@cyanheads/pentest-mcp-server 0.1.3 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/AGENTS.md +2 -2
- package/CLAUDE.md +2 -2
- package/Dockerfile +5 -0
- package/README.md +16 -4
- package/changelog/0.1.x/0.1.4.md +17 -0
- package/changelog/0.1.x/0.1.5.md +32 -0
- package/dist/data/waf-bypass/index.d.ts.map +1 -1
- package/dist/data/waf-bypass/index.js +146 -5
- package/dist/data/waf-bypass/index.js.map +1 -1
- package/dist/index.js +2 -0
- package/dist/index.js.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-analyze-response.tool.d.ts +1 -1
- package/dist/mcp-server/tools/definitions/pentest-analyze-response.tool.js +1 -1
- package/dist/mcp-server/tools/definitions/pentest-analyze-response.tool.js.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-encode.tool.d.ts +1 -1
- package/dist/mcp-server/tools/definitions/pentest-encode.tool.js +1 -1
- package/dist/mcp-server/tools/definitions/pentest-encode.tool.js.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-generate-payloads.tool.d.ts +3 -0
- package/dist/mcp-server/tools/definitions/pentest-generate-payloads.tool.d.ts.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-generate-payloads.tool.js +12 -1
- package/dist/mcp-server/tools/definitions/pentest-generate-payloads.tool.js.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-guide.tool.d.ts +1 -1
- package/dist/mcp-server/tools/definitions/pentest-guide.tool.js +1 -1
- package/dist/mcp-server/tools/definitions/pentest-guide.tool.js.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-lookup-group.tool.d.ts +31 -0
- package/dist/mcp-server/tools/definitions/pentest-lookup-group.tool.d.ts.map +1 -0
- package/dist/mcp-server/tools/definitions/pentest-lookup-group.tool.js +109 -0
- package/dist/mcp-server/tools/definitions/pentest-lookup-group.tool.js.map +1 -0
- package/dist/mcp-server/tools/definitions/pentest-map-techniques.tool.d.ts +1 -1
- package/dist/mcp-server/tools/definitions/pentest-map-techniques.tool.d.ts.map +1 -1
- package/dist/mcp-server/tools/definitions/pentest-map-techniques.tool.js +5 -1
- package/dist/mcp-server/tools/definitions/pentest-map-techniques.tool.js.map +1 -1
- package/dist/mcp-server/tools/index.d.ts +32 -5
- package/dist/mcp-server/tools/index.d.ts.map +1 -1
- package/dist/mcp-server/tools/index.js +3 -1
- package/dist/mcp-server/tools/index.js.map +1 -1
- package/dist/services/attack/attack-service.d.ts +29 -0
- package/dist/services/attack/attack-service.d.ts.map +1 -1
- package/dist/services/attack/attack-service.js +99 -0
- package/dist/services/attack/attack-service.js.map +1 -1
- package/package.json +6 -6
- package/server.json +3 -3
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pentest-guide.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-guide.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,MAAM,uBAAuB,GAC3B,sKAAsK,CAAC;AAEzK,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE;IACpD,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,koBAAkoB;IACpoB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC;aACN,IAAI,CAAC;YACJ,aAAa;YACb,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,KAAK;YACL,gBAAgB;YAChB,MAAM;YACN,MAAM;YACN,eAAe;YACf,iBAAiB;YACjB,gBAAgB;YAChB,MAAM;YACN,mBAAmB;YACnB,YAAY;SACb,CAAC;aACD,QAAQ,CACP,qJAAqJ,CACtJ;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC;YACN,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iJAAiJ,CAClJ;YACH,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iJAAiJ,CAClJ;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,wJAAwJ,CACzJ;SACJ,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CACP,+IAA+I,CAChJ;QACH,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aAC1E,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,wIAAwI,CACzI;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC3D,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,CACP,gGAAgG,CACjG;QACH,MAAM,EAAE,CAAC;aACN,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;YAClF,UAAU,EAAE,CAAC;iBACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC;iBAC1D,QAAQ,CAAC,oEAAoE,CAAC;YACjF,UAAU,EAAE,CAAC;iBACV,KAAK,CACJ,CAAC;iBACE,MAAM,CAAC;gBACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,WAAW,EAAE,CAAC;qBACX,MAAM,EAAE;qBACR,QAAQ,CAAC,qDAAqD,CAAC;gBAClE,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,QAAQ,CACP,2EAA2E,CAC5E;gBACH,UAAU,EAAE,CAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,CACP,yEAAyE,CAC1E;gBACH,UAAU,EAAE,CAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,0HAA0H,CAC3H;aACJ,CAAC;iBACD,QAAQ,CACP,4EAA4E,CAC7E,CACJ;iBACA,QAAQ,CAAC,uCAAuC,CAAC;YACpD,mBAAmB,EAAE,CAAC;iBACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;iBACjE,QAAQ,CACP,4GAA4G,CAC7G;YACH,eAAe,EAAE,CAAC;iBACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;iBAC/C,QAAQ,CAAC,yDAAyD,CAAC;SACvE,CAAC;aACD,QAAQ,CAAC,4EAA4E,CAAC,CAC1F;aACA,QAAQ,CACP,8FAA8F,CAC/F;QACH,gBAAgB,EAAE,CAAC;aAChB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;aACpD,QAAQ,CAAC,oEAAoE,CAAC;QACjF,oBAAoB,EAAE,CAAC;aACpB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;aACrD,QAAQ,CACP,oFAAoF,CACrF;QACH,mBAAmB,EAAE,CAAC;aACnB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,6DAA6D,CAAC;YAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACtE,IAAI,EAAE,CAAC;iBACJ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/B,QAAQ,CACP,+EAA+E,CAChF;SACJ,CAAC;aACD,QAAQ,CAAC,4EAA4E,CAAC,CAC1F;aACA,QAAQ,CACP,yFAAyF,CAC1F;KACJ,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,gBAAgB,CAAC,
|
|
1
|
+
{"version":3,"file":"pentest-guide.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-guide.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAC;AAEtF,MAAM,uBAAuB,GAC3B,sKAAsK,CAAC;AAEzK,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE;IACpD,KAAK,EAAE,eAAe;IACtB,WAAW,EACT,koBAAkoB;IACpoB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,MAAM,EAAE,CAAC;aACN,IAAI,CAAC;YACJ,aAAa;YACb,MAAM;YACN,MAAM;YACN,KAAK;YACL,MAAM;YACN,KAAK;YACL,gBAAgB;YAChB,MAAM;YACN,MAAM;YACN,eAAe;YACf,iBAAiB;YACjB,gBAAgB;YAChB,MAAM;YACN,mBAAmB;YACnB,YAAY;SACb,CAAC;aACD,QAAQ,CACP,qJAAqJ,CACtJ;QACH,cAAc,EAAE,CAAC;aACd,MAAM,CAAC;YACN,KAAK,EAAE,CAAC;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iJAAiJ,CAClJ;YACH,GAAG,EAAE,CAAC;iBACH,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,iJAAiJ,CAClJ;YACH,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,wJAAwJ,CACzJ;SACJ,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CACP,+IAA+I,CAChJ;QACH,KAAK,EAAE,CAAC;aACL,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,CAAC,CAAC;aAC1E,OAAO,CAAC,KAAK,CAAC;aACd,QAAQ,CACP,wIAAwI,CACzI;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;QAC3D,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,CACP,gGAAgG,CACjG;QACH,MAAM,EAAE,CAAC;aACN,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;YAClF,UAAU,EAAE,CAAC;iBACV,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC;iBAC1D,QAAQ,CAAC,oEAAoE,CAAC;YACjF,UAAU,EAAE,CAAC;iBACV,KAAK,CACJ,CAAC;iBACE,MAAM,CAAC;gBACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,WAAW,EAAE,CAAC;qBACX,MAAM,EAAE;qBACR,QAAQ,CAAC,qDAAqD,CAAC;gBAClE,SAAS,EAAE,CAAC;qBACT,MAAM,EAAE;qBACR,QAAQ,CACP,2EAA2E,CAC5E;gBACH,UAAU,EAAE,CAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,CACP,yEAAyE,CAC1E;gBACH,UAAU,EAAE,CAAC;qBACV,MAAM,EAAE;qBACR,QAAQ,EAAE;qBACV,QAAQ,CACP,0HAA0H,CAC3H;aACJ,CAAC;iBACD,QAAQ,CACP,4EAA4E,CAC7E,CACJ;iBACA,QAAQ,CAAC,uCAAuC,CAAC;YACpD,mBAAmB,EAAE,CAAC;iBACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,CAAC;iBACjE,QAAQ,CACP,4GAA4G,CAC7G;YACH,eAAe,EAAE,CAAC;iBACf,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;iBAC/C,QAAQ,CAAC,yDAAyD,CAAC;SACvE,CAAC;aACD,QAAQ,CAAC,4EAA4E,CAAC,CAC1F;aACA,QAAQ,CACP,8FAA8F,CAC/F;QACH,gBAAgB,EAAE,CAAC;aAChB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;aACpD,QAAQ,CAAC,oEAAoE,CAAC;QACjF,oBAAoB,EAAE,CAAC;aACpB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;aACrD,QAAQ,CACP,oFAAoF,CACrF;QACH,mBAAmB,EAAE,CAAC;aACnB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,QAAQ,EAAE,CAAC;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,6DAA6D,CAAC;YAC1E,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;YACtE,IAAI,EAAE,CAAC;iBACJ,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC/B,QAAQ,CACP,+EAA+E,CAChF;SACJ,CAAC;aACD,QAAQ,CAAC,4EAA4E,CAAC,CAC1F;aACA,QAAQ,CACP,yFAAyF,CAC1F;KACJ,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,gBAAgB,CAAC,eAAe;YACtC,IAAI,EAAE,4CAA4C;YAClD,QAAQ,EAAE,6DAA6D;SACxE;KACF;IAED,OAAO,CAAC,KAAK,EAAE,GAAG;QAChB,MAAM,GAAG,GAAG,qBAAqB,EAAE,CAAC;QACpC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,GAAG,GAAG,CAAC,cAAc,CAC3E,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,cAAc,EACpB,GAAG,CACJ,CAAC;QAEF,8BAA8B;QAC9B,MAAM,mBAAmB,GAAG,wBAAwB,CAClD,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,cAAc,EACpB,oBAAoB,CACrB,CAAC;QAEF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;YACrC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,MAAM,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,uBAAuB,EAAE,uBAAuB;YAChD,MAAM;YACN,gBAAgB;YAChB,oBAAoB;YACpB,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa;YACtB,QAAQ,MAAM,CAAC,uBAAuB,EAAE;YACxC,EAAE;YACF,oBAAoB,MAAM,CAAC,MAAM,EAAE;YACnC,EAAE;SACH,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU;gBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEf,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC7B,IAAI,IAAI,CAAC,UAAU;oBAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBACpE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;YAED,IAAI,KAAK,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACnC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe;oBAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/C,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CACR,WAAW,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC;AAEH,iDAAiD;AACjD,SAAS,wBAAwB,CAC/B,MAAc,EACd,aAAmF,EACnF,SAAmB;IAEnB,MAAM,WAAW,GACf,EAAE,CAAC;IAEL,+BAA+B;IAC/B,MAAM,uBAAuB,GAA2B;QACtD,GAAG,EAAE,KAAK;QACV,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,MAAM;QACZ,GAAG,EAAE,KAAK;QACV,cAAc,EAAE,gBAAgB;QAChC,IAAI,EAAE,MAAM;QACZ,iBAAiB,EAAE,mBAAmB;QACtC,aAAa,EAAE,eAAe;QAC9B,IAAI,EAAE,MAAM;QACZ,eAAe,EAAE,iBAAiB;QAClC,UAAU,EAAE,KAAK;KAClB,CAAC;IACF,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,WAAW,GAA4B;YAC3C,QAAQ,EAAE,eAAe;YACzB,iBAAiB,EAAE,SAAS;SAC7B,CAAC;QACF,IAAI,aAAa,EAAE,GAAG;YAAE,WAAW,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrF,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,2BAA2B;YACrC,MAAM,EAAE,gDAAgD,MAAM,WAAW;YACzE,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC;IAED,mDAAmD;IACnD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,0BAA0B;YACpC,MAAM,EAAE,iDAAiD,MAAM,oCAAoC;YACnG,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAE,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,WAAW,CAAC,IAAI,CAAC;QACf,QAAQ,EAAE,qCAAqC;QAC/C,MAAM,EAAE,uEAAuE,MAAM,GAAG;QACxF,IAAI,EAAE;YACJ,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,aAAa,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;SAC5E;KACF,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC"}
|
|
@@ -0,0 +1,31 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview pentest_lookup_group — MITRE ATT&CK threat group and software lookup.
|
|
3
|
+
* @module mcp-server/tools/definitions/pentest-lookup-group.tool
|
|
4
|
+
*/
|
|
5
|
+
import { z } from '@cyanheads/mcp-ts-core';
|
|
6
|
+
import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
|
|
7
|
+
export declare const pentestLookupGroupTool: import("@cyanheads/mcp-ts-core").ToolDefinition<z.ZodObject<{
|
|
8
|
+
query: z.ZodString;
|
|
9
|
+
}, z.core.$strip>, z.ZodObject<{
|
|
10
|
+
authorized_use_reminder: z.ZodString;
|
|
11
|
+
id: z.ZodString;
|
|
12
|
+
name: z.ZodString;
|
|
13
|
+
aliases: z.ZodArray<z.ZodString>;
|
|
14
|
+
type: z.ZodEnum<{
|
|
15
|
+
group: "group";
|
|
16
|
+
software: "software";
|
|
17
|
+
}>;
|
|
18
|
+
description: z.ZodString;
|
|
19
|
+
techniques_used: z.ZodArray<z.ZodObject<{
|
|
20
|
+
technique_id: z.ZodString;
|
|
21
|
+
technique_name: z.ZodString;
|
|
22
|
+
description: z.ZodString;
|
|
23
|
+
}, z.core.$strip>>;
|
|
24
|
+
attack_version: z.ZodString;
|
|
25
|
+
}, z.core.$strip>, readonly [{
|
|
26
|
+
readonly reason: "no_match";
|
|
27
|
+
readonly code: JsonRpcErrorCode.NotFound;
|
|
28
|
+
readonly when: "No group or software entry matched the query.";
|
|
29
|
+
readonly recovery: "Try the exact ATT&CK ID (e.g., \"G0007\" for a group, \"S0002\" for software) or broaden the name. Group IDs use a G-prefix; software IDs use an S-prefix.";
|
|
30
|
+
}], undefined>;
|
|
31
|
+
//# sourceMappingURL=pentest-lookup-group.tool.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pentest-lookup-group.tool.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-lookup-group.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAMjE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;cAiIjC,CAAC"}
|
|
@@ -0,0 +1,109 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* @fileoverview pentest_lookup_group — MITRE ATT&CK threat group and software lookup.
|
|
3
|
+
* @module mcp-server/tools/definitions/pentest-lookup-group.tool
|
|
4
|
+
*/
|
|
5
|
+
import { tool, z } from '@cyanheads/mcp-ts-core';
|
|
6
|
+
import { JsonRpcErrorCode } from '@cyanheads/mcp-ts-core/errors';
|
|
7
|
+
import { getAttackService } from '../../../services/attack/attack-service.js';
|
|
8
|
+
const AUTHORIZED_USE_REMINDER = 'AUTHORIZED TESTING ONLY: ATT&CK threat group and software data is provided for authorized penetration testing, threat intelligence, and defensive detection coverage only.';
|
|
9
|
+
export const pentestLookupGroupTool = tool('pentest_lookup_group', {
|
|
10
|
+
title: 'Pentest Lookup Group',
|
|
11
|
+
description: 'Look up a MITRE ATT&CK threat group (intrusion set) or software entry by name or ID for authorized penetration testing and threat intelligence. Returns the group or software record: ATT&CK ID, display name, known aliases, type (group vs. software), description, and the techniques it uses with procedure-level context from public ATT&CK reporting. Accepts exact ATT&CK IDs (G0007 for threat groups, S0002 for software) or keyword/name search (e.g., "APT28", "Mimikatz", "Lazarus Group"). Equally useful for defenders building detection coverage around specific adversary tradecraft.',
|
|
12
|
+
annotations: { readOnlyHint: true, openWorldHint: false, idempotentHint: true },
|
|
13
|
+
input: z.object({
|
|
14
|
+
query: z
|
|
15
|
+
.string()
|
|
16
|
+
.describe('ATT&CK threat group ID (e.g., "G0007"), software ID (e.g., "S0002"), or name/keyword (e.g., "APT28", "Mimikatz", "Lazarus Group"). ID lookup is exact and case-insensitive; name/keyword search returns the best match.'),
|
|
17
|
+
}),
|
|
18
|
+
output: z.object({
|
|
19
|
+
authorized_use_reminder: z
|
|
20
|
+
.string()
|
|
21
|
+
.describe('Reminder that threat group data is for authorized testing and research only. Rendered first.'),
|
|
22
|
+
id: z.string().describe('ATT&CK ID (e.g., "G0007" for a group, "S0002" for software).'),
|
|
23
|
+
name: z.string().describe('Primary display name (e.g., "APT28", "Mimikatz").'),
|
|
24
|
+
aliases: z
|
|
25
|
+
.array(z.string().describe('An alternate name for this group or software.'))
|
|
26
|
+
.describe('Known alternate names from ATT&CK.'),
|
|
27
|
+
type: z
|
|
28
|
+
.enum(['group', 'software'])
|
|
29
|
+
.describe('"group" for intrusion sets (threat actors), "software" for malware and tools.'),
|
|
30
|
+
description: z.string().describe('ATT&CK description (truncated to 800 characters).'),
|
|
31
|
+
techniques_used: z
|
|
32
|
+
.array(z
|
|
33
|
+
.object({
|
|
34
|
+
technique_id: z.string().describe('ATT&CK technique ID (e.g., "T1190").'),
|
|
35
|
+
technique_name: z.string().describe('Technique name.'),
|
|
36
|
+
description: z
|
|
37
|
+
.string()
|
|
38
|
+
.describe('How this group or software used the technique, from public ATT&CK reporting.'),
|
|
39
|
+
})
|
|
40
|
+
.describe('A technique used by this group or software with procedure context.'))
|
|
41
|
+
.describe('Techniques this group or software is known to use, with procedure-level context from public ATT&CK reporting (up to 20 entries). Use pentest_lookup_technique with each technique_id for full technique details including detection and mitigations.'),
|
|
42
|
+
attack_version: z
|
|
43
|
+
.string()
|
|
44
|
+
.describe('ATT&CK dataset version used (e.g., "Enterprise v19.1"). Included so callers know the data vintage.'),
|
|
45
|
+
}),
|
|
46
|
+
errors: [
|
|
47
|
+
{
|
|
48
|
+
reason: 'no_match',
|
|
49
|
+
code: JsonRpcErrorCode.NotFound,
|
|
50
|
+
when: 'No group or software entry matched the query.',
|
|
51
|
+
recovery: 'Try the exact ATT&CK ID (e.g., "G0007" for a group, "S0002" for software) or broaden the name. Group IDs use a G-prefix; software IDs use an S-prefix.',
|
|
52
|
+
},
|
|
53
|
+
],
|
|
54
|
+
handler(input, ctx) {
|
|
55
|
+
const svc = getAttackService();
|
|
56
|
+
const query = input.query.trim();
|
|
57
|
+
// Try exact ID lookup first (G#### or S####)
|
|
58
|
+
let group = /^[GS]\d{4}$/i.test(query) ? svc.lookupGroupById(query) : undefined;
|
|
59
|
+
// Fall back to keyword/name search
|
|
60
|
+
if (!group) {
|
|
61
|
+
const results = svc.searchGroups(query, ctx);
|
|
62
|
+
group = results[0];
|
|
63
|
+
}
|
|
64
|
+
if (!group) {
|
|
65
|
+
throw ctx.fail('no_match', `No ATT&CK group or software found for query: "${query}"`);
|
|
66
|
+
}
|
|
67
|
+
ctx.log.info('pentest_lookup_group found', {
|
|
68
|
+
id: group.id,
|
|
69
|
+
name: group.name,
|
|
70
|
+
type: group.type,
|
|
71
|
+
});
|
|
72
|
+
return {
|
|
73
|
+
authorized_use_reminder: AUTHORIZED_USE_REMINDER,
|
|
74
|
+
id: group.id,
|
|
75
|
+
name: group.name,
|
|
76
|
+
aliases: group.aliases,
|
|
77
|
+
type: group.type,
|
|
78
|
+
description: group.description,
|
|
79
|
+
techniques_used: group.techniques_used,
|
|
80
|
+
attack_version: group.attack_version,
|
|
81
|
+
};
|
|
82
|
+
},
|
|
83
|
+
format: (result) => {
|
|
84
|
+
const lines = [
|
|
85
|
+
`> ⚠️ ${result.authorized_use_reminder}`,
|
|
86
|
+
'',
|
|
87
|
+
`# ${result.id}: ${result.name}`,
|
|
88
|
+
'',
|
|
89
|
+
`**Type:** ${result.type === 'group' ? 'Threat Group (Intrusion Set)' : 'Software (Malware / Tool)'}`,
|
|
90
|
+
`**ATT&CK Version:** ${result.attack_version}`,
|
|
91
|
+
];
|
|
92
|
+
if (result.aliases.length > 0) {
|
|
93
|
+
lines.push(`**Aliases:** ${result.aliases.join(', ')}`);
|
|
94
|
+
}
|
|
95
|
+
lines.push('', result.description, '');
|
|
96
|
+
if (result.techniques_used.length > 0) {
|
|
97
|
+
lines.push(`## Techniques Used (${result.techniques_used.length})`);
|
|
98
|
+
lines.push('_Use `pentest_lookup_technique` with each technique ID for full detection and mitigation context._', '');
|
|
99
|
+
for (const t of result.techniques_used) {
|
|
100
|
+
lines.push(`### ${t.technique_id}: ${t.technique_name}`);
|
|
101
|
+
if (t.description)
|
|
102
|
+
lines.push(t.description);
|
|
103
|
+
lines.push('');
|
|
104
|
+
}
|
|
105
|
+
}
|
|
106
|
+
return [{ type: 'text', text: lines.join('\n') }];
|
|
107
|
+
},
|
|
108
|
+
});
|
|
109
|
+
//# sourceMappingURL=pentest-lookup-group.tool.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"pentest-lookup-group.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-lookup-group.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,MAAM,uBAAuB,GAC3B,4KAA4K,CAAC;AAE/K,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,EAAE;IACjE,KAAK,EAAE,sBAAsB;IAC7B,WAAW,EACT,wkBAAwkB;IAC1kB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,QAAQ,CACP,yNAAyN,CAC1N;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,CACP,8FAA8F,CAC/F;QACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;QACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QAC9E,OAAO,EAAE,CAAC;aACP,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC,CAAC;aAC3E,QAAQ,CAAC,oCAAoC,CAAC;QACjD,IAAI,EAAE,CAAC;aACJ,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;aAC3B,QAAQ,CAAC,+EAA+E,CAAC;QAC5F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QACrF,eAAe,EAAE,CAAC;aACf,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACzE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YACtD,WAAW,EAAE,CAAC;iBACX,MAAM,EAAE;iBACR,QAAQ,CACP,8EAA8E,CAC/E;SACJ,CAAC;aACD,QAAQ,CAAC,oEAAoE,CAAC,CAClF;aACA,QAAQ,CACP,sPAAsP,CACvP;QACH,cAAc,EAAE,CAAC;aACd,MAAM,EAAE;aACR,QAAQ,CACP,oGAAoG,CACrG;KACJ,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,gBAAgB,CAAC,QAAQ;YAC/B,IAAI,EAAE,+CAA+C;YACrD,QAAQ,EACN,wJAAwJ;SAC3J;KACF;IAED,OAAO,CAAC,KAAK,EAAE,GAAG;QAChB,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAEjC,6CAA6C;QAC7C,IAAI,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEhF,mCAAmC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,iDAAiD,KAAK,GAAG,CAAC,CAAC;QACxF,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACzC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,OAAO;YACL,uBAAuB,EAAE,uBAAuB;YAChD,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa;YACtB,QAAQ,MAAM,CAAC,uBAAuB,EAAE;YACxC,EAAE;YACF,KAAK,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,EAAE;YAChC,EAAE;YACF,aAAa,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,2BAA2B,EAAE;YACrG,uBAAuB,MAAM,CAAC,cAAc,EAAE;SAC/C,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC;YACpE,KAAK,CAAC,IAAI,CACR,oGAAoG,EACpG,EAAE,CACH,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,WAAW;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC"}
|
|
@@ -46,7 +46,7 @@ export declare const pentestMapTechniquesTool: import("@cyanheads/mcp-ts-core").
|
|
|
46
46
|
attack_version: z.ZodString;
|
|
47
47
|
}, z.core.$strip>, readonly [{
|
|
48
48
|
readonly reason: "no_profile";
|
|
49
|
-
readonly code: JsonRpcErrorCode.
|
|
49
|
+
readonly code: JsonRpcErrorCode.ValidationError;
|
|
50
50
|
readonly when: "No profile fields were provided.";
|
|
51
51
|
readonly recovery: "Provide at least one of stack, services, auth_type, or os.";
|
|
52
52
|
}], undefined>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pentest-map-techniques.tool.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-map-techniques.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAwDjE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
|
|
1
|
+
{"version":3,"file":"pentest-map-techniques.tool.d.ts","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-map-techniques.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAwDjE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAoTnC,CAAC"}
|
|
@@ -141,7 +141,7 @@ export const pentestMapTechniquesTool = tool('pentest_map_techniques', {
|
|
|
141
141
|
errors: [
|
|
142
142
|
{
|
|
143
143
|
reason: 'no_profile',
|
|
144
|
-
code: JsonRpcErrorCode.
|
|
144
|
+
code: JsonRpcErrorCode.ValidationError,
|
|
145
145
|
when: 'No profile fields were provided.',
|
|
146
146
|
recovery: 'Provide at least one of stack, services, auth_type, or os.',
|
|
147
147
|
},
|
|
@@ -217,7 +217,11 @@ export const pentestMapTechniquesTool = tool('pentest_map_techniques', {
|
|
|
217
217
|
}
|
|
218
218
|
// Sort by score descending, take top N
|
|
219
219
|
scored.sort((a, b) => b.score - a.score);
|
|
220
|
+
const totalMatched = scored.length;
|
|
220
221
|
const topN = scored.slice(0, input.limit);
|
|
222
|
+
if (totalMatched > input.limit) {
|
|
223
|
+
ctx.enrich.truncated({ shown: topN.length, cap: input.limit });
|
|
224
|
+
}
|
|
221
225
|
const ranked_techniques = topN.map(({ technique, score, rationale }) => {
|
|
222
226
|
const primaryTactic = technique.tactics[0] ?? 'Unknown';
|
|
223
227
|
const mitigation = technique.mitigations[0];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"pentest-map-techniques.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-map-techniques.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAwB,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,wEAAwE;AACxE,MAAM,oBAAoB,GAA6B;IACrD,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC5B,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,8DAA8D;AAC9D,MAAM,gBAAgB,GAA6B;IACjD,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC;IAClC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;IACtC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/B,QAAQ,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;IAC7B,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;IAC3B,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;CACxB,CAAC;AAEF,mDAAmD;AACnD,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;IAC/C,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;IACvB,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,MAAM,UAAU,GAA2B;IACzC,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,gBAAgB;IACvB,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;CACrB,CAAC;AAEF,MAAM,uBAAuB,GAC3B,6HAA6H,CAAC;AAEhI,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,wBAAwB,EAAE;IACrE,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,smBAAsmB;IACxmB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC;aACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;aAC3D,QAAQ,EAAE;aACV,QAAQ,CACP,4JAA4J,CAC7J;QACH,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;aAC9D,QAAQ,EAAE;aACV,QAAQ,CACP,6HAA6H,CAC9H;QACH,SAAS,EAAE,CAAC;aACT,IAAI,CAAC;YACJ,KAAK;YACL,gBAAgB;YAChB,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,MAAM;YACN,UAAU;YACV,MAAM;YACN,SAAS;SACV,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,4EAA4E,CAAC;QACzF,EAAE,EAAE,CAAC;aACF,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;aAC9C,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,gJAAgJ,CACjJ;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,CACP,6FAA6F,CAC9F;QACH,iBAAiB,EAAE,CAAC;aACjB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACvE,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,QAAQ,CACP,yKAAyK,CAC1K;YACH,mBAAmB,EAAE,CAAC;iBACnB,MAAM,EAAE;iBACR,QAAQ,CACP,+EAA+E,CAChF;YACH,qBAAqB,EAAE,CAAC;iBACrB,MAAM,EAAE;iBACR,QAAQ,CAAC,uEAAuE,CAAC;YACpF,kBAAkB,EAAE,CAAC;iBAClB,MAAM,EAAE;iBACR,QAAQ,CAAC,mDAAmD,CAAC;YAChE,oBAAoB,EAAE,CAAC;iBACpB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4FAA4F,CAC7F;SACJ,CAAC;aACD,QAAQ,CAAC,yEAAyE,CAAC,CACvF;aACA,QAAQ,CAAC,mDAAmD,CAAC;QAChE,gBAAgB,EAAE,CAAC;aAChB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,0DAA0D,CAAC;YACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,CAAC,4DAA4D,CAAC;SAC1E,CAAC;aACD,QAAQ,CAAC,oDAAoD,CAAC,CAClE;aACA,QAAQ,CAAC,qEAAqE,CAAC;QAClF,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,QAAQ,CACP,qFAAqF,CACtF;QACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;KACvF,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,gBAAgB,CAAC,aAAa;YACpC,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,4DAA4D;SACvE;KACF;IAED,OAAO,CAAC,KAAK,EAAE,GAAG;QAChB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,GAAG,CAAC,IAAI,CACZ,YAAY,EACZ,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAE7C,uBAAuB;QACvB,MAAM,MAAM,GAA8E,EAAE,CAAC;QAE7F,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9F,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,eAAe;gBAAE,SAAS,CAAC,4BAA4B;YAEhE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,gDAAgD;YAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACtE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;oBAC3D,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,4EAA4E;YAC5E,IACE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjD,CAAC,UAAU,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACrB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACjB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACnB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CACxB;oBACC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAC1F,CAAC;gBACD,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC3C,CAAC;YAED,mFAAmF;YACnF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAChD,CAAC;gBACF,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;oBACtB,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;oBACrB,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,kFAAkF;YAClF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1D,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE;YACrE,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YACxD,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,iBAAiB,GAAG,UAAU;gBAClC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE;gBAChE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE/C,OAAO;gBACL,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM,EAAE,aAAa;gBACrB,eAAe,EAAE,KAAK;gBACtB,mBAAmB,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wCAAwC;gBACrF,qBAAqB,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC;gBACjE,kBAAkB,EAAE,iBAAiB;gBACrC,oBAAoB,EAAE,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,SAAS,GAAG;YAChB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtE,KAAK,CAAC,EAAE,IAAI,EAAE;YACd,KAAK,CAAC,SAAS,IAAI,EAAE;SACtB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgE,CAAC;QAC7F,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;wBACtB,OAAO,EAAE,EAAE,CAAC,EAAE;wBACd,IAAI,EAAE,EAAE,CAAC,IAAI;wBACb,SAAS,EAAE,gBAAgB,GAAG,KAAK,EAAE,CAAC,WAAW,EAAE;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC/C,cAAc,EAAE,iBAAiB,CAAC,MAAM;YACxC,UAAU,EAAE,YAAY,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,OAAO;YACL,uBAAuB,EAAE,uBAAuB;YAChD,iBAAiB;YACjB,gBAAgB,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACzD,eAAe,EAAE,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvE,cAAc,EAAE,GAAG,CAAC,OAAO;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa;YACtB,QAAQ,MAAM,CAAC,uBAAuB,EAAE;YACxC,EAAE;YACF,qBAAqB,MAAM,CAAC,eAAe,EAAE;YAC7C,uBAAuB,MAAM,CAAC,cAAc,EAAE;YAC9C,EAAE;YACF,6BAA6B;SAC9B,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,oBAAoB;gBAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,WAAmB;IACjD,wBAAwB;IACxB,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5D,4CAA4C;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO;AACT,CAAC"}
|
|
1
|
+
{"version":3,"file":"pentest-map-techniques.tool.js","sourceRoot":"","sources":["../../../../src/mcp-server/tools/definitions/pentest-map-techniques.tool.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAwB,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,wEAAwE;AACxE,MAAM,oBAAoB,GAA6B;IACrD,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;IAChC,cAAc,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC3B,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC9B,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAC5B,IAAI,EAAE,CAAC,OAAO,CAAC;IACf,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,8DAA8D;AAC9D,MAAM,gBAAgB,GAA6B;IACjD,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;IAC1B,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC;IAClC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IACjC,aAAa,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC;IACtC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/B,QAAQ,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC;IAC7B,KAAK,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;IAC3B,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC;CACxB,CAAC;AAEF,mDAAmD;AACnD,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC;IAC/C,OAAO,EAAE,CAAC,SAAS,CAAC;IACpB,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;IACvB,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF,MAAM,UAAU,GAA2B;IACzC,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,KAAK;IAClB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,gBAAgB;IACvB,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;CACrB,CAAC;AAEF,MAAM,uBAAuB,GAC3B,6HAA6H,CAAC;AAEhI,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC,wBAAwB,EAAE;IACrE,KAAK,EAAE,wBAAwB;IAC/B,WAAW,EACT,smBAAsmB;IACxmB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE;IAE/E,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC;aACL,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;aAC3D,QAAQ,EAAE;aACV,QAAQ,CACP,4JAA4J,CAC7J;QACH,QAAQ,EAAE,CAAC;aACR,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC;aAC9D,QAAQ,EAAE;aACV,QAAQ,CACP,6HAA6H,CAC9H;QACH,SAAS,EAAE,CAAC;aACT,IAAI,CAAC;YACJ,KAAK;YACL,gBAAgB;YAChB,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,MAAM;YACN,UAAU;YACV,MAAM;YACN,SAAS;SACV,CAAC;aACD,QAAQ,EAAE;aACV,QAAQ,CAAC,4EAA4E,CAAC;QACzF,EAAE,EAAE,CAAC;aACF,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;aAC9C,QAAQ,EAAE;aACV,QAAQ,CAAC,6DAA6D,CAAC;QAC1E,KAAK,EAAE,CAAC;aACL,MAAM,EAAE;aACR,GAAG,EAAE;aACL,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;aACP,OAAO,CAAC,EAAE,CAAC;aACX,QAAQ,CACP,gJAAgJ,CACjJ;KACJ,CAAC;IAEF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,uBAAuB,EAAE,CAAC;aACvB,MAAM,EAAE;aACR,QAAQ,CACP,6FAA6F,CAC9F;QACH,iBAAiB,EAAE,CAAC;aACjB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;YACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACvE,eAAe,EAAE,CAAC;iBACf,MAAM,EAAE;iBACR,QAAQ,CACP,yKAAyK,CAC1K;YACH,mBAAmB,EAAE,CAAC;iBACnB,MAAM,EAAE;iBACR,QAAQ,CACP,+EAA+E,CAChF;YACH,qBAAqB,EAAE,CAAC;iBACrB,MAAM,EAAE;iBACR,QAAQ,CAAC,uEAAuE,CAAC;YACpF,kBAAkB,EAAE,CAAC;iBAClB,MAAM,EAAE;iBACR,QAAQ,CAAC,mDAAmD,CAAC;YAChE,oBAAoB,EAAE,CAAC;iBACpB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4FAA4F,CAC7F;SACJ,CAAC;aACD,QAAQ,CAAC,yEAAyE,CAAC,CACvF;aACA,QAAQ,CAAC,mDAAmD,CAAC;QAChE,gBAAgB,EAAE,CAAC;aAChB,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,CAAC,0DAA0D,CAAC;YACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC5C,SAAS,EAAE,CAAC;iBACT,MAAM,EAAE;iBACR,QAAQ,CAAC,4DAA4D,CAAC;SAC1E,CAAC;aACD,QAAQ,CAAC,oDAAoD,CAAC,CAClE;aACA,QAAQ,CAAC,qEAAqE,CAAC;QAClF,eAAe,EAAE,CAAC;aACf,MAAM,EAAE;aACR,QAAQ,CACP,qFAAqF,CACtF;QACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;KACvF,CAAC;IAEF,MAAM,EAAE;QACN;YACE,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,gBAAgB,CAAC,eAAe;YACtC,IAAI,EAAE,kCAAkC;YACxC,QAAQ,EAAE,4DAA4D;SACvE;KACF;IAED,OAAO,CAAC,KAAK,EAAE,GAAG;QAChB,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACrE,MAAM,GAAG,CAAC,IAAI,CACZ,YAAY,EACZ,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC/B,MAAM,aAAa,GAAG,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAE7C,uBAAuB;QACvB,MAAM,MAAM,GAA8E,EAAE,CAAC;QAE7F,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,gBAAgB,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9F,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,eAAe;gBAAE,SAAS,CAAC,4BAA4B;YAEhE,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,MAAM,SAAS,GAAa,EAAE,CAAC;YAE/B,gDAAgD;YAChD,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACtE,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;oBAC3D,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,mBAAmB,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,4EAA4E;YAC5E,IACE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACjD,CAAC,UAAU,CAAC,IAAI,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAClB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACrB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACjB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpB,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;oBACnB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CACxB;oBACC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAC1F,CAAC;gBACD,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC3C,CAAC;YAED,mFAAmF;YACnF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACjD,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAChD,CAAC;gBACF,IAAI,MAAM,IAAI,OAAO,EAAE,CAAC;oBACtB,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,gBAAgB,SAAS,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,+CAA+C;YAC/C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,MAAM,aAAa,GAAG,gBAAgB,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;oBACrB,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBACR,CAAC;YACH,CAAC;YAED,kFAAkF;YAClF,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1D,KAAK,IAAI,CAAC,CAAC;gBACX,SAAS,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE;YACrE,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;YACxD,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC5C,MAAM,iBAAiB,GAAG,UAAU;gBAClC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE;gBAChE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE/C,OAAO;gBACL,YAAY,EAAE,SAAS,CAAC,EAAE;gBAC1B,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,MAAM,EAAE,aAAa;gBACrB,eAAe,EAAE,KAAK;gBACtB,mBAAmB,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wCAAwC;gBACrF,qBAAqB,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC;gBACjE,kBAAkB,EAAE,iBAAiB;gBACrC,oBAAoB,EAAE,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,SAAS,GAAG;YAChB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtE,KAAK,CAAC,EAAE,IAAI,EAAE;YACd,KAAK,CAAC,SAAS,IAAI,EAAE;SACtB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgE,CAAC;QAC7F,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,KAAK,MAAM,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC7B,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;wBACtB,OAAO,EAAE,EAAE,CAAC,EAAE;wBACd,IAAI,EAAE,EAAE,CAAC,IAAI;wBACb,SAAS,EAAE,gBAAgB,GAAG,KAAK,EAAE,CAAC,WAAW,EAAE;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,QAAQ;YAAE,YAAY,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,EAAE;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAEnD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,EAAE;YAC/C,cAAc,EAAE,iBAAiB,CAAC,MAAM;YACxC,UAAU,EAAE,YAAY,CAAC,IAAI;SAC9B,CAAC,CAAC;QAEH,OAAO;YACL,uBAAuB,EAAE,uBAAuB;YAChD,iBAAiB;YACjB,gBAAgB,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACzD,eAAe,EAAE,4BAA4B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvE,cAAc,EAAE,GAAG,CAAC,OAAO;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QACjB,MAAM,KAAK,GAAa;YACtB,QAAQ,MAAM,CAAC,uBAAuB,EAAE;YACxC,EAAE;YACF,qBAAqB,MAAM,CAAC,eAAe,EAAE;YAC7C,uBAAuB,MAAM,CAAC,cAAc,EAAE;YAC9C,EAAE;YACF,6BAA6B;SAC9B,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,qBAAqB,EAAE,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC,oBAAoB;gBAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QAED,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,sBAAsB,CAAC,WAAmB;IACjD,wBAAwB;IACxB,IAAI,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5D,4CAA4C;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO;AACT,CAAC"}
|
|
@@ -6,9 +6,10 @@ import { pentestAnalyzeResponseTool } from './definitions/pentest-analyze-respon
|
|
|
6
6
|
import { pentestEncodeTool } from './definitions/pentest-encode.tool.js';
|
|
7
7
|
import { pentestGeneratePayloadsTool } from './definitions/pentest-generate-payloads.tool.js';
|
|
8
8
|
import { pentestGuideTool } from './definitions/pentest-guide.tool.js';
|
|
9
|
+
import { pentestLookupGroupTool } from './definitions/pentest-lookup-group.tool.js';
|
|
9
10
|
import { pentestLookupTechniqueTool } from './definitions/pentest-lookup-technique.tool.js';
|
|
10
11
|
import { pentestMapTechniquesTool } from './definitions/pentest-map-techniques.tool.js';
|
|
11
|
-
export { pentestAnalyzeResponseTool, pentestEncodeTool, pentestGeneratePayloadsTool, pentestGuideTool, pentestLookupTechniqueTool, pentestMapTechniquesTool, };
|
|
12
|
+
export { pentestAnalyzeResponseTool, pentestEncodeTool, pentestGeneratePayloadsTool, pentestGuideTool, pentestLookupGroupTool, pentestLookupTechniqueTool, pentestMapTechniquesTool, };
|
|
12
13
|
export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolDefinition<import("zod").ZodObject<{
|
|
13
14
|
response_headers: import("zod").ZodOptional<import("zod").ZodString>;
|
|
14
15
|
response_body: import("zod").ZodOptional<import("zod").ZodString>;
|
|
@@ -57,7 +58,7 @@ export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolD
|
|
|
57
58
|
}, import("zod/v4/core").$strip>>;
|
|
58
59
|
}, import("zod/v4/core").$strip>, readonly [{
|
|
59
60
|
readonly reason: "no_input";
|
|
60
|
-
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.
|
|
61
|
+
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.ValidationError;
|
|
61
62
|
readonly when: "Neither response_headers nor response_body was provided.";
|
|
62
63
|
readonly recovery: "Provide at least one of response_headers or response_body to analyze.";
|
|
63
64
|
}], undefined> | import("@cyanheads/mcp-ts-core").ToolDefinition<import("zod").ZodObject<{
|
|
@@ -88,7 +89,7 @@ export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolD
|
|
|
88
89
|
detection_note: import("zod").ZodString;
|
|
89
90
|
}, import("zod/v4/core").$strip>, readonly [{
|
|
90
91
|
readonly reason: "encoding_error";
|
|
91
|
-
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.
|
|
92
|
+
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.ValidationError;
|
|
92
93
|
readonly when: "An encoding step produced invalid output (e.g., base64 on invalid input).";
|
|
93
94
|
readonly recovery: "Check the payload contents; ensure upstream steps produce valid input for subsequent encodings.";
|
|
94
95
|
}], undefined> | import("@cyanheads/mcp-ts-core").ToolDefinition<import("zod").ZodObject<{
|
|
@@ -133,6 +134,9 @@ export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolD
|
|
|
133
134
|
modsecurity_crs: "modsecurity_crs";
|
|
134
135
|
imperva: "imperva";
|
|
135
136
|
akamai: "akamai";
|
|
137
|
+
f5_bigip_asm: "f5_bigip_asm";
|
|
138
|
+
nginx_modsecurity: "nginx_modsecurity";
|
|
139
|
+
fortinet_fortiwaf: "fortinet_fortiwaf";
|
|
136
140
|
none: "none";
|
|
137
141
|
}>>;
|
|
138
142
|
encoding: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodEnum<{
|
|
@@ -218,9 +222,32 @@ export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolD
|
|
|
218
222
|
}, import("zod/v4/core").$strip>>;
|
|
219
223
|
}, import("zod/v4/core").$strip>, readonly [{
|
|
220
224
|
readonly reason: "unknown_vector";
|
|
221
|
-
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.
|
|
225
|
+
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.ValidationError;
|
|
222
226
|
readonly when: "Vector value is not in the supported enum.";
|
|
223
227
|
readonly recovery: "Use one of the listed enum values for the vector parameter.";
|
|
228
|
+
}], undefined> | import("@cyanheads/mcp-ts-core").ToolDefinition<import("zod").ZodObject<{
|
|
229
|
+
query: import("zod").ZodString;
|
|
230
|
+
}, import("zod/v4/core").$strip>, import("zod").ZodObject<{
|
|
231
|
+
authorized_use_reminder: import("zod").ZodString;
|
|
232
|
+
id: import("zod").ZodString;
|
|
233
|
+
name: import("zod").ZodString;
|
|
234
|
+
aliases: import("zod").ZodArray<import("zod").ZodString>;
|
|
235
|
+
type: import("zod").ZodEnum<{
|
|
236
|
+
group: "group";
|
|
237
|
+
software: "software";
|
|
238
|
+
}>;
|
|
239
|
+
description: import("zod").ZodString;
|
|
240
|
+
techniques_used: import("zod").ZodArray<import("zod").ZodObject<{
|
|
241
|
+
technique_id: import("zod").ZodString;
|
|
242
|
+
technique_name: import("zod").ZodString;
|
|
243
|
+
description: import("zod").ZodString;
|
|
244
|
+
}, import("zod/v4/core").$strip>>;
|
|
245
|
+
attack_version: import("zod").ZodString;
|
|
246
|
+
}, import("zod/v4/core").$strip>, readonly [{
|
|
247
|
+
readonly reason: "no_match";
|
|
248
|
+
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.NotFound;
|
|
249
|
+
readonly when: "No group or software entry matched the query.";
|
|
250
|
+
readonly recovery: "Try the exact ATT&CK ID (e.g., \"G0007\" for a group, \"S0002\" for software) or broaden the name. Group IDs use a G-prefix; software IDs use an S-prefix.";
|
|
224
251
|
}], undefined> | import("@cyanheads/mcp-ts-core").ToolDefinition<import("zod").ZodObject<{
|
|
225
252
|
query: import("zod").ZodString;
|
|
226
253
|
include_subtechniques: import("zod").ZodDefault<import("zod").ZodBoolean>;
|
|
@@ -298,7 +325,7 @@ export declare const allToolDefinitions: (import("@cyanheads/mcp-ts-core").ToolD
|
|
|
298
325
|
attack_version: import("zod").ZodString;
|
|
299
326
|
}, import("zod/v4/core").$strip>, readonly [{
|
|
300
327
|
readonly reason: "no_profile";
|
|
301
|
-
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.
|
|
328
|
+
readonly code: import("@cyanheads/mcp-ts-core/errors").JsonRpcErrorCode.ValidationError;
|
|
302
329
|
readonly when: "No profile fields were provided.";
|
|
303
330
|
readonly recovery: "Provide at least one of stack, services, auth_type, or os.";
|
|
304
331
|
}], undefined>)[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,GACzB,CAAC;AAEF,eAAO,MAAM,kBAAkB
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/mcp-server/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,GACzB,CAAC;AAEF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ9B,CAAC"}
|
|
@@ -6,13 +6,15 @@ import { pentestAnalyzeResponseTool } from './definitions/pentest-analyze-respon
|
|
|
6
6
|
import { pentestEncodeTool } from './definitions/pentest-encode.tool.js';
|
|
7
7
|
import { pentestGeneratePayloadsTool } from './definitions/pentest-generate-payloads.tool.js';
|
|
8
8
|
import { pentestGuideTool } from './definitions/pentest-guide.tool.js';
|
|
9
|
+
import { pentestLookupGroupTool } from './definitions/pentest-lookup-group.tool.js';
|
|
9
10
|
import { pentestLookupTechniqueTool } from './definitions/pentest-lookup-technique.tool.js';
|
|
10
11
|
import { pentestMapTechniquesTool } from './definitions/pentest-map-techniques.tool.js';
|
|
11
|
-
export { pentestAnalyzeResponseTool, pentestEncodeTool, pentestGeneratePayloadsTool, pentestGuideTool, pentestLookupTechniqueTool, pentestMapTechniquesTool, };
|
|
12
|
+
export { pentestAnalyzeResponseTool, pentestEncodeTool, pentestGeneratePayloadsTool, pentestGuideTool, pentestLookupGroupTool, pentestLookupTechniqueTool, pentestMapTechniquesTool, };
|
|
12
13
|
export const allToolDefinitions = [
|
|
13
14
|
pentestGuideTool,
|
|
14
15
|
pentestAnalyzeResponseTool,
|
|
15
16
|
pentestLookupTechniqueTool,
|
|
17
|
+
pentestLookupGroupTool,
|
|
16
18
|
pentestMapTechniquesTool,
|
|
17
19
|
pentestGeneratePayloadsTool,
|
|
18
20
|
pentestEncodeTool,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp-server/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,0BAA0B,EAC1B,wBAAwB,GACzB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,0BAA0B;IAC1B,0BAA0B;IAC1B,wBAAwB;IACxB,2BAA2B;IAC3B,iBAAiB;CAClB,CAAC"}
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp-server/tools/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iDAAiD,CAAC;AAC9F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AACpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,gDAAgD,CAAC;AAC5F,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AAExF,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,EACjB,2BAA2B,EAC3B,gBAAgB,EAChB,sBAAsB,EACtB,0BAA0B,EAC1B,wBAAwB,GACzB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB;IAChB,0BAA0B;IAC1B,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;IACxB,2BAA2B;IAC3B,iBAAiB;CAClB,CAAC"}
|
|
@@ -3,6 +3,27 @@
|
|
|
3
3
|
* @module services/attack/attack-service
|
|
4
4
|
*/
|
|
5
5
|
import type { Context } from '@cyanheads/mcp-ts-core';
|
|
6
|
+
/** Parsed ATT&CK group or software record (intrusion-set, malware, or tool). */
|
|
7
|
+
export interface AttackGroup {
|
|
8
|
+
/** Alternate names for this group or software. */
|
|
9
|
+
aliases: string[];
|
|
10
|
+
/** ATT&CK dataset version used. */
|
|
11
|
+
attack_version: string;
|
|
12
|
+
/** ATT&CK description (truncated). */
|
|
13
|
+
description: string;
|
|
14
|
+
/** ATT&CK ID (e.g. "G0007" for a group, "S0002" for software). */
|
|
15
|
+
id: string;
|
|
16
|
+
/** Display name (e.g. "APT28", "Mimikatz"). */
|
|
17
|
+
name: string;
|
|
18
|
+
/** Techniques used by this group/software, with procedure context. */
|
|
19
|
+
techniques_used: Array<{
|
|
20
|
+
technique_id: string;
|
|
21
|
+
technique_name: string;
|
|
22
|
+
description: string;
|
|
23
|
+
}>;
|
|
24
|
+
/** Whether this is a threat group or software entry. */
|
|
25
|
+
type: 'group' | 'software';
|
|
26
|
+
}
|
|
6
27
|
/** Parsed ATT&CK technique record (normalized from STIX). */
|
|
7
28
|
export interface AttackTechnique {
|
|
8
29
|
/** ATT&CK description. */
|
|
@@ -43,6 +64,10 @@ export declare class AttackService {
|
|
|
43
64
|
private readonly byId;
|
|
44
65
|
/** Inverted index: keyword token → set of technique IDs. */
|
|
45
66
|
private readonly keywordIndex;
|
|
67
|
+
/** Group/software index: ATT&CK ID (uppercase) → AttackGroup. */
|
|
68
|
+
private readonly groupById;
|
|
69
|
+
/** Inverted index: keyword token → set of group/software ATT&CK IDs. */
|
|
70
|
+
private readonly groupKeywordIndex;
|
|
46
71
|
readonly version: string;
|
|
47
72
|
constructor();
|
|
48
73
|
private loadAndIndex;
|
|
@@ -52,6 +77,10 @@ export declare class AttackService {
|
|
|
52
77
|
search(query: string, ctx: Context): AttackTechnique[];
|
|
53
78
|
/** Get all techniques for profile-based ranking. */
|
|
54
79
|
getAllTechniques(): AttackTechnique[];
|
|
80
|
+
/** Look up a group or software entry by exact ATT&CK ID (case-insensitive, G/S-prefix). */
|
|
81
|
+
lookupGroupById(id: string): AttackGroup | undefined;
|
|
82
|
+
/** Keyword search across group names and aliases — returns ranked results (up to 5). */
|
|
83
|
+
searchGroups(query: string, ctx: Context): AttackGroup[];
|
|
55
84
|
/** Get sub-techniques for a parent technique. */
|
|
56
85
|
getSubtechniques(parentId: string): AttackTechnique[];
|
|
57
86
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"attack-service.d.ts","sourceRoot":"","sources":["../../../src/services/attack/attack-service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAOtD,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,eAAe,EAAE,OAAO,CAAC;IACzB,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,wBAAwB;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,kBAAkB,EAAE,KAAK,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;
|
|
1
|
+
{"version":3,"file":"attack-service.d.ts","sourceRoot":"","sources":["../../../src/services/attack/attack-service.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAOtD,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mCAAmC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,eAAe,EAAE,KAAK,CAAC;QACrB,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,wDAAwD;IACxD,IAAI,EAAE,OAAO,GAAG,UAAU,CAAC;CAC5B;AAED,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,0BAA0B;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,yBAAyB;IACzB,SAAS,EAAE;QACT,OAAO,EAAE,MAAM,CAAC;QAChB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,uCAAuC;IACvC,eAAe,EAAE,OAAO,CAAC;IACzB,+BAA+B;IAC/B,WAAW,EAAE,KAAK,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,wBAAwB;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,qCAAqC;IACrC,kBAAkB,EAAE,KAAK,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IACH,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAqDD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+B;IACpD,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,iEAAiE;IACjE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA2B;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;;IAWzB,OAAO,CAAC,YAAY;IA8QpB,iEAAiE;IACjE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAInD,kDAAkD;IAClD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,eAAe,EAAE;IAgCtD,oDAAoD;IACpD,gBAAgB,IAAI,eAAe,EAAE;IAIrC,2FAA2F;IAC3F,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIpD,wFAAwF;IACxF,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,WAAW,EAAE;IAwBxD,iDAAiD;IACjD,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,EAAE;CAOtD;AAMD,wBAAgB,iBAAiB,IAAI,IAAI,CAExC;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAIhD"}
|
|
@@ -31,10 +31,16 @@ export class AttackService {
|
|
|
31
31
|
byId;
|
|
32
32
|
/** Inverted index: keyword token → set of technique IDs. */
|
|
33
33
|
keywordIndex;
|
|
34
|
+
/** Group/software index: ATT&CK ID (uppercase) → AttackGroup. */
|
|
35
|
+
groupById;
|
|
36
|
+
/** Inverted index: keyword token → set of group/software ATT&CK IDs. */
|
|
37
|
+
groupKeywordIndex;
|
|
34
38
|
version;
|
|
35
39
|
constructor() {
|
|
36
40
|
this.byId = new Map();
|
|
37
41
|
this.keywordIndex = new Map();
|
|
42
|
+
this.groupById = new Map();
|
|
43
|
+
this.groupKeywordIndex = new Map();
|
|
38
44
|
this.version = ATTACK_VERSION;
|
|
39
45
|
this.loadAndIndex();
|
|
40
46
|
}
|
|
@@ -196,6 +202,71 @@ export class AttackService {
|
|
|
196
202
|
indicators: indicators.slice(0, 8),
|
|
197
203
|
};
|
|
198
204
|
};
|
|
205
|
+
// Collect technique names for group techniques_used cross-reference
|
|
206
|
+
const techniqueNameById = new Map();
|
|
207
|
+
for (const obj of objects) {
|
|
208
|
+
if (obj.type !== 'attack-pattern' || obj.revoked || obj.x_mitre_deprecated)
|
|
209
|
+
continue;
|
|
210
|
+
const aid = extractAttackId(obj);
|
|
211
|
+
if (aid && obj.name)
|
|
212
|
+
techniqueNameById.set(aid.toUpperCase(), obj.name);
|
|
213
|
+
}
|
|
214
|
+
// Build group/software procedure map: group STIX ID → list of technique uses.
|
|
215
|
+
// Only include relationships where the target is an attack-pattern (T-prefix ID).
|
|
216
|
+
const groupProcedures = new Map();
|
|
217
|
+
for (const obj of objects) {
|
|
218
|
+
if (obj.type !== 'relationship' || obj.relationship_type !== 'uses')
|
|
219
|
+
continue;
|
|
220
|
+
const sourceType = objects.find((o) => o.id === obj.source_ref)?.type;
|
|
221
|
+
if (sourceType !== 'intrusion-set' && sourceType !== 'malware' && sourceType !== 'tool')
|
|
222
|
+
continue;
|
|
223
|
+
const targetAid = obj.target_ref ? stixToAttack.get(obj.target_ref) : undefined;
|
|
224
|
+
// Skip targets that are not attack-patterns (e.g. software used by software has S-prefix IDs)
|
|
225
|
+
if (!targetAid || !targetAid.startsWith('T') || !obj.source_ref)
|
|
226
|
+
continue;
|
|
227
|
+
if (!groupProcedures.has(obj.source_ref))
|
|
228
|
+
groupProcedures.set(obj.source_ref, []);
|
|
229
|
+
groupProcedures.get(obj.source_ref).push({
|
|
230
|
+
technique_id: targetAid,
|
|
231
|
+
technique_name: techniqueNameById.get(targetAid.toUpperCase()) ?? '',
|
|
232
|
+
description: truncate(obj.description, 300),
|
|
233
|
+
});
|
|
234
|
+
}
|
|
235
|
+
// Index intrusion-set, malware, and tool objects as groups/software
|
|
236
|
+
for (const obj of objects) {
|
|
237
|
+
if (obj.type !== 'intrusion-set' && obj.type !== 'malware' && obj.type !== 'tool')
|
|
238
|
+
continue;
|
|
239
|
+
if (obj.revoked || obj.x_mitre_deprecated)
|
|
240
|
+
continue;
|
|
241
|
+
const aid = extractAttackId(obj);
|
|
242
|
+
if (!aid || !obj.name)
|
|
243
|
+
continue;
|
|
244
|
+
// intrusion-set uses `aliases`; malware/tool use `x_mitre_aliases`
|
|
245
|
+
const aliases = obj.type === 'intrusion-set'
|
|
246
|
+
? (obj.aliases ?? []).filter((a) => a !== obj.name)
|
|
247
|
+
: (obj.x_mitre_aliases ?? []).filter((a) => a !== obj.name);
|
|
248
|
+
const group = {
|
|
249
|
+
id: aid,
|
|
250
|
+
name: obj.name,
|
|
251
|
+
aliases,
|
|
252
|
+
type: obj.type === 'intrusion-set' ? 'group' : 'software',
|
|
253
|
+
description: truncate(obj.description, 800),
|
|
254
|
+
techniques_used: (groupProcedures.get(obj.id) ?? []).slice(0, 20),
|
|
255
|
+
attack_version: ATTACK_VERSION,
|
|
256
|
+
};
|
|
257
|
+
this.groupById.set(aid.toUpperCase(), group);
|
|
258
|
+
// Keyword index: ID, name tokens, alias tokens
|
|
259
|
+
const groupTokens = new Set([
|
|
260
|
+
...tokenize(aid),
|
|
261
|
+
...tokenize(obj.name),
|
|
262
|
+
...aliases.flatMap((a) => tokenize(a)),
|
|
263
|
+
]);
|
|
264
|
+
for (const tok of groupTokens) {
|
|
265
|
+
if (!this.groupKeywordIndex.has(tok))
|
|
266
|
+
this.groupKeywordIndex.set(tok, new Set());
|
|
267
|
+
this.groupKeywordIndex.get(tok).add(aid.toUpperCase());
|
|
268
|
+
}
|
|
269
|
+
}
|
|
199
270
|
// Index techniques and sub-techniques
|
|
200
271
|
for (const obj of objects) {
|
|
201
272
|
if (obj.type !== 'attack-pattern')
|
|
@@ -275,6 +346,34 @@ export class AttackService {
|
|
|
275
346
|
getAllTechniques() {
|
|
276
347
|
return [...this.byId.values()];
|
|
277
348
|
}
|
|
349
|
+
/** Look up a group or software entry by exact ATT&CK ID (case-insensitive, G/S-prefix). */
|
|
350
|
+
lookupGroupById(id) {
|
|
351
|
+
return this.groupById.get(id.toUpperCase());
|
|
352
|
+
}
|
|
353
|
+
/** Keyword search across group names and aliases — returns ranked results (up to 5). */
|
|
354
|
+
searchGroups(query, ctx) {
|
|
355
|
+
ctx.log.debug('ATT&CK group keyword search', { query });
|
|
356
|
+
const tokens = tokenize(query);
|
|
357
|
+
const scores = new Map();
|
|
358
|
+
for (const tok of tokens) {
|
|
359
|
+
const exact = this.groupKeywordIndex.get(tok);
|
|
360
|
+
if (exact) {
|
|
361
|
+
for (const id of exact)
|
|
362
|
+
scores.set(id, (scores.get(id) ?? 0) + 2);
|
|
363
|
+
}
|
|
364
|
+
for (const [key, ids] of this.groupKeywordIndex) {
|
|
365
|
+
if (key.startsWith(tok) && key !== tok) {
|
|
366
|
+
for (const id of ids)
|
|
367
|
+
scores.set(id, (scores.get(id) ?? 0) + 1);
|
|
368
|
+
}
|
|
369
|
+
}
|
|
370
|
+
}
|
|
371
|
+
return [...scores.entries()]
|
|
372
|
+
.sort((a, b) => b[1] - a[1])
|
|
373
|
+
.slice(0, 5)
|
|
374
|
+
.map(([id]) => this.groupById.get(id))
|
|
375
|
+
.filter((g) => g !== undefined);
|
|
376
|
+
}
|
|
278
377
|
/** Get sub-techniques for a parent technique. */
|
|
279
378
|
getSubtechniques(parentId) {
|
|
280
379
|
const parent = this.byId.get(parentId.toUpperCase());
|