{% extends "base.html" %} {% block extra_head %} {% endblock %} {% block title %}Settings{% endblock %} {% block content %}

Project Settings

{% if current_user_role.as_str() == "admin" %}

User Management

Create Player Account

Create read-only accounts for team members to monitor reconnaissance data

Minimum 3 characters, alphanumeric

Current Player Accounts

{% if player_users.len() > 0 %} {% for user in player_users %}
{% endfor %} {% else %}
No player accounts created yet
{% endif %}
{% endif %}

Concurrency Limits

{% if current_user_role.as_str() == "admin" %}
Controls simultaneous subprocess count. Lower per-type limits to preserve client network bandwidth — avoid saturating the target /24 gateway. The only scanner-side hard limit is the OS ephemeral port pool: {{ ephemeral_ports }} ports available — approach this and outbound connections will stall.
process ceiling
≤100 safe 101–200 caution 201+ danger

Hard ceiling on total concurrent subprocesses. Set above the sum of all per-type limits below.

suggested: 100
~300 SYN/scan
≤10 safe 11–20 caution 21+ danger

nmap --privileged -p- -T4 per host. Raw SYN probes (~300 in-flight). No port pool cost — client network bandwidth is the concern.

suggested: 5
~30 TCP/scan
≤15 safe 16–25 caution 26+ danger

nmap -sV -sC on open ports only (T3 default). Full TCP connects for banner grab — consumes ephemeral ports. Scripts may linger 1800 s.

suggested: 10
~150 SYN/sweep
≤5 safe 6–10 caution 11+ danger

nmap --privileged 14-port sweep on /24 (254 hosts). Raw SYN — no port pool cost. Each concurrent sweep adds ~150 SYN probes on the client network.

suggested: 1
~400 SYN/sweep
≤2 safe 3–4 caution 5+ danger

nmap --privileged -p- on entire /24. Raw SYN, most sustained scan — 2 concurrent can saturate a slower client uplink for hours.

suggested: 1
~3 TCP/probe
≤50 safe 51–100 caution 101+ danger

curl per port (--max-time 15, -L --max-redirs 3). Full TCP — consumes ephemeral ports (~3 per probe). Minimal bandwidth impact on client network.

suggested: 10

Minimum delay (ms) enforced between successive subprocess launches, across ALL task types. Spreads out bursts (e.g. when masscan discovery fires hooks for many hosts at once) so CPU/RAM/network don't spike all at once. Set to 0 to turn this setting completely off.

suggested: 2000
Client network load: —
Scanner port pool: —
{% else %}
Global Cap {{ concurrency_config.global }} process ceiling
Nmap Full TCP {{ concurrency_config.nmap_full_tcp }} ~300 SYN/scan
Nmap Service {{ concurrency_config.nmap_service }} ~30 TCP/scan
Subnet Phase 1 {{ concurrency_config.subnet_phase1 }} ~150 SYN/sweep
Subnet Phase 2 {{ concurrency_config.subnet_phase2 }} ~400 SYN/sweep
HTTP Discovery {{ concurrency_config.http_discovery }} ~3 TCP/probe
Launch Stagger {{ concurrency_config.launch_stagger_ms }}ms
{% endif %}

Blacklist Management

Add to Blacklist

Exclude IP addresses or ranges from all scanning operations

Individual IP or CIDR notation range to exclude from scanning

Current Blacklist

Loading blacklist entries...
{% endblock %}