@blamejs/exceptd-skills 0.18.20 → 0.18.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/AGENTS.md +3 -3
  2. package/ARCHITECTURE.md +4 -4
  3. package/CHANGELOG.md +6 -0
  4. package/CONTEXT.md +2 -2
  5. package/README.md +5 -5
  6. package/agents/threat-researcher.md +2 -2
  7. package/data/_indexes/_meta.json +43 -43
  8. package/data/_indexes/activity-feed.json +26 -26
  9. package/data/_indexes/catalog-summaries.json +12 -12
  10. package/data/_indexes/chains.json +11763 -923
  11. package/data/_indexes/frequency.json +4 -0
  12. package/data/_indexes/recipes.json +1 -1
  13. package/data/_indexes/section-offsets.json +82 -82
  14. package/data/_indexes/summary-cards.json +1 -1
  15. package/data/_indexes/token-budget.json +19 -19
  16. package/data/atlas-ttps.json +7 -7
  17. package/data/attack-techniques.json +52 -3
  18. package/data/cve-catalog.json +2129 -2
  19. package/data/cwe-catalog.json +93 -4
  20. package/data/framework-control-gaps.json +103 -3
  21. package/data/zeroday-lessons.json +1102 -2
  22. package/lib/schemas/skill-frontmatter.schema.json +1 -1
  23. package/lib/version-pins.js +1 -1
  24. package/manifest-snapshot.json +2 -2
  25. package/manifest-snapshot.sha256 +1 -1
  26. package/manifest.json +88 -88
  27. package/package.json +2 -2
  28. package/sbom.cdx.json +109 -109
  29. package/scripts/builders/catalog-summaries.js +1 -1
  30. package/scripts/builders/recipes.js +1 -1
  31. package/skills/age-gates-child-safety/skill.md +2 -2
  32. package/skills/ai-attack-surface/skill.md +3 -3
  33. package/skills/ai-c2-detection/skill.md +4 -4
  34. package/skills/api-security/skill.md +1 -1
  35. package/skills/attack-surface-pentest/skill.md +3 -3
  36. package/skills/cloud-security/skill.md +2 -2
  37. package/skills/compliance-theater/skill.md +2 -2
  38. package/skills/container-runtime-security/skill.md +2 -2
  39. package/skills/coordinated-vuln-disclosure/skill.md +1 -1
  40. package/skills/dlp-gap-analysis/skill.md +4 -4
  41. package/skills/exploit-scoring/skill.md +1 -1
  42. package/skills/framework-gap-analysis/skill.md +3 -3
  43. package/skills/fuzz-testing-strategy/skill.md +1 -1
  44. package/skills/incident-response-playbook/skill.md +1 -1
  45. package/skills/mcp-agent-trust/skill.md +1 -1
  46. package/skills/mlops-security/skill.md +2 -2
  47. package/skills/ot-ics-security/skill.md +2 -2
  48. package/skills/policy-exception-gen/skill.md +2 -2
  49. package/skills/rag-pipeline-security/skill.md +3 -3
  50. package/skills/ransomware-response/skill.md +1 -1
  51. package/skills/sector-energy/skill.md +1 -1
  52. package/skills/sector-federal-government/skill.md +1 -1
  53. package/skills/sector-financial/skill.md +3 -3
  54. package/skills/sector-healthcare/skill.md +2 -2
  55. package/skills/security-maturity-tiers/skill.md +1 -1
  56. package/skills/skill-update-loop/skill.md +4 -4
  57. package/skills/supply-chain-integrity/skill.md +1 -1
  58. package/skills/threat-model-currency/skill.md +7 -7
  59. package/skills/threat-modeling-methodology/skill.md +1 -1
  60. package/skills/webapp-security/skill.md +1 -1
  61. package/skills/zeroday-gap-learn/skill.md +2 -2
package/data/attack-techniques.json CHANGED
@@ -278,12 +278,15 @@
278
278
  "CVE-2014-6278",
279
279
  "CVE-2016-10033",
280
280
  "CVE-2017-1000353",
281
+ "CVE-2017-3066",
281
282
  "CVE-2019-9874",
282
283
  "CVE-2019-9875",
283
284
  "CVE-2020-25078",
284
285
  "CVE-2020-25079",
285
286
  "CVE-2021-20035",
286
287
  "CVE-2022-1471",
288
+ "CVE-2022-43769",
289
+ "CVE-2023-20118",
287
290
  "CVE-2023-33538",
288
291
  "CVE-2023-39780",
289
292
  "CVE-2023-43654",
@@ -300,6 +303,7 @@
300
303
  "CVE-2024-12366",
301
304
  "CVE-2024-12987",
302
305
  "CVE-2024-13059",
306
+ "CVE-2024-20953",
303
307
  "CVE-2024-21513",
304
308
  "CVE-2024-21575",
305
309
  "CVE-2024-21576",
@@ -309,6 +313,7 @@
309
313
  "CVE-2024-37052",
310
314
  "CVE-2024-37060",
311
315
  "CVE-2024-42479",
316
+ "CVE-2024-4885",
312
317
  "CVE-2024-4889",
313
318
  "CVE-2024-50050",
314
319
  "CVE-2024-5565",
@@ -425,6 +430,7 @@
425
430
  "CVE-2026-40933",
426
431
  "CVE-2026-42271",
427
432
  "CVE-2026-45247",
433
+ "CVE-2026-45659",
428
434
  "CVE-2026-45829",
429
435
  "CVE-2026-48172",
430
436
  "CVE-2026-5760",
@@ -541,6 +547,7 @@
541
547
  "cve_refs": [
542
548
  "BUG-2026-NIGHTMARE-ECLIPSE-GREENPLASMA",
543
549
  "CVE-2018-14634",
550
+ "CVE-2018-8639",
544
551
  "CVE-2020-17103-REREGRESSION-2026",
545
552
  "CVE-2021-22555",
546
553
  "CVE-2021-30952",
@@ -551,6 +558,8 @@
551
558
  "CVE-2023-41974",
552
559
  "CVE-2023-43000",
553
560
  "CVE-2024-0769",
561
+ "CVE-2024-49035",
562
+ "CVE-2024-50302",
554
563
  "CVE-2024-53197",
555
564
  "CVE-2024-8068",
556
565
  "CVE-2025-10725",
@@ -653,6 +662,7 @@
653
662
  "CVE-2020-24363",
654
663
  "CVE-2021-20035",
655
664
  "CVE-2021-32030",
665
+ "CVE-2022-43939",
656
666
  "CVE-2023-27351",
657
667
  "CVE-2023-43791",
658
668
  "CVE-2023-50224",
@@ -661,6 +671,7 @@
661
671
  "CVE-2024-1709",
662
672
  "CVE-2024-20439",
663
673
  "CVE-2024-27199",
674
+ "CVE-2024-49035",
664
675
  "CVE-2024-54085",
665
676
  "CVE-2024-57726",
666
677
  "CVE-2025-12480",
@@ -668,6 +679,8 @@
668
679
  "CVE-2025-21085",
669
680
  "CVE-2025-21590",
670
681
  "CVE-2025-24472",
682
+ "CVE-2025-24989",
683
+ "CVE-2025-25181",
671
684
  "CVE-2025-2746",
672
685
  "CVE-2025-2747",
673
686
  "CVE-2025-31161",
@@ -705,6 +718,7 @@
705
718
  "CVE-2026-41947",
706
719
  "CVE-2026-41950",
707
720
  "CVE-2026-42897",
721
+ "CVE-2026-48558",
708
722
  "CVE-2026-50751",
709
723
  "CVE-2026-6973",
710
724
  "MAL-2026-NODE-IPC-STEALER",
@@ -1024,6 +1038,7 @@
1024
1038
  "CVE-2016-7836",
1025
1039
  "CVE-2017-1000353",
1026
1040
  "CVE-2017-12637",
1041
+ "CVE-2017-3066",
1027
1042
  "CVE-2017-7921",
1028
1043
  "CVE-2018-4063",
1029
1044
  "CVE-2019-19006",
@@ -1052,6 +1067,9 @@
1052
1067
  "CVE-2022-36551",
1053
1068
  "CVE-2022-37055",
1054
1069
  "CVE-2022-40799",
1070
+ "CVE-2022-43769",
1071
+ "CVE-2022-43939",
1072
+ "CVE-2023-20118",
1055
1073
  "CVE-2023-21529",
1056
1074
  "CVE-2023-2533",
1057
1075
  "CVE-2023-27351",
@@ -1085,6 +1103,7 @@
1085
1103
  "CVE-2024-1708",
1086
1104
  "CVE-2024-1709",
1087
1105
  "CVE-2024-20439",
1106
+ "CVE-2024-20953",
1088
1107
  "CVE-2024-21182",
1089
1108
  "CVE-2024-21575",
1090
1109
  "CVE-2024-21576",
@@ -1102,12 +1121,14 @@
1102
1121
  "CVE-2024-42479",
1103
1122
  "CVE-2024-43468",
1104
1123
  "CVE-2024-48248",
1124
+ "CVE-2024-4885",
1105
1125
  "CVE-2024-4889",
1106
1126
  "CVE-2024-50050",
1107
1127
  "CVE-2024-54085",
1108
1128
  "CVE-2024-56145",
1109
1129
  "CVE-2024-57726",
1110
1130
  "CVE-2024-57728",
1131
+ "CVE-2024-57968",
1111
1132
  "CVE-2024-58136",
1112
1133
  "CVE-2024-6047",
1113
1134
  "CVE-2024-6587",
@@ -1115,6 +1136,7 @@
1115
1136
  "CVE-2024-7694",
1116
1137
  "CVE-2024-8068",
1117
1138
  "CVE-2024-8069",
1139
+ "CVE-2025-0111",
1118
1140
  "CVE-2025-0282",
1119
1141
  "CVE-2025-10035",
1120
1142
  "CVE-2025-1094",
@@ -1138,6 +1160,8 @@
1138
1160
  "CVE-2025-24472",
1139
1161
  "CVE-2025-24813",
1140
1162
  "CVE-2025-24893",
1163
+ "CVE-2025-24989",
1164
+ "CVE-2025-25181",
1141
1165
  "CVE-2025-25257",
1142
1166
  "CVE-2025-25297",
1143
1167
  "CVE-2025-26399",
@@ -1312,7 +1336,9 @@
1312
1336
  "CVE-2026-42897",
1313
1337
  "CVE-2026-42945",
1314
1338
  "CVE-2026-45247",
1339
+ "CVE-2026-45659",
1315
1340
  "CVE-2026-45829",
1341
+ "CVE-2026-48558",
1316
1342
  "CVE-2026-48907",
1317
1343
  "CVE-2026-50751",
1318
1344
  "CVE-2026-5760",
@@ -1465,6 +1491,9 @@
1465
1491
  "description": "Adversaries may breach or otherwise leverage organizations who have access to intended victims.",
1466
1492
  "tactic": [
1467
1493
  "Initial Access"
1494
+ ],
1495
+ "cve_refs": [
1496
+ "CVE-2026-48558"
1468
1497
  ]
1469
1498
  },
1470
1499
  "T1203": {
@@ -2085,6 +2114,9 @@
2085
2114
  "CVE-2011-0411",
2086
2115
  "CVE-2021-33515",
2087
2116
  "CVE-2021-38371",
2117
+ "CVE-2024-13159",
2118
+ "CVE-2024-13160",
2119
+ "CVE-2024-13161",
2088
2120
  "CVE-2025-24054"
2089
2121
  ]
2090
2122
  },
@@ -2895,6 +2927,7 @@
2895
2927
  "name": "Drive-by Compromise",
2896
2928
  "version": "v19",
2897
2929
  "cve_refs": [
2930
+ "CVE-2023-34192",
2898
2931
  "CVE-2023-6571",
2899
2932
  "CVE-2024-27132",
2900
2933
  "CVE-2025-10585",
@@ -3020,6 +3053,7 @@
3020
3053
  "name": "Steal Web Session Cookie",
3021
3054
  "version": "v19",
3022
3055
  "cve_refs": [
3056
+ "CVE-2023-34192",
3023
3057
  "CVE-2023-6571",
3024
3058
  "CVE-2024-11182",
3025
3059
  "CVE-2024-42009",
@@ -3571,7 +3605,10 @@
3571
3605
  "Windows"
3572
3606
  ],
3573
3607
  "stix_id": "attack-pattern--42e8de7b-37b2-4258-905a-6897815e58e0",
3574
- "is_subtechnique": false
3608
+ "is_subtechnique": false,
3609
+ "cve_refs": [
3610
+ "CVE-2025-26633"
3611
+ ]
3575
3612
  },
3576
3613
  "T1037": {
3577
3614
  "id": "T1037",
@@ -3984,6 +4021,7 @@
3984
4021
  "CVE-2024-38475",
3985
4022
  "CVE-2024-39722",
3986
4023
  "CVE-2024-48248",
4024
+ "CVE-2025-0111",
3987
4025
  "CVE-2025-24984",
3988
4026
  "CVE-2026-20262",
3989
4027
  "CVE-2026-34909",
@@ -4626,6 +4664,9 @@
4626
4664
  "stix_id": "attack-pattern--b77cf5f3-6060-475d-bd60-40ccbf28fdc2",
4627
4665
  "is_subtechnique": false,
4628
4666
  "cve_refs": [
4667
+ "CVE-2024-13159",
4668
+ "CVE-2024-13160",
4669
+ "CVE-2024-13161",
4629
4670
  "CVE-2025-24054"
4630
4671
  ]
4631
4672
  },
@@ -4669,7 +4710,10 @@
4669
4710
  "macOS"
4670
4711
  ],
4671
4712
  "stix_id": "attack-pattern--d40239b3-05ff-46d8-9bdd-b46d13463ef9",
4672
- "is_subtechnique": false
4713
+ "is_subtechnique": false,
4714
+ "cve_refs": [
4715
+ "CVE-2024-50302"
4716
+ ]
4673
4717
  },
4674
4718
  "T1201": {
4675
4719
  "id": "T1201",
@@ -4748,6 +4792,7 @@
4748
4792
  "CVE-2024-37052",
4749
4793
  "CVE-2024-37060",
4750
4794
  "CVE-2025-1550",
4795
+ "CVE-2025-26633",
4751
4796
  "CVE-2025-32434",
4752
4797
  "CVE-2025-33236",
4753
4798
  "CVE-2025-51480",
@@ -4914,7 +4959,10 @@
4914
4959
  "Windows"
4915
4960
  ],
4916
4961
  "stix_id": "attack-pattern--457c7820-d331-465a-915e-42f85500ccc4",
4917
- "is_subtechnique": false
4962
+ "is_subtechnique": false,
4963
+ "cve_refs": [
4964
+ "CVE-2025-26633"
4965
+ ]
4918
4966
  },
4919
4967
  "T1219": {
4920
4968
  "id": "T1219",
@@ -12369,6 +12417,7 @@
12369
12417
  "CVE-2018-4063",
12370
12418
  "CVE-2021-26828",
12371
12419
  "CVE-2024-1708",
12420
+ "CVE-2024-57968",
12372
12421
  "CVE-2024-7399",
12373
12422
  "CVE-2024-7694",
12374
12423
  "CVE-2025-24813",