Fallback Web Shell

后端已启动，但未构建 React 前端

Backend is running — React UI not built yet

正在提供内置 fallback 页，因为未找到 frontend/dist/index.html。 API 可用；完整图形界面需要先构建前端再重启 vulnclaw web。

This built-in fallback is shown because frontend/dist/index.html is missing. The API is up; build the React app and restart vulnclaw web for the full UI.

需要构建 frontend/dist Need frontend/dist build

授权优先 Authorization first

输入目标，确认边界，再开始安全检查

Set a target, confirm scope, then start checks

完整 Web 界面提供扫描向导、风险结果、报告、安全边界、历史与设置。 若仍看到此页，说明服务回退到了 vulnclaw/web/static，而不是 Vite 构建产物。

The full UI covers scan launch, findings, reports, scope, history, and settings. Seeing this page means the server is using vulnclaw/web/static, not the Vite build output.

检查后端健康状态 Check API health 查看公开配置 View public config
进入完整界面 Get the full UI

构建 React 前端（必做）

Build the React frontend (required)

PyPI wheel 不包含 React 源码或构建产物；请先克隆仓库并使用 pip install -e '.[web]' 安装。

The PyPI wheel does not include the React source or build. Clone the repository and install with pip install -e '.[web]' first.

需要 Node.js 18+（含 npm）。在仓库根目录执行：

Requires Node.js 18+ (with npm). From the repository root: 

# 0. 获取源码并安装 Web 依赖
git clone https://github.com/Netw0rkNoob/VulnClaw.git
cd VulnClaw
pip install -e '.[web]'

# 1. 安装依赖并构建
cd frontend
npm install
npm run build

# 2. 确认产物
# 应存在：<repo>/frontend/dist/index.html

# 3. 重启 Web（另开终端，仓库根目录）
# Ctrl+C 停掉当前 vulnclaw web，然后：
vulnclaw web
# 或：python -m vulnclaw.cli.main web

# 4. 用终端打印的地址打开浏览器（含 ?token= 时完整复制）
# 0. Get the source and install Web dependencies
git clone https://github.com/Netw0rkNoob/VulnClaw.git
cd VulnClaw
pip install -e '.[web]'

# 1. Install deps and build
cd frontend
npm install
npm run build

# 2. Confirm output
# Expect: <repo>/frontend/dist/index.html

# 3. Restart the web server (repo root, second terminal)
# Stop the current vulnclaw web process (Ctrl+C), then:
vulnclaw web
# or: python -m vulnclaw.cli.main web

# 4. Open the printed URL in your browser (copy full ?token= if shown)

开发热更新可用 cd frontend && npm run dev（通常 :5173）， 但生产路径仍是 vulnclaw web 静态托管 frontend/dist。

For live reload use cd frontend && npm run dev (usually :5173). The production path remains vulnclaw web serving frontend/dist.

排查 Troubleshooting

仍看到 fallback？

Still on fallback?

  1. 1 确认 frontend/dist/index.html 在磁盘上存在且非空。 Confirm frontend/dist/index.html exists and is non-empty.
  2. 2 确认在含 frontend/ 的仓库根启动了 vulnclaw web。 Start vulnclaw web from the repo that contains frontend/.
  3. 3 构建后完全重启 Web 进程，再硬刷新浏览器（Ctrl+F5）。 Fully restart the web process after building, then hard-refresh the browser.
  4. 4 若 npm run build 失败，先看 Node 版本与终端错误输出。 If npm run build fails, check Node version and the terminal error.
ToC 主流程 Main flow

构建成功后

After a successful build

  1. 1 输入明确授权的 URL、域名或 IP。 Enter an authorized URL, domain, or IP.
  2. 2 选择快速 / 标准 / 深度 / 循环模式。 Choose Quick / Standard / Deep / Loop mode.
  3. 3 确认端口、主机、路径与动作边界。 Confirm port, host, path, and action boundaries.
  4. 4 查看风险结果并导出报告。 Review findings and export reports.

建议自测至少限定主机、端口或路径之一。

For self-tests, set at least one of host, port, or path scope.

文档：仓库 README「Web UI」小节。内置页位置： vulnclaw/web/static/index.html。 构建产物：frontend/dist/index.html。