Skip to content

[FEATURE]: Interactive Vulnerability Detail View (Side Panel Expansion) #44

Description

@Darkcast

Feature hasn't been suggested before.

  • I have verified this feature hasn't been suggested before.

Category

CLI / TUI

Description

Problem

When CyberStrike detects vulnerabilities, the side panel provides a compact list of findings, but the information is not fully actionable at a glance. Users still need to dig through logs, chat output, or reports to understand the full context of a vulnerability, including evidence and reproduction steps.

This slows down validation and makes triage less efficient during active testing sessions.

Proposed Improvement

Introduce an interactive vulnerability detail view within the side panel.

Each vulnerability entry should be clickable. When selected, it should open an expanded view or modal panel containing full contextual information about the finding.

Expected Detail View Content

The expanded vulnerability view should include:

  • Vulnerability title and severity
  • A clear summary of the issue
  • Affected endpoint, parameter, or asset
  • Evidence supporting the finding (requests, responses, or tool output snippets)
  • Associated tool output (e.g., Nuclei, crawler, or scanner results)
  • Step-by-step manual reproduction instructions
  • Optional mitigation guidance or recommendations

Example Flow

  1. A vulnerability is detected (e.g., SQL injection on /login)
  2. It appears in the side panel under Findings
  3. The user clicks the finding
  4. A detailed panel opens showing:
    • Proof of concept request
    • Payload used
    • Response evidence or diff output
    • Manual reproduction steps
    • Confidence score or classification

Benefits

  • Faster validation of findings during testing
  • Reduced context switching between logs, chat, and reports
  • More actionable and readable vulnerability output
  • Improved usability for both beginners and experienced users

Optional Enhancements

  • Button to copy PoC request or payload
  • Ability to re-run the test directly from the detail panel
  • Toggle between raw tool output and interpreted view
  • Tagging or labeling system for findings (e.g., confirmed, false positive, needs review)

Summary

This feature would transform CyberStrike from a results viewer into an interactive vulnerability analysis workspace, where each finding can be explored, validated, and reproduced directly from the UI.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions