state.plan.steps.length === 0) {
+    console.log(chalk.yellow('No plan found in state. Attempting to generate one...'));
+    await plan();
+    state = await loadState(); // Recarregar após plan()
+  }
+
   if (!state.plan || !state.plan.steps) {
-    console.log(chalk.red('No plan found. Run "omen plan" first.'));
+    console.log(chalk.red('Failed to generate or load plan. Run "omen discover" first.'));
     return;
   }
 
@@ -59,12 +75,18 @@ export async function execute() {
   for (const step of state.plan.steps) {
     console.log(chalk.yellow(`\nExecuting: ${step.action}...`));
     
-    if (step.id === 'static') {
+    if (step.id === 'static' && !state.discovery.is_remote) {
       const localResult = await scanLocalProject();
       vulnerabilities.push(...localResult.vulnerabilities);
       executionLogs.push(`Static analysis scanned ${localResult.localFilesScanned} files.`);
     }
 
+    if (step.id === 'dynamic' && state.discovery.is_remote) {
+      const dynamicResult = await scanRemoteTarget(state.discovery.path);
+      vulnerabilities.push(...dynamicResult.vulnerabilities);
+      executionLogs.push(`Dynamic analysis performed on ${state.discovery.path}`);
+    }
+
     if (step.id === 'boot') {
       const bootResult = await bootLocalApp(state.discovery.boot_strategy);
       if (!bootResult.success) {
@@ -106,11 +128,18 @@ export async function execute() {
   const resultData = { 
     execution, 
     score, 
-    vulnerabilities, 
+    vulnerabilities: vulnerabilities || [], 
     riskLevel: score < 40 ? 'Critical' : score < 70 ? 'High' : score < 90 ? 'Medium' : 'Low',
     timestamp: new Date().toISOString(),
     target: state.discovery?.path || process.cwd(),
-    scan_id: `OMEN-${Date.now()}`
+    scan_id: `OMEN-${Date.now()}`,
+    discovery: state.discovery || {},
+    plan: state.plan || {},
+    attack_surface: {
+      endpoints: state.discovery?.entrypoints || [],
+      tech_stack: state.discovery?.stack ? [state.discovery.stack] : [],
+      critical_files: state.discovery?.critical_files || []
+    }
   };
 
   await saveState(resultData);

package/core/remote-scanner.js

@@ -15,12 +15,18 @@ export async function scanRemoteTarget(targetUrl) {
     const response = await axios.get(targetUrl, {
       timeout: 15000,
       validateStatus: () => true,
-      headers: { 'User-Agent': 'OMEN-SEC-CLI/1.0.19 (Security Audit)' }
+      headers: { 'User-Agent': 'OMEN-SEC-CLI/1.0.21 (Security Audit)' }
     });
 
     serverStatus = response.status;
     const headers = response.headers;
-    const html = response.data;
+    const html = response.data || '';
+
+    // --- WAF / CHALLENGE DETECTION ---
+    const isVercelChallenge = headers['x-vercel-mitigated'] === 'challenge' || (typeof html === 'string' && html.includes('Vercel Security Checkpoint'));
+    if (isVercelChallenge) {
+      techStack.push('Vercel WAF (Challenge Active)');
+    }
 
     // --- TECHNOLOGY FINGERPRINTING ---
     if (headers['x-powered-by']) techStack.push(headers['x-powered-by']);
@@ -32,98 +38,100 @@ export async function scanRemoteTarget(targetUrl) {
     if (html.includes('nuxt')) techStack.push('Nuxt.js');
 
     // --- Header Analysis (Existing - Refined Descriptions) ---
-    if (!headers['strict-transport-security']) {
-      headers_analysis["Strict-Transport-Security"] = "Missing";
-      vulnerabilities.push({
-        id: `REM-VULN-${Date.now()}-1`,
-        kind: 'header',
-        category: 'hardening',
-        confidence: 'high',
-        severity: 'medium',
-        title: 'HSTS Header Missing',
-        description: `HTTP Strict-Transport-Security (HSTS) header is missing. This prevents the browser from enforcing HTTPS-only connections for future visits.`,
-        cwe: 'CWE-319',
-        evidence: { 
-          request: { headers: { ...response.request.headers } }, 
-          response: { status: response.status, headers: response.headers },
-          reason: 'Security header "Strict-Transport-Security" not found in server response.'
-        },
-        remediation: 'Implement the Strict-Transport-Security header with a long max-age (e.g., 31536000) and the includeSubDomains directive.'
-      });
-    }
+    if (!isVercelChallenge) {
+      if (!headers['strict-transport-security']) {
+        headers_analysis["Strict-Transport-Security"] = "Missing";
+        vulnerabilities.push({
+          id: `REM-VULN-${Date.now()}-1`,
+          kind: 'header',
+          category: 'hardening',
+          confidence: 'high',
+          severity: 'medium',
+          title: 'HSTS Header Missing',
+          description: `HTTP Strict-Transport-Security (HSTS) header is missing. This prevents the browser from enforcing HTTPS-only connections for future visits.`,
+          cwe: 'CWE-319',
+          evidence: { 
+            request: { headers: { ...response.request.headers } }, 
+            response: { status: response.status, headers: response.headers },
+            reason: 'Security header "Strict-Transport-Security" not found in server response.'
+          },
+          remediation: 'Implement the Strict-Transport-Security header with a long max-age (e.g., 31536000) and the includeSubDomains directive.'
+        });
+      }
 
-    if (!headers['content-security-policy']) {
-      headers_analysis["Content-Security-Policy"] = "Missing";
-      vulnerabilities.push({
-        id: `REM-VULN-${Date.now()}-2`,
-        kind: 'header',
-        category: 'confirmed',
-        confidence: 'high',
-        severity: 'high',
-        title: 'Content-Security-Policy Missing',
-        description: `CSP header is missing. Without a strict Content-Security-Policy, the application is highly vulnerable to Cross-Site Scripting (XSS) and data injection attacks.`,
-        cwe: 'CWE-1022',
-        evidence: { 
-          request: { headers: { ...response.request.headers } }, 
-          response: { status: response.status, headers: response.headers },
-          reason: 'Security header "Content-Security-Policy" not found in server response.'
-        },
-        remediation: 'Define a strict Content-Security-Policy to restrict source domains for scripts, styles, and other resources.'
-      });
-    } else {
-      headers_analysis["Content-Security-Policy"] = headers['content-security-policy'];
-      if (headers['content-security-policy'].includes("unsafe-inline")) {
+      if (!headers['content-security-policy']) {
+        headers_analysis["Content-Security-Policy"] = "Missing";
         vulnerabilities.push({
-          id: `REM-VULN-${Date.now()}-3`,
+          id: `REM-VULN-${Date.now()}-2`,
           kind: 'header',
           category: 'confirmed',
           confidence: 'high',
           severity: 'high',
-          title: 'Insecure CSP (unsafe-inline)',
-          description: `The Content-Security-Policy allows 'unsafe-inline' for scripts or styles, significantly weakening protection against XSS.`,
-          cwe: 'CWE-16',
-          evidence: { finding: `policy: ${headers['content-security-policy']}` },
-          remediation: 'Refactor the application to avoid inline scripts and styles, then remove "unsafe-inline" from the CSP.'
+          title: 'Content-Security-Policy Missing',
+          description: `CSP header is missing. Without a strict Content-Security-Policy, the application is highly vulnerable to Cross-Site Scripting (XSS) and data injection attacks.`,
+          cwe: 'CWE-1022',
+          evidence: { 
+            request: { headers: { ...response.request.headers } }, 
+            response: { status: response.status, headers: response.headers },
+            reason: 'Security header "Content-Security-Policy" not found in server response.'
+          },
+          remediation: 'Define a strict Content-Security-Policy to restrict source domains for scripts, styles, and other resources.'
         });
+      } else {
+        headers_analysis["Content-Security-Policy"] = headers['content-security-policy'];
+        if (headers['content-security-policy'].includes("unsafe-inline")) {
+          vulnerabilities.push({
+            id: `REM-VULN-${Date.now()}-3`,
+            kind: 'header',
+            category: 'confirmed',
+            confidence: 'high',
+            severity: 'high',
+            title: 'Insecure CSP (unsafe-inline)',
+            description: `The Content-Security-Policy allows 'unsafe-inline' for scripts or styles, significantly weakening protection against XSS.`,
+            cwe: 'CWE-16',
+            evidence: { finding: `policy: ${headers['content-security-policy']}` },
+            remediation: 'Refactor the application to avoid inline scripts and styles, then remove "unsafe-inline" from the CSP.'
+          });
+        }
       }
-    }
 
-    // 3. Analisar X-Frame-Options
-    if (!headers['x-frame-options']) {
-      headers_analysis["X-Frame-Options"] = "Missing";
-      vulnerabilities.push({
-        id: `REM-VULN-${Date.now()}-4`,
-        kind: 'header',
-        category: 'hardening',
-        confidence: 'high',
-        severity: 'low',
-        title: 'X-Frame-Options Missing',
-        description: `Missing X-Frame-Options header. This allows the application to be embedded in an iframe on other domains, increasing Clickjacking risk.`,
-        cwe: 'CWE-1021',
-        evidence: { 
-          request: { headers: { ...response.request.headers } }, 
-          response: { status: response.status, headers: response.headers },
-          reason: 'Security header "X-Frame-Options" not found. This allows the site to be embedded in iframes on third-party domains.'
-        },
-        remediation: 'Set the X-Frame-Options header to DENY or SAMEORIGIN.'
-      });
-    }
+      // 3. Analisar X-Frame-Options
+      if (!headers['x-frame-options']) {
+        headers_analysis["X-Frame-Options"] = "Missing";
+        vulnerabilities.push({
+          id: `REM-VULN-${Date.now()}-4`,
+          kind: 'header',
+          category: 'hardening',
+          confidence: 'high',
+          severity: 'low',
+          title: 'X-Frame-Options Missing',
+          description: `Missing X-Frame-Options header. This allows the application to be embedded in an iframe on other domains, increasing Clickjacking risk.`,
+          cwe: 'CWE-1021',
+          evidence: { 
+            request: { headers: { ...response.request.headers } }, 
+            response: { status: response.status, headers: response.headers },
+            reason: 'Security header "X-Frame-Options" not found. This allows the site to be embedded in iframes on third-party domains.'
+          },
+          remediation: 'Set the X-Frame-Options header to DENY or SAMEORIGIN.'
+        });
+      }
 
-    // 3.1 Analisar X-Content-Type-Options
-    if (!headers['x-content-type-options']) {
-      headers_analysis["X-Content-Type-Options"] = "Missing";
-      vulnerabilities.push({
-        id: `REM-VULN-${Date.now()}-6`,
-        kind: 'header',
-        category: 'hardening',
-        confidence: 'high',
-        severity: 'low',
-        title: 'X-Content-Type-Options Missing',
-        description: `The X-Content-Type-Options: nosniff header is missing. This could allow the browser to "sniff" the content type, potentially leading to MIME-type sniffing attacks.`,
-        cwe: 'CWE-116',
-        evidence: { response: { headers: response.headers } },
-        remediation: 'Add the "X-Content-Type-Options: nosniff" header to all responses.'
-      });
+      // 3.1 Analisar X-Content-Type-Options
+      if (!headers['x-content-type-options']) {
+        headers_analysis["X-Content-Type-Options"] = "Missing";
+        vulnerabilities.push({
+          id: `REM-VULN-${Date.now()}-6`,
+          kind: 'header',
+          category: 'hardening',
+          confidence: 'high',
+          severity: 'low',
+          title: 'X-Content-Type-Options Missing',
+          description: `The X-Content-Type-Options: nosniff header is missing. This could allow the browser to "sniff" the content type, potentially leading to MIME-type sniffing attacks.`,
+          cwe: 'CWE-116',
+          evidence: { response: { headers: response.headers } },
+          remediation: 'Add the "X-Content-Type-Options: nosniff" header to all responses.'
+        });
+      }
     }
 
     // 4. Server Header Leak
@@ -297,6 +305,8 @@ export async function scanRemoteTarget(targetUrl) {
       '/api/auth/session', '/api/graphql', '/actuator/health', '/.ssh/id_rsa'
     ];
 
+    const forbiddenPaths = [];
+
     for (const path of aggressivePaths) {
       try {
         const fuzzUrl = new URL(path, targetUrl).href;
@@ -305,6 +315,11 @@ export async function scanRemoteTarget(targetUrl) {
           validateStatus: (status) => status >= 200 && status < 500
         });
 
+        if (fuzzRes.status === 403) {
+          forbiddenPaths.push(path);
+          continue;
+        }
+
         const finding = await validateFuzzerFinding(path, fuzzRes, fuzzUrl);
         if (finding) {
           vulnerabilities.push(finding);
@@ -314,6 +329,21 @@ export async function scanRemoteTarget(targetUrl) {
       }
     }
 
+    if (forbiddenPaths.length > 0) {
+      vulnerabilities.push({
+        id: `REM-ENUM-FORBIDDEN-${Date.now()}`,
+        kind: 'path',
+        category: 'informational',
+        confidence: 'high',
+        severity: 'info',
+        title: 'Path Enumeration: Protected Resources',
+        description: `Multiple paths (${forbiddenPaths.length}) returned 403 Forbidden, confirming their existence but restricted access.`,
+        cwe: 'CWE-204',
+        evidence: { forbidden_paths: forbiddenPaths },
+        remediation: 'Ensure that 403 responses do not leak internal structure and that access controls are correctly configured.'
+      });
+    }
+
     // --- OFFENSIVE PARAMETER FUZZING ---
     const injectionPayloads = [
       { type: 'SQLi', param: "' OR '1'='1", severity: 'Critical', cwe: 'CWE-89' },
@@ -338,7 +368,7 @@ export async function scanRemoteTarget(targetUrl) {
           const res = await axios.get(testUrl.href, { 
             timeout: 5000, 
             validateStatus: () => true,
-            headers: { 'User-Agent': 'OMEN-SEC-CLI/1.0.19 (Security Audit)' }
+            headers: { 'User-Agent': 'OMEN-SEC-CLI/1.0.21 (Security Audit)' }
           });
           
           const evidence = {

package/core/reporters/fix-plan-reporter.js

@@ -41,6 +41,6 @@ export function generateFixPlan(scanData) {
     });
   }
 
-  md += `\n*Gerado automaticamente pelo OMEN SEC-CLI v1.0.19 - Protocolo Zero-Copy AI Ativo*\n`;
+  md += `\n*Gerado automaticamente pelo OMEN SEC-CLI v1.0.21 - Protocolo Zero-Copy AI Ativo*\n`;
   return md;
 }

package/core/ui-server.js

@@ -44,6 +44,10 @@ export async function startUIServer() {
           <title>OMEN SEC-CLI Evidence Center</title>
           <script src="https://cdn.tailwindcss.com"></script>
           <link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;700&family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+          <script>
+            // Ensure data safety for JS
+            const report = ${JSON.stringify(report)};
+          </script>
           <style>
               body { background-color: #0a0a0c; color: #e0e0e0; font-family: 'Inter', sans-serif; }
               .mono { font-family: 'JetBrains Mono', monospace; }
@@ -124,10 +128,10 @@ export async function startUIServer() {
                               <span class="w-2 h-2 bg-blue-500 rounded-full mr-2"></span> Phase Intelligence
                           </h2>
                           <div class="space-y-4 text-sm">
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Stack Detected</span> <span class="text-gray-300 font-bold">${report.discovery?.stack || 'N/A'}</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Boot Strategy</span> <span class="mono text-gray-300">${report.discovery?.boot_strategy || 'None'}</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Execution Steps</span> <span class="text-gray-300">${(report.plan?.steps || []).length} steps</span> </div>
-                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Last Scan Status</span> <span class="text-green-500 font-bold uppercase">${report.execution?.status || 'N/A'}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Target URL</span> <span class="mono text-gray-300">${(report && report.target) || 'N/A'}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Tech Stack</span> <span class="text-gray-300">${(report && report.attack_surface && report.attack_surface.tech_stack && report.attack_surface.tech_stack.join(', ')) || 'N/A'}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Endpoints Discovered</span> <span class="text-gray-300">${(report && report.attack_surface && report.attack_surface.endpoints && report.attack_surface.endpoints.length) || 0}</span> </div>
+                              <div class="flex justify-between border-b border-gray-800 pb-2"> <span class="text-gray-500">Critical Files</span> <span class="text-gray-300">${(report && report.attack_surface && report.attack_surface.critical_files && report.attack_surface.critical_files.length) || 0}</span> </div>
                           </div>
                       </div>
                   </div>
@@ -222,18 +226,18 @@ export async function startUIServer() {
                       <div class="lg:col-span-2 space-y-8">
                           <div class="card p-6 rounded-xl">
                               <h3 class="text-xl font-bold mb-4">Discovered Assets</h3>
-                              <pre class="mono max-h-[600px]">${(report.discovery?.entrypoints || []).concat(report.discovery?.critical_files || []).join('\n') || 'No assets discovered.'}</pre>
+                              <pre class="mono max-h-[600px]">${((report && report.discovery && report.discovery.entrypoints) || []).concat((report && report.discovery && report.discovery.critical_files) || []).join('\n') || 'No assets discovered.'}</pre>
                           </div>
                       </div>
                       <div class="space-y-8">
                           <div class="card p-6 rounded-xl">
                               <h3 class="text-xl font-bold mb-4">Phase Log</h3>
-                              <pre class="mono text-[10px]">${(report.execution?.logs || []).join('\n') || 'No execution logs.'}</pre>
+                              <pre class="mono text-[10px]">${(report && report.execution && report.execution.logs && report.execution.logs.join('\n')) || 'No execution logs.'}</pre>
                           </div>
                           <div class="card p-6 rounded-xl">
                               <h3 class="text-xl font-bold mb-4">Tech Fingerprint</h3>
                               <div class="flex flex-wrap gap-2">
-                                  ${(report.attack_surface?.tech_stack || report.discovery?.stack ? [report.discovery.stack] : []).map(t => `<span class="px-3 py-1 bg-gray-800 rounded-full text-xs font-bold text-blue-400 border border-gray-700">${t}</span>`).join('') || '<span class="text-gray-500 italic">No stack identified.</span>'}
+                                  ${(report && report.discovery && report.discovery.stack ? [report.discovery.stack] : []).map(t => `<span class="px-3 py-1 bg-gray-800 rounded-full text-xs font-bold text-blue-400 border border-gray-700">${t}</span>`).join('') || '<span class="text-gray-500 italic">No stack identified.</span>'}
                               </div>
                           </div>
                       </div>
@@ -262,7 +266,7 @@ export async function startUIServer() {
               </div>
 
               <footer class="text-center text-gray-600 mt-16 border-t border-gray-900 pt-8 mb-10">
-                  <p class="text-xs uppercase tracking-widest font-bold mb-2">OMEN Security Framework - v1.0.19</p>
+                  <p class="text-xs uppercase tracking-widest font-bold mb-2">OMEN Security Framework - v1.0.21</p>
                   <p class="text-[10px] text-gray-700 italic">"The eye that never sleeps, the code that never fails."</p>
               </footer>
           </div>