0sec-cli 0.18.0 → 0.21.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (171) hide show
  1. package/{0sec.js → 0.js} +84 -76
  2. package/LICENSE +1 -1
  3. package/README.md +74 -43
  4. package/chunks/adapt-loop-IGBRQAXO.js +18 -0
  5. package/chunks/{adgraph-JLGA6RYI.js → adgraph-AUDQTBYA.js} +5 -5
  6. package/chunks/agent/skills/frameworks/entra-id.yaml +2 -2
  7. package/chunks/agent/skills/techniques/assumption-mining.yaml +2 -2
  8. package/chunks/agent/skills/techniques/cve-poc-adaptation.yaml +2 -2
  9. package/chunks/agent/skills/techniques/entra-attack-paths.yaml +1 -1
  10. package/chunks/agent/skills/techniques/kernel-weaponization.yaml +1 -1
  11. package/chunks/agent/skills/techniques/llm-prompt-injection.yaml +2 -2
  12. package/chunks/agent/skills/techniques/npm-ecosystem.yaml +1 -1
  13. package/chunks/agent/skills/techniques/poc-verification.yaml +1 -1
  14. package/chunks/agent/skills/techniques/seedless-depth-review.yaml +20 -38
  15. package/chunks/{artifact-scraper-HQ7HLP6V.js → artifact-scraper-LNQJUORS.js} +6 -6
  16. package/chunks/{assumption-mining-5SNIVVDN.js → assumption-mining-4MJTP6H5.js} +24 -26
  17. package/chunks/{chunk-P6WKNFWX.js → chunk-2OQOQ2FZ.js} +8 -8
  18. package/chunks/{chunk-5G3ZXFBW.js → chunk-2WNCI664.js} +3 -3
  19. package/chunks/{chunk-AHTBZC3E.js → chunk-2WSXFFJZ.js} +4 -4
  20. package/chunks/{chunk-DW5UWPFY.js → chunk-4VGLO2YS.js} +6 -5
  21. package/chunks/{chunk-3KPWWJCI.js → chunk-5T6D5BVY.js} +88 -88
  22. package/chunks/{chunk-OEFNRYI2.js → chunk-6GHSR47F.js} +3 -6
  23. package/chunks/chunk-6YNKRUMC.js +4474 -0
  24. package/chunks/{chunk-BZNEY2ZS.js → chunk-ANDKY54G.js} +22390 -19895
  25. package/chunks/{chunk-53G27VPS.js → chunk-AZ7L3HFD.js} +7 -2
  26. package/chunks/{chunk-UR4ELX2Y.js → chunk-BACXRTQ4.js} +633 -316
  27. package/chunks/{chunk-UCYRA73C.js → chunk-CAJJRUTV.js} +4 -4
  28. package/chunks/{chunk-57ZENEX2.js → chunk-CGHCEN7W.js} +3 -3
  29. package/chunks/{chunk-AD7WXDH6.js → chunk-CL5KAUM6.js} +16 -16
  30. package/chunks/{chunk-ADOLI6DT.js → chunk-CXKDWFNO.js} +6 -6
  31. package/chunks/{chunk-RWONANDA.js → chunk-DQTNI3KY.js} +5 -5
  32. package/chunks/{chunk-BFR2CDV5.js → chunk-E2UOY5PJ.js} +288 -100
  33. package/chunks/{chunk-ATATQACO.js → chunk-ER3SUMYJ.js} +40 -18
  34. package/chunks/{chunk-5JI7L7KV.js → chunk-FAH6V4QM.js} +30515 -32242
  35. package/chunks/{chunk-6LKRLK2R.js → chunk-FHC2B7LN.js} +3 -3
  36. package/chunks/{chunk-XM5NLHYU.js → chunk-FWAYJ2IV.js} +16 -16
  37. package/chunks/{chunk-WVTBZEQO.js → chunk-G34QP2XW.js} +8 -8
  38. package/chunks/{chunk-MYVT64FN.js → chunk-GHWODZMR.js} +2 -2
  39. package/chunks/{chunk-F3WBKITT.js → chunk-GIQKESMN.js} +10 -10
  40. package/chunks/{chunk-2RMLOJVB.js → chunk-GVD6SJGH.js} +2 -2
  41. package/chunks/{chunk-WXQ6BJ6A.js → chunk-HBKCGJAV.js} +7 -7
  42. package/chunks/{chunk-SF4KZ4O3.js → chunk-HLFS6WV2.js} +2 -2
  43. package/chunks/chunk-HPQZHOIU.js +67 -0
  44. package/chunks/{chunk-TSK2AG6J.js → chunk-IMGWPNQM.js} +231 -1308
  45. package/chunks/{chunk-3MOLBTLS.js → chunk-K2PWUPUI.js} +2 -2
  46. package/chunks/{chunk-N7BOUYEV.js → chunk-NDJU5ZZ7.js} +14 -14
  47. package/chunks/{chunk-BVAZO4WA.js → chunk-NOPBXZUV.js} +3 -3
  48. package/chunks/{chunk-2JCCA2JL.js → chunk-O6SD4A36.js} +3 -3
  49. package/chunks/{chunk-SAFFWQW4.js → chunk-P6YG6TEZ.js} +6 -6
  50. package/chunks/{chunk-6L26OBWI.js → chunk-PC6RCKQV.js} +198 -11
  51. package/chunks/{chunk-LP3HHYQU.js → chunk-PD2BBBKT.js} +2 -2
  52. package/chunks/{chunk-BKZFDZ23.js → chunk-QCUFBVIZ.js} +3 -3
  53. package/chunks/{chunk-KLTNTE2Z.js → chunk-QZVG3BG4.js} +14 -14
  54. package/chunks/{chunk-ASUR522M.js → chunk-RF5QGKLR.js} +9 -9
  55. package/chunks/{chunk-YYRBQVFE.js → chunk-SBMB4OL3.js} +9 -9
  56. package/chunks/{chunk-IOL7D5YV.js → chunk-SQCBHFWN.js} +3 -3
  57. package/chunks/{chunk-BFRB6HB2.js → chunk-TF46UWFU.js} +3 -3
  58. package/chunks/chunk-TH2LW437.js +7829 -0
  59. package/chunks/chunk-TRH2PJSN.js +547 -0
  60. package/chunks/{chunk-RJWOYEOG.js → chunk-UEX7PFSE.js} +5 -5
  61. package/chunks/{chunk-VQG4FT5D.js → chunk-UFHN6RIU.js} +2 -2
  62. package/chunks/{chunk-WU6AFRAZ.js → chunk-V36HVTUL.js} +12 -12
  63. package/chunks/{chunk-IR537GON.js → chunk-VCSFCHAJ.js} +2 -2
  64. package/chunks/{chunk-YLMN3N25.js → chunk-VIT5ALXF.js} +3 -3
  65. package/chunks/{chunk-U5FLXGHT.js → chunk-VOAXLO4A.js} +10 -10
  66. package/chunks/{chunk-WEBMRWEG.js → chunk-W4JOXE4N.js} +83 -75
  67. package/chunks/{chunk-C2WXWFBB.js → chunk-WF5W75WY.js} +25 -25
  68. package/chunks/{chunk-SVJEDVYK.js → chunk-WPQLBN4S.js} +5 -5
  69. package/chunks/{chunk-72CISA2D.js → chunk-WZISK5VC.js} +37 -35
  70. package/chunks/{chunk-CMKXP5RR.js → chunk-Y5H6E24H.js} +3 -3
  71. package/chunks/{chunk-BATRQBOR.js → chunk-YA4PUM4H.js} +41 -41
  72. package/chunks/{chunk-JQHOLLTD.js → chunk-YHWWF4QY.js} +9 -9
  73. package/chunks/{chunk-GMT2AZKM.js → chunk-YPOA3W4O.js} +28 -28
  74. package/chunks/{chunk-7DQEV5QI.js → chunk-Z3IKZX3X.js} +4 -4
  75. package/chunks/codex-models-TYYV4JNN.js +15 -0
  76. package/chunks/{commands-TBC2F5CE.js → commands-WF5RG4I2.js} +3834 -931
  77. package/chunks/corpus-v1.json +2 -2
  78. package/chunks/data/appsec-archetypes.json +2 -2
  79. package/chunks/data/chromium-archetypes.json +1 -1
  80. package/chunks/data/freebsd-archetypes.json +1 -1
  81. package/chunks/data/kernel-archetypes.json +2 -2
  82. package/chunks/db-U3WQZVAO.js +16 -0
  83. package/chunks/{disclose-EKTWSCGW.js → disclose-67GZCDBO.js} +5 -5
  84. package/chunks/{dist-FMGSR3DW.js → dist-ACC3DZUZ.js} +11 -5
  85. package/chunks/{dist-4MAW5X6L.js → dist-EVTN3UTT.js} +6 -6
  86. package/chunks/{dist-4YICS2J2.js → dist-F6X62TQK.js} +286 -327
  87. package/chunks/dist-KEULE5IQ.js +21914 -0
  88. package/chunks/dist-XZB53PS5.js +53 -0
  89. package/chunks/eval-runner-SA6OUGHZ.js +26 -0
  90. package/chunks/example-manifest.json +2 -2
  91. package/chunks/{exploit-agent-45YQOHPJ.js → exploit-agent-36Q7XQFP.js} +4 -4
  92. package/chunks/{exploit-autoclimb-UZGEMGYT.js → exploit-autoclimb-J4OTSTZ6.js} +6 -6
  93. package/chunks/{exploit-climb-SG23KB2G.js → exploit-climb-PYEJDIC4.js} +12 -12
  94. package/chunks/fix-J2KBRJDV.js +12 -0
  95. package/chunks/{github-issues-MJ6OYOOU.js → github-issues-IGTTWM7V.js} +7 -7
  96. package/chunks/harness-GDUMKGSE.js +22 -0
  97. package/chunks/http-conformance-U5F6GKYG.js +11 -0
  98. package/chunks/http-sender-I5XFFY35.js +10 -0
  99. package/chunks/hunt-scan-UDJSCISU.js +36 -0
  100. package/chunks/{identity-6ZAIIWOR.js → identity-JTIVJSV7.js} +5 -5
  101. package/chunks/{kernel-primitive-7U6CWHXD.js → kernel-primitive-F2IXUFAX.js} +6 -6
  102. package/chunks/{kernel-vm-runner-3JAU4O6J.js → kernel-vm-runner-276LHIOV.js} +6 -6
  103. package/chunks/memsafety-scan-NHUOGTEX.js +16 -0
  104. package/chunks/{native-loop-RJCJPOUS.js → native-loop-3BSYVDUI.js} +17 -18
  105. package/chunks/{npm-detectors-KB5Y5ZFX.js → npm-detectors-VIYJXKFQ.js} +6 -6
  106. package/chunks/npm-dynamic-discovery-5J7FT3XM.js +13 -0
  107. package/chunks/orchestrate-DHBFRTSI.js +59 -0
  108. package/chunks/{pre-recon-cve-66EB6G4M.js → pre-recon-cve-X2K2P5YQ.js} +4 -4
  109. package/chunks/prepare-KYHGFWCJ.js +13 -0
  110. package/chunks/process-PNMC36JI.js +15 -0
  111. package/chunks/{replay-runner-45G3VU7X.js → replay-runner-LK2XFIVG.js} +7 -7
  112. package/chunks/{run-D56MPDKY.js → run-CBGE6DRQ.js} +2201 -1694
  113. package/chunks/{runtime-G7YWIO3B.js → runtime-PXO5G6UV.js} +11 -11
  114. package/chunks/runtime-XFWJTBUO.js +12 -0
  115. package/chunks/{scan-stream-FHI2FYZE.js → scan-stream-BMOCPKQX.js} +7 -7
  116. package/chunks/{scope-BI7BF4ZY.js → scope-NJHIDDTN.js} +4 -4
  117. package/chunks/{session-store-GZ4A4KYT.js → session-store-46WBZM22.js} +6 -6
  118. package/chunks/source-files-REHOM44I.js +12 -0
  119. package/chunks/{specdrift-WCLH6TTQ.js → specdrift-AFS54WEJ.js} +5 -5
  120. package/chunks/token-KRWP5JYA.js +72 -0
  121. package/chunks/token-util-DWTL33S3.js +8 -0
  122. package/chunks/variant-candidates-UH2WC2HA.js +13 -0
  123. package/chunks/{web-recon-prepass-JJGPEOLE.js → web-recon-prepass-SFXU44SS.js} +9 -9
  124. package/dashboard/assets/desktop-BT7RkC4q.js +32 -0
  125. package/dashboard/assets/desktop-OaBI0E0e.css +1 -0
  126. package/dashboard/assets/{findings-page-CACW9nw2.js → findings-page-B4rwF6fZ.js} +2 -2
  127. package/dashboard/assets/{format-PoISqsES.js → format-LNQSSpn6.js} +1 -1
  128. package/dashboard/assets/live-page-DoNwpPAO.js +1 -0
  129. package/dashboard/assets/{meta-tile-CcskIV_o.js → meta-tile-BMtBC-Qq.js} +1 -1
  130. package/dashboard/assets/operations-CMFVrXEe.css +2 -0
  131. package/dashboard/assets/operations-app-ER0gg7GN.js +2 -0
  132. package/dashboard/assets/{operations-D8nUP5_m.js → operations-e2CGYKB1.js} +2 -2
  133. package/dashboard/assets/{overview-page-DTGS8dPo.js → overview-page-CmeWH17A.js} +1 -1
  134. package/dashboard/assets/{page-header-MFVvEtZW.js → page-header-CIJyycfz.js} +1 -1
  135. package/dashboard/assets/scans-page-CuhzWhHx.js +1 -0
  136. package/dashboard/assets/{table-BYS-nIVA.js → table-BgsSBdke.js} +1 -1
  137. package/dashboard/assets/{tabs-DivxbhQy.js → tabs-vn6v7Bk6.js} +1 -1
  138. package/dashboard/desktop.html +3 -3
  139. package/dashboard/index.html +3 -3
  140. package/package.json +11 -11
  141. package/chunks/adapt-loop-SMH6V4PD.js +0 -18
  142. package/chunks/appsec-catalog-CBWHGTEL.js +0 -24
  143. package/chunks/chunk-242TMK6G.js +0 -110
  144. package/chunks/chunk-H2FFLZNK.js +0 -3
  145. package/chunks/chunk-QI233I24.js +0 -333
  146. package/chunks/chunk-RRMJC3ZE.js +0 -105
  147. package/chunks/chunk-Z5FA2XOX.js +0 -2798
  148. package/chunks/cost-ledger-NU63MYZM.js +0 -13
  149. package/chunks/db-KFWOAUUB.js +0 -16
  150. package/chunks/eval-runner-7ZF472KV.js +0 -27
  151. package/chunks/fix-IG7LYXH3.js +0 -12
  152. package/chunks/harness-7ODOLOWU.js +0 -22
  153. package/chunks/http-conformance-DU66MZIU.js +0 -11
  154. package/chunks/http-sender-GWH2IYEA.js +0 -10
  155. package/chunks/hunt-scan-MMKUOETU.js +0 -38
  156. package/chunks/memsafety-scan-J7SECV5W.js +0 -16
  157. package/chunks/npm-dynamic-discovery-AHROOZDB.js +0 -13
  158. package/chunks/orchestrate-OC2VZN2X.js +0 -62
  159. package/chunks/pipeline-BZK5BLJR.js +0 -14
  160. package/chunks/prepare-MYY743TK.js +0 -13
  161. package/chunks/process-LQRCS5OY.js +0 -13
  162. package/chunks/runtime-J7PLXZNM.js +0 -12
  163. package/chunks/source-files-PWRQR6LY.js +0 -12
  164. package/chunks/variant-candidates-YERCYMPD.js +0 -13
  165. package/dashboard/assets/0sec-icon-66SreztZ.gif +0 -0
  166. package/dashboard/assets/desktop-CXTQonNm.js +0 -32
  167. package/dashboard/assets/desktop-NOekk4QS.css +0 -1
  168. package/dashboard/assets/live-page-DrgQqQK5.js +0 -1
  169. package/dashboard/assets/operations-BKE8T-vY.css +0 -2
  170. package/dashboard/assets/operations-app-CQQhG54n.js +0 -2
  171. package/dashboard/assets/scans-page-ChVtq8Us.js +0 -1
@@ -0,0 +1,53 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ GATEWAY_AUTH_SUBPROTOCOL_PREFIX,
6
+ GATEWAY_REALTIME_SUBPROTOCOL,
7
+ GATEWAY_TEAM_SUBPROTOCOL_PREFIX,
8
+ GATEWAY_TRANSCRIPTION_SUBPROTOCOL,
9
+ GatewayAuthenticationError,
10
+ GatewayError,
11
+ GatewayFailedDependencyError,
12
+ GatewayForbiddenError,
13
+ GatewayInternalServerError,
14
+ GatewayInvalidRequestError,
15
+ GatewayModelNotFoundError,
16
+ GatewayNotFoundError,
17
+ GatewayRateLimitError,
18
+ GatewayResponseError,
19
+ VERSION,
20
+ createGateway,
21
+ gateway,
22
+ getGatewayRealtimeAuthToken,
23
+ getGatewayRealtimeProtocols,
24
+ getGatewayRealtimeTeamIdOrSlug,
25
+ getGatewayTranscriptionProtocols
26
+ } from "./chunk-TH2LW437.js";
27
+ import "./chunk-6YNKRUMC.js";
28
+ import "./chunk-TRH2PJSN.js";
29
+ import "./chunk-VCSFCHAJ.js";
30
+ export {
31
+ GATEWAY_AUTH_SUBPROTOCOL_PREFIX,
32
+ GATEWAY_REALTIME_SUBPROTOCOL,
33
+ GATEWAY_TEAM_SUBPROTOCOL_PREFIX,
34
+ GATEWAY_TRANSCRIPTION_SUBPROTOCOL,
35
+ GatewayAuthenticationError,
36
+ GatewayError,
37
+ GatewayFailedDependencyError,
38
+ GatewayForbiddenError,
39
+ GatewayInternalServerError,
40
+ GatewayInvalidRequestError,
41
+ GatewayModelNotFoundError,
42
+ GatewayNotFoundError,
43
+ GatewayRateLimitError,
44
+ GatewayResponseError,
45
+ VERSION,
46
+ createGateway,
47
+ createGateway as createGatewayProvider,
48
+ gateway,
49
+ getGatewayRealtimeAuthToken,
50
+ getGatewayRealtimeProtocols,
51
+ getGatewayRealtimeTeamIdOrSlug,
52
+ getGatewayTranscriptionProtocols
53
+ };
@@ -0,0 +1,26 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ getEvalCategories,
6
+ runEval
7
+ } from "./chunk-2WSXFFJZ.js";
8
+ import "./chunk-ANDKY54G.js";
9
+ import "./chunk-CAJJRUTV.js";
10
+ import "./chunk-K2PWUPUI.js";
11
+ import "./chunk-SBMB4OL3.js";
12
+ import "./chunk-2OQOQ2FZ.js";
13
+ import "./chunk-PD2BBBKT.js";
14
+ import "./chunk-QZVG3BG4.js";
15
+ import "./chunk-CXKDWFNO.js";
16
+ import "./chunk-W4JOXE4N.js";
17
+ import "./chunk-4VGLO2YS.js";
18
+ import "./chunk-CGHCEN7W.js";
19
+ import "./chunk-BACXRTQ4.js";
20
+ import "./chunk-PC6RCKQV.js";
21
+ import "./chunk-VIT5ALXF.js";
22
+ import "./chunk-VCSFCHAJ.js";
23
+ export {
24
+ getEvalCategories,
25
+ runEval
26
+ };
@@ -1,14 +1,14 @@
1
1
  {
2
2
  "id": "bench-example-references-only",
3
3
  "version": 1,
4
- "corpusRoot": "/opt/0sec-bench-corpus",
4
+ "corpusRoot": "/opt/0-bench-corpus",
5
5
  "_comment": "REFERENCES ONLY. This sample documents the manifest shape. It contains NO vulnerable app source and NO exploits. The real uncontaminated/post-cutoff corpus (images, compose dirs, kernel reproducers) lives OUTSIDE this repo per disclosure embargo discipline and is resolved at run time via image refs / corpusRoot-relative paths / reproducerRef. Markers below are placeholder tokens that, in a real corpus, are planted per-target at build time (like XBOW's random FLAG).",
6
6
  "cases": [
7
7
  {
8
8
  "id": "web-file-read-001",
9
9
  "name": "Path traversal → /etc/secret read",
10
10
  "target": { "kind": "web", "image": "ghcr.io/0sec-labs/bench-web-file-read-001@sha256:PINNED", "port": 8080 },
11
- "objective": { "type": "file-read", "marker": "BENCH_MARKER_FILEREAD_001", "path": "/etc/0sec-bench/secret" },
11
+ "objective": { "type": "file-read", "marker": "BENCH_MARKER_FILEREAD_001", "path": "/etc/0-bench/secret" },
12
12
  "ci": true,
13
13
  "tags": ["web", "lfi"]
14
14
  },
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
4
- import "./chunk-IR537GON.js";
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import "./chunk-VCSFCHAJ.js";
5
5
 
6
6
  // packages/cli/src/commands/exploit-agent.ts
7
7
  import { execFileSync } from "node:child_process";
@@ -23,7 +23,7 @@ function makeScriptExecutor(scriptPath, timeoutMs = 3e5) {
23
23
  });
24
24
  }
25
25
  async function runExploitAgent(opts) {
26
- const { runExploitScan } = await import("./dist-4YICS2J2.js");
26
+ const { runExploitScan } = await import("./dist-F6X62TQK.js");
27
27
  const log = opts.log ?? ((m) => process.stderr.write(m + "\n"));
28
28
  const result = await runExploitScan({
29
29
  target: {
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
4
- import "./chunk-IR537GON.js";
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import "./chunk-VCSFCHAJ.js";
5
5
 
6
6
  // packages/cli/src/commands/exploit-autoclimb.ts
7
7
  import { spawn } from "node:child_process";
@@ -39,7 +39,7 @@ function makeShellBootRunner(opts) {
39
39
  }
40
40
  async function runAutoclimbCli(opts) {
41
41
  const log = opts.logger ?? ((l) => process.stderr.write(l + "\n"));
42
- const { autonomousClimb } = await import("./dist-4YICS2J2.js");
42
+ const { autonomousClimb } = await import("./dist-F6X62TQK.js");
43
43
  const bug = JSON.parse(readFileSync(opts.bugSpecPath, "utf8"));
44
44
  const runner = makeShellBootRunner({
45
45
  bootScript: opts.bootScript,
@@ -58,9 +58,9 @@ async function runAutoclimbCli(opts) {
58
58
  }
59
59
  async function autoclimbFromExploitOpts(opts) {
60
60
  const bugSpecPath = opts.bugSpec;
61
- const bootScript = opts.bootScript ?? process.env["0SEC_AUTOCLIMB_BOOT_SCRIPT"];
61
+ const bootScript = opts.bootScript ?? process.env["ZERO_AUTOCLIMB_BOOT_SCRIPT"];
62
62
  if (!bugSpecPath) throw new Error("--autoclimb requires --bug-spec <path>");
63
- if (!bootScript) throw new Error("--autoclimb requires --boot-script <path> or 0SEC_AUTOCLIMB_BOOT_SCRIPT");
63
+ if (!bootScript) throw new Error("--autoclimb requires --boot-script <path> or ZERO_AUTOCLIMB_BOOT_SCRIPT");
64
64
  const maxRounds = opts.loopBoots ? parseInt(opts.loopBoots, 10) : 6;
65
65
  const result = await runAutoclimbCli({
66
66
  bugSpecPath,
@@ -1,14 +1,14 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  findingSchema,
6
6
  formatZodError
7
- } from "./chunk-6L26OBWI.js";
7
+ } from "./chunk-PC6RCKQV.js";
8
8
  import {
9
9
  external_exports
10
- } from "./chunk-YLMN3N25.js";
11
- import "./chunk-IR537GON.js";
10
+ } from "./chunk-VIT5ALXF.js";
11
+ import "./chunk-VCSFCHAJ.js";
12
12
 
13
13
  // packages/cli/src/commands/exploit-climb.ts
14
14
  import { readFileSync as readFileSync2 } from "node:fs";
@@ -215,14 +215,14 @@ function readFinding(findingPath) {
215
215
  }
216
216
  }
217
217
  function widenerStatusFromEnv() {
218
- const symbol = process.env["0SEC_KERNEL_QEMU_WIDEN_SYMBOL"]?.trim();
219
- const offset = process.env["0SEC_KERNEL_QEMU_WIDEN_OFFSET"]?.trim();
220
- const delay = process.env["0SEC_KERNEL_QEMU_WIDEN_DELAY_MS"]?.trim();
221
- const guestBuildDir = process.env["0SEC_KERNEL_QEMU_GUEST_BUILD_DIR"]?.trim();
218
+ const symbol = process.env["ZERO_KERNEL_QEMU_WIDEN_SYMBOL"]?.trim();
219
+ const offset = process.env["ZERO_KERNEL_QEMU_WIDEN_OFFSET"]?.trim();
220
+ const delay = process.env["ZERO_KERNEL_QEMU_WIDEN_DELAY_MS"]?.trim();
221
+ const guestBuildDir = process.env["ZERO_KERNEL_QEMU_GUEST_BUILD_DIR"]?.trim();
222
222
  const configured = Boolean(symbol && offset && delay && guestBuildDir);
223
223
  return {
224
224
  configured,
225
- note: configured ? `race-widener configured at ${symbol}+${offset} delay=${delay}ms (in-guest build is fail-soft; outcome is in the guest widen.log)` : "race-widener NOT configured (0SEC_KERNEL_QEMU_WIDEN_SYMBOL/_OFFSET/_DELAY_MS + _GUEST_BUILD_DIR); boots run WITHOUT widening \u2014 a flaky root race may simply not have been hit"
225
+ note: configured ? `race-widener configured at ${symbol}+${offset} delay=${delay}ms (in-guest build is fail-soft; outcome is in the guest widen.log)` : "race-widener NOT configured (ZERO_KERNEL_QEMU_WIDEN_SYMBOL/_OFFSET/_DELAY_MS + _GUEST_BUILD_DIR); boots run WITHOUT widening \u2014 a flaky root race may simply not have been hit"
226
226
  };
227
227
  }
228
228
  async function runClimb(opts) {
@@ -232,14 +232,14 @@ async function runClimb(opts) {
232
232
  bootedCacheKey,
233
233
  writeProofFileReadOnly,
234
234
  defaultDmesgOutPath
235
- } = await import("./dist-4YICS2J2.js");
235
+ } = await import("./dist-F6X62TQK.js");
236
236
  const finding = readFinding(opts.findingPath);
237
237
  const reproducer = opts.reproducerPath ? readFileSync2(resolve(opts.reproducerPath), "utf8") : void 0;
238
238
  const kernelConfigText = opts.kernelConfigPath ? readFileSync2(resolve(opts.kernelConfigPath), "utf8") : void 0;
239
239
  const vmlinuxPath = opts.vmlinuxPath ? resolve(opts.vmlinuxPath) : void 0;
240
240
  const widener = widenerStatusFromEnv();
241
241
  log(`[climb] ${widener.note}`);
242
- const weaponizeLane = /^(1|true|on|yes)$/i.test(process.env["0SEC_KERNEL_QEMU_INITRAMFS"]?.trim() ?? "") || /^(1|true|on|yes)$/i.test(process.env.USE_KERNEL_WEAPONIZE?.trim() ?? "");
242
+ const weaponizeLane = /^(1|true|on|yes)$/i.test(process.env["ZERO_KERNEL_QEMU_INITRAMFS"]?.trim() ?? "") || /^(1|true|on|yes)$/i.test(process.env.USE_KERNEL_WEAPONIZE?.trim() ?? "");
243
243
  log(
244
244
  weaponizeLane ? "[climb] weaponize lane: lightweight busybox-initramfs boot (rdinit=/init, no 9p root disk)" : "[climb] weaponize lane: 9p disk boot (set USE_KERNEL_WEAPONIZE=1 for the lightweight initramfs lane)"
245
245
  );
@@ -0,0 +1,12 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ runSourceFix
6
+ } from "./chunk-GIQKESMN.js";
7
+ import "./chunk-PD2BBBKT.js";
8
+ import "./chunk-VIT5ALXF.js";
9
+ import "./chunk-VCSFCHAJ.js";
10
+ export {
11
+ runSourceFix
12
+ };
@@ -1,7 +1,7 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
4
- import "./chunk-IR537GON.js";
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import "./chunk-VCSFCHAJ.js";
5
5
 
6
6
  // packages/cli/src/exporters/github-issues.ts
7
7
  function buildIssueTitle(finding) {
@@ -50,11 +50,11 @@ function buildIssueBody(finding) {
50
50
  }
51
51
  }
52
52
  lines.push("---");
53
- lines.push(`*Exported by [0sec](https://github.com/0sec-labs/0sec) | Finding ID: \`${finding.id}\`*`);
53
+ lines.push(`*Exported by [0](https://github.com/0sec-labs/0) | Finding ID: \`${finding.id}\`*`);
54
54
  return lines.join("\n");
55
55
  }
56
56
  function getLabels(finding) {
57
- const labels = ["0sec", `severity:${finding.severity}`, `category:${finding.category}`];
57
+ const labels = ["0", `severity:${finding.severity}`, `category:${finding.category}`];
58
58
  return labels;
59
59
  }
60
60
  async function githubApi(method, url, token, body) {
@@ -82,7 +82,7 @@ async function fetchExistingIssueTitles(repo, token) {
82
82
  let page = 1;
83
83
  const perPage = 100;
84
84
  while (true) {
85
- const url = `https://api.github.com/repos/${repo}/issues?state=open&labels=0sec&per_page=${perPage}&page=${page}`;
85
+ const url = `https://api.github.com/repos/${repo}/issues?state=open&labels=0&per_page=${perPage}&page=${page}`;
86
86
  const issues = await githubApi("GET", url, token);
87
87
  for (const issue of issues) {
88
88
  titles.add(issue.title);
@@ -126,7 +126,7 @@ async function exportToGitHubIssues(findings, repo) {
126
126
  return { created: 0, skipped: 0 };
127
127
  }
128
128
  const allLabels = /* @__PURE__ */ new Set();
129
- allLabels.add("0sec");
129
+ allLabels.add("0");
130
130
  for (const f of findings) {
131
131
  for (const l of getLabels(f)) {
132
132
  allLabels.add(l);
@@ -0,0 +1,22 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ bootedCacheKey,
6
+ kernelVmArtifactsReady,
7
+ mintCanary,
8
+ runStrategy,
9
+ runWeaponization
10
+ } from "./chunk-YA4PUM4H.js";
11
+ import "./chunk-UEX7PFSE.js";
12
+ import "./chunk-5T6D5BVY.js";
13
+ import "./chunk-PC6RCKQV.js";
14
+ import "./chunk-VIT5ALXF.js";
15
+ import "./chunk-VCSFCHAJ.js";
16
+ export {
17
+ bootedCacheKey,
18
+ kernelVmArtifactsReady,
19
+ mintCanary,
20
+ runStrategy,
21
+ runWeaponization
22
+ };
@@ -0,0 +1,11 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ runHttpConformanceCheck
6
+ } from "./chunk-SQCBHFWN.js";
7
+ import "./chunk-VIT5ALXF.js";
8
+ import "./chunk-VCSFCHAJ.js";
9
+ export {
10
+ runHttpConformanceCheck
11
+ };
@@ -0,0 +1,10 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ createLiveHttpSender
6
+ } from "./chunk-GVD6SJGH.js";
7
+ import "./chunk-VCSFCHAJ.js";
8
+ export {
9
+ createLiveHttpSender
10
+ };
@@ -0,0 +1,36 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ AimdState,
6
+ composeGate,
7
+ makeMultiLensVerifier,
8
+ makeSkepticVerifier,
9
+ runHuntScan
10
+ } from "./chunk-E2UOY5PJ.js";
11
+ import "./chunk-ANDKY54G.js";
12
+ import "./chunk-CAJJRUTV.js";
13
+ import "./chunk-K2PWUPUI.js";
14
+ import "./chunk-SBMB4OL3.js";
15
+ import "./chunk-2OQOQ2FZ.js";
16
+ import "./chunk-UEX7PFSE.js";
17
+ import "./chunk-PD2BBBKT.js";
18
+ import "./chunk-QZVG3BG4.js";
19
+ import "./chunk-NDJU5ZZ7.js";
20
+ import "./chunk-ER3SUMYJ.js";
21
+ import "./chunk-CXKDWFNO.js";
22
+ import "./chunk-WZISK5VC.js";
23
+ import "./chunk-W4JOXE4N.js";
24
+ import "./chunk-4VGLO2YS.js";
25
+ import "./chunk-CGHCEN7W.js";
26
+ import "./chunk-BACXRTQ4.js";
27
+ import "./chunk-PC6RCKQV.js";
28
+ import "./chunk-VIT5ALXF.js";
29
+ import "./chunk-VCSFCHAJ.js";
30
+ export {
31
+ AimdState,
32
+ composeGate,
33
+ makeMultiLensVerifier,
34
+ makeSkepticVerifier,
35
+ runHuntScan
36
+ };
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  AZ_EDGE_TECHNIQUES,
6
6
  ENTRA_PATH_ANALYZERS,
@@ -93,9 +93,9 @@ import {
93
93
  tier0TargetIds,
94
94
  tokenFingerprint,
95
95
  writebackEnabled
96
- } from "./chunk-SAFFWQW4.js";
97
- import "./chunk-VQG4FT5D.js";
98
- import "./chunk-IR537GON.js";
96
+ } from "./chunk-P6YG6TEZ.js";
97
+ import "./chunk-UFHN6RIU.js";
98
+ import "./chunk-VCSFCHAJ.js";
99
99
  export {
100
100
  AZ_EDGE_TECHNIQUES,
101
101
  ENTRA_PATH_ANALYZERS,
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  BENIGN_MAX_CLASS,
6
6
  UPGRADE_MIN_CLASS,
@@ -19,10 +19,10 @@ import {
19
19
  parseSlabCache,
20
20
  rankDanger,
21
21
  sniffCrashType
22
- } from "./chunk-2JCCA2JL.js";
23
- import "./chunk-6L26OBWI.js";
24
- import "./chunk-YLMN3N25.js";
25
- import "./chunk-IR537GON.js";
22
+ } from "./chunk-O6SD4A36.js";
23
+ import "./chunk-PC6RCKQV.js";
24
+ import "./chunk-VIT5ALXF.js";
25
+ import "./chunk-VCSFCHAJ.js";
26
26
  export {
27
27
  BENIGN_MAX_CLASS,
28
28
  UPGRADE_MIN_CLASS,
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  RECOGNIZED_CONFIG_PROFILES,
6
6
  assertBugAttribution,
@@ -28,10 +28,10 @@ import {
28
28
  verifyAcrossBoots,
29
29
  verifyKernelFinding,
30
30
  writeProofFileReadOnly
31
- } from "./chunk-3KPWWJCI.js";
32
- import "./chunk-6L26OBWI.js";
33
- import "./chunk-YLMN3N25.js";
34
- import "./chunk-IR537GON.js";
31
+ } from "./chunk-5T6D5BVY.js";
32
+ import "./chunk-PC6RCKQV.js";
33
+ import "./chunk-VIT5ALXF.js";
34
+ import "./chunk-VCSFCHAJ.js";
35
35
  export {
36
36
  RECOGNIZED_CONFIG_PROFILES,
37
37
  assertBugAttribution,
@@ -0,0 +1,16 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ crashArtifactToFinding,
6
+ memPrimitiveToCategory,
7
+ runMemSafetyScan
8
+ } from "./chunk-G34QP2XW.js";
9
+ import "./chunk-2OQOQ2FZ.js";
10
+ import "./chunk-QZVG3BG4.js";
11
+ import "./chunk-VCSFCHAJ.js";
12
+ export {
13
+ crashArtifactToFinding,
14
+ memPrimitiveToCategory,
15
+ runMemSafetyScan
16
+ };
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  BUDGET_WARNING_HARD,
6
6
  BUDGET_WARNING_SOFT,
@@ -18,22 +18,21 @@ import {
18
18
  runNativeAgentLoop,
19
19
  summarizeReasoning,
20
20
  toolFailureText
21
- } from "./chunk-BZNEY2ZS.js";
22
- import "./chunk-YYRBQVFE.js";
23
- import "./chunk-3MOLBTLS.js";
24
- import "./chunk-P6WKNFWX.js";
25
- import "./chunk-UCYRA73C.js";
26
- import "./chunk-LP3HHYQU.js";
27
- import "./chunk-KLTNTE2Z.js";
28
- import "./chunk-RRMJC3ZE.js";
29
- import "./chunk-H2FFLZNK.js";
30
- import "./chunk-WEBMRWEG.js";
31
- import "./chunk-57ZENEX2.js";
32
- import "./chunk-UR4ELX2Y.js";
33
- import "./chunk-ADOLI6DT.js";
34
- import "./chunk-6L26OBWI.js";
35
- import "./chunk-YLMN3N25.js";
36
- import "./chunk-IR537GON.js";
21
+ } from "./chunk-ANDKY54G.js";
22
+ import "./chunk-CAJJRUTV.js";
23
+ import "./chunk-K2PWUPUI.js";
24
+ import "./chunk-SBMB4OL3.js";
25
+ import "./chunk-2OQOQ2FZ.js";
26
+ import "./chunk-PD2BBBKT.js";
27
+ import "./chunk-QZVG3BG4.js";
28
+ import "./chunk-CXKDWFNO.js";
29
+ import "./chunk-W4JOXE4N.js";
30
+ import "./chunk-4VGLO2YS.js";
31
+ import "./chunk-CGHCEN7W.js";
32
+ import "./chunk-BACXRTQ4.js";
33
+ import "./chunk-PC6RCKQV.js";
34
+ import "./chunk-VIT5ALXF.js";
35
+ import "./chunk-VCSFCHAJ.js";
37
36
  export {
38
37
  BUDGET_WARNING_HARD,
39
38
  BUDGET_WARNING_SOFT,
@@ -1,6 +1,6 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  OsvLookupError,
6
6
  createOsvAdvisoryLookup,
@@ -9,7 +9,7 @@ import {
9
9
  inProcessProbe,
10
10
  localSandboxProvider,
11
11
  staticProbe
12
- } from "./chunk-7DQEV5QI.js";
12
+ } from "./chunk-Z3IKZX3X.js";
13
13
  import {
14
14
  DETECTOR_REGISTRY,
15
15
  DETECTOR_REGISTRY_BY_ID,
@@ -33,9 +33,9 @@ import {
33
33
  runDetectorOnPackage,
34
34
  scanDivergences,
35
35
  ssppFuzzDetector
36
- } from "./chunk-RWONANDA.js";
37
- import "./chunk-KLTNTE2Z.js";
38
- import "./chunk-IR537GON.js";
36
+ } from "./chunk-DQTNI3KY.js";
37
+ import "./chunk-QZVG3BG4.js";
38
+ import "./chunk-VCSFCHAJ.js";
39
39
  export {
40
40
  DETECTOR_REGISTRY,
41
41
  DETECTOR_REGISTRY_BY_ID,
@@ -0,0 +1,13 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ leadToFinding,
6
+ runNpmDynamicDiscovery
7
+ } from "./chunk-2WNCI664.js";
8
+ import "./chunk-DQTNI3KY.js";
9
+ import "./chunk-VCSFCHAJ.js";
10
+ export {
11
+ leadToFinding,
12
+ runNpmDynamicDiscovery
13
+ };
@@ -0,0 +1,59 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ recoverStaleWorkers,
6
+ registerOrchestrateCommand
7
+ } from "./chunk-FWAYJ2IV.js";
8
+ import "./chunk-HLFS6WV2.js";
9
+ import "./chunk-FAH6V4QM.js";
10
+ import "./chunk-RF5QGKLR.js";
11
+ import "./chunk-Y5H6E24H.js";
12
+ import "./chunk-GVD6SJGH.js";
13
+ import "./chunk-QCUFBVIZ.js";
14
+ import "./chunk-2WSXFFJZ.js";
15
+ import "./chunk-G34QP2XW.js";
16
+ import "./chunk-2WNCI664.js";
17
+ import "./chunk-Z3IKZX3X.js";
18
+ import "./chunk-DQTNI3KY.js";
19
+ import "./chunk-YA4PUM4H.js";
20
+ import "./chunk-O6SD4A36.js";
21
+ import "./chunk-TF46UWFU.js";
22
+ import "./chunk-AZ7L3HFD.js";
23
+ import "./chunk-YHWWF4QY.js";
24
+ import "./chunk-E2UOY5PJ.js";
25
+ import "./chunk-ANDKY54G.js";
26
+ import "./chunk-CAJJRUTV.js";
27
+ import "./chunk-K2PWUPUI.js";
28
+ import "./chunk-SBMB4OL3.js";
29
+ import "./chunk-2OQOQ2FZ.js";
30
+ import "./chunk-UEX7PFSE.js";
31
+ import "./chunk-5T6D5BVY.js";
32
+ import "./chunk-GIQKESMN.js";
33
+ import "./chunk-PD2BBBKT.js";
34
+ import "./chunk-WF5W75WY.js";
35
+ import "./chunk-QZVG3BG4.js";
36
+ import "./chunk-SQCBHFWN.js";
37
+ import "./chunk-NDJU5ZZ7.js";
38
+ import "./chunk-ER3SUMYJ.js";
39
+ import "./chunk-CXKDWFNO.js";
40
+ import "./chunk-FHC2B7LN.js";
41
+ import "./chunk-P6YG6TEZ.js";
42
+ import "./chunk-UFHN6RIU.js";
43
+ import "./chunk-WZISK5VC.js";
44
+ import "./chunk-VOAXLO4A.js";
45
+ import "./chunk-W4JOXE4N.js";
46
+ import "./chunk-WPQLBN4S.js";
47
+ import "./chunk-V36HVTUL.js";
48
+ import "./chunk-4VGLO2YS.js";
49
+ import "./chunk-6YNKRUMC.js";
50
+ import "./chunk-CGHCEN7W.js";
51
+ import "./chunk-HPQZHOIU.js";
52
+ import "./chunk-BACXRTQ4.js";
53
+ import "./chunk-PC6RCKQV.js";
54
+ import "./chunk-VIT5ALXF.js";
55
+ import "./chunk-VCSFCHAJ.js";
56
+ export {
57
+ recoverStaleWorkers,
58
+ registerOrchestrateCommand
59
+ };
@@ -1,10 +1,10 @@
1
1
  #!/usr/bin/env node
2
- import { createRequire as __0secCreateRequire } from "node:module";
3
- const require = __0secCreateRequire(import.meta.url);
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
4
  import {
5
5
  runWpFingerprint
6
- } from "./chunk-3MOLBTLS.js";
7
- import "./chunk-IR537GON.js";
6
+ } from "./chunk-K2PWUPUI.js";
7
+ import "./chunk-VCSFCHAJ.js";
8
8
 
9
9
  // packages/core/dist/pre-recon-cve.js
10
10
  import { execFileSync } from "node:child_process";
@@ -0,0 +1,13 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ detectTargetType,
6
+ prepare
7
+ } from "./chunk-V36HVTUL.js";
8
+ import "./chunk-4VGLO2YS.js";
9
+ import "./chunk-VCSFCHAJ.js";
10
+ export {
11
+ detectTargetType,
12
+ prepare
13
+ };
@@ -0,0 +1,15 @@
1
+ #!/usr/bin/env node
2
+ import { createRequire as __0CreateRequire } from "node:module";
3
+ const require = __0CreateRequire(import.meta.url);
4
+ import {
5
+ ProcessRuntime,
6
+ describeSpawnFailure
7
+ } from "./chunk-ER3SUMYJ.js";
8
+ import "./chunk-CXKDWFNO.js";
9
+ import "./chunk-PC6RCKQV.js";
10
+ import "./chunk-VIT5ALXF.js";
11
+ import "./chunk-VCSFCHAJ.js";
12
+ export {
13
+ ProcessRuntime,
14
+ describeSpawnFailure
15
+ };