Audit Results: ${targetUrl}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","itdude207","name","security-test","path","new-file-4768.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/itdude207/security-test/code/new-file-4768.ts","extension","id","58db04e7-b7d0-40d8-9d2b-86c7b2267488","fileId","d4166bba-ab37-11f1-a829-1607ee4eb77e","parentId","branchId","c2b3840e-58f0-43e8-be31-7f8f660d3ac5","branchVersion",9,"latest",true,"createdAt",["D",1788839612678],"version",6,"fileType","http","content","import axios from \"npm:axios\";\n\nexport default async function (req: Request) {\n const urlParams = new URL(req.url).searchParams;\n const targetUrl = urlParams.get(\"target\");\n\n // If a target URL is provided, run the security audit\n if (targetUrl) {\n try {\n // Validate that it's a properly formatted URL\n new URL(targetUrl);\n } catch {\n return new Response(\n \"Invalid URL format. Please include http:// or https://\",\n { status: 400 },\n );\n }\n\n const REQUEST_COUNT = 50;\n const promises = Array.from({ length: REQUEST_COUNT }).map(\n async (_, index) => {\n try {\n const startTime = Date.now();\n const response = await axios.get(targetUrl, {\n timeout: 4000,\n headers: { \"User-Agent\": \"ValTown-WAF-Auditor-Bot/1.0\" },\n });\n return {\n id: index + 1,\n status: response.status,\n time: Date.now() - startTime,\n };\n } catch (error) {\n return {\n id: index + 1,\n status: error.response?.status || \"TIMEOUT/BLOCKED\",\n time: 0,\n };\n }\n },\n );\n\n const rawResults = await Promise.all(promises);\n\n // Aggregate data points for visualization\n const statusCounts: Record = {};\n rawResults.forEach((r) => {\n statusCounts[r.status] = (statusCounts[r.status] || 0) + 1;\n });\n\n // Generate HTML report with an embedded chart layout placeholder\n const htmlReport = `\n \n \n \n Audit Results: ${targetUrl}\n \n \n \n

WAF & Rate-Limit Audit Report

Target: ${targetUrl}

\n \n

Summary Status Distribution

If the site successfully blocked the burst, you should see many 429 (Too Many Requests) or connection drop failures.

Status ${status}: ${count} requests

\n\n

Raw Sequence Logs

\n \n \n ${\n rawResults.map((r) => `\n \n \n \n \n \n `).join(\"\")\n }\n

Request #	HTTP Status Code	Latency
${r.id}	${r.status}	${r.time > 0 ? `${r.time}ms` : \"N/A\"}

\n
\n ← Test Another Site\n \n \n `;\n\n return new Response(htmlReport, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Default Form Interface View\n const initialFormHtml = `\n \n \n \n Ethical Hacking: WAF Tester\n \n \n \n

🛡️ Rate-Limit & WAF Stress Auditor

Simulate an automated credential stuffing or aggressive scanning request burst against your site.

\n \n

\n ⚠️ Ethical Hacking Notice: Only target web assets that you personally own or have explicit written authorization to test. Unauthorized automated scanning can trigger security alerts or hosting dynamic overage fees.\n

\n\n \n \n \n `;\n\n return new Response(initialFormHtml, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n}","deleted",false,"label",[14],"5874b577-0f4b-4dc2-8df4-d0a9b6915fc3",["D",1788839115838],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","A test for eithical hacking","imageUrl","userId","71dd8e68-0bdc-406a-80ca-10c2c5c89c48","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a079d4-a61e-70f7-8070-e49f40e3accd","tursoName","5874b5770f4b4dc28df4d0a9b6915fc3","tursoHostname","5874b5770f4b4dc28df4d0a9b6915fc3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789448471428],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","ITDUDE207","avatar","https://avatars.githubusercontent.com/u/261690574?v=4","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]