@kenhkl/agent-moss 0.15.4 → 0.15.5

package/dist/rules/l1_rules.json

@@ -7,7 +7,7 @@
       "reason": "检测到递归强制删除根目录 (rm -rf /)"
     },
     {
-      "pattern": "\\brm\\s+-[a-zA-Z]*[rf][a-zA-Z]*\\s+/(etc|var(?!/tmp)|home|usr|boot|root|opt|srv|sys|proc)\\b",
+      "pattern": "\\brm\\s+-[a-zA-Z]*[rf][a-zA-Z]*\\s+/(?:etc|var(?!/tmp)|usr|boot|root|opt|srv|sys|proc|home(?:/|/[A-Za-z0-9_.-]+/?)?(?=[\\s;|&\\\"']|$))",
       "risk_level": "critical",
       "risk_type": "script_execution",
       "reason": "检测到删除关键系统目录"
@@ -73,16 +73,16 @@
       "reason": "检测到访问系统组密码文件 (/etc/gshadow)"
     },
     {
-      "pattern": "\\.ssh/id_rsa(?!\\.pub)",
+      "pattern": "dd\\s+if=/dev/zero.*\\bof\\s*=\\s*/(?:etc|var|usr|boot|root|opt|srv|sys|proc|home(?:/|/[A-Za-z0-9_.-]+/?)?(?=[\\s;|&\\\"']|$))",
       "risk_level": "critical",
-      "risk_type": "file_access",
-      "reason": "检测到访问 SSH 私钥文件 (.ssh/id_rsa)"
+      "risk_type": "script_execution",
+      "reason": "检测到磁盘清零写入关键系统目录 (dd if=/dev/zero of=/系统目录)"
     },
     {
-      "pattern": "dd\\s+if=/dev/zero.*\\bof\\s*=\\s*/(etc|var|home|usr|boot|root|opt|srv|sys|proc)\\b",
+      "pattern": "\\.ssh/id_rsa(?!\\.pub)",
       "risk_level": "critical",
-      "risk_type": "script_execution",
-      "reason": "检测到磁盘清零写入关键系统目录 (dd if=/dev/zero of=/系统目录)"
+      "risk_type": "file_access",
+      "reason": "检测到访问 SSH 私钥文件 (.ssh/id_rsa)"
     },
     {
       "pattern": "mkfs\\.\\w+\\s+/dev/(sd|hd|nvme|vd|loop|mapper|md|dm)\\S+",
@@ -156,6 +156,12 @@
       "risk_type": "script_execution",
       "reason": "检测到远程下载脚本到本地 (curl -o script.sh)，存在后续执行风险"
     },
+    {
+      "pattern": "base64\\s+-d\\s+.*\\|\\s*bash",
+      "risk_level": "high",
+      "risk_type": "sensitive_action",
+      "reason": "base64 解码执行（编码绕过，下载或读取内容后解码执行）"
+    },
     {
       "pattern": "(?:curl|wget)\\s+\\S+.*\\b(?:chmod|chown)\\s+\\+x\\b",
       "risk_level": "high",
@@ -262,7 +268,7 @@
       "pattern": "curl\\s+.*\\|\\s*bash",
       "risk_level": "high",
       "risk_type": "sensitive_action",
-      "reason": "curl pipe bash 执行 (user_rules)"
+      "reason": "curl pipe bash 执行（下载远程脚本直接执行）"
     },
     {
       "pattern": "curl\\s+.*\\|\\s*(sh|zsh|dash)",
@@ -282,12 +288,6 @@
       "risk_type": "script_execution",
       "reason": "eval 远程代码执行"
     },
-    {
-      "pattern": "base64\\s+-d\\s+.*\\|\\s*bash",
-      "risk_level": "high",
-      "risk_type": "sensitive_action",
-      "reason": "base64 解码执行 (user_rules)"
-    },
     {
       "pattern": "/dev/tcp/|bash\\s+-i\\s+>&",
       "risk_level": "critical",
@@ -341,6 +341,42 @@
       "risk_level": "critical",
       "risk_type": "script_execution",
       "reason": "检测到命令替换隐藏执行（$(...)/反引号载荷含写/执行命令），可能产生文件系统副作用"
+    },
+    {
+      "pattern": "\\biptables\\s+-(?:[A-Za-z]*[FPIX][A-Za-z]*|[A-Za-z]*[FPIX]\\b)",
+      "risk_level": "high",
+      "risk_type": "script_execution",
+      "reason": "检测到修改防火墙规则（iptables -F/-P/-I/-X），可能关闭安全防护或建立隧道（ATT&CK T1562.004）"
+    },
+    {
+      "pattern": "\\b(?:ssh|scp)\\b[^;\\n]{0,200}?StrictHostKeyChecking\\s*=\\s*(?:no|accept-new)",
+      "risk_level": "high",
+      "risk_type": "lateral_movement",
+      "reason": "检测到 SSH/SCP 跳过主机密钥验证（-o StrictHostKeyChecking=no），允许中间人攻击，可能用于横向移动"
+    },
+    {
+      "pattern": "\\bwget\\s+(?:-\\S+\\s+)*--post-(?:data|file)\\s*=\\s*(?:\\$\\([^)]+\\)|[^ ]+|\\\"[^\\\"]+\\\"|'[^']+')\\s+(?!https?://(?:127\\.|localhost))https?://[a-zA-Z0-9.-]+",
+      "risk_level": "high",
+      "risk_type": "data_exfiltration",
+      "reason": "检测到 wget --post-data/--post-file 向外部地址发送数据（可能为数据外传，回环地址除外）"
+    },
+    {
+      "pattern": "\\bcurl\\b(?:[^;\\n]|&(?![&\\s]))*-X\\s+POST\\b[^;\\n]*https?://(?!(?:127\\.|localhost|\\[::1\\]))[a-zA-Z0-9.-]+",
+      "risk_level": "high",
+      "risk_type": "data_exfiltration",
+      "reason": "检测到 curl -X POST 到外部地址（可能为数据外传，回环地址除外）"
+    },
+    {
+      "pattern": "\\bcurl\\b[^;&\\n]*-F\\s+\\S+[^;&\\n]*https?://(?!(?:127\\.|localhost|\\[::1\\]))[a-zA-Z0-9.-]+",
+      "risk_level": "high",
+      "risk_type": "data_exfiltration",
+      "reason": "检测到 curl -F 表单上传到外部地址（可能为数据外传，回环地址除外）"
+    },
+    {
+      "pattern": "[|]\\s*crontab\\b",
+      "risk_level": "high",
+      "risk_type": "sensitive_action",
+      "reason": "检测到通过管道安装 crontab 定时任务（cron 后门/持久化）"
     }
   ],
   "injection_detection": [
@@ -872,5 +908,6 @@
       "deny_mode": "deny_write",
       "scope": "home"
     }
-  ]
-}
+  ],
+  "_comment": "\n2026-09-11 新增：iptables 防火墙规则修改（T1562.004）+ SSH 跳过密钥验证（横向移动），原在 user_rules.json 下沉至此——攻击形态清晰、可静态判定，user_rules 回归仅存用户自定义例外的本位。"
+}

package/dist/rules/mc_rules.json

@@ -1,5 +1,5 @@
 {
-  "_comment": "L2.2 模型检测规则单一事实源（Python + TS 共用）。原子命题正则 + LTL 公式（前缀 AST）。公式在事件迹位置 0 处评估：LTL 公式满足 = 攻击存在。对应站点 detection-l2-2.html 的 10 条 LTL + 5 条 CTL 规则（CTL 活性降级为 G(!φ) 安全不变量，见 docs/DETECTION_METHODS.md 5.4）。",
+  "_comment": "L2.2 模型检测规则单一事实源（Python + TS 共用）。原子命题正则 + LTL 公式（前缀 AST）。公式在事件迹位置 0 处评估：LTL 公式满足 = 攻击存在。对应站点 detection-l2-2.html 的 9 条 LTL + 5 条 CTL 规则（2026-09 移除 2 条单动作冗余：mc-ltl-010 F(install_persistence) 与 mc-ctl-001 F(clear_logs) —— 它们误伤正常运维，且攻击场景已由链式规则 006/007/008 覆盖）（CTL 活性降级为 G(!φ) 安全不变量，见 docs/DETECTION_METHODS.md 5.4）。",
   "ap_patterns": {
     "reads_credential": [
       "(?:cat|head|tail|less|more|sed|awk|strings|base64|dd)\\s+[^;&|\\n]*[~]?/\\.ssh(?:/[\\w.-]+)?\\b",
@@ -336,34 +336,6 @@
       "risk_level": "critical",
       "action": "block",
       "reason": "敏感数据→归档→外传（mc-ltl-009）"
-    },
-    {
-      "id": "mc-ltl-010",
-      "type": "ltl",
-      "formula": [
-        "F",
-        [
-          "ap",
-          "install_persistence"
-        ]
-      ],
-      "risk_level": "medium",
-      "action": "approval",
-      "reason": "持久化机制安装，需审批（mc-ltl-010）"
-    },
-    {
-      "id": "mc-ctl-001",
-      "type": "ltl",
-      "formula": [
-        "F",
-        [
-          "ap",
-          "clear_logs"
-        ]
-      ],
-      "risk_level": "critical",
-      "action": "block",
-      "reason": "安全不变量：任何情况不得清除日志（mc-ctl-001，AG(!clear_logs) 线性迹降级：违反 ⟺ 出现 clear_logs ⟺ F(clear_logs) 成立）"
     }
   ]
-}
+}

package/dist/rules/user_rules.json

@@ -1,77 +1,8 @@
 {
-  "sensitive_actions": [
-    {
-      "pattern": "写入系统文件",
-      "description": "写入 /etc, /usr, /boot 等系统目录下的文件"
-    },
-    {
-      "pattern": "发送外部邮件",
-      "description": "通过 email 工具发送邮件到外部地址"
-    },
-    {
-      "pattern": "危险 shell 命令",
-      "description": "执行 rm -rf, chmod 777, sudo 等危险命令"
-    },
-    {
-      "pattern": "修改全局配置",
-      "description": "修改系统级配置文件或环境变量"
-    },
-    {
-      "pattern": "支付操作",
-      "description": "涉及支付、转账等金融操作"
-    },
-    {
-      "pattern": "访问密钥文件",
-      "description": "访问 .ssh/id_rsa, .env, credentials 等密钥/凭证文件"
-    },
-    {
-      "pattern": "网络数据外传",
-      "description": "通过 HTTP/wget/curl 等方式将数据发送到外部服务器"
-    },
-    {
-      "pattern": "curl * -d *",
-      "description": "使用 curl 发送数据到外部服务器（可能为数据外传）"
-    },
-    {
-      "pattern": "curl * POST *",
-      "description": "使用 curl POST 请求发送数据到外部服务器"
-    },
-    {
-      "pattern": "wget *--post-data*",
-      "description": "使用 wget 发送 POST 数据到外部服务器"
-    },
-    {
-      "pattern": "crontab -e",
-      "description": "编辑定时任务（可能用于持久化后门）"
-    },
-    {
-      "pattern": "crontab -r",
-      "description": "删除定时任务（可能用于清除审计痕迹）"
-    },
-    {
-      "pattern": "* | crontab",
-      "description": "管道方式安装/修改定时任务（可能用于持久化后门）"
-    },
-    {
-      "pattern": "iptables -",
-      "description": "修改防火墙规则（可能用于关闭安全防护）"
-    },
-    {
-      "pattern": "ssh* -o StrictHostKeyChecking=no",
-      "description": "SSH 跳过主机密钥验证（可能用于横向移动）"
-    },
-    {
-      "pattern": "base64 -d * bash",
-      "description": "Base64 解码后执行（可能用于编码绕过）"
-    },
-    {
-      "pattern": "curl * | bash",
-      "description": "下载远程脚本并执行（远程代码执行风险）"
-    }
-  ],
+  "sensitive_actions": [],
   "sensitive_tools": [
     "eval",
     "exec",
     "system"
   ]
-}
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kenhkl/agent-moss",
-  "version": "0.15.4",
+  "version": "0.15.5",
   "description": "Multi-layer security analysis engine for AI agents (TypeScript)",
   "type": "module",
   "main": "dist/server.js",
@@ -49,4 +49,4 @@
     "vitest": "^4.1.10"
   },
   "license": "MIT"
-}
+}