-This structure facilitates easy identification and routing of data based on geographic location, port, host, and data type.
+## REST API Documentation
-### User Interface
+### `GET /api/hosts/search`
-A web-based **User Interface** is available for visualizing scan results and interacting with the data.
+- **Description**: Search for hosts based on query parameters.
+- **Query Parameters**:
+ - `filter` (optional, string): A JSON-encoded MongoDB-style query object used to filter hosts. The server applies this object directly as a MongoDB $match stage.
+ - `limit` (optional, integer): Maximum number of hosts to return. Defaults to 50. Minimum/invalid values default to 50. Maximum allowed value is 500.
+ - `page_token` (optional, string): Opaque pagination token returned from a previous response next_page_token. Pass this token to retrieve the next page of results.
-> **Note**: The user interface is in early development stages and requires manual startup.
+### `GET /api/facets`
-## Considerations
+- **Description**: Retrieve available facets for filtering search results.
+- **Query Parameters**:
+ - `filter` (optional, string): A JSON-encoded MongoDB-style query object to restrict the aggregation to a subset of hosts.
-1. **Network Capacity**: High scanning rates set in ZMap may consume significant network bandwidth, potentially causing other services to experience latency or connectivity issues.
-2. **Process Resilience**: Current processes do not automatically resume after a crash. If a service like the Banner Grabber fails, it will not pick up where it left off upon restarting. Enhancements to address this limitation are planned for future releases.
+## Acknowledgements
-## Future Enhancements
+We would like to thank the open-source community for their contributions and support in developing Rigour.
-- **ISP/Organization Mapping**: Incorporate mapping of IP addresses to Internet Service Providers or organizations to provide more context.
-- **DNS Mapping**: Implement DNS resolution to associate hostnames with IP addresses.
-- **Campaign Configurability**: Introduce configurable scanning campaigns, allowing users to specify ports, protocols, and data types to capture.
+Special thanks to the creators of [Fingerprintx](https://github.com/praetorian-inc/fingerprintx) and [Naabu](https://github.com/projectdiscovery/naabu) for their invaluable tools and resources.
diff --git a/docker-compose.override.yml b/docker-compose.override.yml
new file mode 100644
index 0000000..48c2e5a
--- /dev/null
+++ b/docker-compose.override.yml
@@ -0,0 +1,85 @@
+services:
+ # ============================================
+ # Kafka
+ # ============================================
+
+ zookeeper:
+ image: confluentinc/cp-zookeeper:7.3.1
+ container_name: zookeeper
+ environment:
+ ZOOKEEPER_CLIENT_PORT: 2181
+ ZOOKEEPER_TICK_TIME: 2000
+ ports:
+ - "2181:2181"
+ networks:
+ - rigour-network
+
+ kafka:
+ image: confluentinc/cp-kafka:7.3.1
+ container_name: kafka
+ depends_on:
+ - zookeeper
+ ports:
+ - "9092:9092"
+ - "29092:29092"
+ environment:
+ KAFKA_BROKER_ID: 1
+ KAFKA_ZOOKEEPER_CONNECT: zookeeper:2181
+ KAFKA_ADVERTISED_LISTENERS: PLAINTEXT://kafka:9092,PLAINTEXT_HOST://localhost:29092
+ KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: PLAINTEXT:PLAINTEXT,PLAINTEXT_HOST:PLAINTEXT
+ KAFKA_INTER_BROKER_LISTENER_NAME: PLAINTEXT
+ KAFKA_OFFSETS_TOPIC_REPLICATION_FACTOR: 1
+ networks:
+ - rigour-network
+ healthcheck:
+ test: ["CMD", "bash", "-lc", "kafka-topics --bootstrap-server kafka:9092 --list >/dev/null 2>&1"]
+ interval: 10s
+ timeout: 5s
+ retries: 12
+ start_period: 20s
+
+ # kafka-ui:
+ # image: provectuslabs/kafka-ui:latest
+ # container_name: kafka-ui
+ # ports:
+ # - "9000:8080"
+ # environment:
+ # KAFKA_CLUSTERS_0_NAME: local
+ # KAFKA_CLUSTERS_0_BOOTSTRAPSERVERS: kafka:9092
+ # KAFKA_CLUSTERS_0_ZOOKEEPER: disabled
+ # networks:
+ # - rigour-network
+
+ # ============================================
+ # MongoDB
+ # ============================================
+
+ mongo:
+ image: mongo:latest
+ container_name: mongo
+ ports:
+ - "27017:27017"
+ volumes:
+ - mongo-data:/data/db
+ networks:
+ - rigour-network
+
+ # ============================================
+ # GeoIP Data Puller
+ # ============================================
+
+ geoipupdate:
+ container_name: geoipupdate
+ image: ghcr.io/maxmind/geoipupdate
+ restart: unless-stopped
+ environment:
+ - GEOIPUPDATE_ACCOUNT_ID=${MAXMIND_ACCOUNT_ID}
+ - GEOIPUPDATE_LICENSE_KEY=${MAXMIND_LICENSE_KEY}
+ - 'GEOIPUPDATE_EDITION_IDS=GeoLite2-ASN GeoLite2-City'
+ - GEOIPUPDATE_FREQUENCY=72
+ volumes:
+ - 'geoipupdate_data:/usr/share/GeoIP'
+
+volumes:
+ mongo-data:
+ geoipupdate_data:
diff --git a/docker-compose.yml b/docker-compose.yml
index 3af29e4..d5a38f7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,170 +1,77 @@
services:
- port-scanner:
+ crawler:
build:
- context: .
- dockerfile: rigour/ports/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- environment:
- PORTS: "80,443,22,21,25565,27017,143,6379"
- NETWORKS: "10.0.0.0/8 192.168.0.0/16"
+ context: ./rigour
+ dockerfile: Dockerfile.crawler
+ container_name: rigour-crawler
depends_on:
- rabbitmq:
+ kafka:
condition: service_healthy
-
- banner-scanner-http-80:
- build:
- context: .
- dockerfile: rigour/banners/Dockerfile
+ command:
+ - "${CRAWLER_CIDR:-0.0.0.0/0}"
+ - "--kafka-brokers"
+ - "kafka:9092"
+ - "--top-ports"
+ - "${CRAWLER_DISCOVERY_TOP_PORTS:-1000}"
+ networks:
+ - rigour-network
restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: http
- PORT: 80
- depends_on:
- rabbitmq:
- condition: service_healthy
- banner-scanner-http-443:
+ persistence:
build:
- context: .
- dockerfile: rigour/banners/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: http
- PORT: 443
+ context: ./rigour
+ dockerfile: Dockerfile.persistence
+ container_name: rigour-persistence
depends_on:
- rabbitmq:
+ kafka:
condition: service_healthy
-
- banner-scanner-ssh-22:
- build:
- context: .
- dockerfile: rigour/banners/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: ssh
- PORT: 22
- depends_on:
- rabbitmq:
+ mongo:
+ condition: service_started
+ geoipupdate:
condition: service_healthy
-
- banner-scanner-ftp-21:
- build:
- context: .
- dockerfile: rigour/banners/Dockerfile
+ command:
+ - "--brokers"
+ - "kafka:9092"
+ - "--mongo-uri"
+ - "mongodb://mongo:27017"
+ - "--geoip-path"
+ - "/data/geoip"
+ volumes:
+ - geoipupdate_data:/data/geoip
+ networks:
+ - rigour-network
restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: ftp
- PORT: 21
- depends_on:
- rabbitmq:
- condition: service_healthy
- banner-scanner-imap-143:
+ api:
build:
- context: .
- dockerfile: rigour/banners/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: imap
- PORT: 143
+ context: ./rigour
+ dockerfile: Dockerfile.api
+ container_name: rigour-api
+ ports:
+ - "8080:8080"
+ command:
+ - "--mongo-uri"
+ - "mongodb://mongo:27017"
depends_on:
- rabbitmq:
- condition: service_healthy
-
- banner-scanner-redis-6379:
- build:
- context: .
- dockerfile: rigour/banners/Dockerfile
+ - mongo
+ networks:
+ - rigour-network
restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: redis
- PORT: 6379
- depends_on:
- rabbitmq:
- condition: service_healthy
- banner-scanner-mongodb-27017:
+ ui:
build:
- context: .
- dockerfile: rigour/banners/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- environment:
- SERVICE: mongodb
- PORT: 27017
+ context: ./rigour-ui
+ container_name: rigour-ui
depends_on:
- rabbitmq:
- condition: service_healthy
-
- banner-scanner-jarm-443:
- build:
- context: .
- dockerfile: rigour/banners/Dockerfile
- restart: unless-stopped
- network_mode: "host"
+ - api
+ ports:
+ - "3000:3000"
environment:
- SERVICE: jarm
- PORT: 443
- depends_on:
- rabbitmq:
- condition: service_healthy
-
- addon-minecraft-scanner:
- build:
- context: .
- dockerfile: rigour/addons/minecraft/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- depends_on:
- rabbitmq:
- condition: service_healthy
-
- vuln-scanner:
- build:
- context: .
- dockerfile: rigour/vuln/Dockerfile
- restart: unless-stopped
- network_mode: "host"
- depends_on:
- rabbitmq:
- condition: service_healthy
-
- api:
- build:
- context: .
- dockerfile: rigour/api/Dockerfile
+ - NEXT_PUBLIC_API_BASE_URL=http://api:8080
+ networks:
+ - rigour-network
restart: unless-stopped
- network_mode: "host"
- depends_on:
- rabbitmq:
- condition: service_healthy
- mongodb:
- image: mongo
- restart: always
- ports:
- - "27017:27017"
- healthcheck:
- test: ["CMD", "mongosh", "--eval", "db.adminCommand('ping')"]
- interval: 10s
- timeout: 5s
- retries: 5
-
- rabbitmq:
- image: rabbitmq:3-management
- restart: unless-stopped
- ports:
- - "5672:5672"
- - "15672:15672"
- healthcheck:
- test: ["CMD", "rabbitmq-diagnostics", "-q", "ping"]
- interval: 10s
- timeout: 5s
- retries: 5
+networks:
+ rigour-network:
+ driver: bridge
diff --git a/docs/MAXMIND_SETUP.md b/docs/MAXMIND_SETUP.md
new file mode 100644
index 0000000..1ca2f26
--- /dev/null
+++ b/docs/MAXMIND_SETUP.md
@@ -0,0 +1,33 @@
+# Get MaxMind License Key
+
+For GeoIP and ASN lookups, Rigour uses the MaxMind service. This service is completely free to use, but requires a license key. To obtain a MaxMind license key, follow these steps:
+
+1. **Create a MaxMind Account**:
+ - Setup a free account on the MaxMind website: [https://www.maxmind.com/en/geolite2/signup](https://www.maxmind.com/en/geolite2/signup).
+
+2. **Generate a License Key**:
+ - After logging into your MaxMind account, navigate to the "Manage License Keys" section.
+ - Click on "Create a New License Key".
+ - Provide a name for the key (e.g., "Rigour")
+ - Click Confirm to generate the key.
+
+3. **Record the License Key & Account ID**:
+ - Copy your Account ID and store it in your .env file as `MAXMIND_ACCOUNT_ID=your_account_id_here`.
+ - Copy the generated license key and store it in your .env file as `MAXMIND_LICENSE_KEY=your_license_key_here`.
+
+## Local Development
+
+If you are running Rigour locally without Docker, you will need to download the GeoIP databases manually, or use the `geoipupdate` tool provided by MaxMind.
+
+Follow these steps to set up the GeoIP databases:
+
+```shell
+# Run at the root of the rigour project
+docker run --rm \
+ -e GEOIPUPDATE_ACCOUNT_ID=YOUR_ACCOUNT_ID \
+ -e GEOIPUPDATE_LICENSE_KEY=YOUR_LICENSE_KEY \
+ -e "GEOIPUPDATE_EDITION_IDS=GeoLite2-City GeoLite2-ASN" \
+ -e GEOIPUPDATE_FREQUENCY=0 \
+ -v ./data/geoip:/usr/share/GeoIP \
+ ghcr.io/maxmind/geoipupdate
+```
diff --git a/docs/overview_diagram.png b/docs/overview_diagram.png
deleted file mode 100644
index 3fe9734..0000000
Binary files a/docs/overview_diagram.png and /dev/null differ
diff --git a/docs/ui.png b/docs/ui.png
new file mode 100644
index 0000000..6218d59
Binary files /dev/null and b/docs/ui.png differ
diff --git a/rigour-ui/.dockerignore b/rigour-ui/.dockerignore
new file mode 100644
index 0000000..fe6ed8b
--- /dev/null
+++ b/rigour-ui/.dockerignore
@@ -0,0 +1,127 @@
+# Dependencies
+node_modules
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage
+.grunt
+
+# Bower dependency directory
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons
+build/Release
+
+# Dependency directories
+jspm_packages/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variables file
+.env
+.env.test
+.env.local
+.env.production
+
+# parcel-bundler cache
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+
+# Storybook build outputs
+.out
+.storybook-out
+
+# Temporary folders
+tmp/
+temp/
+
+# Logs
+logs
+*.log
+
+# Runtime data
+pids
+*.pid
+*.seed
+
+# IDE
+.vscode
+.idea
+*.swp
+*.swo
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Git
+.git
+.gitignore
+
+# Docker
+Dockerfile*
+docker-compose*
+.dockerignore
+
+# Documentation
+README.md
+*.md
+
+# Test files
+test/
+tests/
+__tests__/
+*.test.js
+*.test.ts
+*.spec.js
+*.spec.ts
+jest.config.js
diff --git a/rigour-ui/.gitignore b/rigour-ui/.gitignore
new file mode 100644
index 0000000..5ef6a52
--- /dev/null
+++ b/rigour-ui/.gitignore
@@ -0,0 +1,41 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts
diff --git a/rigour-ui/Dockerfile b/rigour-ui/Dockerfile
new file mode 100644
index 0000000..3b07092
--- /dev/null
+++ b/rigour-ui/Dockerfile
@@ -0,0 +1,51 @@
+FROM node:25-alpine AS deps
+
+WORKDIR /app
+
+# Install dependencies based on the preferred package manager
+COPY package.json package-lock.json /app/
+RUN npm ci
+
+# Rebuild the source code only when needed
+FROM node:25-alpine AS builder
+
+WORKDIR /app
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+
+RUN npm run build
+
+# Production image, copy all the files and run next
+FROM node:25-alpine AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV production
+
+RUN addgroup --system --gid 1001 nodejs
+RUN adduser --system --uid 1001 nextjs
+
+COPY --from=builder /app/public ./public
+
+############
+# Permissions to write files when executing entrypoint
+RUN chown -R nextjs:nodejs /app
+
+# Handle Entrypoint
+COPY --from=builder --chown=nextjs:nodejs /app/entrypoint.sh ./entrypoint.sh
+RUN chmod +x ./entrypoint.sh
+ENTRYPOINT ["/app/entrypoint.sh"]
+############
+
+# Automatically leverage output traces to reduce image size
+# https://nextjs.org/docs/advanced-features/output-file-tracing
+COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
+COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
+
+USER nextjs
+
+EXPOSE 3000
+
+ENV PORT 3000
+
+CMD ["node", "server.js"]
diff --git a/rigour-ui/README.md b/rigour-ui/README.md
new file mode 100644
index 0000000..e215bc4
--- /dev/null
+++ b/rigour-ui/README.md
@@ -0,0 +1,36 @@
+This is a [Next.js](https://nextjs.org) project bootstrapped with [`create-next-app`](https://nextjs.org/docs/app/api-reference/cli/create-next-app).
+
+## Getting Started
+
+First, run the development server:
+
+```bash
+npm run dev
+# or
+yarn dev
+# or
+pnpm dev
+# or
+bun dev
+```
+
+Open [http://localhost:3000](http://localhost:3000) with your browser to see the result.
+
+You can start editing the page by modifying `app/page.tsx`. The page auto-updates as you edit the file.
+
+This project uses [`next/font`](https://nextjs.org/docs/app/building-your-application/optimizing/fonts) to automatically optimize and load [Geist](https://vercel.com/font), a new font family for Vercel.
+
+## Learn More
+
+To learn more about Next.js, take a look at the following resources:
+
+- [Next.js Documentation](https://nextjs.org/docs) - learn about Next.js features and API.
+- [Learn Next.js](https://nextjs.org/learn) - an interactive Next.js tutorial.
+
+You can check out [the Next.js GitHub repository](https://github.com/vercel/next.js) - your feedback and contributions are welcome!
+
+## Deploy on Vercel
+
+The easiest way to deploy your Next.js app is to use the [Vercel Platform](https://vercel.com/new?utm_medium=default-template&filter=next.js&utm_source=create-next-app&utm_campaign=create-next-app-readme) from the creators of Next.js.
+
+Check out our [Next.js deployment documentation](https://nextjs.org/docs/app/building-your-application/deploying) for more details.
diff --git a/rigour-ui/app/(dashboard)/host/[slug]/page.tsx b/rigour-ui/app/(dashboard)/host/[slug]/page.tsx
new file mode 100644
index 0000000..57e495d
--- /dev/null
+++ b/rigour-ui/app/(dashboard)/host/[slug]/page.tsx
@@ -0,0 +1,374 @@
+import Link from 'next/link';
+import { getHostByIP } from '../../../../lib/api';
+import { formatDate, formatDateShort } from '../../../../lib/utils';
+import { Host } from '../../../../lib/types';
+import { Card, CardContent, CardHeader } from '../../../../components/ui/card';
+import { Badge } from '../../../../components/ui/badge';
+import { Button } from '../../../../components/ui/button';
+import {
+ Globe,
+ Network,
+ Server,
+ Clock,
+ MapPin,
+ ChevronLeft,
+ ExternalLink,
+ AlertCircle,
+ CheckCircle,
+ Wifi,
+ Shield,
+} from 'lucide-react';
+
+interface Params {
+ slug: string;
+}
+
+export default async function HostDetailsPage({
+ params
+}: {
+ params: Promise
+
+ );
+ }
+
+ return (
+
+
+
+
+
+
+
+
+
+ + {error || 'Host not found'} +
+
+
+ );
+}
diff --git a/rigour-ui/app/(dashboard)/page.tsx b/rigour-ui/app/(dashboard)/page.tsx
new file mode 100644
index 0000000..e42a308
--- /dev/null
+++ b/rigour-ui/app/(dashboard)/page.tsx
@@ -0,0 +1,152 @@
+import { SearchHeader } from '../../components/SearchHeader';
+import { FacetFilters } from '../../components/FacetFilters';
+import { HostResults } from '../../components/HostResults';
+import WorldMap from '../../components/ui/world-map';
+import { searchHosts, getFacets, FacetCounts, API_BASE_URL } from '../../lib/api';
+import { Host } from '../../lib/types';
+
+interface PageProps {
+ searchParams: Promise
+ {/* Header */}
+
+
+
+
+
+ {/* Timeline Information */}
+
+
+
+
+
+
+
+
+
+ {/* Geolocation Details */}
+
+
+
+
+
+
+
+
+
+ {/* Services */}
+
+
+
+
+
+
+ {host.services.length === 0 ? (
+
+
+
+ {/* Raw Data Section */}
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {/* Host Summary */}
+
+ ID:
+ {host.id}
+
+
+
+
+
+ {/* Key Information Grid */}
+
+
+ + {host.ip} +
+{host.asn.organization}
+
+ {/* Country */}
+
+
+
+
+ {/* City */}
+
+
+ {host.asn.country}
+
+
+
+ {/* ASN */}
+
+
+ {host.location.city}
+
+
+
+ {/* Timezone */}
+
+
+ AS{host.asn.number}
+
+
+
+
+ {host.location.timezone}
+
+
+
+
+
+
+
+ First Seen
+
+ {formatDate(host.first_seen)}
++ {formatDateShort(host.first_seen)} +
+
+
+
+ Last Seen
+
+ {formatDate(host.last_seen)}
++ {formatDateShort(host.last_seen)} +
+
+
+
+
+
+
+
+ Coordinates
+
+ + {host.location.coordinates[0].toFixed(4)}, {host.location.coordinates[1].toFixed(4)} +
+ + View on Google Maps +
+
+
+ ASN Information
+
+
+
+ + Number:{' '} + AS{host.asn.number} +
++ Org:{' '} + {host.asn.organization} +
++ Country:{' '} + {host.asn.country} +
+
+
+ No services discovered
+ ) : ( +
+ {host.services.map((service, idx) => (
+
+ )}
+
+ {/* Port and Protocol */}
+
+ ))}
+
+
+
+ {/* Last Scan */}
+
+
+ {service.port}
+
+
+ {service.protocol}
+
+ {service.tls && (
+
+
+ )}
+
+
+
+
+ Last scanned: {formatDateShort(service.last_scan)}
+
+
+ {/* Service Details */}
+ {(service.https || service.http || service.ssh) && (
+
+ {service.https && (
+
+ )}
+
+
+ )}
+
+ {service.http && (
+
+
+
+
+ + Status Code: + + {service.https.statusCode} + +
++ Status: + {service.https.status} +
+ {Object.keys(service.https.responseHeaders).length > 0 && ( +
+
+ )}
+ Headers:
+
+ {Object.entries(service.https.responseHeaders).map(
+ ([key, values]) => (
+
+ + {key}:{' '} + {(values as string[]).join(', ')} +
+ ) + )} +
+
+ )}
+
+ {service.ssh && (
+
+
+
+
+ + Status Code: + + {service.http.statusCode} + +
++ Status: + {service.http.status} +
+ {Object.keys(service.http.responseHeaders).length > 0 && ( +
+
+ )}
+ Headers:
+
+ {Object.entries(service.http.responseHeaders).map(
+ ([key, values]) => (
+
+ + {key}:{' '} + {(values as string[]).join(', ')} +
+ ) + )} +
+
+ )}
+
+
+
+
+ {service.ssh.banner}
+Raw Data
+
+
+
+ {JSON.stringify(host, null, 2)}
+
+
+
+ );
+ }
+
+ return (
+
+
+ Error: {error}
+ + Make sure the API is running at {API_BASE_URL} +
+
+
+ );
+}
diff --git a/rigour-ui/app/favicon.ico b/rigour-ui/app/favicon.ico
new file mode 100644
index 0000000..718d6fe
Binary files /dev/null and b/rigour-ui/app/favicon.ico differ
diff --git a/rigour-ui/app/globals.css b/rigour-ui/app/globals.css
new file mode 100644
index 0000000..5362054
--- /dev/null
+++ b/rigour-ui/app/globals.css
@@ -0,0 +1,185 @@
+@import "tailwindcss";
+
+:root {
+ --font-size: 16px;
+ --background: #ffffff;
+ --foreground: oklch(0.145 0 0);
+ --card: #ffffff;
+ --card-foreground: oklch(0.145 0 0);
+ --popover: oklch(1 0 0);
+ --popover-foreground: oklch(0.145 0 0);
+ --primary: #030213;
+ --primary-foreground: oklch(1 0 0);
+ --secondary: oklch(0.95 0.0058 264.53);
+ --secondary-foreground: #030213;
+ --muted: #ececf0;
+ --muted-foreground: #717182;
+ --accent: #e9ebef;
+ --accent-foreground: #030213;
+ --destructive: #d4183d;
+ --destructive-foreground: #ffffff;
+ --border: rgba(0, 0, 0, 0.1);
+ --input: transparent;
+ --input-background: #f3f3f5;
+ --switch-background: #cbced4;
+ --font-weight-medium: 500;
+ --font-weight-normal: 400;
+ --ring: oklch(0.708 0 0);
+ --chart-1: oklch(0.646 0.222 41.116);
+ --chart-2: oklch(0.6 0.118 184.704);
+ --chart-3: oklch(0.398 0.07 227.392);
+ --chart-4: oklch(0.828 0.189 84.429);
+ --chart-5: oklch(0.769 0.188 70.08);
+ --radius: 0.625rem;
+ --sidebar: oklch(0.985 0 0);
+ --sidebar-foreground: oklch(0.145 0 0);
+ --sidebar-primary: #030213;
+ --sidebar-primary-foreground: oklch(0.985 0 0);
+ --sidebar-accent: oklch(0.97 0 0);
+ --sidebar-accent-foreground: oklch(0.205 0 0);
+ --sidebar-border: oklch(0.922 0 0);
+ --sidebar-ring: oklch(0.708 0 0);
+}
+
+.dark {
+ --background: oklch(0.145 0 0);
+ --foreground: oklch(0.985 0 0);
+ --card: oklch(0.145 0 0);
+ --card-foreground: oklch(0.985 0 0);
+ --popover: oklch(0.145 0 0);
+ --popover-foreground: oklch(0.985 0 0);
+ --primary: oklch(0.985 0 0);
+ --primary-foreground: oklch(0.205 0 0);
+ --secondary: oklch(0.269 0 0);
+ --secondary-foreground: oklch(0.985 0 0);
+ --muted: oklch(0.269 0 0);
+ --muted-foreground: oklch(0.85 0 0);
+ --accent: oklch(0.269 0 0);
+ --accent-foreground: oklch(0.985 0 0);
+ --destructive: oklch(0.396 0.141 25.723);
+ --destructive-foreground: oklch(0.637 0.237 25.331);
+ --border: oklch(0.4 0 0);
+ --input: oklch(0.25 0 0);
+ --ring: oklch(0.6 0 0);
+ --font-weight-medium: 500;
+ --font-weight-normal: 400;
+ --chart-1: oklch(0.488 0.243 264.376);
+ --chart-2: oklch(0.696 0.17 162.48);
+ --chart-3: oklch(0.769 0.188 70.08);
+ --chart-4: oklch(0.627 0.265 303.9);
+ --chart-5: oklch(0.645 0.246 16.439);
+ --sidebar: oklch(0.205 0 0);
+ --sidebar-foreground: oklch(0.985 0 0);
+ --sidebar-primary: oklch(0.488 0.243 264.376);
+ --sidebar-primary-foreground: oklch(0.985 0 0);
+ --sidebar-accent: oklch(0.269 0 0);
+ --sidebar-accent-foreground: oklch(0.985 0 0);
+ --sidebar-border: oklch(0.269 0 0);
+ --sidebar-ring: oklch(0.439 0 0);
+}
+
+@theme inline {
+ --color-background: var(--background);
+ --color-foreground: var(--foreground);
+ --color-card: var(--card);
+ --color-card-foreground: var(--card-foreground);
+ --color-popover: var(--popover);
+ --color-popover-foreground: var(--popover-foreground);
+ --color-primary: var(--primary);
+ --color-primary-foreground: var(--primary-foreground);
+ --color-secondary: var(--secondary);
+ --color-secondary-foreground: var(--secondary-foreground);
+ --color-muted: var(--muted);
+ --color-muted-foreground: var(--muted-foreground);
+ --color-accent: var(--accent);
+ --color-accent-foreground: var(--accent-foreground);
+ --color-destructive: var(--destructive);
+ --color-destructive-foreground: var(--destructive-foreground);
+ --color-border: var(--border);
+ --color-input: var(--input);
+ --color-input-background: var(--input-background);
+ --color-switch-background: var(--switch-background);
+ --color-ring: var(--ring);
+ --color-chart-1: var(--chart-1);
+ --color-chart-2: var(--chart-2);
+ --color-chart-3: var(--chart-3);
+ --color-chart-4: var(--chart-4);
+ --color-chart-5: var(--chart-5);
+ --radius-sm: 0px;
+ --radius-md: 0px;
+ --radius-lg: 0px;
+ --radius-xl: 0px;
+ --color-sidebar: var(--sidebar);
+ --color-sidebar-foreground: var(--sidebar-foreground);
+ --color-sidebar-primary: var(--sidebar-primary);
+ --color-sidebar-primary-foreground: var(--sidebar-primary-foreground);
+ --color-sidebar-accent: var(--sidebar-accent);
+ --color-sidebar-accent-foreground: var(--sidebar-accent-foreground);
+ --color-sidebar-border: var(--sidebar-border);
+ --color-sidebar-ring: var(--sidebar-ring);
+}
+
+@layer base {
+ * {
+ @apply border-border outline-ring/50;
+ }
+
+ body {
+ @apply bg-background text-foreground;
+ -webkit-font-smoothing: antialiased;
+ -moz-osx-font-smoothing: grayscale;
+ }
+}
+
+/**
+ * Base typography. This is not applied to elements which have an ancestor with a Tailwind text class.
+ */
+@layer base {
+ :where(:not(:has([class*=' text-']), :not(:has([class^='text-'])))) {
+ h1 {
+ font-size: var(--text-2xl);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ h2 {
+ font-size: var(--text-xl);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ h3 {
+ font-size: var(--text-lg);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ h4 {
+ font-size: var(--text-base);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ label {
+ font-size: var(--text-base);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ button {
+ font-size: var(--text-base);
+ font-weight: var(--font-weight-medium);
+ line-height: 1.5;
+ }
+
+ input {
+ font-size: var(--text-base);
+ font-weight: var(--font-weight-normal);
+ line-height: 1.5;
+ }
+ }
+}
+
+html {
+ font-size: var(--font-size);
+}
diff --git a/rigour-ui/app/layout.tsx b/rigour-ui/app/layout.tsx
new file mode 100644
index 0000000..c30bf72
--- /dev/null
+++ b/rigour-ui/app/layout.tsx
@@ -0,0 +1,34 @@
+import type { Metadata } from "next";
+import { Geist, Geist_Mono } from "next/font/google";
+import "./globals.css";
+
+const geistSans = Geist({
+ variable: "--font-geist-sans",
+ subsets: ["latin"],
+});
+
+const geistMono = Geist_Mono({
+ variable: "--font-geist-mono",
+ subsets: ["latin"],
+});
+
+export const metadata: Metadata = {
+ title: "Rigour",
+ description: "Internet-Connected Device Intelligence Platform",
+};
+
+export default function RootLayout({
+ children,
+}: Readonly<{
+ children: React.ReactNode;
+}>) {
+ return (
+
+
+ {children}
+
+
+ );
+}
diff --git a/rigour-ui/components.json b/rigour-ui/components.json
new file mode 100644
index 0000000..ce89abd
--- /dev/null
+++ b/rigour-ui/components.json
@@ -0,0 +1,24 @@
+{
+ "$schema": "https://ui.shadcn.com/schema.json",
+ "style": "new-york",
+ "rsc": true,
+ "tsx": true,
+ "tailwind": {
+ "config": "",
+ "css": "app/globals.css",
+ "baseColor": "neutral",
+ "cssVariables": true,
+ "prefix": ""
+ },
+ "iconLibrary": "lucide",
+ "aliases": {
+ "components": "@/components",
+ "utils": "@/lib/utils",
+ "ui": "@/components/ui",
+ "lib": "@/lib",
+ "hooks": "@/hooks"
+ },
+ "registries": {
+ "@aceternity": "https://ui.aceternity.com/registry/{name}.json"
+ }
+}
diff --git a/rigour-ui/components/FacetFilters.tsx b/rigour-ui/components/FacetFilters.tsx
new file mode 100644
index 0000000..5a40a08
--- /dev/null
+++ b/rigour-ui/components/FacetFilters.tsx
@@ -0,0 +1,256 @@
+'use client';
+
+import { useState, useTransition } from 'react';
+import { Card, CardContent, CardHeader, CardTitle } from './ui/card';
+import { Checkbox } from './ui/checkbox';
+import { Label } from './ui/label';
+import { ScrollArea } from './ui/scroll-area';
+import { Button } from './ui/button';
+import { ChevronDown, ChevronRight, Loader2 } from 'lucide-react';
+import { useRouter } from 'next/navigation';
+import { FacetCounts } from '../lib/api';
+
+interface FacetFiltersProps {
+ facets: FacetCounts;
+ selectedCountries: string[];
+ selectedASNs: string[];
+ selectedServices: string[];
+}
+
+export function FacetFilters({
+ facets,
+ selectedCountries: initialCountries,
+ selectedASNs: initialASNs,
+ selectedServices: initialServices,
+}: FacetFiltersProps) {
+ const [expandedSections, setExpandedSections] = useState({
+ countries: true,
+ asns: true,
+ services: true,
+ });
+ // Local state for selections before applying
+ const [tempCountries, setTempCountries] = useState(initialCountries);
+ const [tempASNs, setTempASNs] = useState(initialASNs);
+ const [tempServices, setTempServices] = useState(initialServices);
+
+ const [isPending, startTransition] = useTransition();
+ const router = useRouter();
+
+ const toggleSection = (section: keyof typeof expandedSections) => {
+ setExpandedSections(prev => ({
+ ...prev,
+ [section]: !prev[section],
+ }));
+ };
+
+ const applyFilters = () => {
+ startTransition(() => {
+ const params = new URLSearchParams();
+
+ if (tempCountries.length > 0) {
+ params.append('countries', tempCountries.join(','));
+ }
+
+ if (tempASNs.length > 0) {
+ params.append('asns', tempASNs.join(','));
+ }
+
+ if (tempServices.length > 0) {
+ params.append('services', tempServices.join(','));
+ }
+
+ router.push(`?${params.toString()}`);
+ });
+ };
+
+ const handleCountryToggle = (country: string) => {
+ setTempCountries(prev =>
+ prev.includes(country)
+ ? prev.filter(c => c !== country)
+ : [...prev, country]
+ );
+ };
+
+ const handleASNToggle = (asn: string) => {
+ setTempASNs(prev =>
+ prev.includes(asn)
+ ? prev.filter(a => a !== asn)
+ : [...prev, asn]
+ );
+ };
+
+ const handleServiceToggle = (service: string) => {
+ setTempServices(prev =>
+ prev.includes(service)
+ ? prev.filter(s => s !== service)
+ : [...prev, service]
+ );
+ };
+
+ // Check if there are unsaved changes
+ const hasChanges =
+ JSON.stringify(tempCountries) !== JSON.stringify(initialCountries) ||
+ JSON.stringify(tempASNs) !== JSON.stringify(initialASNs) ||
+ JSON.stringify(tempServices) !== JSON.stringify(initialServices);
+
+ return (
+
+
+
+
+
+
+ {hosts.length > 0 &&
+
+
+ {isPending && (
+
+
+ toggleSection('countries')}>
+ Country
+ {expandedSections.countries ? (
+
+
+ {expandedSections.countries && (
+
+
+
+
+ )}
+
+
+
+
+ toggleSection('asns')}>
+ ASN
+ {expandedSections.asns ? (
+
+
+ {expandedSections.asns && (
+
+
+
+
+ )}
+
+
+
+
+ toggleSection('services')}>
+ Service
+ {expandedSections.services ? (
+
+
+ {expandedSections.services && (
+
+
+
+
+ )}
+
+
+ {hasChanges && (
+
+ )}
+
+ );
+}
diff --git a/rigour-ui/components/HostCard.tsx b/rigour-ui/components/HostCard.tsx
new file mode 100644
index 0000000..8b23f38
--- /dev/null
+++ b/rigour-ui/components/HostCard.tsx
@@ -0,0 +1,104 @@
+import { Host } from '../lib/types';
+import { Card, CardContent, CardHeader } from './ui/card';
+import { Badge } from './ui/badge';
+import { Globe, Network, Server, Clock, MapPin } from 'lucide-react';
+
+interface HostCardProps {
+ host: Host;
+ onClick?: () => void;
+}
+
+export function HostCard({ host, onClick }: HostCardProps) {
+ const formatDate = (dateString: string) => {
+ return new Date(dateString).toISOString().split('T')[0];
+ };
+
+ return (
+
+
+ )}
+
+
+
+ {facets.countries.map((country) => (
+
+
+
+ ))}
+
+ handleCountryToggle(country.code)}
+ className="flex-shrink-0"
+ />
+
+
+
+ {country.count}
+
+
+ {facets.asns.map((asn) => {
+ const asnString = `AS${asn.code}`;
+ return (
+
+
+
+ );
+ })}
+
+ handleASNToggle(asnString)}
+ className="flex-shrink-0"
+ />
+
+
+
+ {asn.count}
+
+
+ {Object.entries(facets.services || {}).map(([service, count]) => (
+
+
+
+ ))}
+
+ handleServiceToggle(service)}
+ className="flex-shrink-0"
+ />
+
+
+
+ {count}
+
+
+
+
+
+ {host.ip}
+
+
+
+
+
+
+
+
+
+
+ {host.asn.organization}
+
+
+
+ {host.services.some(s => s.https || s.http || s.ssh) && (
+
+
+
+ {host.services.map((service, idx) => (
+
+
+
+ {service.port}
+
+ {service.protocol}
+ {service.tls && (
+
+ TLS
+
+ )}
+ {service.transport}
+
+ ))}
+
+
+ )}
+ Details
+
+ {host.services.map((service, idx) => {
+ if (service.https) {
+ return (
+
+
+ HTTPS: {service.https.statusCode} {service.https.status}
+
+ );
+ }
+ if (service.http) {
+ return (
+
+ HTTP: {service.http.statusCode} {service.http.status}
+
+ );
+ }
+ if (service.ssh) {
+ return (
+
+ SSH: {service.ssh.banner}
+
+ );
+ }
+ return null;
+ })}
+
+
+ );
+}
diff --git a/rigour-ui/components/SearchHeader.tsx b/rigour-ui/components/SearchHeader.tsx
new file mode 100644
index 0000000..151a3c6
--- /dev/null
+++ b/rigour-ui/components/SearchHeader.tsx
@@ -0,0 +1,99 @@
+'use client';
+
+import { Search, Github } from 'lucide-react';
+import { Input } from './ui/input';
+import { Button } from './ui/button';
+import { useRouter } from 'next/navigation';
+import { useState } from 'react';
+
+interface SearchHeaderProps {
+ initialQuery?: string;
+}
+
+export function SearchHeader({ initialQuery = '' }: SearchHeaderProps) {
+ const [query, setQuery] = useState(initialQuery);
+ const router = useRouter();
+
+ // Parse query syntax like "field: value" into filter parameters
+ const parseQuery = (queryString: string): Record
+
+
+ {hosts.length === 0 ? (
+
+ Showing {startIndex + 1}-{Math.min(endIndex, hosts.length)} of{' '}
+ {hosts.length} results
+ {totalCount !== hosts.length && (
+
+ ({totalCount} total hosts)
+
+ )}
+
+
+
+ ) : (
+ <>
+ No hosts found matching your criteria.
+
+ {paginatedHosts.map((host) => (
+
+
+
+ {totalPages > 1 && (
+
+
+
+ {getPageNumbers().map((page, index) => (
+ typeof page === 'number' ? (
+
+ ) : (
+
+ {page}
+
+ )
+ ))}
+
+
+
+ )}
+
+ )}
+
+
+
+ + RIGOUR +
+ +
+
+
+ + Internet-Connected Device Intelligence Platform +
+
+ Query using field syntax: field: value (e.g., services.protocol: ssh)
+
+
+
+
+
+
+ }`})
+
+
+ );
+}
diff --git a/rigour-ui/entrypoint.sh b/rigour-ui/entrypoint.sh
new file mode 100644
index 0000000..d846c55
--- /dev/null
+++ b/rigour-ui/entrypoint.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+# Replace placeholder in built files with the actual environment variable value
+find /app/.next/ -type f -name '*.js' -exec sed -i "s|NEXT_PUBLIC_API_BASE_URL_PLACEHOLDER|${NEXT_PUBLIC_API_BASE_URL}|g" {} +
+
+# Start the Next.js application
+exec "$@"
diff --git a/rigour-ui/eslint.config.mjs b/rigour-ui/eslint.config.mjs
new file mode 100644
index 0000000..05e726d
--- /dev/null
+++ b/rigour-ui/eslint.config.mjs
@@ -0,0 +1,18 @@
+import { defineConfig, globalIgnores } from "eslint/config";
+import nextVitals from "eslint-config-next/core-web-vitals";
+import nextTs from "eslint-config-next/typescript";
+
+const eslintConfig = defineConfig([
+ ...nextVitals,
+ ...nextTs,
+ // Override default ignores of eslint-config-next.
+ globalIgnores([
+ // Default ignores of eslint-config-next:
+ ".next/**",
+ "out/**",
+ "build/**",
+ "next-env.d.ts",
+ ]),
+]);
+
+export default eslintConfig;
diff --git a/rigour-ui/lib/api.ts b/rigour-ui/lib/api.ts
new file mode 100644
index 0000000..1b4d7eb
--- /dev/null
+++ b/rigour-ui/lib/api.ts
@@ -0,0 +1,117 @@
+import { Host } from './types';
+
+export const API_BASE_URL = process.env.NEXT_PUBLIC_API_BASE_URL || 'http://localhost:8080';
+
+export interface CountryFacet {
+ code: string;
+ name: string;
+ count: number;
+}
+
+export interface ASNFacet {
+ code: number;
+ name: string;
+ count: number;
+}
+
+export interface SearchResponse {
+ hosts: Host[];
+ facets?: FacetCounts;
+ next_page_token?: string;
+}
+
+export interface FacetCounts {
+ services: Record- \r\n
+/* S: 1234 OK