@etcsec-com/etc-collector 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +60 -0
- package/.env.test.example +33 -0
- package/.github/workflows/ci.yml +83 -0
- package/.github/workflows/release.yml +246 -0
- package/.prettierrc.json +10 -0
- package/CHANGELOG.md +15 -0
- package/Dockerfile +57 -0
- package/LICENSE +190 -0
- package/README.md +194 -0
- package/dist/api/controllers/audit.controller.d.ts +21 -0
- package/dist/api/controllers/audit.controller.d.ts.map +1 -0
- package/dist/api/controllers/audit.controller.js +179 -0
- package/dist/api/controllers/audit.controller.js.map +1 -0
- package/dist/api/controllers/auth.controller.d.ts +16 -0
- package/dist/api/controllers/auth.controller.d.ts.map +1 -0
- package/dist/api/controllers/auth.controller.js +146 -0
- package/dist/api/controllers/auth.controller.js.map +1 -0
- package/dist/api/controllers/export.controller.d.ts +27 -0
- package/dist/api/controllers/export.controller.d.ts.map +1 -0
- package/dist/api/controllers/export.controller.js +80 -0
- package/dist/api/controllers/export.controller.js.map +1 -0
- package/dist/api/controllers/health.controller.d.ts +5 -0
- package/dist/api/controllers/health.controller.d.ts.map +1 -0
- package/dist/api/controllers/health.controller.js +16 -0
- package/dist/api/controllers/health.controller.js.map +1 -0
- package/dist/api/controllers/jobs.controller.d.ts +13 -0
- package/dist/api/controllers/jobs.controller.d.ts.map +1 -0
- package/dist/api/controllers/jobs.controller.js +125 -0
- package/dist/api/controllers/jobs.controller.js.map +1 -0
- package/dist/api/controllers/providers.controller.d.ts +15 -0
- package/dist/api/controllers/providers.controller.d.ts.map +1 -0
- package/dist/api/controllers/providers.controller.js +112 -0
- package/dist/api/controllers/providers.controller.js.map +1 -0
- package/dist/api/dto/AuditRequest.dto.d.ts +6 -0
- package/dist/api/dto/AuditRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditRequest.dto.js +3 -0
- package/dist/api/dto/AuditRequest.dto.js.map +1 -0
- package/dist/api/dto/AuditResponse.dto.d.ts +17 -0
- package/dist/api/dto/AuditResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditResponse.dto.js +3 -0
- package/dist/api/dto/AuditResponse.dto.js.map +1 -0
- package/dist/api/dto/TokenRequest.dto.d.ts +6 -0
- package/dist/api/dto/TokenRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenRequest.dto.js +3 -0
- package/dist/api/dto/TokenRequest.dto.js.map +1 -0
- package/dist/api/dto/TokenResponse.dto.d.ts +12 -0
- package/dist/api/dto/TokenResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenResponse.dto.js +3 -0
- package/dist/api/dto/TokenResponse.dto.js.map +1 -0
- package/dist/api/middlewares/authenticate.d.ts +12 -0
- package/dist/api/middlewares/authenticate.d.ts.map +1 -0
- package/dist/api/middlewares/authenticate.js +141 -0
- package/dist/api/middlewares/authenticate.js.map +1 -0
- package/dist/api/middlewares/errorHandler.d.ts +3 -0
- package/dist/api/middlewares/errorHandler.d.ts.map +1 -0
- package/dist/api/middlewares/errorHandler.js +30 -0
- package/dist/api/middlewares/errorHandler.js.map +1 -0
- package/dist/api/middlewares/rateLimit.d.ts +3 -0
- package/dist/api/middlewares/rateLimit.d.ts.map +1 -0
- package/dist/api/middlewares/rateLimit.js +34 -0
- package/dist/api/middlewares/rateLimit.js.map +1 -0
- package/dist/api/middlewares/validate.d.ts +4 -0
- package/dist/api/middlewares/validate.d.ts.map +1 -0
- package/dist/api/middlewares/validate.js +31 -0
- package/dist/api/middlewares/validate.js.map +1 -0
- package/dist/api/routes/audit.routes.d.ts +5 -0
- package/dist/api/routes/audit.routes.d.ts.map +1 -0
- package/dist/api/routes/audit.routes.js +24 -0
- package/dist/api/routes/audit.routes.js.map +1 -0
- package/dist/api/routes/auth.routes.d.ts +6 -0
- package/dist/api/routes/auth.routes.d.ts.map +1 -0
- package/dist/api/routes/auth.routes.js +22 -0
- package/dist/api/routes/auth.routes.js.map +1 -0
- package/dist/api/routes/export.routes.d.ts +5 -0
- package/dist/api/routes/export.routes.d.ts.map +1 -0
- package/dist/api/routes/export.routes.js +16 -0
- package/dist/api/routes/export.routes.js.map +1 -0
- package/dist/api/routes/health.routes.d.ts +4 -0
- package/dist/api/routes/health.routes.d.ts.map +1 -0
- package/dist/api/routes/health.routes.js +11 -0
- package/dist/api/routes/health.routes.js.map +1 -0
- package/dist/api/routes/index.d.ts +10 -0
- package/dist/api/routes/index.d.ts.map +1 -0
- package/dist/api/routes/index.js +20 -0
- package/dist/api/routes/index.js.map +1 -0
- package/dist/api/routes/providers.routes.d.ts +5 -0
- package/dist/api/routes/providers.routes.d.ts.map +1 -0
- package/dist/api/routes/providers.routes.js +13 -0
- package/dist/api/routes/providers.routes.js.map +1 -0
- package/dist/api/validators/audit.schemas.d.ts +60 -0
- package/dist/api/validators/audit.schemas.d.ts.map +1 -0
- package/dist/api/validators/audit.schemas.js +55 -0
- package/dist/api/validators/audit.schemas.js.map +1 -0
- package/dist/api/validators/auth.schemas.d.ts +17 -0
- package/dist/api/validators/auth.schemas.d.ts.map +1 -0
- package/dist/api/validators/auth.schemas.js +21 -0
- package/dist/api/validators/auth.schemas.js.map +1 -0
- package/dist/app.d.ts +3 -0
- package/dist/app.d.ts.map +1 -0
- package/dist/app.js +62 -0
- package/dist/app.js.map +1 -0
- package/dist/config/config.schema.d.ts +65 -0
- package/dist/config/config.schema.d.ts.map +1 -0
- package/dist/config/config.schema.js +95 -0
- package/dist/config/config.schema.js.map +1 -0
- package/dist/config/index.d.ts +4 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +75 -0
- package/dist/config/index.js.map +1 -0
- package/dist/container.d.ts +47 -0
- package/dist/container.d.ts.map +1 -0
- package/dist/container.js +137 -0
- package/dist/container.js.map +1 -0
- package/dist/data/database.d.ts +13 -0
- package/dist/data/database.d.ts.map +1 -0
- package/dist/data/database.js +68 -0
- package/dist/data/database.js.map +1 -0
- package/dist/data/jobs/token-cleanup.job.d.ts +23 -0
- package/dist/data/jobs/token-cleanup.job.d.ts.map +1 -0
- package/dist/data/jobs/token-cleanup.job.js +96 -0
- package/dist/data/jobs/token-cleanup.job.js.map +1 -0
- package/dist/data/migrations/migration.runner.d.ts +13 -0
- package/dist/data/migrations/migration.runner.d.ts.map +1 -0
- package/dist/data/migrations/migration.runner.js +136 -0
- package/dist/data/migrations/migration.runner.js.map +1 -0
- package/dist/data/models/Token.model.d.ts +30 -0
- package/dist/data/models/Token.model.d.ts.map +1 -0
- package/dist/data/models/Token.model.js +3 -0
- package/dist/data/models/Token.model.js.map +1 -0
- package/dist/data/repositories/token.repository.d.ts +16 -0
- package/dist/data/repositories/token.repository.d.ts.map +1 -0
- package/dist/data/repositories/token.repository.js +97 -0
- package/dist/data/repositories/token.repository.js.map +1 -0
- package/dist/providers/azure/auth.provider.d.ts +5 -0
- package/dist/providers/azure/auth.provider.d.ts.map +1 -0
- package/dist/providers/azure/auth.provider.js +13 -0
- package/dist/providers/azure/auth.provider.js.map +1 -0
- package/dist/providers/azure/azure-errors.d.ts +40 -0
- package/dist/providers/azure/azure-errors.d.ts.map +1 -0
- package/dist/providers/azure/azure-errors.js +121 -0
- package/dist/providers/azure/azure-errors.js.map +1 -0
- package/dist/providers/azure/azure-retry.d.ts +41 -0
- package/dist/providers/azure/azure-retry.d.ts.map +1 -0
- package/dist/providers/azure/azure-retry.js +85 -0
- package/dist/providers/azure/azure-retry.js.map +1 -0
- package/dist/providers/azure/graph-client.d.ts +26 -0
- package/dist/providers/azure/graph-client.d.ts.map +1 -0
- package/dist/providers/azure/graph-client.js +146 -0
- package/dist/providers/azure/graph-client.js.map +1 -0
- package/dist/providers/azure/graph.provider.d.ts +23 -0
- package/dist/providers/azure/graph.provider.d.ts.map +1 -0
- package/dist/providers/azure/graph.provider.js +161 -0
- package/dist/providers/azure/graph.provider.js.map +1 -0
- package/dist/providers/azure/queries/app.queries.d.ts +6 -0
- package/dist/providers/azure/queries/app.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/app.queries.js +9 -0
- package/dist/providers/azure/queries/app.queries.js.map +1 -0
- package/dist/providers/azure/queries/policy.queries.d.ts +6 -0
- package/dist/providers/azure/queries/policy.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/policy.queries.js +9 -0
- package/dist/providers/azure/queries/policy.queries.js.map +1 -0
- package/dist/providers/azure/queries/user.queries.d.ts +7 -0
- package/dist/providers/azure/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/user.queries.js +10 -0
- package/dist/providers/azure/queries/user.queries.js.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts +31 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.js +3 -0
- package/dist/providers/interfaces/IGraphProvider.js.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts +37 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.js +3 -0
- package/dist/providers/interfaces/ILDAPProvider.js.map +1 -0
- package/dist/providers/ldap/acl-parser.d.ts +8 -0
- package/dist/providers/ldap/acl-parser.d.ts.map +1 -0
- package/dist/providers/ldap/acl-parser.js +157 -0
- package/dist/providers/ldap/acl-parser.js.map +1 -0
- package/dist/providers/ldap/ad-mappers.d.ts +8 -0
- package/dist/providers/ldap/ad-mappers.d.ts.map +1 -0
- package/dist/providers/ldap/ad-mappers.js +162 -0
- package/dist/providers/ldap/ad-mappers.js.map +1 -0
- package/dist/providers/ldap/ldap-client.d.ts +33 -0
- package/dist/providers/ldap/ldap-client.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-client.js +195 -0
- package/dist/providers/ldap/ldap-client.js.map +1 -0
- package/dist/providers/ldap/ldap-errors.d.ts +48 -0
- package/dist/providers/ldap/ldap-errors.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-errors.js +120 -0
- package/dist/providers/ldap/ldap-errors.js.map +1 -0
- package/dist/providers/ldap/ldap-retry.d.ts +14 -0
- package/dist/providers/ldap/ldap-retry.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-retry.js +102 -0
- package/dist/providers/ldap/ldap-retry.js.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts +12 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.js +104 -0
- package/dist/providers/ldap/ldap-sanitizer.js.map +1 -0
- package/dist/providers/ldap/ldap.provider.d.ts +21 -0
- package/dist/providers/ldap/ldap.provider.d.ts.map +1 -0
- package/dist/providers/ldap/ldap.provider.js +165 -0
- package/dist/providers/ldap/ldap.provider.js.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.js +9 -0
- package/dist/providers/ldap/queries/computer.queries.js.map +1 -0
- package/dist/providers/ldap/queries/group.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/group.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/group.queries.js +9 -0
- package/dist/providers/ldap/queries/group.queries.js.map +1 -0
- package/dist/providers/ldap/queries/user.queries.d.ts +7 -0
- package/dist/providers/ldap/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/user.queries.js +10 -0
- package/dist/providers/ldap/queries/user.queries.js.map +1 -0
- package/dist/providers/smb/smb.provider.d.ts +68 -0
- package/dist/providers/smb/smb.provider.d.ts.map +1 -0
- package/dist/providers/smb/smb.provider.js +382 -0
- package/dist/providers/smb/smb.provider.js.map +1 -0
- package/dist/server.d.ts +2 -0
- package/dist/server.d.ts.map +1 -0
- package/dist/server.js +44 -0
- package/dist/server.js.map +1 -0
- package/dist/services/audit/ad-audit.service.d.ts +70 -0
- package/dist/services/audit/ad-audit.service.d.ts.map +1 -0
- package/dist/services/audit/ad-audit.service.js +1019 -0
- package/dist/services/audit/ad-audit.service.js.map +1 -0
- package/dist/services/audit/attack-graph.service.d.ts +62 -0
- package/dist/services/audit/attack-graph.service.d.ts.map +1 -0
- package/dist/services/audit/attack-graph.service.js +702 -0
- package/dist/services/audit/attack-graph.service.js.map +1 -0
- package/dist/services/audit/audit.service.d.ts +4 -0
- package/dist/services/audit/audit.service.d.ts.map +1 -0
- package/dist/services/audit/audit.service.js +10 -0
- package/dist/services/audit/audit.service.js.map +1 -0
- package/dist/services/audit/azure-audit.service.d.ts +37 -0
- package/dist/services/audit/azure-audit.service.d.ts.map +1 -0
- package/dist/services/audit/azure-audit.service.js +153 -0
- package/dist/services/audit/azure-audit.service.js.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts +37 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js +881 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts +21 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js +227 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts +63 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js +867 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts +16 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js +369 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts +28 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js +896 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts +30 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.js +799 -0
- package/dist/services/audit/detectors/ad/computers.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js +257 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts +19 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.js +488 -0
- package/dist/services/audit/detectors/ad/groups.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/index.d.ts +15 -0
- package/dist/services/audit/detectors/ad/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/index.js +51 -0
- package/dist/services/audit/detectors/ad/index.js.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js +293 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts +23 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js +328 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts +39 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.js +257 -0
- package/dist/services/audit/detectors/ad/network.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts +14 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.js +235 -0
- package/dist/services/audit/detectors/ad/password.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts +20 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js +392 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts +11 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js +186 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts +11 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js +184 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts +10 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js +130 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts +8 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js +113 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts +14 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js +198 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/index.d.ts +2 -0
- package/dist/services/audit/detectors/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/index.js +38 -0
- package/dist/services/audit/detectors/index.js.map +1 -0
- package/dist/services/audit/response-formatter.d.ts +176 -0
- package/dist/services/audit/response-formatter.d.ts.map +1 -0
- package/dist/services/audit/response-formatter.js +240 -0
- package/dist/services/audit/response-formatter.js.map +1 -0
- package/dist/services/audit/scoring.service.d.ts +15 -0
- package/dist/services/audit/scoring.service.d.ts.map +1 -0
- package/dist/services/audit/scoring.service.js +139 -0
- package/dist/services/audit/scoring.service.js.map +1 -0
- package/dist/services/auth/crypto.service.d.ts +19 -0
- package/dist/services/auth/crypto.service.d.ts.map +1 -0
- package/dist/services/auth/crypto.service.js +135 -0
- package/dist/services/auth/crypto.service.js.map +1 -0
- package/dist/services/auth/errors.d.ts +19 -0
- package/dist/services/auth/errors.d.ts.map +1 -0
- package/dist/services/auth/errors.js +46 -0
- package/dist/services/auth/errors.js.map +1 -0
- package/dist/services/auth/token.service.d.ts +41 -0
- package/dist/services/auth/token.service.d.ts.map +1 -0
- package/dist/services/auth/token.service.js +208 -0
- package/dist/services/auth/token.service.js.map +1 -0
- package/dist/services/config/config.service.d.ts +6 -0
- package/dist/services/config/config.service.d.ts.map +1 -0
- package/dist/services/config/config.service.js +64 -0
- package/dist/services/config/config.service.js.map +1 -0
- package/dist/services/export/export.service.d.ts +28 -0
- package/dist/services/export/export.service.d.ts.map +1 -0
- package/dist/services/export/export.service.js +28 -0
- package/dist/services/export/export.service.js.map +1 -0
- package/dist/services/export/formatters/csv.formatter.d.ts +8 -0
- package/dist/services/export/formatters/csv.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/csv.formatter.js +46 -0
- package/dist/services/export/formatters/csv.formatter.js.map +1 -0
- package/dist/services/export/formatters/json.formatter.d.ts +40 -0
- package/dist/services/export/formatters/json.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/json.formatter.js +58 -0
- package/dist/services/export/formatters/json.formatter.js.map +1 -0
- package/dist/services/jobs/azure-job-runner.d.ts +38 -0
- package/dist/services/jobs/azure-job-runner.d.ts.map +1 -0
- package/dist/services/jobs/azure-job-runner.js +199 -0
- package/dist/services/jobs/azure-job-runner.js.map +1 -0
- package/dist/services/jobs/index.d.ts +4 -0
- package/dist/services/jobs/index.d.ts.map +1 -0
- package/dist/services/jobs/index.js +20 -0
- package/dist/services/jobs/index.js.map +1 -0
- package/dist/services/jobs/job-runner.d.ts +64 -0
- package/dist/services/jobs/job-runner.d.ts.map +1 -0
- package/dist/services/jobs/job-runner.js +952 -0
- package/dist/services/jobs/job-runner.js.map +1 -0
- package/dist/services/jobs/job-store.d.ts +27 -0
- package/dist/services/jobs/job-store.d.ts.map +1 -0
- package/dist/services/jobs/job-store.js +261 -0
- package/dist/services/jobs/job-store.js.map +1 -0
- package/dist/services/jobs/job.types.d.ts +67 -0
- package/dist/services/jobs/job.types.d.ts.map +1 -0
- package/dist/services/jobs/job.types.js +36 -0
- package/dist/services/jobs/job.types.js.map +1 -0
- package/dist/types/ad.types.d.ts +74 -0
- package/dist/types/ad.types.d.ts.map +1 -0
- package/dist/types/ad.types.js +3 -0
- package/dist/types/ad.types.js.map +1 -0
- package/dist/types/adcs.types.d.ts +58 -0
- package/dist/types/adcs.types.d.ts.map +1 -0
- package/dist/types/adcs.types.js +38 -0
- package/dist/types/adcs.types.js.map +1 -0
- package/dist/types/attack-graph.types.d.ts +135 -0
- package/dist/types/attack-graph.types.d.ts.map +1 -0
- package/dist/types/attack-graph.types.js +58 -0
- package/dist/types/attack-graph.types.js.map +1 -0
- package/dist/types/audit.types.d.ts +34 -0
- package/dist/types/audit.types.d.ts.map +1 -0
- package/dist/types/audit.types.js +3 -0
- package/dist/types/audit.types.js.map +1 -0
- package/dist/types/azure.types.d.ts +61 -0
- package/dist/types/azure.types.d.ts.map +1 -0
- package/dist/types/azure.types.js +3 -0
- package/dist/types/azure.types.js.map +1 -0
- package/dist/types/config.types.d.ts +63 -0
- package/dist/types/config.types.d.ts.map +1 -0
- package/dist/types/config.types.js +3 -0
- package/dist/types/config.types.js.map +1 -0
- package/dist/types/error.types.d.ts +33 -0
- package/dist/types/error.types.d.ts.map +1 -0
- package/dist/types/error.types.js +70 -0
- package/dist/types/error.types.js.map +1 -0
- package/dist/types/finding.types.d.ts +133 -0
- package/dist/types/finding.types.d.ts.map +1 -0
- package/dist/types/finding.types.js +3 -0
- package/dist/types/finding.types.js.map +1 -0
- package/dist/types/gpo.types.d.ts +39 -0
- package/dist/types/gpo.types.d.ts.map +1 -0
- package/dist/types/gpo.types.js +15 -0
- package/dist/types/gpo.types.js.map +1 -0
- package/dist/types/token.types.d.ts +26 -0
- package/dist/types/token.types.d.ts.map +1 -0
- package/dist/types/token.types.js +3 -0
- package/dist/types/token.types.js.map +1 -0
- package/dist/types/trust.types.d.ts +45 -0
- package/dist/types/trust.types.d.ts.map +1 -0
- package/dist/types/trust.types.js +71 -0
- package/dist/types/trust.types.js.map +1 -0
- package/dist/utils/entity-converter.d.ts +17 -0
- package/dist/utils/entity-converter.d.ts.map +1 -0
- package/dist/utils/entity-converter.js +285 -0
- package/dist/utils/entity-converter.js.map +1 -0
- package/dist/utils/graph.util.d.ts +66 -0
- package/dist/utils/graph.util.d.ts.map +1 -0
- package/dist/utils/graph.util.js +382 -0
- package/dist/utils/graph.util.js.map +1 -0
- package/dist/utils/logger.d.ts +7 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +86 -0
- package/dist/utils/logger.js.map +1 -0
- package/dist/utils/type-name-normalizer.d.ts +5 -0
- package/dist/utils/type-name-normalizer.d.ts.map +1 -0
- package/dist/utils/type-name-normalizer.js +218 -0
- package/dist/utils/type-name-normalizer.js.map +1 -0
- package/docker-compose.yml +26 -0
- package/docs/api/README.md +178 -0
- package/docs/api/openapi.yaml +1524 -0
- package/eslint.config.js +54 -0
- package/jest.config.js +38 -0
- package/package.json +97 -0
- package/scripts/fetch-ad-cert.sh +142 -0
- package/src/.gitkeep +0 -0
- package/src/api/.gitkeep +0 -0
- package/src/api/controllers/.gitkeep +0 -0
- package/src/api/controllers/audit.controller.ts +313 -0
- package/src/api/controllers/auth.controller.ts +258 -0
- package/src/api/controllers/export.controller.ts +153 -0
- package/src/api/controllers/health.controller.ts +16 -0
- package/src/api/controllers/jobs.controller.ts +187 -0
- package/src/api/controllers/providers.controller.ts +165 -0
- package/src/api/dto/.gitkeep +0 -0
- package/src/api/dto/AuditRequest.dto.ts +8 -0
- package/src/api/dto/AuditResponse.dto.ts +19 -0
- package/src/api/dto/TokenRequest.dto.ts +8 -0
- package/src/api/dto/TokenResponse.dto.ts +14 -0
- package/src/api/middlewares/.gitkeep +0 -0
- package/src/api/middlewares/authenticate.ts +203 -0
- package/src/api/middlewares/errorHandler.ts +54 -0
- package/src/api/middlewares/rateLimit.ts +35 -0
- package/src/api/middlewares/validate.ts +32 -0
- package/src/api/routes/.gitkeep +0 -0
- package/src/api/routes/audit.routes.ts +77 -0
- package/src/api/routes/auth.routes.ts +71 -0
- package/src/api/routes/export.routes.ts +34 -0
- package/src/api/routes/health.routes.ts +14 -0
- package/src/api/routes/index.ts +40 -0
- package/src/api/routes/providers.routes.ts +24 -0
- package/src/api/validators/.gitkeep +0 -0
- package/src/api/validators/audit.schemas.ts +59 -0
- package/src/api/validators/auth.schemas.ts +59 -0
- package/src/app.ts +87 -0
- package/src/config/.gitkeep +0 -0
- package/src/config/config.schema.ts +108 -0
- package/src/config/index.ts +82 -0
- package/src/container.ts +221 -0
- package/src/data/.gitkeep +0 -0
- package/src/data/database.ts +78 -0
- package/src/data/jobs/token-cleanup.job.ts +166 -0
- package/src/data/migrations/.gitkeep +0 -0
- package/src/data/migrations/001_initial_schema.sql +47 -0
- package/src/data/migrations/migration.runner.ts +125 -0
- package/src/data/models/.gitkeep +0 -0
- package/src/data/models/Token.model.ts +35 -0
- package/src/data/repositories/.gitkeep +0 -0
- package/src/data/repositories/token.repository.ts +160 -0
- package/src/providers/.gitkeep +0 -0
- package/src/providers/azure/.gitkeep +0 -0
- package/src/providers/azure/auth.provider.ts +14 -0
- package/src/providers/azure/azure-errors.ts +189 -0
- package/src/providers/azure/azure-retry.ts +168 -0
- package/src/providers/azure/graph-client.ts +315 -0
- package/src/providers/azure/graph.provider.ts +294 -0
- package/src/providers/azure/queries/app.queries.ts +9 -0
- package/src/providers/azure/queries/policy.queries.ts +9 -0
- package/src/providers/azure/queries/user.queries.ts +10 -0
- package/src/providers/interfaces/.gitkeep +0 -0
- package/src/providers/interfaces/IGraphProvider.ts +117 -0
- package/src/providers/interfaces/ILDAPProvider.ts +142 -0
- package/src/providers/ldap/.gitkeep +0 -0
- package/src/providers/ldap/acl-parser.ts +231 -0
- package/src/providers/ldap/ad-mappers.ts +280 -0
- package/src/providers/ldap/ldap-client.ts +259 -0
- package/src/providers/ldap/ldap-errors.ts +188 -0
- package/src/providers/ldap/ldap-retry.ts +267 -0
- package/src/providers/ldap/ldap-sanitizer.ts +273 -0
- package/src/providers/ldap/ldap.provider.ts +293 -0
- package/src/providers/ldap/queries/computer.queries.ts +9 -0
- package/src/providers/ldap/queries/group.queries.ts +9 -0
- package/src/providers/ldap/queries/user.queries.ts +10 -0
- package/src/providers/smb/smb.provider.ts +653 -0
- package/src/server.ts +60 -0
- package/src/services/.gitkeep +0 -0
- package/src/services/audit/.gitkeep +0 -0
- package/src/services/audit/ad-audit.service.ts +1481 -0
- package/src/services/audit/attack-graph.service.ts +1104 -0
- package/src/services/audit/audit.service.ts +12 -0
- package/src/services/audit/azure-audit.service.ts +286 -0
- package/src/services/audit/detectors/ad/accounts.detector.ts +1232 -0
- package/src/services/audit/detectors/ad/adcs.detector.ts +449 -0
- package/src/services/audit/detectors/ad/advanced.detector.ts +1270 -0
- package/src/services/audit/detectors/ad/attack-paths.detector.ts +600 -0
- package/src/services/audit/detectors/ad/compliance.detector.ts +1421 -0
- package/src/services/audit/detectors/ad/computers.detector.ts +1188 -0
- package/src/services/audit/detectors/ad/gpo.detector.ts +485 -0
- package/src/services/audit/detectors/ad/groups.detector.ts +685 -0
- package/src/services/audit/detectors/ad/index.ts +84 -0
- package/src/services/audit/detectors/ad/kerberos.detector.ts +424 -0
- package/src/services/audit/detectors/ad/monitoring.detector.ts +501 -0
- package/src/services/audit/detectors/ad/network.detector.ts +538 -0
- package/src/services/audit/detectors/ad/password.detector.ts +324 -0
- package/src/services/audit/detectors/ad/permissions.detector.ts +637 -0
- package/src/services/audit/detectors/ad/trusts.detector.ts +315 -0
- package/src/services/audit/detectors/azure/app-security.detector.ts +246 -0
- package/src/services/audit/detectors/azure/conditional-access.detector.ts +186 -0
- package/src/services/audit/detectors/azure/privilege-security.detector.ts +176 -0
- package/src/services/audit/detectors/azure/user-security.detector.ts +280 -0
- package/src/services/audit/detectors/index.ts +18 -0
- package/src/services/audit/response-formatter.ts +604 -0
- package/src/services/audit/scoring.service.ts +234 -0
- package/src/services/auth/.gitkeep +0 -0
- package/src/services/auth/crypto.service.ts +230 -0
- package/src/services/auth/errors.ts +47 -0
- package/src/services/auth/token.service.ts +420 -0
- package/src/services/config/.gitkeep +0 -0
- package/src/services/config/config.service.ts +75 -0
- package/src/services/export/.gitkeep +0 -0
- package/src/services/export/export.service.ts +99 -0
- package/src/services/export/formatters/csv.formatter.ts +124 -0
- package/src/services/export/formatters/json.formatter.ts +160 -0
- package/src/services/jobs/azure-job-runner.ts +312 -0
- package/src/services/jobs/index.ts +9 -0
- package/src/services/jobs/job-runner.ts +1280 -0
- package/src/services/jobs/job-store.ts +384 -0
- package/src/services/jobs/job.types.ts +182 -0
- package/src/types/.gitkeep +0 -0
- package/src/types/ad.types.ts +91 -0
- package/src/types/adcs.types.ts +107 -0
- package/src/types/attack-graph.types.ts +260 -0
- package/src/types/audit.types.ts +42 -0
- package/src/types/azure.types.ts +68 -0
- package/src/types/config.types.ts +79 -0
- package/src/types/error.types.ts +69 -0
- package/src/types/finding.types.ts +284 -0
- package/src/types/gpo.types.ts +72 -0
- package/src/types/smb2.d.ts +73 -0
- package/src/types/token.types.ts +32 -0
- package/src/types/trust.types.ts +140 -0
- package/src/utils/.gitkeep +0 -0
- package/src/utils/entity-converter.ts +453 -0
- package/src/utils/graph.util.ts +609 -0
- package/src/utils/logger.ts +111 -0
- package/src/utils/type-name-normalizer.ts +302 -0
- package/tests/.gitkeep +0 -0
- package/tests/e2e/.gitkeep +0 -0
- package/tests/fixtures/.gitkeep +0 -0
- package/tests/integration/.gitkeep +0 -0
- package/tests/integration/README.md +156 -0
- package/tests/integration/ad-audit.integration.test.ts +216 -0
- package/tests/integration/api/.gitkeep +0 -0
- package/tests/integration/api/endpoints.integration.test.ts +431 -0
- package/tests/integration/auth/jwt-authentication.integration.test.ts +358 -0
- package/tests/integration/providers/.gitkeep +0 -0
- package/tests/integration/providers/azure-basic.integration.test.ts +167 -0
- package/tests/integration/providers/ldap-basic.integration.test.ts +152 -0
- package/tests/integration/providers/ldap-connectivity.test.ts +44 -0
- package/tests/integration/providers/ldap-provider.integration.test.ts +347 -0
- package/tests/mocks/.gitkeep +0 -0
- package/tests/setup.ts +16 -0
- package/tests/unit/.gitkeep +0 -0
- package/tests/unit/api/middlewares/authenticate.test.ts +446 -0
- package/tests/unit/providers/.gitkeep +0 -0
- package/tests/unit/providers/azure/azure-errors.test.ts +193 -0
- package/tests/unit/providers/azure/azure-retry.test.ts +254 -0
- package/tests/unit/providers/azure/graph-provider.test.ts +313 -0
- package/tests/unit/providers/ldap/ad-mappers.test.ts +392 -0
- package/tests/unit/providers/ldap/ldap-provider.test.ts +376 -0
- package/tests/unit/providers/ldap/ldap-retry.test.ts +377 -0
- package/tests/unit/providers/ldap/ldap-sanitizer.test.ts +301 -0
- package/tests/unit/sample.test.ts +19 -0
- package/tests/unit/services/.gitkeep +0 -0
- package/tests/unit/services/audit/detectors/ad/accounts.detector.test.ts +393 -0
- package/tests/unit/services/audit/detectors/ad/advanced.detector.test.ts +380 -0
- package/tests/unit/services/audit/detectors/ad/computers.detector.test.ts +440 -0
- package/tests/unit/services/audit/detectors/ad/groups.detector.test.ts +276 -0
- package/tests/unit/services/audit/detectors/ad/kerberos.detector.test.ts +215 -0
- package/tests/unit/services/audit/detectors/ad/password.detector.test.ts +226 -0
- package/tests/unit/services/audit/detectors/ad/permissions.detector.test.ts +244 -0
- package/tests/unit/services/audit/detectors/azure/app-security.detector.test.ts +349 -0
- package/tests/unit/services/audit/detectors/azure/conditional-access.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/privilege-security.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/user-security.detector.test.ts +297 -0
- package/tests/unit/services/auth/crypto.service.test.ts +296 -0
- package/tests/unit/services/auth/token.service.test.ts +579 -0
- package/tests/unit/services/export/export.service.test.ts +241 -0
- package/tests/unit/services/export/formatters/csv.formatter.test.ts +270 -0
- package/tests/unit/services/export/formatters/json.formatter.test.ts +258 -0
- package/tests/unit/utils/.gitkeep +0 -0
- package/tsconfig.json +50 -0
|
@@ -0,0 +1,382 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.SMBProvider = void 0;
|
|
4
|
+
exports.formatKerberosPolicy = formatKerberosPolicy;
|
|
5
|
+
exports.getDefaultKerberosPolicy = getDefaultKerberosPolicy;
|
|
6
|
+
const child_process_1 = require("child_process");
|
|
7
|
+
const util_1 = require("util");
|
|
8
|
+
const promises_1 = require("fs/promises");
|
|
9
|
+
const os_1 = require("os");
|
|
10
|
+
const path_1 = require("path");
|
|
11
|
+
const logger_1 = require("../../utils/logger");
|
|
12
|
+
const execAsync = (0, util_1.promisify)(child_process_1.exec);
|
|
13
|
+
const DEFAULT_DOMAIN_POLICY_GUID = '{31B2F340-016D-11D2-945F-00C04FB984F9}';
|
|
14
|
+
class SMBProvider {
|
|
15
|
+
config;
|
|
16
|
+
constructor(config) {
|
|
17
|
+
this.config = {
|
|
18
|
+
timeout: 15000,
|
|
19
|
+
...config,
|
|
20
|
+
};
|
|
21
|
+
}
|
|
22
|
+
async connect() {
|
|
23
|
+
logger_1.logger.debug('SMB provider ready (using smbclient)', { host: this.config.host, share: this.config.share });
|
|
24
|
+
}
|
|
25
|
+
async disconnect() {
|
|
26
|
+
}
|
|
27
|
+
buildSmbCommand() {
|
|
28
|
+
const { host, share, domain, username, password } = this.config;
|
|
29
|
+
const escapedPassword = password.replace(/'/g, "'\\''");
|
|
30
|
+
return `smbclient '//${host}/${share}' -U '${domain}\\${username}%${escapedPassword}' -c`;
|
|
31
|
+
}
|
|
32
|
+
async readFile(path) {
|
|
33
|
+
const timeout = this.config.timeout || 15000;
|
|
34
|
+
const tempFile = (0, path_1.join)((0, os_1.tmpdir)(), `smb_${Date.now()}_${Math.random().toString(36).substring(7)}`);
|
|
35
|
+
const smbPath = path.replace(/\\/g, '/');
|
|
36
|
+
const cmd = `${this.buildSmbCommand()} 'get "${smbPath}" "${tempFile}"'`;
|
|
37
|
+
try {
|
|
38
|
+
logger_1.logger.debug('SMB readFile', { path: smbPath, tempFile });
|
|
39
|
+
await execAsync(cmd, { timeout });
|
|
40
|
+
const content = await (0, promises_1.readFile)(tempFile, 'utf8');
|
|
41
|
+
try {
|
|
42
|
+
await (0, promises_1.unlink)(tempFile);
|
|
43
|
+
}
|
|
44
|
+
catch {
|
|
45
|
+
}
|
|
46
|
+
return content;
|
|
47
|
+
}
|
|
48
|
+
catch (error) {
|
|
49
|
+
try {
|
|
50
|
+
await (0, promises_1.unlink)(tempFile);
|
|
51
|
+
}
|
|
52
|
+
catch {
|
|
53
|
+
}
|
|
54
|
+
const message = error instanceof Error ? error.message : 'Unknown error';
|
|
55
|
+
logger_1.logger.debug('SMB readFile failed', { path: smbPath, error: message });
|
|
56
|
+
throw new Error(`SMB readFile failed: ${message}`);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
async readBinaryFile(path) {
|
|
60
|
+
const timeout = this.config.timeout || 15000;
|
|
61
|
+
const tempFile = (0, path_1.join)((0, os_1.tmpdir)(), `smb_${Date.now()}_${Math.random().toString(36).substring(7)}`);
|
|
62
|
+
const smbPath = path.replace(/\\/g, '/');
|
|
63
|
+
const cmd = `${this.buildSmbCommand()} 'get "${smbPath}" "${tempFile}"'`;
|
|
64
|
+
try {
|
|
65
|
+
await execAsync(cmd, { timeout });
|
|
66
|
+
const content = await (0, promises_1.readFile)(tempFile);
|
|
67
|
+
try {
|
|
68
|
+
await (0, promises_1.unlink)(tempFile);
|
|
69
|
+
}
|
|
70
|
+
catch {
|
|
71
|
+
}
|
|
72
|
+
return content;
|
|
73
|
+
}
|
|
74
|
+
catch (error) {
|
|
75
|
+
try {
|
|
76
|
+
await (0, promises_1.unlink)(tempFile);
|
|
77
|
+
}
|
|
78
|
+
catch {
|
|
79
|
+
}
|
|
80
|
+
throw error;
|
|
81
|
+
}
|
|
82
|
+
}
|
|
83
|
+
async exists(path) {
|
|
84
|
+
const timeout = this.config.timeout || 15000;
|
|
85
|
+
const smbPath = path.replace(/\\/g, '/');
|
|
86
|
+
const lastSlash = smbPath.lastIndexOf('/');
|
|
87
|
+
const dir = lastSlash > 0 ? smbPath.substring(0, lastSlash) : '';
|
|
88
|
+
const filename = lastSlash > 0 ? smbPath.substring(lastSlash + 1) : smbPath;
|
|
89
|
+
const cmd = `${this.buildSmbCommand()} 'cd "${dir}"; ls "${filename}"'`;
|
|
90
|
+
try {
|
|
91
|
+
logger_1.logger.debug('SMB exists check', { path: smbPath, dir, filename });
|
|
92
|
+
const { stdout } = await execAsync(cmd, { timeout });
|
|
93
|
+
const exists = stdout.includes(filename);
|
|
94
|
+
logger_1.logger.debug('SMB exists result', { path: smbPath, exists });
|
|
95
|
+
return exists;
|
|
96
|
+
}
|
|
97
|
+
catch (error) {
|
|
98
|
+
const message = error instanceof Error ? error.message : 'Unknown error';
|
|
99
|
+
logger_1.logger.debug('SMB exists check failed (file likely does not exist)', { path: smbPath, error: message });
|
|
100
|
+
return false;
|
|
101
|
+
}
|
|
102
|
+
}
|
|
103
|
+
async readKerberosPolicy(domainDnsName) {
|
|
104
|
+
const gptTmplPath = `${domainDnsName}/Policies/${DEFAULT_DOMAIN_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
|
|
105
|
+
try {
|
|
106
|
+
logger_1.logger.debug('Reading GptTmpl.inf for Kerberos policy', { path: gptTmplPath });
|
|
107
|
+
const exists = await this.exists(gptTmplPath);
|
|
108
|
+
if (!exists) {
|
|
109
|
+
logger_1.logger.warn('GptTmpl.inf not found', { path: gptTmplPath });
|
|
110
|
+
return null;
|
|
111
|
+
}
|
|
112
|
+
const content = await this.readFile(gptTmplPath);
|
|
113
|
+
return this.parseKerberosPolicy(content);
|
|
114
|
+
}
|
|
115
|
+
catch (error) {
|
|
116
|
+
logger_1.logger.warn('Failed to read Kerberos policy from SYSVOL', { error, path: gptTmplPath });
|
|
117
|
+
return null;
|
|
118
|
+
}
|
|
119
|
+
}
|
|
120
|
+
parseKerberosPolicy(content) {
|
|
121
|
+
const policy = {
|
|
122
|
+
maxTicketAge: 10,
|
|
123
|
+
maxRenewAge: 7,
|
|
124
|
+
maxServiceAge: 600,
|
|
125
|
+
maxClockSkew: 5,
|
|
126
|
+
ticketValidateClient: true,
|
|
127
|
+
};
|
|
128
|
+
const lines = content.split(/\r?\n/);
|
|
129
|
+
let inKerberosSection = false;
|
|
130
|
+
for (const line of lines) {
|
|
131
|
+
const trimmedLine = line.trim();
|
|
132
|
+
if (trimmedLine.startsWith('[')) {
|
|
133
|
+
inKerberosSection = trimmedLine.toLowerCase() === '[kerberos policy]';
|
|
134
|
+
continue;
|
|
135
|
+
}
|
|
136
|
+
if (!inKerberosSection)
|
|
137
|
+
continue;
|
|
138
|
+
const match = trimmedLine.match(/^(\w+)\s*=\s*(.+)$/);
|
|
139
|
+
if (!match || !match[1] || !match[2])
|
|
140
|
+
continue;
|
|
141
|
+
const key = match[1];
|
|
142
|
+
const value = match[2];
|
|
143
|
+
const numValue = parseInt(value, 10);
|
|
144
|
+
switch (key.toLowerCase()) {
|
|
145
|
+
case 'maxticketage':
|
|
146
|
+
policy.maxTicketAge = numValue;
|
|
147
|
+
break;
|
|
148
|
+
case 'maxrenewage':
|
|
149
|
+
policy.maxRenewAge = numValue;
|
|
150
|
+
break;
|
|
151
|
+
case 'maxserviceage':
|
|
152
|
+
policy.maxServiceAge = numValue;
|
|
153
|
+
break;
|
|
154
|
+
case 'maxclockskew':
|
|
155
|
+
policy.maxClockSkew = numValue;
|
|
156
|
+
break;
|
|
157
|
+
case 'ticketvalidateclient':
|
|
158
|
+
policy.ticketValidateClient = numValue === 1;
|
|
159
|
+
break;
|
|
160
|
+
}
|
|
161
|
+
}
|
|
162
|
+
return policy;
|
|
163
|
+
}
|
|
164
|
+
async readGpoSecuritySettings(domainDnsName) {
|
|
165
|
+
const DC_POLICY_GUID = '{6AC1786C-016F-11D2-945F-00C04FB984F9}';
|
|
166
|
+
const gptTmplPath = `${domainDnsName}/Policies/${DC_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
|
|
167
|
+
const settings = {};
|
|
168
|
+
try {
|
|
169
|
+
logger_1.logger.debug('Reading GPO security settings', { path: gptTmplPath });
|
|
170
|
+
const dcPolicyExists = await this.exists(gptTmplPath);
|
|
171
|
+
if (dcPolicyExists) {
|
|
172
|
+
const content = await this.readFile(gptTmplPath);
|
|
173
|
+
this.parseRegistryValues(content, settings);
|
|
174
|
+
logger_1.logger.debug('Parsed DC Policy GptTmpl.inf', { settings });
|
|
175
|
+
}
|
|
176
|
+
const domainPolicyPath = `${domainDnsName}/Policies/${DEFAULT_DOMAIN_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
|
|
177
|
+
const domainPolicyExists = await this.exists(domainPolicyPath);
|
|
178
|
+
if (domainPolicyExists) {
|
|
179
|
+
const domainContent = await this.readFile(domainPolicyPath);
|
|
180
|
+
this.parseRegistryValues(domainContent, settings);
|
|
181
|
+
logger_1.logger.debug('Parsed Domain Policy GptTmpl.inf', { settings });
|
|
182
|
+
}
|
|
183
|
+
await this.readAuditPolicy(domainDnsName, DC_POLICY_GUID, settings);
|
|
184
|
+
await this.readPowerShellLogging(domainDnsName, DC_POLICY_GUID, settings);
|
|
185
|
+
logger_1.logger.info('Successfully fetched GPO security settings', {
|
|
186
|
+
hasLdapSigning: settings.ldapServerIntegrity !== undefined,
|
|
187
|
+
hasSmbSigning: settings.smbSigningRequired !== undefined,
|
|
188
|
+
hasAuditPolicy: settings.auditPolicies !== undefined,
|
|
189
|
+
hasPsLogging: settings.powershellLogging !== undefined,
|
|
190
|
+
});
|
|
191
|
+
return settings;
|
|
192
|
+
}
|
|
193
|
+
catch (error) {
|
|
194
|
+
logger_1.logger.warn('Failed to read GPO security settings', { error });
|
|
195
|
+
return null;
|
|
196
|
+
}
|
|
197
|
+
}
|
|
198
|
+
parseRegistryValues(content, settings) {
|
|
199
|
+
const lines = content.split(/\r?\n/);
|
|
200
|
+
let inRegistrySection = false;
|
|
201
|
+
for (const line of lines) {
|
|
202
|
+
const trimmedLine = line.trim();
|
|
203
|
+
if (trimmedLine.startsWith('[')) {
|
|
204
|
+
inRegistrySection = trimmedLine.toLowerCase() === '[registry values]';
|
|
205
|
+
continue;
|
|
206
|
+
}
|
|
207
|
+
if (!inRegistrySection)
|
|
208
|
+
continue;
|
|
209
|
+
const match = trimmedLine.match(/^MACHINE\\(.+?)=(\d+),(.+)$/i);
|
|
210
|
+
if (!match || !match[1] || !match[3])
|
|
211
|
+
continue;
|
|
212
|
+
const keyPath = match[1].toLowerCase();
|
|
213
|
+
const value = match[3];
|
|
214
|
+
if (keyPath.includes('ntds\\parameters\\ldapserverintegrity')) {
|
|
215
|
+
settings.ldapServerIntegrity = parseInt(value, 10);
|
|
216
|
+
}
|
|
217
|
+
if (keyPath.includes('ntds\\parameters\\ldapenforcechannelbinding')) {
|
|
218
|
+
settings.ldapChannelBinding = parseInt(value, 10);
|
|
219
|
+
}
|
|
220
|
+
if (keyPath.includes('lanmanserver\\parameters\\smb1')) {
|
|
221
|
+
settings.smbv1ServerEnabled = value === '1';
|
|
222
|
+
}
|
|
223
|
+
if (keyPath.includes('lanmanworkstation\\parameters\\smb1')) {
|
|
224
|
+
settings.smbv1ClientEnabled = value === '1';
|
|
225
|
+
}
|
|
226
|
+
if (keyPath.includes('mrxsmb10\\start')) {
|
|
227
|
+
settings.smbv1ClientEnabled = value !== '4';
|
|
228
|
+
}
|
|
229
|
+
if (keyPath.includes('lanmanserver\\parameters\\requiresecuritysignature')) {
|
|
230
|
+
settings.smbSigningRequired = value === '1';
|
|
231
|
+
}
|
|
232
|
+
if (keyPath.includes('lanmanworkstation\\parameters\\requiresecuritysignature')) {
|
|
233
|
+
settings.smbClientSigningRequired = value === '1';
|
|
234
|
+
}
|
|
235
|
+
}
|
|
236
|
+
}
|
|
237
|
+
async readAuditPolicy(domainDnsName, gpoGuid, settings) {
|
|
238
|
+
const auditPath = `${domainDnsName}/Policies/${gpoGuid}/Machine/Microsoft/Windows NT/Audit/audit.csv`;
|
|
239
|
+
try {
|
|
240
|
+
const exists = await this.exists(auditPath);
|
|
241
|
+
if (!exists)
|
|
242
|
+
return;
|
|
243
|
+
const content = await this.readFile(auditPath);
|
|
244
|
+
settings.auditPolicies = this.parseAuditCsv(content);
|
|
245
|
+
}
|
|
246
|
+
catch (error) {
|
|
247
|
+
logger_1.logger.debug('Failed to read audit.csv', { error });
|
|
248
|
+
}
|
|
249
|
+
}
|
|
250
|
+
parseAuditCsv(content) {
|
|
251
|
+
const policies = [];
|
|
252
|
+
const lines = content.split(/\r?\n/);
|
|
253
|
+
for (let i = 1; i < lines.length; i++) {
|
|
254
|
+
const line = lines[i];
|
|
255
|
+
if (!line)
|
|
256
|
+
continue;
|
|
257
|
+
const trimmedLine = line.trim();
|
|
258
|
+
if (!trimmedLine)
|
|
259
|
+
continue;
|
|
260
|
+
const parts = trimmedLine.split(',');
|
|
261
|
+
if (parts.length < 7)
|
|
262
|
+
continue;
|
|
263
|
+
const subcategory = parts[2];
|
|
264
|
+
const settingValue = parts[6];
|
|
265
|
+
if (!subcategory || !settingValue)
|
|
266
|
+
continue;
|
|
267
|
+
const value = parseInt(settingValue, 10);
|
|
268
|
+
const category = this.getAuditCategory(subcategory);
|
|
269
|
+
policies.push({
|
|
270
|
+
category,
|
|
271
|
+
subcategory,
|
|
272
|
+
success: (value & 1) !== 0,
|
|
273
|
+
failure: (value & 2) !== 0,
|
|
274
|
+
});
|
|
275
|
+
}
|
|
276
|
+
return policies;
|
|
277
|
+
}
|
|
278
|
+
getAuditCategory(subcategory) {
|
|
279
|
+
const categoryMap = {
|
|
280
|
+
'Credential Validation': 'Account Logon',
|
|
281
|
+
'Kerberos Authentication Service': 'Account Logon',
|
|
282
|
+
'Kerberos Service Ticket Operations': 'Account Logon',
|
|
283
|
+
'Computer Account Management': 'Account Management',
|
|
284
|
+
'Security Group Management': 'Account Management',
|
|
285
|
+
'User Account Management': 'Account Management',
|
|
286
|
+
'Logon': 'Logon/Logoff',
|
|
287
|
+
'Logoff': 'Logon/Logoff',
|
|
288
|
+
'Special Logon': 'Logon/Logoff',
|
|
289
|
+
'File System': 'Object Access',
|
|
290
|
+
'Registry': 'Object Access',
|
|
291
|
+
'Kernel Object': 'Object Access',
|
|
292
|
+
'Audit Policy Change': 'Policy Change',
|
|
293
|
+
'Authentication Policy Change': 'Policy Change',
|
|
294
|
+
'Sensitive Privilege Use': 'Privilege Use',
|
|
295
|
+
'Security State Change': 'System',
|
|
296
|
+
'Security System Extension': 'System',
|
|
297
|
+
'System Integrity': 'System',
|
|
298
|
+
};
|
|
299
|
+
for (const [sub, cat] of Object.entries(categoryMap)) {
|
|
300
|
+
if (subcategory.toLowerCase().includes(sub.toLowerCase())) {
|
|
301
|
+
return cat;
|
|
302
|
+
}
|
|
303
|
+
}
|
|
304
|
+
return 'Other';
|
|
305
|
+
}
|
|
306
|
+
async readPowerShellLogging(domainDnsName, gpoGuid, settings) {
|
|
307
|
+
const registryPolPath = `${domainDnsName}/Policies/${gpoGuid}/Machine/Registry.pol`;
|
|
308
|
+
try {
|
|
309
|
+
const exists = await this.exists(registryPolPath);
|
|
310
|
+
if (!exists)
|
|
311
|
+
return;
|
|
312
|
+
const content = await this.readBinaryFile(registryPolPath);
|
|
313
|
+
settings.powershellLogging = this.parsePowerShellLogging(content);
|
|
314
|
+
}
|
|
315
|
+
catch (error) {
|
|
316
|
+
logger_1.logger.debug('Failed to read registry.pol', { error });
|
|
317
|
+
}
|
|
318
|
+
}
|
|
319
|
+
parsePowerShellLogging(content) {
|
|
320
|
+
const result = {
|
|
321
|
+
moduleLogging: false,
|
|
322
|
+
scriptBlockLogging: false,
|
|
323
|
+
transcription: false,
|
|
324
|
+
};
|
|
325
|
+
try {
|
|
326
|
+
const textContent = content.toString('utf16le');
|
|
327
|
+
if (textContent.includes('EnableScriptBlockLogging') && textContent.includes('\x01\x00\x00\x00')) {
|
|
328
|
+
result.scriptBlockLogging = true;
|
|
329
|
+
}
|
|
330
|
+
if (textContent.includes('EnableModuleLogging') && textContent.includes('\x01\x00\x00\x00')) {
|
|
331
|
+
result.moduleLogging = true;
|
|
332
|
+
}
|
|
333
|
+
if (textContent.includes('EnableTranscripting') && textContent.includes('\x01\x00\x00\x00')) {
|
|
334
|
+
result.transcription = true;
|
|
335
|
+
}
|
|
336
|
+
}
|
|
337
|
+
catch (error) {
|
|
338
|
+
logger_1.logger.debug('Failed to parse registry.pol', { error });
|
|
339
|
+
}
|
|
340
|
+
return result;
|
|
341
|
+
}
|
|
342
|
+
async testConnection() {
|
|
343
|
+
const timeout = this.config.timeout || 15000;
|
|
344
|
+
const cmd = `${this.buildSmbCommand()} 'ls'`;
|
|
345
|
+
try {
|
|
346
|
+
await execAsync(cmd, { timeout });
|
|
347
|
+
return {
|
|
348
|
+
success: true,
|
|
349
|
+
message: 'SMB connection successful',
|
|
350
|
+
};
|
|
351
|
+
}
|
|
352
|
+
catch (error) {
|
|
353
|
+
const message = error instanceof Error ? error.message : 'Unknown error';
|
|
354
|
+
return {
|
|
355
|
+
success: false,
|
|
356
|
+
message: `SMB connection failed: ${message}`,
|
|
357
|
+
};
|
|
358
|
+
}
|
|
359
|
+
}
|
|
360
|
+
}
|
|
361
|
+
exports.SMBProvider = SMBProvider;
|
|
362
|
+
function formatKerberosPolicy(policy, isDefault = false) {
|
|
363
|
+
return {
|
|
364
|
+
maxTicketAge: `${policy.maxTicketAge} hours`,
|
|
365
|
+
maxRenewAge: `${policy.maxRenewAge} days`,
|
|
366
|
+
maxServiceAge: `${policy.maxServiceAge} min`,
|
|
367
|
+
maxClockSkew: `${policy.maxClockSkew} min`,
|
|
368
|
+
ticketValidateClient: policy.ticketValidateClient,
|
|
369
|
+
isDefault,
|
|
370
|
+
};
|
|
371
|
+
}
|
|
372
|
+
function getDefaultKerberosPolicy() {
|
|
373
|
+
return {
|
|
374
|
+
maxTicketAge: '10 hours',
|
|
375
|
+
maxRenewAge: '7 days',
|
|
376
|
+
maxServiceAge: '600 min',
|
|
377
|
+
maxClockSkew: '5 min',
|
|
378
|
+
ticketValidateClient: true,
|
|
379
|
+
isDefault: true,
|
|
380
|
+
};
|
|
381
|
+
}
|
|
382
|
+
//# sourceMappingURL=smb.provider.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"smb.provider.js","sourceRoot":"","sources":["../../../src/providers/smb/smb.provider.ts"],"names":[],"mappings":";;;AAonBA,oDASC;AAMD,4DASC;AAnoBD,iDAAqC;AACrC,+BAAiC;AACjC,0CAA6D;AAC7D,2BAA4B;AAC5B,+BAA4B;AAC5B,+CAA4C;AAE5C,MAAM,SAAS,GAAG,IAAA,gBAAS,EAAC,oBAAI,CAAC,CAAC;AAiElC,MAAM,0BAA0B,GAAG,wCAAwC,CAAC;AAK5E,MAAa,WAAW;IACd,MAAM,CAAY;IAE1B,YAAY,MAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,OAAO;QACX,eAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;IAKD,KAAK,CAAC,UAAU;IAEhB,CAAC;IAKO,eAAe;QACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAGhE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,gBAAgB,IAAI,IAAI,KAAK,SAAS,MAAM,KAAK,QAAQ,IAAI,eAAe,MAAM,CAAC;IAC5F,CAAC;IAKD,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAGhG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,UAAU,OAAO,MAAM,QAAQ,IAAI,CAAC;QAEzE,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE1D,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAElC,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAGnD,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAGhG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,UAAU,OAAO,MAAM,QAAQ,IAAI,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;YAG3C,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAG7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAIzC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAE5E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,UAAU,QAAQ,IAAI,CAAC;QAExE,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAGrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,eAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAE7D,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACxG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,kBAAkB,CAAC,aAAqB;QAC5C,MAAM,WAAW,GAAG,GAAG,aAAa,aAAa,0BAA0B,mDAAmD,CAAC;QAE/H,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAE/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,eAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKO,mBAAmB,CAAC,OAAe;QACzC,MAAM,MAAM,GAAmB;YAC7B,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,GAAG;YAClB,YAAY,EAAE,CAAC;YACf,oBAAoB,EAAE,IAAI;SAC3B,CAAC;QAGF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAGhC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,iBAAiB,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YAGjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YAE/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAErC,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1B,KAAK,cAAc;oBACjB,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAC/B,MAAM;gBACR,KAAK,aAAa;oBAChB,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC;oBAC9B,MAAM;gBACR,KAAK,eAAe;oBAClB,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC;oBAChC,MAAM;gBACR,KAAK,cAAc;oBACjB,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAC/B,MAAM;gBACR,KAAK,sBAAsB;oBACzB,MAAM,CAAC,oBAAoB,GAAG,QAAQ,KAAK,CAAC,CAAC;oBAC7C,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAMD,KAAK,CAAC,uBAAuB,CAAC,aAAqB;QAEjD,MAAM,cAAc,GAAG,wCAAwC,CAAC;QAChE,MAAM,WAAW,GAAG,GAAG,aAAa,aAAa,cAAc,mDAAmD,CAAC;QAEnH,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,IAAI,CAAC;YAEH,eAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAErE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7D,CAAC;YAGD,MAAM,gBAAgB,GAAG,GAAG,aAAa,aAAa,0BAA0B,mDAAmD,CAAC;YACpI,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/D,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBAClD,eAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjE,CAAC;YAGD,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAGpE,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE1E,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,cAAc,EAAE,QAAQ,CAAC,mBAAmB,KAAK,SAAS;gBAC1D,aAAa,EAAE,QAAQ,CAAC,kBAAkB,KAAK,SAAS;gBACxD,cAAc,EAAE,QAAQ,CAAC,aAAa,KAAK,SAAS;gBACpD,YAAY,EAAE,QAAQ,CAAC,iBAAiB,KAAK,SAAS;aACvD,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKO,mBAAmB,CAAC,OAAe,EAAE,QAA6B;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAGhC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,iBAAiB,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YAIjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YAE/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAGvB,IAAI,OAAO,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;gBAC9D,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;gBACpE,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;gBAC5D,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAExC,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAID,IAAI,OAAO,CAAC,QAAQ,CAAC,oDAAoD,CAAC,EAAE,CAAC;gBAC3E,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAID,IAAI,OAAO,CAAC,QAAQ,CAAC,yDAAyD,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,wBAAwB,GAAG,KAAK,KAAK,GAAG,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,eAAe,CAC3B,aAAqB,EACrB,OAAe,EACf,QAA6B;QAE7B,MAAM,SAAS,GAAG,GAAG,aAAa,aAAa,OAAO,+CAA+C,CAAC;QAEtG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC/C,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAMO,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAsD,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAGrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW;gBAAE,SAAS;YAG3B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAE/B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE9B,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;gBAAE,SAAS;YAG5C,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAGzC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEpD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ;gBACR,WAAW;gBACX,OAAO,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1B,OAAO,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAKO,gBAAgB,CAAC,WAAmB;QAC1C,MAAM,WAAW,GAA2B;YAC1C,uBAAuB,EAAE,eAAe;YACxC,iCAAiC,EAAE,eAAe;YAClD,oCAAoC,EAAE,eAAe;YACrD,6BAA6B,EAAE,oBAAoB;YACnD,2BAA2B,EAAE,oBAAoB;YACjD,yBAAyB,EAAE,oBAAoB;YAC/C,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,cAAc;YACxB,eAAe,EAAE,cAAc;YAC/B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,eAAe;YAC3B,eAAe,EAAE,eAAe;YAChC,qBAAqB,EAAE,eAAe;YACtC,8BAA8B,EAAE,eAAe;YAC/C,yBAAyB,EAAE,eAAe;YAC1C,uBAAuB,EAAE,QAAQ;YACjC,2BAA2B,EAAE,QAAQ;YACrC,kBAAkB,EAAE,QAAQ;SAC7B,CAAC;QAEF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1D,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAMO,KAAK,CAAC,qBAAqB,CACjC,aAAqB,EACrB,OAAe,EACf,QAA6B;QAE7B,MAAM,eAAe,GAAG,GAAG,aAAa,aAAa,OAAO,uBAAuB,CAAC;QAEpF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,OAAO;YAIpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC3D,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAOO,sBAAsB,CAAC,OAAe;QAC5C,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,KAAK;YACpB,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAE,KAAK;SACrB,CAAC;QAEF,IAAI,CAAC;YAGH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAOhD,IAAI,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;YACnC,CAAC;YAED,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC9B,CAAC;YAED,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAKD,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAE7C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,2BAA2B;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0BAA0B,OAAO,EAAE;aAC7C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AA7gBD,kCA6gBC;AAiBD,SAAgB,oBAAoB,CAAC,MAAsB,EAAE,SAAS,GAAG,KAAK;IAC5E,OAAO;QACL,YAAY,EAAE,GAAG,MAAM,CAAC,YAAY,QAAQ;QAC5C,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,OAAO;QACzC,aAAa,EAAE,GAAG,MAAM,CAAC,aAAa,MAAM;QAC5C,YAAY,EAAE,GAAG,MAAM,CAAC,YAAY,MAAM;QAC1C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,SAAS;KACV,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB;IACtC,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,QAAQ;QACrB,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,OAAO;QACrB,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC"}
|
package/dist/server.d.ts
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}
|
package/dist/server.js
ADDED
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const app_1 = require("./app");
|
|
4
|
+
const config_1 = require("./config");
|
|
5
|
+
const logger_1 = require("./utils/logger");
|
|
6
|
+
const migration_runner_1 = require("./data/migrations/migration.runner");
|
|
7
|
+
const container_1 = require("./container");
|
|
8
|
+
const package_json_1 = require("../package.json");
|
|
9
|
+
async function startServer() {
|
|
10
|
+
try {
|
|
11
|
+
const config = (0, config_1.getConfig)();
|
|
12
|
+
(0, logger_1.logInfo)('Configuration loaded successfully', {
|
|
13
|
+
port: config.server.port,
|
|
14
|
+
nodeEnv: config.server.nodeEnv,
|
|
15
|
+
});
|
|
16
|
+
await migration_runner_1.MigrationRunner.runMigrations(config.database.path);
|
|
17
|
+
(0, logger_1.logInfo)('Database migrations completed');
|
|
18
|
+
await container_1.DIContainer.initialize();
|
|
19
|
+
(0, logger_1.logInfo)('DI container initialized');
|
|
20
|
+
const app = (0, app_1.createApp)();
|
|
21
|
+
const server = app.listen(config.server.port, () => {
|
|
22
|
+
(0, logger_1.logInfo)('Server started successfully', {
|
|
23
|
+
port: config.server.port,
|
|
24
|
+
nodeEnv: config.server.nodeEnv,
|
|
25
|
+
version: package_json_1.version,
|
|
26
|
+
});
|
|
27
|
+
});
|
|
28
|
+
const shutdown = () => {
|
|
29
|
+
(0, logger_1.logInfo)('Shutdown signal received, closing server...');
|
|
30
|
+
server.close(() => {
|
|
31
|
+
(0, logger_1.logInfo)('Server closed successfully');
|
|
32
|
+
process.exit(0);
|
|
33
|
+
});
|
|
34
|
+
};
|
|
35
|
+
process.on('SIGTERM', shutdown);
|
|
36
|
+
process.on('SIGINT', shutdown);
|
|
37
|
+
}
|
|
38
|
+
catch (error) {
|
|
39
|
+
(0, logger_1.logError)('Failed to start server', error);
|
|
40
|
+
process.exit(1);
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
void startServer();
|
|
44
|
+
//# sourceMappingURL=server.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;AAAA,+BAAkC;AAClC,qCAAqC;AACrC,2CAAmD;AACnD,yEAAqE;AACrE,2CAA0C;AAC1C,kDAA0C;AAO1C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAC3B,IAAA,gBAAO,EAAC,mCAAmC,EAAE;YAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;SAC/B,CAAC,CAAC;QAGH,MAAM,kCAAe,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAA,gBAAO,EAAC,+BAA+B,CAAC,CAAC;QAGzC,MAAM,uBAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAA,gBAAO,EAAC,0BAA0B,CAAC,CAAC;QAGpC,MAAM,GAAG,GAAG,IAAA,eAAS,GAAE,CAAC;QAGxB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACjD,IAAA,gBAAO,EAAC,6BAA6B,EAAE;gBACrC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBAC9B,OAAO,EAAP,sBAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAGH,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,IAAA,gBAAO,EAAC,6CAA6C,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAChB,IAAA,gBAAO,EAAC,4BAA4B,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,KAAc,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAGD,KAAK,WAAW,EAAE,CAAC"}
|
|
@@ -0,0 +1,70 @@
|
|
|
1
|
+
import { LDAPProvider } from '../../providers/ldap/ldap.provider';
|
|
2
|
+
import { Finding } from '../../types/finding.types';
|
|
3
|
+
import { SecurityScore } from './scoring.service';
|
|
4
|
+
import { DomainConfig } from './response-formatter';
|
|
5
|
+
import { SMBConfig as AppSMBConfig, LDAPConfig } from '../../types/config.types';
|
|
6
|
+
import { AttackGraphExport } from '../../types/attack-graph.types';
|
|
7
|
+
export interface AuditOptions {
|
|
8
|
+
includeDetails?: boolean;
|
|
9
|
+
maxUsers?: number;
|
|
10
|
+
maxGroups?: number;
|
|
11
|
+
maxComputers?: number;
|
|
12
|
+
}
|
|
13
|
+
export interface AuditResult {
|
|
14
|
+
score: SecurityScore;
|
|
15
|
+
findings: Finding[];
|
|
16
|
+
stats: {
|
|
17
|
+
totalUsers: number;
|
|
18
|
+
enabledUsers: number;
|
|
19
|
+
disabledUsers: number;
|
|
20
|
+
totalGroups: number;
|
|
21
|
+
totalComputers: number;
|
|
22
|
+
enabledComputers: number;
|
|
23
|
+
disabledComputers: number;
|
|
24
|
+
totalOUs: number;
|
|
25
|
+
totalFindings: number;
|
|
26
|
+
executionTimeMs: number;
|
|
27
|
+
ldapUrl?: string;
|
|
28
|
+
};
|
|
29
|
+
timestamp: Date;
|
|
30
|
+
domainConfig?: DomainConfig;
|
|
31
|
+
attackGraph?: AttackGraphExport;
|
|
32
|
+
}
|
|
33
|
+
export declare class ADAuditService {
|
|
34
|
+
private ldapProvider;
|
|
35
|
+
private smbConfig?;
|
|
36
|
+
constructor(ldapProvider: LDAPProvider, smbConfig?: {
|
|
37
|
+
smb: AppSMBConfig;
|
|
38
|
+
ldap: LDAPConfig;
|
|
39
|
+
});
|
|
40
|
+
runAudit(options?: AuditOptions): Promise<AuditResult>;
|
|
41
|
+
testConnection(): Promise<{
|
|
42
|
+
success: boolean;
|
|
43
|
+
message: string;
|
|
44
|
+
}>;
|
|
45
|
+
private testAnonymousLdapAccess;
|
|
46
|
+
private fetchUsers;
|
|
47
|
+
private fetchGroups;
|
|
48
|
+
private fetchComputers;
|
|
49
|
+
private fetchDomain;
|
|
50
|
+
private fetchGpoSecuritySettings;
|
|
51
|
+
private fetchOUCount;
|
|
52
|
+
private fetchAcls;
|
|
53
|
+
private fetchAclsForObjects;
|
|
54
|
+
private fetchCertificateTemplates;
|
|
55
|
+
private fetchCertificateAuthorities;
|
|
56
|
+
private fetchGPOsWithAcls;
|
|
57
|
+
private fetchTrustsExtended;
|
|
58
|
+
private fetchDomainConfig;
|
|
59
|
+
private formatFiletimeDuration;
|
|
60
|
+
private getDomainModeName;
|
|
61
|
+
private extractDomainNameFromDN;
|
|
62
|
+
private fetchFSMORoles;
|
|
63
|
+
private extractServerFromDN;
|
|
64
|
+
private fetchTrusts;
|
|
65
|
+
private getTrustDirection;
|
|
66
|
+
private getTrustType;
|
|
67
|
+
private fetchGPOCount;
|
|
68
|
+
private fetchKerberosPolicyViaSMB;
|
|
69
|
+
}
|
|
70
|
+
//# sourceMappingURL=ad-audit.service.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"ad-audit.service.d.ts","sourceRoot":"","sources":["../../../src/services/audit/ad-audit.service.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIlE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAA0B,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAIpD,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAuBjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAiCnE,MAAM,WAAW,YAAY;IAI3B,cAAc,CAAC,EAAE,OAAO,CAAC;IAKzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAKnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD,MAAM,WAAW,WAAW;IAI1B,KAAK,EAAE,aAAa,CAAC;IAKrB,QAAQ,EAAE,OAAO,EAAE,CAAC;IAKpB,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAKF,SAAS,EAAE,IAAI,CAAC;IAKhB,YAAY,CAAC,EAAE,YAAY,CAAC;IAK5B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAgDD,qBAAa,cAAc;IAGb,OAAO,CAAC,YAAY;IAFhC,OAAO,CAAC,SAAS,CAAC,CAA0C;gBAExC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE;IAU7F,QAAQ,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAoJ1D,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;YAiBxD,uBAAuB;YAmDvB,UAAU;YA6EV,WAAW;YA4BX,cAAc;YA2Dd,WAAW;YA+EX,wBAAwB;YAiFxB,YAAY;YA0BZ,SAAS;YAwDT,mBAAmB;YA+CnB,yBAAyB;YAgDzB,2BAA2B;YAwC3B,iBAAiB;YAmGjB,mBAAmB;YA+CnB,iBAAiB;IAiH/B,OAAO,CAAC,sBAAsB;IAuB9B,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,uBAAuB;YASjB,cAAc;IA+C5B,OAAO,CAAC,mBAAmB;YASb,WAAW;IA4BzB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,YAAY;YAkBN,aAAa;YA0Cb,yBAAyB;CA4CxC"}
|