Update app.py

app.py

@@ -1080,48 +1080,48 @@ def chat():
     return jsonify({"status" : True, "data" : result})
 
 FAKE_AI_RESPONSES = [
-    """🤖 Pentest Report Summary:
-- 🔍 NMap detected Apache (80) and nginx (443) with port 22 closed.
-- 💉 SQL Injection vectors like `' OR 1=1--` were successful. Suggest prepared statements!
-- 🐍 XSS vulnerability found. Code: `<script>alert('XSS')</script>` — lacks sanitization.
-- 🕵️‍♂️ Admin brute force success: SSH login with `admin:123456`.
-- 🔓 IP leaked via WebRTC: `93.184.216.34`.
-- 🛡 Recommendation: Apply rate limits, update services, add CSP & headers, use VPN and fail2ban.""",
+    """Pentest Report Summary:
+- NMap detected Apache (80) and nginx (443) with port 22 closed.
+-  SQL Injection vectors like `' OR 1=1--` were successful. Suggest prepared statements!
+-  XSS vulnerability found. Code: `<script>alert('XSS')</script>` — lacks sanitization.
+-  Admin brute force success: SSH login with `admin:123456`.
+-  IP leaked via WebRTC: `93.184.216.34`.
+-  Recommendation: Apply rate limits, update services, add CSP & headers, use VPN and fail2ban.""",
 
-    """📡 AI Diagnostic Log:
+    """ AI Diagnostic Log:
 Scan reveals:
 - Apache 2.4.41 and nginx 1.18.0 exposed on ports 80 & 443.
 - SQLi payloads (`UNION SELECT ...`) executed — backend exposed.
 - DOM-based XSS exists — input not escaped properly.
 - Admin access cracked with Hydra. Weak creds used.
 - IP leak confirmed — WebRTC not disabled.
-👨‍🔧 Fixes:
+ Fixes:
 1. Harden auth systems.
 2. Disable vulnerable headers.
 3. Patch server software.
 4. Use MFA and SSH key-pairs.""",
 
-    """📑 Threat Assessment:
+    """ Threat Assessment:
 Summary of Findings:
-- ✅ Apache and nginx exposed — check for CVEs.
-- 🚨 SQL injection succeeded — unsafe string concat in SQL.
-- ⚠️ XSS verified — raw HTML injection detected.
-- 🔑 Admin login guessed: password too common.
-- 🌍 IP visibility high — WebRTC exposed true IP.
-🔧 AI Recommendations:
+- Apache and nginx exposed — check for CVEs.
+-  SQL injection succeeded — unsafe string concat in SQL.
+-  XSS verified — raw HTML injection detected.
+-  Admin login guessed: password too common.
+-  IP visibility high — WebRTC exposed true IP.
+ AI Recommendations:
 - Sanitize ALL inputs.
 - Apply strict content headers.
 - Monitor access logs.
 - Enforce strong credential policies and VPNs.""",
 
-    """🤯 AI Forensics Mode Activated:
-🧠 I parsed the scan:
+    """ AI Forensics Mode Activated:
+ I parsed the scan:
 > Ports Open: 80 (Apache), 443 (nginx). SSH (22) = closed.
 > SQL Injection worked! Classic `OR 1=1--` bypass succeeded.
 > XSS alert triggered — page fails to sanitize `<img onerror>`.
 > SSH brute-forced using `rockyou.txt`. Admin creds exposed.
 > Your IP: `93.184.216.34` — revealed via simulated WebRTC.
-🔐 Next Steps:
+ Next Steps:
 - Patch Apache/nginx.
 - Use prepared SQL queries.
 - CSP, X-Frame, and HSTS headers.