@j3r3mcdev/oast-server 1.1.5 → 1.1.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/.github/workflows/ci.yml +29 -29
  2. package/.github/workflows/publish.yml +31 -31
  3. package/README.md +192 -192
  4. package/jest.config.js +14 -14
  5. package/package.json +45 -45
  6. package/sadmin list shadows +9 -9
  7. package/src/api/controllers/__tests__/tasks.controller.test.ts +74 -74
  8. package/src/api/controllers/events.controller.ts +10 -10
  9. package/src/api/controllers/health.controller.ts +7 -7
  10. package/src/api/controllers/tasks.controller.ts +41 -41
  11. package/src/api/dto/__tests__/create-task.dto.test.ts +41 -41
  12. package/src/api/dto/__tests__/filter-tasks.dto.test.ts +35 -35
  13. package/src/api/dto/create-task.dto.ts +33 -33
  14. package/src/api/dto/filter-tasks.dto.ts +33 -33
  15. package/src/api/services/__tests__/events.service.test.ts +41 -41
  16. package/src/api/services/__tests__/tasks.service.test.ts +41 -41
  17. package/src/api/services/events.service.ts +17 -17
  18. package/src/api/services/tasks.service.ts +79 -79
  19. package/src/api/sse/events.stream.ts +90 -90
  20. package/src/bootstrap.ts +89 -89
  21. package/src/core/__tests__/core-router.test.ts +30 -30
  22. package/src/core/__tests__/core-server.test.ts +44 -44
  23. package/src/core/__tests__/event.normalizer.test.ts +56 -56
  24. package/src/core/__tests__/event.router.test.ts +89 -89
  25. package/src/core/__tests__/logger.test.ts +32 -32
  26. package/src/core/__tests__/storage-manager.test.ts +74 -74
  27. package/src/core/event.normalizer.ts +147 -147
  28. package/src/core/event.router.ts +13 -13
  29. package/src/core/http/__tests__/adapter-node.test.ts +52 -52
  30. package/src/core/http/__tests__/body-parser-multipart.test.ts +41 -41
  31. package/src/core/http/__tests__/body-parser-raw.test.ts +28 -28
  32. package/src/core/http/__tests__/body-parser-text.test.ts +28 -28
  33. package/src/core/http/__tests__/compile-path.test.ts +39 -39
  34. package/src/core/http/__tests__/middleware-pipeline.test.ts +51 -51
  35. package/src/core/http/__tests__/request.test.ts +34 -34
  36. package/src/core/http/__tests__/response.test.ts +35 -35
  37. package/src/core/http/__tests__/router-match.test.ts +171 -171
  38. package/src/core/http/adapter-node.ts +51 -51
  39. package/src/core/http/buildRequest.ts +18 -18
  40. package/src/core/http/compile-path.ts +32 -32
  41. package/src/core/http/errors.ts +37 -37
  42. package/src/core/http/http-server.ts +52 -52
  43. package/src/core/http/middleware.ts +160 -160
  44. package/src/core/http/request.ts +55 -55
  45. package/src/core/http/response.ts +93 -93
  46. package/src/core/http/router.ts +138 -138
  47. package/src/core/id-generator.ts +8 -8
  48. package/src/core/logger.ts +113 -113
  49. package/src/core/router.ts +44 -44
  50. package/src/core/server.ts +85 -85
  51. package/src/core/storage.ts +64 -64
  52. package/src/index.ts +14 -14
  53. package/src/listeners/api/__tests__/api.controller.test.ts +116 -116
  54. package/src/listeners/api/__tests__/api.extractor.test.ts +46 -46
  55. package/src/listeners/api/__tests__/api.listener.test.ts +82 -82
  56. package/src/listeners/api/__tests__/api.routes.test.ts +155 -155
  57. package/src/listeners/api/__tests__/api.sse.test.ts +105 -105
  58. package/src/listeners/api/api.controllers.ts +67 -67
  59. package/src/listeners/api/api.extractor.ts +43 -43
  60. package/src/listeners/api/api.listener.ts +50 -50
  61. package/src/listeners/api/api.routes.ts +76 -76
  62. package/src/listeners/api/api.sse.ts +38 -38
  63. package/src/listeners/dns/__tests__/dns.test.ts +118 -118
  64. package/src/listeners/dns/dns.extractor.ts +14 -14
  65. package/src/listeners/dns/dns.listener.ts +61 -61
  66. package/src/listeners/http/__tests__/http.extractor.test.ts +59 -59
  67. package/src/listeners/http/__tests__/http.listener.test.ts +133 -133
  68. package/src/listeners/http/http.extractor.ts +15 -15
  69. package/src/listeners/http/http.listener.ts +110 -110
  70. package/src/listeners/listener.interface.ts +4 -4
  71. package/src/listeners/smtp/__tests__/smtp.extractor.test.ts +69 -69
  72. package/src/listeners/smtp/__tests__/smtp.listener.test.ts +150 -150
  73. package/src/listeners/smtp/smtp.extractor.ts +18 -18
  74. package/src/listeners/smtp/smtp.listener.ts +60 -60
  75. package/src/listeners/ssrf/__tests__/ssrf.extractor.test.ts +41 -41
  76. package/src/listeners/ssrf/__tests__/ssrf.listener.test.ts +87 -87
  77. package/src/listeners/ssrf/ssrf.extractor.ts +14 -14
  78. package/src/listeners/ssrf/ssrf.listener.ts +37 -37
  79. package/src/listeners/tcp/tcp.extractor.ts +16 -16
  80. package/src/listeners/tcp/tcp.listener.ts +61 -61
  81. package/src/listeners/webhook/__tests__/webhook.extractor.test.ts +35 -35
  82. package/src/listeners/webhook/__tests__/webhook.listener.test.ts +122 -122
  83. package/src/listeners/webhook/webhook.extractor.ts +12 -12
  84. package/src/listeners/webhook/webhook.listener.ts +58 -58
  85. package/src/listeners/websocket/__tests__/websocket.extractor.test.ts +33 -33
  86. package/src/listeners/websocket/__tests__/websocket.listener.test.ts +90 -90
  87. package/src/listeners/websocket/websocket.extractor.ts +11 -11
  88. package/src/listeners/websocket/websocket.listener.ts +40 -40
  89. package/src/storage-adapters/adapters/__tests__/memory.storage.test.ts +75 -75
  90. package/src/storage-adapters/adapters/memory.storage.ts +64 -64
  91. package/src/storage-adapters/storage.interface.ts +26 -26
  92. package/src/types/event.types.ts +147 -147
  93. package/tsconfig.json +20 -21
@@ -1,40 +1,40 @@
1
- import { WebSocketServer, WebSocket, RawData } from "ws";
2
- import type { IncomingMessage } from "http";
3
- import { CoreRouter } from "../../core/router";
4
- import { WebSocketExtractor } from "./websocket.extractor";
5
- import { EventNormalizer } from "../../core/event.normalizer";
6
- import { Logger } from "../../core/logger";
7
-
8
- export class WebSocketListener {
9
- private router: CoreRouter;
10
- private server: WebSocketServer;
11
- private logger: Logger;
12
-
13
- constructor(router: CoreRouter, port: number) {
14
- this.router = router;
15
- this.logger = new Logger({ context: "WebSocketListener" });
16
-
17
- this.server = new WebSocketServer({ port });
18
-
19
- this.server.on("connection", (ws: WebSocket, req: IncomingMessage) => {
20
- ws.on("message", async (data: RawData) => {
21
- try {
22
- const message = data.toString();
23
- const extracted = WebSocketExtractor.extract(ws, req, message);
24
- const event = EventNormalizer.normalizeWebSocket(extracted);
25
-
26
- await this.router.dispatch(event);
27
- } catch (err) {
28
- this.logger.error("WebSocket error", err);
29
- }
30
- });
31
- });
32
-
33
- this.logger.info(`WebSocket Listener listening on port ${port}`);
34
- }
35
-
36
- stop() {
37
- this.server.close();
38
- this.logger.info("WebSocket Listener stopped");
39
- }
40
- }
1
+ import { WebSocketServer, WebSocket, RawData } from "ws";
2
+ import type { IncomingMessage } from "http";
3
+ import { CoreRouter } from "../../core/router";
4
+ import { WebSocketExtractor } from "./websocket.extractor";
5
+ import { EventNormalizer } from "../../core/event.normalizer";
6
+ import { Logger } from "../../core/logger";
7
+
8
+ export class WebSocketListener {
9
+ private router: CoreRouter;
10
+ private server: WebSocketServer;
11
+ private logger: Logger;
12
+
13
+ constructor(router: CoreRouter, port: number) {
14
+ this.router = router;
15
+ this.logger = new Logger({ context: "WebSocketListener" });
16
+
17
+ this.server = new WebSocketServer({ port });
18
+
19
+ this.server.on("connection", (ws: WebSocket, req: IncomingMessage) => {
20
+ ws.on("message", async (data: RawData) => {
21
+ try {
22
+ const message = data.toString();
23
+ const extracted = WebSocketExtractor.extract(ws, req, message);
24
+ const event = EventNormalizer.normalizeWebSocket(extracted);
25
+
26
+ await this.router.dispatch(event);
27
+ } catch (err) {
28
+ this.logger.error("WebSocket error", err);
29
+ }
30
+ });
31
+ });
32
+
33
+ this.logger.info(`WebSocket Listener listening on port ${port}`);
34
+ }
35
+
36
+ stop() {
37
+ this.server.close();
38
+ this.logger.info("WebSocket Listener stopped");
39
+ }
40
+ }
@@ -1,75 +1,75 @@
1
- import { MemoryStorage } from "../memory.storage";
2
- import { describe, it, expect } from "@jest/globals";
3
- import { NormalizedHttpEvent } from "../../../types/event.types";
4
-
5
- describe("MemoryStorage", () => {
6
- it("sauvegarde un événement", async () => {
7
- const storage = new MemoryStorage();
8
-
9
- const event: NormalizedHttpEvent = {
10
- id: "1",
11
- type: "http",
12
- timestamp: 123,
13
- sourceIp: "1.1.1.1",
14
- request: {
15
- method: "GET",
16
- path: "/",
17
- headers: {},
18
- query: {},
19
- body: {},
20
- },
21
- };
22
-
23
- await storage.save(event);
24
-
25
- const all = await storage.getAll();
26
- expect(all).toEqual([event]);
27
- });
28
-
29
- it("retourne un événement par ID", async () => {
30
- const storage = new MemoryStorage();
31
-
32
- const event: NormalizedHttpEvent = {
33
- id: "1",
34
- type: "http",
35
- timestamp: Date.now(),
36
- sourceIp: "1.1.1.1",
37
- request: {
38
- method: "GET",
39
- path: "/test",
40
- headers: {},
41
- query: {},
42
- body: "",
43
- },
44
- };
45
-
46
- await storage.save(event);
47
-
48
- const found = await storage.getById("1");
49
- expect(found).toEqual(event);
50
- });
51
-
52
- it("supprime un événement", async () => {
53
- const storage = new MemoryStorage();
54
-
55
- const event: NormalizedHttpEvent = {
56
- id: "1",
57
- type: "http",
58
- timestamp: Date.now(),
59
- sourceIp: "1.1.1.1",
60
- request: {
61
- method: "GET",
62
- path: "/test",
63
- headers: {},
64
- query: {},
65
- body: "",
66
- },
67
- };
68
-
69
- await storage.save(event);
70
- await storage.delete("1");
71
-
72
- const all = await storage.getAll();
73
- expect(all).toEqual([]);
74
- });
75
- });
1
+ import { MemoryStorage } from "../memory.storage";
2
+ import { describe, it, expect } from "@jest/globals";
3
+ import { NormalizedHttpEvent } from "../../../types/event.types";
4
+
5
+ describe("MemoryStorage", () => {
6
+ it("sauvegarde un événement", async () => {
7
+ const storage = new MemoryStorage();
8
+
9
+ const event: NormalizedHttpEvent = {
10
+ id: "1",
11
+ type: "http",
12
+ timestamp: 123,
13
+ sourceIp: "1.1.1.1",
14
+ request: {
15
+ method: "GET",
16
+ path: "/",
17
+ headers: {},
18
+ query: {},
19
+ body: {},
20
+ },
21
+ };
22
+
23
+ await storage.save(event);
24
+
25
+ const all = await storage.getAll();
26
+ expect(all).toEqual([event]);
27
+ });
28
+
29
+ it("retourne un événement par ID", async () => {
30
+ const storage = new MemoryStorage();
31
+
32
+ const event: NormalizedHttpEvent = {
33
+ id: "1",
34
+ type: "http",
35
+ timestamp: Date.now(),
36
+ sourceIp: "1.1.1.1",
37
+ request: {
38
+ method: "GET",
39
+ path: "/test",
40
+ headers: {},
41
+ query: {},
42
+ body: "",
43
+ },
44
+ };
45
+
46
+ await storage.save(event);
47
+
48
+ const found = await storage.getById("1");
49
+ expect(found).toEqual(event);
50
+ });
51
+
52
+ it("supprime un événement", async () => {
53
+ const storage = new MemoryStorage();
54
+
55
+ const event: NormalizedHttpEvent = {
56
+ id: "1",
57
+ type: "http",
58
+ timestamp: Date.now(),
59
+ sourceIp: "1.1.1.1",
60
+ request: {
61
+ method: "GET",
62
+ path: "/test",
63
+ headers: {},
64
+ query: {},
65
+ body: "",
66
+ },
67
+ };
68
+
69
+ await storage.save(event);
70
+ await storage.delete("1");
71
+
72
+ const all = await storage.getAll();
73
+ expect(all).toEqual([]);
74
+ });
75
+ });
@@ -1,64 +1,64 @@
1
- import { Storage } from "../storage.interface";
2
- import { AnyNormalizedEvent } from "../../types/event.types";
3
-
4
- export class MemoryStorage implements Storage {
5
- private events = new Map<string, AnyNormalizedEvent>();
6
-
7
- async save(event: AnyNormalizedEvent): Promise<void> {
8
- this.events.set(event.id, event);
9
- }
10
-
11
- async getEvent(id: string): Promise<AnyNormalizedEvent | null> {
12
- return this.events.get(id) ?? null;
13
- }
14
-
15
- async listEvents(params: {
16
- type?: string;
17
- page?: number;
18
- limit?: number;
19
- }): Promise<AnyNormalizedEvent[]> {
20
- const { type, page = 1, limit = 50 } = params;
21
-
22
- const all = Array.from(this.events.values());
23
- const filtered = type ? all.filter((e) => e.type === type) : all;
24
-
25
- const start = (page - 1) * limit;
26
- return filtered.slice(start, start + limit);
27
- }
28
-
29
- async getAll(): Promise<AnyNormalizedEvent[]> {
30
- return Array.from(this.events.values());
31
- }
32
-
33
- async deleteEvent(id: string): Promise<boolean> {
34
- return this.events.delete(id);
35
- }
36
-
37
- async clearEvents(): Promise<void> {
38
- this.events.clear();
39
- }
40
-
41
- async getStats(): Promise<{
42
- total: number;
43
- byType: Record<string, number>;
44
- }> {
45
- const all = Array.from(this.events.values());
46
- const byType: Record<string, number> = {};
47
-
48
- for (const e of all) {
49
- byType[e.type] = (byType[e.type] ?? 0) + 1;
50
- }
51
-
52
- return {
53
- total: all.length,
54
- byType,
55
- };
56
- }
57
- async getById(id: string) {
58
- return this.getEvent(id);
59
- }
60
-
61
- async delete(id: string) {
62
- return this.deleteEvent(id);
63
- }
64
- }
1
+ import { Storage } from "../storage.interface";
2
+ import { AnyNormalizedEvent } from "../../types/event.types";
3
+
4
+ export class MemoryStorage implements Storage {
5
+ private events = new Map<string, AnyNormalizedEvent>();
6
+
7
+ async save(event: AnyNormalizedEvent): Promise<void> {
8
+ this.events.set(event.id, event);
9
+ }
10
+
11
+ async getEvent(id: string): Promise<AnyNormalizedEvent | null> {
12
+ return this.events.get(id) ?? null;
13
+ }
14
+
15
+ async listEvents(params: {
16
+ type?: string;
17
+ page?: number;
18
+ limit?: number;
19
+ }): Promise<AnyNormalizedEvent[]> {
20
+ const { type, page = 1, limit = 50 } = params;
21
+
22
+ const all = Array.from(this.events.values());
23
+ const filtered = type ? all.filter((e) => e.type === type) : all;
24
+
25
+ const start = (page - 1) * limit;
26
+ return filtered.slice(start, start + limit);
27
+ }
28
+
29
+ async getAll(): Promise<AnyNormalizedEvent[]> {
30
+ return Array.from(this.events.values());
31
+ }
32
+
33
+ async deleteEvent(id: string): Promise<boolean> {
34
+ return this.events.delete(id);
35
+ }
36
+
37
+ async clearEvents(): Promise<void> {
38
+ this.events.clear();
39
+ }
40
+
41
+ async getStats(): Promise<{
42
+ total: number;
43
+ byType: Record<string, number>;
44
+ }> {
45
+ const all = Array.from(this.events.values());
46
+ const byType: Record<string, number> = {};
47
+
48
+ for (const e of all) {
49
+ byType[e.type] = (byType[e.type] ?? 0) + 1;
50
+ }
51
+
52
+ return {
53
+ total: all.length,
54
+ byType,
55
+ };
56
+ }
57
+ async getById(id: string) {
58
+ return this.getEvent(id);
59
+ }
60
+
61
+ async delete(id: string) {
62
+ return this.deleteEvent(id);
63
+ }
64
+ }
@@ -1,26 +1,26 @@
1
- import { AnyNormalizedEvent } from "../types/event.types";
2
-
3
- export interface StorageListParams {
4
- type?: string;
5
- page?: number;
6
- limit?: number;
7
- }
8
-
9
- export interface Storage {
10
- save(event: AnyNormalizedEvent): Promise<void>;
11
-
12
- getEvent(id: string): Promise<AnyNormalizedEvent | null>;
13
-
14
- listEvents(params: StorageListParams): Promise<AnyNormalizedEvent[]>;
15
-
16
- deleteEvent(id: string): Promise<boolean>;
17
-
18
- clearEvents(): Promise<void>;
19
-
20
- getAll(): Promise<AnyNormalizedEvent[]>;
21
-
22
- getStats(): Promise<{
23
- total: number;
24
- byType: Record<string, number>;
25
- }>;
26
- }
1
+ import { AnyNormalizedEvent } from "../types/event.types";
2
+
3
+ export interface StorageListParams {
4
+ type?: string;
5
+ page?: number;
6
+ limit?: number;
7
+ }
8
+
9
+ export interface Storage {
10
+ save(event: AnyNormalizedEvent): Promise<void>;
11
+
12
+ getEvent(id: string): Promise<AnyNormalizedEvent | null>;
13
+
14
+ listEvents(params: StorageListParams): Promise<AnyNormalizedEvent[]>;
15
+
16
+ deleteEvent(id: string): Promise<boolean>;
17
+
18
+ clearEvents(): Promise<void>;
19
+
20
+ getAll(): Promise<AnyNormalizedEvent[]>;
21
+
22
+ getStats(): Promise<{
23
+ total: number;
24
+ byType: Record<string, number>;
25
+ }>;
26
+ }