@j3r3mcdev/oast-server 1.1.1 → 1.1.2

package/dist/listeners/websocket/websocket.listener.d.ts

@@ -0,0 +1,8 @@
+import { CoreRouter } from "../../core/router";
+export declare class WebSocketListener {
+    private router;
+    private server;
+    private logger;
+    constructor(router: CoreRouter, port: number);
+    stop(): void;
+}

package/dist/storage-adapters/adapters/__tests__/memory.storage.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/storage-adapters/adapters/memory.storage.d.ts

@@ -0,0 +1,21 @@
+import { Storage } from "../storage.interface";
+import { AnyNormalizedEvent } from "../../types/event.types";
+export declare class MemoryStorage implements Storage {
+    private events;
+    save(event: AnyNormalizedEvent): Promise<void>;
+    getEvent(id: string): Promise<AnyNormalizedEvent | null>;
+    listEvents(params: {
+        type?: string;
+        page?: number;
+        limit?: number;
+    }): Promise<AnyNormalizedEvent[]>;
+    getAll(): Promise<AnyNormalizedEvent[]>;
+    deleteEvent(id: string): Promise<boolean>;
+    clearEvents(): Promise<void>;
+    getStats(): Promise<{
+        total: number;
+        byType: Record<string, number>;
+    }>;
+    getById(id: string): Promise<AnyNormalizedEvent | null>;
+    delete(id: string): Promise<boolean>;
+}

package/dist/storage-adapters/storage.interface.d.ts

@@ -0,0 +1,18 @@
+import { AnyNormalizedEvent } from "../types/event.types";
+export interface StorageListParams {
+    type?: string;
+    page?: number;
+    limit?: number;
+}
+export interface Storage {
+    save(event: AnyNormalizedEvent): Promise<void>;
+    getEvent(id: string): Promise<AnyNormalizedEvent | null>;
+    listEvents(params: StorageListParams): Promise<AnyNormalizedEvent[]>;
+    deleteEvent(id: string): Promise<boolean>;
+    clearEvents(): Promise<void>;
+    getAll(): Promise<AnyNormalizedEvent[]>;
+    getStats(): Promise<{
+        total: number;
+        byType: Record<string, number>;
+    }>;
+}

package/dist/types/event.types.d.ts

@@ -0,0 +1,118 @@
+export interface RawEvent {
+    ip: string;
+    method: string;
+    path: string;
+    headers: Record<string, string | string[] | undefined>;
+    query: Record<string, any>;
+    body: any;
+    raw: any;
+}
+export interface RawDnsEvent {
+    ip: string;
+    query: string;
+    recordType: string;
+    raw: any;
+}
+export interface RawSmtpEvent {
+    ip: string;
+    from: string;
+    to: string[];
+    subject: string;
+    body: string;
+    raw: any;
+}
+export interface RawTcpEvent {
+    ip: string;
+    port: number;
+    data: string;
+    raw: any;
+}
+export interface RawSsrfEvent {
+    ip: string;
+    method: string | undefined;
+    path: string | undefined;
+    headers: Record<string, string | string[] | undefined>;
+    query: Record<string, any>;
+    raw: any;
+}
+export interface RawWebhookEvent {
+    ip: string;
+    headers: Record<string, string | string[] | undefined>;
+    body: any;
+    raw: any;
+}
+export interface RawWebSocketEvent {
+    ip: string;
+    message: string;
+    raw: any;
+}
+export interface NormalizedHttpEvent {
+    id: string;
+    type: "http";
+    timestamp: number;
+    sourceIp: string;
+    request: {
+        method: string;
+        path: string;
+        headers: Record<string, string | string[] | undefined>;
+        query: Record<string, any>;
+        body: any;
+    };
+}
+export interface NormalizedDnsEvent {
+    id: string;
+    type: "dns";
+    timestamp: number;
+    ip: string;
+    query: string;
+    recordType: string;
+    raw: any;
+}
+export interface NormalizedSmtpEvent {
+    id: string;
+    type: "smtp";
+    timestamp: number;
+    ip: string;
+    from: string;
+    to: string[];
+    subject: string;
+    body: string;
+    raw: any;
+}
+export interface NormalizedTcpEvent {
+    id: string;
+    type: "tcp";
+    timestamp: number;
+    ip: string;
+    port: number;
+    data: string;
+    raw: any;
+}
+export interface NormalizedSsrfEvent {
+    id: string;
+    type: "ssrf";
+    timestamp: number;
+    sourceIp: string;
+    request: {
+        method: string | undefined;
+        path: string | undefined;
+        headers: Record<string, string | string[] | undefined>;
+        query: Record<string, any>;
+    };
+}
+export interface NormalizedWebhookEvent {
+    id: string;
+    type: "webhook";
+    timestamp: number;
+    sourceIp: string;
+    headers: Record<string, string | string[] | undefined>;
+    body: any;
+}
+export interface NormalizedWebSocketEvent {
+    id: string;
+    type: "websocket";
+    timestamp: number;
+    sourceIp: string;
+    message: string;
+}
+export type AnyNormalizedEvent = NormalizedHttpEvent | NormalizedDnsEvent | NormalizedSmtpEvent | NormalizedTcpEvent | NormalizedSsrfEvent | NormalizedWebhookEvent | NormalizedWebSocketEvent;

package/jest.config.js

@@ -1,14 +1,14 @@
-const { createDefaultPreset } = require("ts-jest");
-
-const tsJestTransformCfg = createDefaultPreset().transform;
-
-/** @type {import("jest").Config} **/
-module.exports = {
-  testEnvironment: "node",
-  transform: {
-    ...tsJestTransformCfg,
-  },
-
-  // 🔥 Empêche Jest d'exécuter les tests compilés dans dist/
-  testPathIgnorePatterns: ["/dist/"],
-};
+const { createDefaultPreset } = require("ts-jest");
+
+const tsJestTransformCfg = createDefaultPreset().transform;
+
+/** @type {import("jest").Config} **/
+module.exports = {
+  testEnvironment: "node",
+  transform: {
+    ...tsJestTransformCfg,
+  },
+
+  // 🔥 Empêche Jest d'exécuter les tests compilés dans dist/
+  testPathIgnorePatterns: ["/dist/"],
+};

package/package.json

@@ -1,45 +1,45 @@
-{
-  "name": "@j3r3mcdev/oast-server",
-  "version": "1.1.1",
-  "description": "Modular OAST callback server for security auditing",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
-  "scripts": {
-    "dev": "ts-node-dev --respawn --transpile-only src/core/server.ts",
-    "build": "tsc -p tsconfig.json",
-    "start": "node dist/core/server.js",
-    "clean": "rimraf dist",
-    "test": "jest --passWithNoTests"
-  },
-  "keywords": [
-    "oast",
-    "security",
-    "ssrf",
-    "callback",
-    "audit",
-    "pentest"
-  ],
-  "author": "Jérémy",
-  "license": "MIT",
-  "dependencies": {
-    "body-parser": "^1.20.2",
-    "cors": "^2.8.5",
-    "dotenv": "^16.4.5",
-    "express": "^4.19.2",
-    "ioredis": "^5.4.1",
-    "ws": "^8.21.0"
-  },
-  "devDependencies": {
-    "@types/body-parser": "^1.19.5",
-    "@types/cors": "^2.8.17",
-    "@types/express": "^4.17.21",
-    "@types/jest": "^29.5.14",
-    "@types/node": "^20.12.7",
-    "@types/ws": "^8.18.1",
-    "jest": "^29.7.0",
-    "rimraf": "^5.0.5",
-    "ts-jest": "^29.4.11",
-    "ts-node-dev": "^2.0.0",
-    "typescript": "^5.4.5"
-  }
-}
+{
+  "name": "@j3r3mcdev/oast-server",
+  "version": "1.1.2",
+  "description": "Modular OAST callback server for security auditing",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "dev": "ts-node-dev --respawn --transpile-only src/core/server.ts",
+    "build": "tsc -p tsconfig.json",
+    "start": "node dist/core/server.js",
+    "clean": "rimraf dist",
+    "test": "jest --passWithNoTests"
+  },
+  "keywords": [
+    "oast",
+    "security",
+    "ssrf",
+    "callback",
+    "audit",
+    "pentest"
+  ],
+  "author": "Jérémy",
+  "license": "MIT",
+  "dependencies": {
+    "body-parser": "^1.20.2",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5",
+    "express": "^4.19.2",
+    "ioredis": "^5.4.1",
+    "ws": "^8.21.0"
+  },
+  "devDependencies": {
+    "@types/body-parser": "^1.19.5",
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jest": "^29.5.14",
+    "@types/node": "^20.12.7",
+    "@types/ws": "^8.18.1",
+    "jest": "^29.7.0",
+    "rimraf": "^5.0.5",
+    "ts-jest": "^29.4.11",
+    "ts-node-dev": "^2.0.0",
+    "typescript": "^5.4.5"
+  }
+}

package/sadmin list shadows

@@ -1,9 +1,9 @@
-8faa343 (HEAD -> feat/core-event, origin/main, main) HEAD@{0}: checkout: moving from main to feat/core-event
-8faa343 (HEAD -> feat/core-event, origin/main, main) HEAD@{1}: commit: ADD FULL architecture
-8f8f441 HEAD@{2}: commit: ADD CI/CD
-0c987a0 HEAD@{3}: commit: ADD CI/CD
-8aad148 HEAD@{4}: commit: ADD CI/CD
-e1f2959 HEAD@{5}: commit: ADD CI/CD
-271e3b1 HEAD@{6}: commit: ADD Architecture & package.json & tsconfig.json
-b840cd3 HEAD@{7}: Branch: renamed refs/heads/master to refs/heads/main
-b840cd3 HEAD@{9}: commit (initial): Initial project structure
+8faa343 (HEAD -> feat/core-event, origin/main, main) HEAD@{0}: checkout: moving from main to feat/core-event
+8faa343 (HEAD -> feat/core-event, origin/main, main) HEAD@{1}: commit: ADD FULL architecture
+8f8f441 HEAD@{2}: commit: ADD CI/CD
+0c987a0 HEAD@{3}: commit: ADD CI/CD
+8aad148 HEAD@{4}: commit: ADD CI/CD
+e1f2959 HEAD@{5}: commit: ADD CI/CD
+271e3b1 HEAD@{6}: commit: ADD Architecture & package.json & tsconfig.json
+b840cd3 HEAD@{7}: Branch: renamed refs/heads/master to refs/heads/main
+b840cd3 HEAD@{9}: commit (initial): Initial project structure

package/src/api/controllers/__tests__/tasks.controller.test.ts

@@ -1,74 +1,74 @@
-import { describe, it, expect, jest, beforeEach } from "@jest/globals";
-import { TasksController } from "../tasks.controller";
-import { TasksService } from "../../services/tasks.service";
-
-describe("TasksController", () => {
-  let service: jest.Mocked<TasksService>;
-  let controller: TasksController;
-
-  beforeEach(() => {
-    service = {
-      create: jest.fn() as jest.MockedFunction<TasksService["create"]>,
-      get: jest.fn() as jest.MockedFunction<TasksService["get"]>,
-      list: jest.fn() as jest.MockedFunction<TasksService["list"]>,
-      cancel: jest.fn() as jest.MockedFunction<TasksService["cancel"]>,
-    } as unknown as jest.Mocked<TasksService>;
-
-    controller = new TasksController(service);
-  });
-
-  it("crée une tâche", async () => {
-    const fakeTask = {
-      id: "123",
-      type: "x",
-      payload: {},
-      priority: "normal",
-      metadata: {},
-      status: "pending",
-      createdAt: Date.now(),
-      updatedAt: Date.now(),
-    } as const;
-
-    service.create.mockReturnValue(fakeTask);
-
-    const req = { body: { type: "x", payload: {} } };
-
-    const result = await controller.create({ req, res: {}, params: {} });
-
-    expect(service.create).toHaveBeenCalled();
-    expect(result).toEqual({
-      status: 201,
-      body: fakeTask,
-    });
-  });
-
-  it("retourne 404 si tâche absente", async () => {
-    service.get.mockReturnValue(undefined);
-
-    const result = await controller.getOne({
-      req: {},
-      res: {},
-      params: { id: "123" },
-    });
-
-    expect(result).toEqual({
-      status: 404,
-      body: { error: "Task not found" },
-    });
-  });
-
-  it("annule une tâche", async () => {
-    service.cancel.mockReturnValue(true);
-
-    const result = await controller.cancel({
-      req: {},
-      res: {},
-      params: { id: "123" },
-    });
-
-    expect(result).toEqual({
-      status: 200,
-      body: { cancelled: true },
-    });
-  });
-});
+import { describe, it, expect, jest, beforeEach } from "@jest/globals";
+import { TasksController } from "../tasks.controller";
+import { TasksService } from "../../services/tasks.service";
+
+describe("TasksController", () => {
+  let service: jest.Mocked<TasksService>;
+  let controller: TasksController;
+
+  beforeEach(() => {
+    service = {
+      create: jest.fn() as jest.MockedFunction<TasksService["create"]>,
+      get: jest.fn() as jest.MockedFunction<TasksService["get"]>,
+      list: jest.fn() as jest.MockedFunction<TasksService["list"]>,
+      cancel: jest.fn() as jest.MockedFunction<TasksService["cancel"]>,
+    } as unknown as jest.Mocked<TasksService>;
+
+    controller = new TasksController(service);
+  });
+
+  it("crée une tâche", async () => {
+    const fakeTask = {
+      id: "123",
+      type: "x",
+      payload: {},
+      priority: "normal",
+      metadata: {},
+      status: "pending",
+      createdAt: Date.now(),
+      updatedAt: Date.now(),
+    } as const;
+
+    service.create.mockReturnValue(fakeTask);
+
+    const req = { body: { type: "x", payload: {} } };
+
+    const result = await controller.create({ req, res: {}, params: {} });
+
+    expect(service.create).toHaveBeenCalled();
+    expect(result).toEqual({
+      status: 201,
+      body: fakeTask,
+    });
+  });
+
+  it("retourne 404 si tâche absente", async () => {
+    service.get.mockReturnValue(undefined);
+
+    const result = await controller.getOne({
+      req: {},
+      res: {},
+      params: { id: "123" },
+    });
+
+    expect(result).toEqual({
+      status: 404,
+      body: { error: "Task not found" },
+    });
+  });
+
+  it("annule une tâche", async () => {
+    service.cancel.mockReturnValue(true);
+
+    const result = await controller.cancel({
+      req: {},
+      res: {},
+      params: { id: "123" },
+    });
+
+    expect(result).toEqual({
+      status: 200,
+      body: { cancelled: true },
+    });
+  });
+});

package/src/api/controllers/events.controller.ts

@@ -1,10 +1,10 @@
-import { EventsService } from "../services/events.service";
-
-export class EventsController {
-  constructor(private readonly events: EventsService) {}
-
-  stream = async ({ res, query }: any) => {
-    const channels = query.channels?.split(",") ?? [];
-    return this.events.connect(res, channels);
-  };
-}
+import { EventsService } from "../services/events.service";
+
+export class EventsController {
+  constructor(private readonly events: EventsService) {}
+
+  stream = async ({ res, query }: any) => {
+    const channels = query.channels?.split(",") ?? [];
+    return this.events.connect(res, channels);
+  };
+}

package/src/api/controllers/health.controller.ts

@@ -1,7 +1,7 @@
-import { Request, Response } from "express";
-
-export class HealthController {
-  check = (req: Request, res: Response) => {
-    res.json({ status: "ok", timestamp: Date.now() });
-  };
-}
+import { Request, Response } from "express";
+
+export class HealthController {
+  check = (req: Request, res: Response) => {
+    res.json({ status: "ok", timestamp: Date.now() });
+  };
+}

package/src/api/controllers/tasks.controller.ts

@@ -1,41 +1,41 @@
-import { TasksService } from "../services/tasks.service";
-import { CreateTaskDtoValidator } from "../dto/create-task.dto";
-import { FilterTasksDtoValidator } from "../dto/filter-tasks.dto";
-
-export interface HandlerContext {
-  params: Record<string, string>;
-  req: any;
-  res: any;
-}
-
-export class TasksController {
-  constructor(private readonly tasks: TasksService) {}
-
-  list = async ({ req }: HandlerContext) => {
-    const dto = FilterTasksDtoValidator.validate(req.query);
-    const result = await this.tasks.list(dto);
-    return { status: 200, body: result };
-  };
-
-  create = async ({ req }: HandlerContext) => {
-    const dto = CreateTaskDtoValidator.validate(req.body);
-    const task = await this.tasks.create(dto);
-    return { status: 201, body: task };
-  };
-
-  getOne = async ({ params }: HandlerContext) => {
-    const task = await this.tasks.get(params.id);
-    if (!task) {
-      return { status: 404, body: { error: "Task not found" } };
-    }
-    return { status: 200, body: task };
-  };
-
-  cancel = async ({ params }: HandlerContext) => {
-    const ok = await this.tasks.cancel(params.id);
-    if (!ok) {
-      return { status: 404, body: { error: "Task not found" } };
-    }
-    return { status: 200, body: { cancelled: true } };
-  };
-}
+import { TasksService } from "../services/tasks.service";
+import { CreateTaskDtoValidator } from "../dto/create-task.dto";
+import { FilterTasksDtoValidator } from "../dto/filter-tasks.dto";
+
+export interface HandlerContext {
+  params: Record<string, string>;
+  req: any;
+  res: any;
+}
+
+export class TasksController {
+  constructor(private readonly tasks: TasksService) {}
+
+  list = async ({ req }: HandlerContext) => {
+    const dto = FilterTasksDtoValidator.validate(req.query);
+    const result = await this.tasks.list(dto);
+    return { status: 200, body: result };
+  };
+
+  create = async ({ req }: HandlerContext) => {
+    const dto = CreateTaskDtoValidator.validate(req.body);
+    const task = await this.tasks.create(dto);
+    return { status: 201, body: task };
+  };
+
+  getOne = async ({ params }: HandlerContext) => {
+    const task = await this.tasks.get(params.id);
+    if (!task) {
+      return { status: 404, body: { error: "Task not found" } };
+    }
+    return { status: 200, body: task };
+  };
+
+  cancel = async ({ params }: HandlerContext) => {
+    const ok = await this.tasks.cancel(params.id);
+    if (!ok) {
+      return { status: 404, body: { error: "Task not found" } };
+    }
+    return { status: 200, body: { cancelled: true } };
+  };
+}