| 影响产品 |
Check Point Multi-Domain Security Management、Check Point Quantum Security Management（包含 SmartConsole 登录服务🧪 PoC 代码（GitHub 实际仓库）
🔗 Check-Point-Trusted-Access-Review ### 文件: public/index.html
```
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Check Point Trusted Access Review</title><link rel="stylesheet" href="/styles.css?v=20260701-reauth-v3"></head><body><main class="app">
<section class="panel login-panel" id="loginPanel"><div><h1 class="title-stack"><span>Check Point</span><span>Trusted Access Review</span></h1><p class="lede">This app will search for access related to <strong>CVE-2026-16232</strong>,<strong>CVE-2026-62144</strong>,
and <strong>CVE-2026-62145</strong>. This scanner will look for access that is set to ANY in both SmartDashboard and Gaia. It will also display last login information,Stealth Rule information,MFA,and other configuration that should be part of Check Point Hardening Best Practices.</p>
<p class="lede">This tool is not created or supported by Check Point. Most checks are review-only,and any remediation action requires explicit operator approval.</p><div id="backendStatus" class="status-card disconnected" role="status">Checking local backend...</div><dl id="loginDiagnostics" class="diagnostics hidden"></dl></div>
<form id="loginForm" class="grid-form"><label>Management host
<input id="host" name="host" placeholder="mgmt.example.com" required autocomplete="off"></label><label>Port
<input id="port" name="port" placeholder="443" inputmode="numeric"></label><label id="usernameField">
Username
<input id="username" name="username" required autocomplete="username"></label><fieldset class="auth-mode"><legend>Authentication</legend><label><input type="radio" name="authMode" value="password" checked>Password
</label><label><input type="radio" name="authMode" value="api-key">
API Key
</label></fieldset><label id="passwordField">Password
<input id="password" name="password" type="password" required autocomplete="current-password"></label><label id="apiKeyField" class="hidden">API Key
<input id="apiKey" name="apiKey" type="password" autocomplete="off"></label>
<label class="check-row full-row"><input id="smart1Cloud" name="smart1Cloud" type="checkbox">Smart-1 Cloud context URL
</label><label class="check-row full-row"><input id="mdsScan" name="mdsScan" type="checkbox">MDS Scan
</label><label id="domainField" class="full-row mds-field hidden">
Domain
<input id="domain" name="domain" placeholder="CMA/domain name or IP"></label><label id="managementObjectField" class="full-row mds-field hidden">Global MDS Object Name
<input id="managementObjectName" name="managementObjectName" placeholder="Required for MDS Gaia run-script checks,for example Donut"></label>
<label class="check-row"><input id="ignoreTls" name="ignoreTls" type="checkbox" checked>Allow self-signed certificate
</label><label class="check-row large-env-row full-row"><input id="largeEnvironmentMode" name="largeEnvironmentMode" type="checkbox">
Large environment mode
<span>Lower scan concurrency for large MDS / many-gateway environments.</span></label><div id="loginStatus" class="status-card disconnected" role="status">Not connected.</div><button class="primary" type="submit">Log in</button></form></section><section class="workspace hidden" id="workspace">
<header class="topbar"><div><p class="eyebrow" id="connectionLabel">Not connected</p><h1 class="title-stack compact"><span>Check Point</span><span>Trusted Access Review</span></h1>
<p class="topbar-description">Checks are aligned to the Check Point Gateway and Management Hardening Administration Guide. Some controls can be inspected through Management API evidence;others are marked for manual validation when they depend on network design,Gaia Portal,Gaia API,SSH/Clish,identity provider settings,or out-of-band management.</p></div><div class="actions">
<button id="scanButton" class="primary">Scan Hardening Posture</button><button id="exportPdfButton" type="button" disabled>Export PDF</button><button id="auditLogButton" type="button">Audit Log</button><button id="logoutButton">Log out</button></div></header><section class="panel guide-panel"><div>
<h2>Hardening Guide Baseline</h2><p id="guideSummary">Run a scan to load guide-aligned checks.</p></div><a class="guide-link" href="https://sc1.checkpoint.com/documents/Check_Point_Gateway_and_Management_Hardening/CP_Check_Point_Gateway_and_Management_Hardening.pdf" target="_blank" rel="noreferrer">Open guide</a></section>
<section class="summary-grid" id="summaryGrid" aria-live="polite"><div class="summary-card"><span class="summary-value">0</span><span class="summary-label">Needs review</span></div><div class="summary-card"><span class="summary-value">0</span><span class="summary-label">Manual</span></div><div class="summary-card">
<span class="summary-value">0</span><span class="summary-label">Unknown</span></div><div class="summary-card"><span class="summary-value">0</span><span class="summary-label">Pass</span></div></section><section class="panel" id="hardeningChecksPanel"><div class="table-head"><div>
<h2>Hardening Checks</h2><p>Review each result and expand evidence where available. Manual checks are included so the guide can serve as a single checklist,even when the Management API cannot prove the setting.</p></div></div><div id="scanStatus" class="global-status empty-state">Run a scan to see hardening checks.</div>
<div id="checksList" class="checks-list"></div></section><section class="panel hidden api-collection-panel" id="commandPanel"><details class="api-collection-details"><summary class="api-collection-summary"><div><h2>API Collection</h2><p>Shows which Management API collection commands were accepted by the connected server.</p>
</div></summary><div id="commandResults" class="command-results"></div><div class="debug-log-actions"><button id="downloadDebugLogButton" type="button">Download Debug Log</button></div></details></section><section class="log" id="log" aria-live="polite"></section></section></main>
<div id="popupOverlay" class="popup-overlay hidden" role="presentation"><section class="popup-dialog" role="alertdialog" aria-modal="true" aria-labelledby="popupTitle" aria-describedby="popupMessage"><div class="popup-head"><h2 id="popupTitle">Remediation Failed</h2><button id="popupCloseIcon" class="popup-close" type="button" aria-label="Close">x</button>
</div><div id="popupMessage" class="popup-message"></div><div class="popup-actions"><button id="popupCloseButton" class="primary" type="button">OK</button></div></section></div><div id="reauthOverlay" class="popup-overlay hidden" role="presentation">
<section class="popup-dialog reauth-dialog" role="dialog" aria-modal="true" aria-labelledby="reauthTitle" aria-describedby="reauthMessage"><div class="popup-head"><h2 id="reauthTitle">Session Expired</h2></div>
<p id="reauthMessage" class="popup-message">Your Check Point API session is no longer active. Log in again to continue the action you were performing.</p><form id="reauthForm" class="reauth-form"><label>Management host
<input id="reauthHost" name="host" required autocomplete="off"></label><label>
Port
<input id="reauthPort" name="port" placeholder="443" inputmode="numeric"></label><fieldset class="auth-mode"><legend>Authentication</legend><label><input type="radio" name="authMode" value="password" checked>Password
</label><label><input type="radio" name="authMode" value="api-key">
API Key
</label></fieldset><label id="reauthUsernameField">Username
<input id="reauthUsername" name="username" required autocomplete="username"></label><label id="reauthPasswordField">Password
<input id="reauthPassword" name="password" type="password" required autocomplete="current-password"></label>
<label id="reauthApiKeyField" class="hidden">API Key
<input id="reauthApiKey" name="apiKey" type="password" autocomplete="off"></label><label class="check-row"><input id="reauthSmart1Cloud" name="smart1Cloud" type="checkbox">Smart-1 Cloud context URL
</label><label class="check-row">
<input id="reauthMdsScan" name="mdsScan" type="checkbox">MDS Scan
</label><label id="reauthDomainField" class="mds-field hidden">Domain
<input id="reauthDomain" name="domain" placeholder="CMA/domain name or IP"></label><label id="reauthManagementObjectField" class="mds-field hidden">
Global MDS Object Name
<input id="reauthManagementObjectName" name="managementObjectName" placeholder="Required for MDS Gaia run-script checks"></label><label class="check-row"><input id="reauthIgnoreTls" name="ignoreTls" type="checkbox" checked>Allow self-signed certificate
</label><label class="check-row large-env-row">
<input id="reauthLargeEnvironmentMode" name="largeEnvironmentMode" type="checkbox">Large environment mode
<span>Lower scan concurrency for large MDS / many-gateway environments.</span></label><div id="reauthStatus" class="status-card disconnected" role="status">Waiting for login.</div><div class="popup-actions reauth-actions">
<button id="reauthCancelButton" type="button">Cancel</button><button class="primary" type="submit">Reconnect and Continue</button></div></form></section></div><script src="/app.js?v=20260721-no-last-change"></script></body></html>```
### 文件: scripts/direct_report_pdf.js
```
import {PDFDocument,StandardFonts,rgb }
from "pdf-lib";const PAGE_WIDTH = 792;const PAGE_HEIGHT = 612;const MARGIN = 34;const CONTENT_WIDTH = PAGE_WIDTH - (MARGIN * 2);const PINK = rgb(0.93,0.047,0.365);const NAVY = rgb(0.078,0.125,0.2);const MUTED = rgb(0.396,0.459,0.545);const BORDER = rgb(0.847,0.878,0.918);const PALE = rgb(0.969,0.98,0.992);const WHITE = rgb(1,1,1);const RED = rgb(0.62,0.106,0.106);const RED_BG = rgb(1,0.91,0.91);
const YELLOW = rgb(0.54,0.353,0);const YELLOW_BG = rgb(1,0.953,0.76);const GREEN = rgb(0.094,0.475,0.306);const GREEN_BG = rgb(0.875,0.961,0.914);const BLUE_BG = rgb(0.929,0.949,0.973);const STATUS_LABELS = {"remediation-required": "Remediation Recommended","remediation-recommended": "Remediation Recommended","remediation-review-recommended": "Review Recommended",
"needs-review": "Review Recommended",reviewed: "Reviewed",pass: "Pass",manual: "Manual Validation",informational: "Informational",unknown: "Unknown"
};const SEVERITY_LABELS = {high: "High",medium: "Medium",low: "Low",info: "Info" };function clean(value) {return String(value ?? "")
.replace(/\r\n?/g,"\n")
.replace(/[\u2010-\u2015]/g,"-")
.replace(/[\u2018\u2019]/g,
"'")
.replace(/[\u201c\u201d]/g,'"')
.replace(/\u2026/g,"...")
.replace(/\u2022/g,"-")
.replace(/[^\x09\x0A\x0D\x20-\x7E]/g,"?")
.trim();}function valueText(value) {if (value === null ||value === undefined) return "";if (Array.isArray(value)) return value.map(valueText).filter(Boolean).join("\n");if (typeof value === "object") {if (value._link ||value.link) {
const link = value._link ||value.link;return clean(link.label ||link.url ||"");}return clean(value.label ?? value.value ?? value.text ?? "");}return clean(value);}function formatDate(value) {if (!value) return "Unknown";const date = new Date(value);if (Number.isNaN(date.getTime())) return clean(value);return date.toLocaleString("en-US",{year: "numeric",month: "long",day: "numeric",hour: "numeric",
minute: "2-digit"
});}function wrapText(text,font,size,maxWidth) {const paragraphs = clean(text).split("\n");const lines = [];for (const paragraph of paragraphs) {if (!paragraph) {lines.push("");continue;}const words = paragraph.split(/\s+/);let line = "";for (const originalWord of words) {let word = originalWord;while (font.widthOfTextAtSize(word,size) >maxWidth &&word.length >
1) {let end = word.length - 1;while (end >1 &&font.widthOfTextAtSize(`${word.slice(0,end)}-`,size) >maxWidth) end -= 1;const part = `${word.slice(0,end)}-`;if (line) lines.push(line);lines.push(part);line = "";word = word.slice(end);}const candidate = line ? `${line}${word}` : word;if (line &&font.widthOfTextAtSize(candidate,size) >maxWidth) {lines.push(line);line = word;}
else {line = candidate;}}if (line) lines.push(line);}return lines.length ? lines : [""];}function statusTone(status) {if (["remediation-requir
🤖 本文由漏洞情报系统自动聚合生成 · 2026-08-01 14:07 · 数据源: NVD/GitHub-Advisory/OSV/CISA-KEV/Exploit-DB/PoC-in-GitHub + 检测规则库 |
