@queno/agent-node 0.1.2

package/dist/detectors/custom-rule.js

@@ -0,0 +1,65 @@
+import { flattenValues } from "./base.js";
+export class CustomRuleDetector {
+    name = "custom-rule";
+    rules;
+    constructor(specs) {
+        this.rules = [];
+        for (const spec of specs) {
+            if (spec.enabled === false)
+                continue;
+            if (!spec.pattern)
+                continue;
+            try {
+                this.rules.push({ spec, regex: new RegExp(spec.pattern, "i") });
+            }
+            catch {
+                // Skip invalid regex - never throw at construction time.
+            }
+        }
+    }
+    /** Number of active compiled rules (useful for diagnostics/tests). */
+    get size() {
+        return this.rules.length;
+    }
+    valuesFor(req, target) {
+        switch (target) {
+            case "path":
+                return [req.path];
+            case "query":
+                return flattenValues(req.query);
+            case "body":
+                return flattenValues(req.body);
+            case "headers":
+                return flattenValues(req.headers);
+            case "any":
+            default:
+                return [
+                    req.path,
+                    ...flattenValues(req.query),
+                    ...flattenValues(req.body),
+                    ...flattenValues(req.headers),
+                ];
+        }
+    }
+    detect(req) {
+        for (const { spec, regex } of this.rules) {
+            const values = this.valuesFor(req, spec.target ?? "any");
+            for (const val of values) {
+                if (typeof val !== "string")
+                    continue;
+                if (regex.test(val)) {
+                    return {
+                        detectorName: spec.id,
+                        eventType: spec.eventType ?? "custom_rule",
+                        severity: spec.severity ?? "medium",
+                        description: spec.description ?? spec.name ?? `Custom rule ${spec.id} matched`,
+                        matchedValue: val.slice(0, 200),
+                        location: spec.target ?? "any",
+                    };
+                }
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=custom-rule.js.map

package/dist/detectors/custom-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-rule.js","sourceRoot":"","sources":["../../src/detectors/custom-rule.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAS1C,MAAM,OAAO,kBAAkB;IACpB,IAAI,GAAG,aAAa,CAAC;IACb,KAAK,CAAiB;IAEvC,YAAY,KAAuB;QACjC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;gBAAE,SAAS;YACrC,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,yDAAyD;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAEO,SAAS,CAAC,GAAsB,EAAE,MAAgC;QACxE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACpB,KAAK,OAAO;gBACV,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,KAAK,MAAM;gBACT,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,KAAK,SAAS;gBACZ,OAAO,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,KAAK,KAAK,CAAC;YACX;gBACE,OAAO;oBACL,GAAG,CAAC,IAAI;oBACR,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;oBAC3B,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;oBAC1B,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;iBAC9B,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,CAAC,GAAsB;QAC3B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;YACzD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBACtC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,EAAE;wBACrB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;wBAC1C,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,QAAQ;wBACnC,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,IAAI,eAAe,IAAI,CAAC,EAAE,UAAU;wBAC9E,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;qBAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/detectors/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Default detector set bundled with the agent.
+ *
+ * Order matters: {@link RaspAgent.inspect} returns on the first non-null
+ * detection, so detectors with higher signal/lower false-positive rates and
+ * higher severity come first.
+ */
+import type { Detector } from "./base.js";
+export { type Detector } from "./base.js";
+/**
+ * Build a fresh array of the bundled detectors.
+ *
+ * Each call returns brand-new detector instances - important because a few
+ * detectors (notably {@link BolaDetector}) carry per-IP state.
+ */
+export declare function createDefaultDetectors(): Detector[];
+//# sourceMappingURL=index.d.ts.map

package/dist/detectors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/detectors/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAY1C,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,sBAAsB,IAAI,QAAQ,EAAE,CAanD"}

package/dist/detectors/index.js

@@ -0,0 +1,31 @@
+import { SqlInjectionDetector } from "./sql-injection.js";
+import { XssDetector } from "./xss.js";
+import { CommandInjectionDetector } from "./command-injection.js";
+import { PathTraversalDetector } from "./path-traversal.js";
+import { NoSqlInjectionDetector } from "./nosql-injection.js";
+import { SsrfDetector } from "./ssrf.js";
+import { PrototypePollutionDetector } from "./prototype-pollution.js";
+import { TemplateInjectionDetector } from "./template-injection.js";
+import { SuspiciousHeadersDetector } from "./suspicious-headers.js";
+import { BolaDetector } from "./bola.js";
+/**
+ * Build a fresh array of the bundled detectors.
+ *
+ * Each call returns brand-new detector instances - important because a few
+ * detectors (notably {@link BolaDetector}) carry per-IP state.
+ */
+export function createDefaultDetectors() {
+    return [
+        new SqlInjectionDetector(),
+        new XssDetector(),
+        new CommandInjectionDetector(),
+        new PathTraversalDetector(),
+        new NoSqlInjectionDetector(),
+        new SsrfDetector(),
+        new PrototypePollutionDetector(),
+        new TemplateInjectionDetector(),
+        new SuspiciousHeadersDetector(),
+        new BolaDetector(),
+    ];
+}
+//# sourceMappingURL=index.js.map

package/dist/detectors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/detectors/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAIzC;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB;IACpC,OAAO;QACL,IAAI,oBAAoB,EAAE;QAC1B,IAAI,WAAW,EAAE;QACjB,IAAI,wBAAwB,EAAE;QAC9B,IAAI,qBAAqB,EAAE;QAC3B,IAAI,sBAAsB,EAAE;QAC5B,IAAI,YAAY,EAAE;QAClB,IAAI,0BAA0B,EAAE;QAChC,IAAI,yBAAyB,EAAE;QAC/B,IAAI,yBAAyB,EAAE;QAC/B,IAAI,YAAY,EAAE;KACnB,CAAC;AACJ,CAAC"}

package/dist/detectors/nosql-injection.d.ts

@@ -0,0 +1,23 @@
+/**
+ * NoSQL (primarily MongoDB) injection signature detector.
+ *
+ * Two complementary strategies:
+ *
+ * 1. **Value scan** - string values are checked for serialised MongoDB
+ *    operator forms (`$where:`, `{ $gt: ... }`, `mapReduce(...)`). Catches
+ *    payloads injected through query strings or JSON bodies that the
+ *    application later passes through unsafe deserialisation.
+ *
+ * 2. **Key scan** - any leaf object key matching `^$[a-z]+$` is flagged.
+ *    This is the classic `{ password: { $gt: "" } }` attack where the
+ *    operator is smuggled in as a sub-object instead of a scalar.
+ *
+ * Severity: `high`.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class NoSqlInjectionDetector implements Detector {
+    readonly name = "nosql-injection";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=nosql-injection.d.ts.map

package/dist/detectors/nosql-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nosql-injection.d.ts","sourceRoot":"","sources":["../../src/detectors/nosql-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAqBtE,qBAAa,sBAAuB,YAAW,QAAQ;IACrD,QAAQ,CAAC,IAAI,qBAAqB;IAElC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAkCvD"}

package/dist/detectors/nosql-injection.js

@@ -0,0 +1,54 @@
+import { flattenEntries, flattenValues } from "./base.js";
+/** MongoDB operator patterns expected to appear in string values. */
+const NOSQL_STRING_PATTERNS = [
+    /\$where\s*:/i,
+    /\$regex\s*:/i,
+    /\{\s*\$gt\s*:/i,
+    /\{\s*\$lt\s*:/i,
+    /\{\s*\$ne\s*:/i,
+    /\{\s*\$in\s*:/i,
+    /\{\s*\$nin\s*:/i,
+    /\{\s*\$or\s*:/i,
+    /\{\s*\$and\s*:/i,
+    /\{\s*\$not\s*:/i,
+    /\{\s*\$exists\s*:/i,
+    /mapReduce\s*\(/i,
+];
+/** MongoDB operators showing up as object keys (e.g. `{ "$gt": "" }`). */
+const NOSQL_KEY_PATTERN = /^\$[a-z]+$/i;
+export class NoSqlInjectionDetector {
+    name = "nosql-injection";
+    detect(req) {
+        const values = [...flattenValues(req.query), ...flattenValues(req.body)];
+        for (const val of values) {
+            for (const pattern of NOSQL_STRING_PATTERNS) {
+                if (pattern.test(val)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "nosql_injection",
+                        severity: "high",
+                        description: "NoSQL injection pattern detected in value",
+                        matchedValue: val.slice(0, 200),
+                        location: "query/body",
+                    };
+                }
+            }
+        }
+        const entries = [...flattenEntries(req.query), ...flattenEntries(req.body)];
+        for (const [key] of entries) {
+            const leaf = key.split(".").pop() ?? "";
+            if (NOSQL_KEY_PATTERN.test(leaf)) {
+                return {
+                    detectorName: this.name,
+                    eventType: "nosql_injection",
+                    severity: "high",
+                    description: "NoSQL operator key detected in request object",
+                    matchedValue: key,
+                    location: "query/body",
+                };
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=nosql-injection.js.map

package/dist/detectors/nosql-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nosql-injection.js","sourceRoot":"","sources":["../../src/detectors/nosql-injection.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1D,qEAAqE;AACrE,MAAM,qBAAqB,GAAG;IAC5B,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,oBAAoB;IACpB,iBAAiB;CAClB,CAAC;AAEF,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAExC,MAAM,OAAO,sBAAsB;IACxB,IAAI,GAAG,iBAAiB,CAAC;IAElC,MAAM,CAAC,GAAsB;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;gBAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,iBAAiB;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,WAAW,EAAE,2CAA2C;wBACxD,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,YAAY;qBACvB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YACxC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO;oBACL,YAAY,EAAE,IAAI,CAAC,IAAI;oBACvB,SAAS,EAAE,iBAAiB;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,WAAW,EAAE,+CAA+C;oBAC5D,YAAY,EAAE,GAAG;oBACjB,QAAQ,EAAE,YAAY;iBACvB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/detectors/path-traversal.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Path traversal signature detector.
+ *
+ * Scans `query`, `body` and `path` for `../` and `..\` sequences, their
+ * URL-encoded (`%2e%2e%2f`) and double-encoded (`%252e%252e`) variants,
+ * NUL-byte truncation, and references to canonical loot files
+ * (`/etc/passwd`, `/etc/shadow`, `win.ini`, `boot.ini`).
+ *
+ * Severity: `high`.
+ *
+ * Implementation note: each value is also tried after a single pass of
+ * `decodeURIComponent` to catch the simplest encoding bypasses without
+ * paying for a full normalisation pipeline.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class PathTraversalDetector implements Detector {
+    readonly name = "path-traversal";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=path-traversal.d.ts.map

package/dist/detectors/path-traversal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.d.ts","sourceRoot":"","sources":["../../src/detectors/path-traversal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiBtE,qBAAa,qBAAsB,YAAW,QAAQ;IACpD,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAwBvD"}

package/dist/detectors/path-traversal.js

@@ -0,0 +1,54 @@
+import { flattenValues } from "./base.js";
+const PATH_PATTERNS = [
+    /\.\.[/\\]/,
+    /[/\\]\.\./,
+    /%2e%2e[%2f%5c]/i,
+    /%252e%252e/i,
+    /\.\.%2f/i,
+    /\.\.%5c/i,
+    /\x00/,
+    /\/etc\/passwd/i,
+    /\/etc\/shadow/i,
+    /\/windows\/win\.ini/i,
+    /\/winnt\/win\.ini/i,
+    /boot\.ini/i,
+];
+export class PathTraversalDetector {
+    name = "path-traversal";
+    detect(req) {
+        const values = [
+            ...flattenValues(req.query),
+            ...flattenValues(req.body),
+            req.path,
+        ];
+        for (const val of values) {
+            const decoded = tryDecode(val);
+            for (const pattern of PATH_PATTERNS) {
+                if (pattern.test(val) || pattern.test(decoded)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "path_traversal",
+                        severity: "high",
+                        description: "Path traversal pattern detected",
+                        matchedValue: val.slice(0, 200),
+                        location: "query/body/path",
+                    };
+                }
+            }
+        }
+        return null;
+    }
+}
+/**
+ * Best-effort `decodeURIComponent`. Falls back to the original string when
+ * the input contains malformed percent-escapes.
+ */
+function tryDecode(val) {
+    try {
+        return decodeURIComponent(val);
+    }
+    catch {
+        return val;
+    }
+}
+//# sourceMappingURL=path-traversal.js.map

package/dist/detectors/path-traversal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-traversal.js","sourceRoot":"","sources":["../../src/detectors/path-traversal.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,aAAa,GAAG;IACpB,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,aAAa;IACb,UAAU;IACV,UAAU;IACV,MAAM;IACN,gBAAgB;IAChB,gBAAgB;IAChB,sBAAsB;IACtB,oBAAoB;IACpB,YAAY;CACb,CAAC;AAEF,MAAM,OAAO,qBAAqB;IACvB,IAAI,GAAG,gBAAgB,CAAC;IAEjC,MAAM,CAAC,GAAsB;QAC3B,MAAM,MAAM,GAAG;YACb,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;YAC3B,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,GAAG,CAAC,IAAI;SACT,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;YAC/B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/C,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,gBAAgB;wBAC3B,QAAQ,EAAE,MAAM;wBAChB,WAAW,EAAE,iCAAiC;wBAC9C,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,iBAAiB;qBAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/detectors/prototype-pollution.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Prototype pollution signature detector.
+ *
+ * Two strategies:
+ *
+ * 1. **Key scan** - flags any nested key equal to `__proto__`, `constructor`
+ *    or `prototype`, plus dotted forms like `a.__proto__` and
+ *    `a.constructor.prototype` used by some merge utilities.
+ *
+ * 2. **Value scan** - flags string values that look like a JSON-encoded
+ *    pollution payload (e.g. `"__proto__": { ... }`), which is what attackers
+ *    send when the application later parses the field with `JSON.parse`.
+ *
+ * Severity: `critical` - prototype pollution typically chains into RCE,
+ * authentication bypass, or arbitrary file read.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class PrototypePollutionDetector implements Detector {
+    readonly name = "prototype-pollution";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=prototype-pollution.d.ts.map

package/dist/detectors/prototype-pollution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prototype-pollution.d.ts","sourceRoot":"","sources":["../../src/detectors/prototype-pollution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAgBtE,qBAAa,0BAA2B,YAAW,QAAQ;IACzD,QAAQ,CAAC,IAAI,yBAAyB;IAEtC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAmCvD"}

package/dist/detectors/prototype-pollution.js

@@ -0,0 +1,50 @@
+import { flattenEntries, flattenValues } from "./base.js";
+const POLLUTION_KEY_PATTERNS = [
+    /^__proto__$/,
+    /^constructor$/,
+    /^prototype$/,
+    /\.__proto__/,
+    /\.constructor\.prototype/,
+];
+const POLLUTION_VALUE_PATTERNS = [
+    /"__proto__"\s*:/,
+    /"constructor"\s*:\s*\{/,
+    /"prototype"\s*:\s*\{/,
+];
+export class PrototypePollutionDetector {
+    name = "prototype-pollution";
+    detect(req) {
+        const entries = [...flattenEntries(req.query), ...flattenEntries(req.body)];
+        for (const [key] of entries) {
+            for (const pattern of POLLUTION_KEY_PATTERNS) {
+                if (pattern.test(key)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "prototype_pollution",
+                        severity: "critical",
+                        description: "Prototype pollution key detected in request",
+                        matchedValue: key,
+                        location: "query/body key",
+                    };
+                }
+            }
+        }
+        const values = [...flattenValues(req.query), ...flattenValues(req.body)];
+        for (const val of values) {
+            for (const pattern of POLLUTION_VALUE_PATTERNS) {
+                if (pattern.test(val)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "prototype_pollution",
+                        severity: "critical",
+                        description: "Prototype pollution pattern detected in serialised value",
+                        matchedValue: val.slice(0, 200),
+                        location: "query/body value",
+                    };
+                }
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=prototype-pollution.js.map

package/dist/detectors/prototype-pollution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prototype-pollution.js","sourceRoot":"","sources":["../../src/detectors/prototype-pollution.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1D,MAAM,sBAAsB,GAAG;IAC7B,aAAa;IACb,eAAe;IACf,aAAa;IACb,aAAa;IACb,0BAA0B;CAC3B,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,iBAAiB;IACjB,wBAAwB;IACxB,sBAAsB;CACvB,CAAC;AAEF,MAAM,OAAO,0BAA0B;IAC5B,IAAI,GAAG,qBAAqB,CAAC;IAEtC,MAAM,CAAC,GAAsB;QAC3B,MAAM,OAAO,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,MAAM,OAAO,IAAI,sBAAsB,EAAE,CAAC;gBAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,qBAAqB;wBAChC,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,6CAA6C;wBAC1D,YAAY,EAAE,GAAG;wBACjB,QAAQ,EAAE,gBAAgB;qBAC3B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;gBAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,qBAAqB;wBAChC,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,0DAA0D;wBACvE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,kBAAkB;qBAC7B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/detectors/sql-injection.d.ts

@@ -0,0 +1,22 @@
+/**
+ * SQL injection signature detector.
+ *
+ * Inspects the request `query`, `body` and `path` for textbook SQLi patterns:
+ * UNION SELECT, tautology probes (`' OR 1=1`), inline comments, stacked
+ * statements with destructive verbs, blind-injection sleep functions and
+ * SQL Server metadata views.
+ *
+ * Severity: `critical` - SQLi typically yields direct data exfiltration.
+ *
+ * Known limits: pattern-based; an attacker who heavily obfuscates the
+ * payload (case mixing, comments between keywords) may evade some signatures.
+ * Headers are intentionally **not** scanned to keep cost down - they're
+ * covered by other detectors.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class SqlInjectionDetector implements Detector {
+    readonly name = "sql-injection";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=sql-injection.d.ts.map

package/dist/detectors/sql-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-injection.d.ts","sourceRoot":"","sources":["../../src/detectors/sql-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAG,MAAM,WAAW,CAAC;AAE3C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAkBtE,qBAAa,oBAAqB,YAAW,QAAQ;IACnD,QAAQ,CAAC,IAAI,mBAAmB;IAEhC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAuBvD"}

package/dist/detectors/sql-injection.js

@@ -0,0 +1,42 @@
+import { flattenValues } from "./base.js";
+const SQL_PATTERNS = [
+    /(\b)(union\s+select|union\s+all\s+select)/i,
+    /'\s*(or|and)\s+['"]?\d/i,
+    /'\s*(or|and)\s+\w+\s*=\s*\w*/i,
+    /--\s*$/m,
+    /;\s*(drop|delete|insert|update|truncate|alter|exec|execute)\b/i,
+    /\bxp_cmdshell\b/i,
+    /\bWAITFOR\s+DELAY\b/i,
+    /\bSLEEP\s*\(\s*\d/i,
+    /\bBENCHMARK\s*\(/i,
+    /\/\*.*?\*\//s,
+    /\bINFORMATION_SCHEMA\b/i,
+    /\bSYSOBJECTS\b/i,
+    /\bCHAR\s*\(\s*\d+\s*\)/i,
+];
+export class SqlInjectionDetector {
+    name = "sql-injection";
+    detect(req) {
+        const values = [
+            ...flattenValues(req.query),
+            ...flattenValues(req.body),
+            req.path,
+        ];
+        for (const val of values) {
+            for (const pattern of SQL_PATTERNS) {
+                if (pattern.test(val)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "sql_injection",
+                        severity: "critical",
+                        description: "SQL injection pattern detected",
+                        matchedValue: val.slice(0, 200),
+                        location: "query/body/path",
+                    };
+                }
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=sql-injection.js.map

package/dist/detectors/sql-injection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-injection.js","sourceRoot":"","sources":["../../src/detectors/sql-injection.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,YAAY,GAAG;IACnB,4CAA4C;IAC5C,yBAAyB;IACzB,+BAA+B;IAC/B,SAAS;IACT,gEAAgE;IAChE,kBAAkB;IAClB,sBAAsB;IACtB,oBAAoB;IACpB,mBAAmB;IACnB,cAAc;IACd,yBAAyB;IACzB,iBAAiB;IACjB,yBAAyB;CAC1B,CAAC;AAEF,MAAM,OAAO,oBAAoB;IACtB,IAAI,GAAG,eAAe,CAAC;IAEhC,MAAM,CAAC,GAAsB;QAC3B,MAAM,MAAM,GAAG;YACb,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;YAC3B,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,GAAG,CAAC,IAAI;SACT,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;gBACnC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,eAAe;wBAC1B,QAAQ,EAAE,UAAU;wBACpB,WAAW,EAAE,gCAAgC;wBAC7C,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,iBAAiB;qBAC5B,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/detectors/ssrf.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Server-Side Request Forgery (SSRF) signature detector.
+ *
+ * Flags request parameters carrying URLs that target destinations a
+ * server-side fetch should rarely visit:
+ *
+ *  - Loopback addresses (`localhost`, `127.0.0.0/8`, `0.0.0.0`, `[::1]`).
+ *  - RFC 1918 private ranges (`10/8`, `172.16/12`, `192.168/16`).
+ *  - Cloud metadata endpoints (`169.254.169.254` for AWS/Azure,
+ *    `metadata.google.internal` for GCP).
+ *  - Dangerous protocols (`file://`, `gopher://`, `dict://`, `ftp://`).
+ *
+ * Severity: `high`.
+ *
+ * Known limits: matching is purely lexical. DNS-rebinding payloads
+ * (`internal.attacker.com` resolving to `127.0.0.1`) and Unicode
+ * homoglyphs in hostnames are not caught here - they need runtime DNS
+ * inspection which is out of scope.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class SsrfDetector implements Detector {
+    readonly name = "ssrf";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/detectors/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../src/detectors/ssrf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiBtE,qBAAa,YAAa,YAAW,QAAQ;IAC3C,QAAQ,CAAC,IAAI,UAAU;IAEvB,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAmBvD"}

package/dist/detectors/ssrf.js

@@ -0,0 +1,37 @@
+import { flattenValues } from "./base.js";
+const SSRF_PATTERNS = [
+    /https?:\/\/localhost/i,
+    /https?:\/\/127\.\d+\.\d+\.\d+/,
+    /https?:\/\/0\.0\.0\.0/,
+    /https?:\/\/\[::1\]/,
+    /https?:\/\/10\.\d+\.\d+\.\d+/,
+    /https?:\/\/172\.(1[6-9]|2\d|3[01])\.\d+\.\d+/,
+    /https?:\/\/192\.168\.\d+\.\d+/,
+    /https?:\/\/169\.254\.169\.254/,
+    /https?:\/\/metadata\.google\.internal/i,
+    /https?:\/\/169\.254\.169\.254\/metadata/i,
+    /^file:\/\//i,
+    /^(gopher|dict|ftp):\/\//i,
+];
+export class SsrfDetector {
+    name = "ssrf";
+    detect(req) {
+        const values = [...flattenValues(req.query), ...flattenValues(req.body)];
+        for (const val of values) {
+            for (const pattern of SSRF_PATTERNS) {
+                if (pattern.test(val)) {
+                    return {
+                        detectorName: this.name,
+                        eventType: "ssrf",
+                        severity: "high",
+                        description: "SSRF - request targets an internal or metadata endpoint",
+                        matchedValue: val.slice(0, 200),
+                        location: "query/body",
+                    };
+                }
+            }
+        }
+        return null;
+    }
+}
+//# sourceMappingURL=ssrf.js.map

package/dist/detectors/ssrf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.js","sourceRoot":"","sources":["../../src/detectors/ssrf.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,MAAM,aAAa,GAAG;IACpB,uBAAuB;IACvB,+BAA+B;IAC/B,uBAAuB;IACvB,oBAAoB;IACpB,8BAA8B;IAC9B,8CAA8C;IAC9C,+BAA+B;IAC/B,+BAA+B;IAC/B,wCAAwC;IACxC,0CAA0C;IAC1C,aAAa;IACb,0BAA0B;CAC3B,CAAC;AAEF,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,MAAM,CAAC;IAEvB,MAAM,CAAC,GAAsB;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAEzE,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO;wBACL,YAAY,EAAE,IAAI,CAAC,IAAI;wBACvB,SAAS,EAAE,MAAM;wBACjB,QAAQ,EAAE,MAAM;wBAChB,WAAW,EAAE,yDAAyD;wBACtE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC/B,QAAQ,EAAE,YAAY;qBACvB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/detectors/suspicious-headers.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Suspicious HTTP-header detector.
+ *
+ * Catches a handful of abuse patterns that don't fit elsewhere:
+ *
+ *  - Header floods (more than {@link MAX_HEADERS_COUNT} headers).
+ *  - Oversized header values (> {@link MAX_HEADER_VALUE_LENGTH} bytes).
+ *  - `Host` headers containing characters outside the legal hostname set
+ *    (Host-header injection probes).
+ *  - `X-Forwarded-For` values smuggling RFC1918 addresses (source-IP
+ *    spoofing toward downstream services that trust the header).
+ *  - CRLF (`\r` / `\n`) anywhere in a header value (HTTP response
+ *    splitting / log injection).
+ *
+ * Severity is `medium` for the structural anomalies (count, size,
+ * `X-Forwarded-For` spoof, host-header injection) and `high` for newline
+ * injection, which is more directly weaponisable.
+ */
+import type { Detector } from "./base.js";
+import type { DetectionResult, NormalizedRequest } from "../types.js";
+export declare class SuspiciousHeadersDetector implements Detector {
+    readonly name = "suspicious-headers";
+    detect(req: NormalizedRequest): DetectionResult | null;
+}
+//# sourceMappingURL=suspicious-headers.d.ts.map

package/dist/detectors/suspicious-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suspicious-headers.d.ts","sourceRoot":"","sources":["../../src/detectors/suspicious-headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAatE,qBAAa,yBAA0B,YAAW,QAAQ;IACxD,QAAQ,CAAC,IAAI,wBAAwB;IAErC,MAAM,CAAC,GAAG,EAAE,iBAAiB,GAAG,eAAe,GAAG,IAAI;CAoEvD"}