Updating log messages.

Author: Macmod

bloodhound/caenrollment.go

@@ -291,7 +291,7 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 			// No NTLM challenge offered
 			endpoint.Status = builder.CAScanNotVulnerableNoNtlmChallenge
 			if p.log != nil {
-				p.log <- fmt.Sprintf("ℹ️  No NTLM challenge at: %s", urlStr)
+				p.log <- fmt.Sprintf("🫠 [yellow]No NTLM challenge at:[-] %s", urlStr)
 			}
 		} else if useBadChannelBinding != nil && *useBadChannelBinding && parsedURL.Scheme == "https" {
 			// 401 with bad channel bindings on HTTPS means channel binding is required (not vulnerable)
@@ -300,13 +300,13 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 			// A proper implementation would require more sophisticated channel binding testing.
 			endpoint.Status = builder.CAScanNotVulnerableNtlmChannelBindingRequired
 			if p.log != nil {
-				p.log <- fmt.Sprintf("ℹ️  Channel binding required at: %s", urlStr)
+				p.log <- fmt.Sprintf("ℹ🫠 [yellow]Channel binding required at:[-] %s", urlStr)
 			}
 		} else {
 			// Authentication failed but NTLM was offered
 			endpoint.Status = builder.CAScanError
 			if p.log != nil {
-				p.log <- fmt.Sprintf("[yellow]⚠  NTLM authentication failed at:[-] %s", urlStr)
+				p.log <- fmt.Sprintf("🫠 [yellow]NTLM authentication failed at:[-] %s", urlStr)
 			}
 		}
 		return builder.CAEnrollmentEndpointAPIResult{
@@ -320,7 +320,7 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 		// Path is forbidden (e.g., SSL required for HTTP endpoint)
 		endpoint.Status = builder.CAScanNotVulnerablePathForbidden
 		if p.log != nil {
-			p.log <- fmt.Sprintf("ℹ️  Path forbidden: %s", urlStr)
+			p.log <- fmt.Sprintf("🫠 [yellow]Path forbidden:[-] %s", urlStr)
 		}
 		return builder.CAEnrollmentEndpointAPIResult{
 			APIResult: builder.APIResult{
@@ -333,7 +333,7 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 		// Path doesn't exist
 		endpoint.Status = builder.CAScanNotVulnerablePathNotFound
 		if p.log != nil {
-			p.log <- fmt.Sprintf("ℹ️  Path not found: %s", urlStr)
+			p.log <- fmt.Sprintf("🫠 [yellow]Path not found:[-] %s", urlStr)
 		}
 		return builder.CAEnrollmentEndpointAPIResult{
 			APIResult: builder.APIResult{
@@ -349,7 +349,7 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 		if parsedURL.Scheme == "https" {
 			endpoint.Status = builder.CAScanNotVulnerableEpaMisconfigured
 			if p.log != nil {
-				p.log <- fmt.Sprintf("[yellow]⚠  Possible EPA misconfiguration at:[-] %s", urlStr)
+				p.log <- fmt.Sprintf("🫠 [yellow]Possible EPA misconfiguration at:[-] %s", urlStr)
 			}
 		} else {
 			endpoint.Status = builder.CAScanError
@@ -368,7 +368,7 @@ func (p *CAEnrollmentProcessor) getNtlmEndpoint(
 		// Other status codes
 		endpoint.Status = builder.CAScanError
 		if p.log != nil {
-			p.log <- fmt.Sprintf("[yellow]⚠  Unexpected status at:[-] %s (status: %d)", urlStr, resp.StatusCode)
+			p.log <- fmt.Sprintf("🫠 [yellow]Unexpected status at:[-] %s (status: %d)", urlStr, resp.StatusCode)
 		}
 		return builder.CAEnrollmentEndpointAPIResult{
 			APIResult: builder.APIResult{

bloodhound/remote_enterpriseca.go

@@ -60,6 +60,7 @@ func (rc *RemoteCollector) collectHttpEnrollmentEndpoints(ctx context.Context, c
 // CollectRemoteEnterpriseCAWithContext wraps CollectRemoteEnterpriseCA with hard timeout enforcement.
 func (rc *RemoteCollector) CollectRemoteEnterpriseCAWithContext(ctx context.Context, target EnterpriseCACollectionTarget) EnterpriseCARemoteCollectionResult {
 	resultCh := make(chan EnterpriseCARemoteCollectionResult, 1)
+	startTime := time.Now()
 
 	go func() {
 		resultCh <- rc.CollectRemoteEnterpriseCA(target)
@@ -69,7 +70,7 @@ func (rc *RemoteCollector) CollectRemoteEnterpriseCAWithContext(ctx context.Cont
 	case result := <-resultCh:
 		return result
 	case <-ctx.Done():
-		rc.logger.Log1("[yellow](%s) CA aborted: %v[-]", target.DNSHostName, ctx.Err())
+		rc.logger.Log1("❌ [red][%s[] Aborted after %v (timeout hit?)[-]", target.DNSHostName, time.Since(startTime).Round(time.Millisecond))
 		return EnterpriseCARemoteCollectionResult{}
 	}
 }
@@ -116,7 +117,7 @@ func (rc *RemoteCollector) CollectRemoteEnterpriseCA(target EnterpriseCACollecti
 	// Log method times summary
 	if len(methodTimes) > 0 {
 		totalTime := time.Since(totalStart)
-		rc.logger.Log2("(%s) Total %s: %s", target.DNSHostName, totalTime.Round(time.Millisecond), formatMethodTimes(methodTimes))
+		rc.logger.Log2("📋 [%s[] Collected in %s: %s", target.DNSHostName, totalTime.Round(time.Millisecond), formatMethodTimes(methodTimes))
 	}
 
 	return result