@resq-systems/security 1.0.5 → 2.1.0

package/lib/threats/capec.generated.mjs

@@ -0,0 +1,644 @@
+//#region src/threats/capec.generated.ts
+/** Every relevant pattern, ordered by CAPEC id. */
+const ATTACK_PATTERNS = [
+	{
+		capec: 1,
+		name: "Accessing Functionality Not Properly Constrained by ACLs",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [1321]
+	},
+	{
+		capec: 3,
+		name: "Using Leading 'Ghost' Character Sequences to Bypass Input Filters",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [74]
+	},
+	{
+		capec: 6,
+		name: "Argument Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [74, 78]
+	},
+	{
+		capec: 7,
+		name: "Blind SQL Injection",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 89]
+	},
+	{
+		capec: 8,
+		name: "Buffer Overflow in an API Call",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 9,
+		name: "Buffer Overflow in Local Command-Line Utilities",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 10,
+		name: "Buffer Overflow via Environment Variables",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 13,
+		name: "Subverting Environment Variable Values",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [74]
+	},
+	{
+		capec: 14,
+		name: "Client-side Injection-induced Buffer Overflow",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 15,
+		name: "Command Delimiters",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [78]
+	},
+	{
+		capec: 24,
+		name: "Filter Failure through Buffer Overflow",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 31,
+		name: "Accessing/Intercepting/Modifying HTTP Cookies",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [113]
+	},
+	{
+		capec: 34,
+		name: "HTTP Response Splitting",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 113]
+	},
+	{
+		capec: 35,
+		name: "Leverage Executable Code in Non-Executable Files",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [
+			94,
+			95,
+			97
+		]
+	},
+	{
+		capec: 41,
+		name: "Using Meta-characters in E-mail Headers to Inject Malicious Payloads",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [88]
+	},
+	{
+		capec: 42,
+		name: "MIME Conversion",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 43,
+		name: "Exploiting Multiple Input Interpretation Layers",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 78]
+	},
+	{
+		capec: 45,
+		name: "Buffer Overflow via Symbolic Links",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 46,
+		name: "Overflow Variables and Tags",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 47,
+		name: "Buffer Overflow via Parameter Expansion",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 50,
+		name: "Password Recovery Exploitation",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 51,
+		name: "Poison Web Service Registry",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [74]
+	},
+	{
+		capec: 52,
+		name: "Embedding NULL Bytes",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 158]
+	},
+	{
+		capec: 53,
+		name: "Postfix, Null Terminate, and Backslash",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 158]
+	},
+	{
+		capec: 63,
+		name: "Cross-Site Scripting (XSS)",
+		abstraction: "Standard",
+		severity: "Very High",
+		cwes: [79]
+	},
+	{
+		capec: 64,
+		name: "Using Slashes and URL Encoding Combined to Bypass Validation Logic",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [
+			22,
+			74,
+			177
+		]
+	},
+	{
+		capec: 66,
+		name: "SQL Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [89]
+	},
+	{
+		capec: 67,
+		name: "String Format Overflow in syslog()",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [74]
+	},
+	{
+		capec: 71,
+		name: "Using Unicode Encoding to Bypass Validation Logic",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 72,
+		name: "URL Encoding",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 177]
+	},
+	{
+		capec: 76,
+		name: "Manipulating Web Input to File System Calls",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [22, 74]
+	},
+	{
+		capec: 77,
+		name: "Manipulating User-Controlled Variables",
+		abstraction: "Standard",
+		severity: "Very High",
+		cwes: [94, 1321]
+	},
+	{
+		capec: 78,
+		name: "Using Escaped Slashes in Alternate Encoding",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [22, 74]
+	},
+	{
+		capec: 79,
+		name: "Using Slashes in Alternate Encoding",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [22, 74]
+	},
+	{
+		capec: 80,
+		name: "Using UTF-8 Encoding to Bypass Validation Logic",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 81,
+		name: "Web Server Logs Tampering",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [117]
+	},
+	{
+		capec: 83,
+		name: "XPath Injection",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 91]
+	},
+	{
+		capec: 84,
+		name: "XQuery Injection",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [74]
+	},
+	{
+		capec: 85,
+		name: "AJAX Footprinting",
+		abstraction: "Detailed",
+		severity: "Low",
+		cwes: [79, 113]
+	},
+	{
+		capec: 88,
+		name: "OS Command Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [78, 88]
+	},
+	{
+		capec: 93,
+		name: "Log Injection-Tampering-Forging",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [117]
+	},
+	{
+		capec: 98,
+		name: "Phishing",
+		abstraction: "Standard",
+		severity: "Very High",
+		cwes: [451]
+	},
+	{
+		capec: 101,
+		name: "Server Side Include (SSI) Injection",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 97]
+	},
+	{
+		capec: 102,
+		name: "Session Sidejacking",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 105,
+		name: "HTTP Request Splitting",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74, 113]
+	},
+	{
+		capec: 108,
+		name: "Command Line Execution through SQL Injection",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [
+			74,
+			78,
+			89
+		]
+	},
+	{
+		capec: 109,
+		name: "Object Relational Mapping Injection",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [89]
+	},
+	{
+		capec: 110,
+		name: "SQL Injection through SOAP Parameter Tampering",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [89]
+	},
+	{
+		capec: 120,
+		name: "Double Encoding",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [74, 177]
+	},
+	{
+		capec: 126,
+		name: "Path Traversal",
+		abstraction: "Standard",
+		severity: "Very High",
+		cwes: [22]
+	},
+	{
+		capec: 135,
+		name: "Format String Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 136,
+		name: "LDAP Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [90]
+	},
+	{
+		capec: 163,
+		name: "Spear Phishing",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [451]
+	},
+	{
+		capec: 164,
+		name: "Mobile Phishing",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [451]
+	},
+	{
+		capec: 174,
+		name: "Flash Parameter Injection",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [88]
+	},
+	{
+		capec: 180,
+		name: "Exploiting Incorrectly Configured Access Control Security Levels",
+		abstraction: "Standard",
+		severity: "Medium",
+		cwes: [1321]
+	},
+	{
+		capec: 193,
+		name: "PHP Remote File Inclusion",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [98]
+	},
+	{
+		capec: 209,
+		name: "XSS Using MIME Type Mismatch",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [79]
+	},
+	{
+		capec: 215,
+		name: "Fuzzing for application mapping",
+		abstraction: "Detailed",
+		severity: "Low",
+		cwes: [532]
+	},
+	{
+		capec: 221,
+		name: "Data Serialization External Entities Blowup",
+		abstraction: "Detailed",
+		severity: "",
+		cwes: [611]
+	},
+	{
+		capec: 250,
+		name: "XML Injection",
+		abstraction: "Standard",
+		severity: "",
+		cwes: [74, 91]
+	},
+	{
+		capec: 267,
+		name: "Leverage Alternate Encoding",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 268,
+		name: "Audit Log Manipulation",
+		abstraction: "Standard",
+		severity: "",
+		cwes: [117]
+	},
+	{
+		capec: 273,
+		name: "HTTP Response Smuggling",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [74]
+	},
+	{
+		capec: 460,
+		name: "HTTP Parameter Pollution (HPP)",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [88, 235]
+	},
+	{
+		capec: 463,
+		name: "Padding Oracle Crypto Attack",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [347]
+	},
+	{
+		capec: 468,
+		name: "Generic Cross-Browser Cross-Domain Theft",
+		abstraction: "Standard",
+		severity: "Medium",
+		cwes: [177]
+	},
+	{
+		capec: 470,
+		name: "Expanding Control over the Operating System from the Database",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [89]
+	},
+	{
+		capec: 474,
+		name: "Signature Spoofing by Key Theft",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 475,
+		name: "Signature Spoofing by Improper Validation",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [347]
+	},
+	{
+		capec: 509,
+		name: "Kerberoasting",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 551,
+		name: "Modify Existing Service",
+		abstraction: "Detailed",
+		severity: "",
+		cwes: [522]
+	},
+	{
+		capec: 555,
+		name: "Remote Services with Stolen Credentials",
+		abstraction: "Standard",
+		severity: "Very High",
+		cwes: [522]
+	},
+	{
+		capec: 561,
+		name: "Windows Admin Shares with Stolen Credentials",
+		abstraction: "Detailed",
+		severity: "",
+		cwes: [522]
+	},
+	{
+		capec: 588,
+		name: "DOM-Based XSS",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [79]
+	},
+	{
+		capec: 591,
+		name: "Reflected XSS",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [79]
+	},
+	{
+		capec: 592,
+		name: "Stored XSS",
+		abstraction: "Detailed",
+		severity: "Very High",
+		cwes: [79]
+	},
+	{
+		capec: 597,
+		name: "Absolute Path Traversal",
+		abstraction: "Detailed",
+		severity: "",
+		cwes: [36]
+	},
+	{
+		capec: 600,
+		name: "Credential Stuffing",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 632,
+		name: "Homograph Attack via Homoglyphs",
+		abstraction: "Detailed",
+		severity: "Medium",
+		cwes: [1007]
+	},
+	{
+		capec: 644,
+		name: "Use of Captured Hashes (Pass The Hash)",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 645,
+		name: "Use of Captured Tickets (Pass The Ticket)",
+		abstraction: "Detailed",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 652,
+		name: "Use of Known Kerberos Credentials",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 653,
+		name: "Use of Known Operating System Credentials",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [522]
+	},
+	{
+		capec: 664,
+		name: "Server Side Request Forgery",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [918]
+	},
+	{
+		capec: 676,
+		name: "NoSQL Injection",
+		abstraction: "Standard",
+		severity: "High",
+		cwes: [943]
+	}
+];
+/** Index from CWE to the patterns referencing it, built once at module load. */
+const BY_CWE = (() => {
+	const index = /* @__PURE__ */ new Map();
+	for (const pattern of ATTACK_PATTERNS) for (const cwe of pattern.cwes) {
+		const bucket = index.get(cwe);
+		if (bucket) bucket.push(pattern);
+		else index.set(cwe, [pattern]);
+	}
+	return index;
+})();
+/**
+* Attack patterns related to a weakness.
+*
+* @param cwe - CWE identifier, typically a rule's `cwe` field.
+* @returns Related patterns, or an empty array when none is mapped. Empty means MITRE
+*   publishes no Standard or Detailed pattern for that weakness — not that the weakness
+*   is unimportant.
+*/
+function attackPatternsForCwe(cwe) {
+	if (typeof cwe !== "number") return [];
+	return BY_CWE.get(cwe) ?? [];
+}
+//#endregion
+export { ATTACK_PATTERNS, attackPatternsForCwe };
+
+//# sourceMappingURL=capec.generated.mjs.map

package/lib/threats/capec.generated.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"capec.generated.mjs","names":[],"sources":["../../src/threats/capec.generated.ts"],"sourcesContent":["/**\n * Copyright 2026 ResQ Systems, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * @fileoverview GENERATED FILE — do not edit by hand.\n *\n * MITRE CAPEC attack patterns whose Related Weaknesses intersect a CWE this catalog\n * uses. Derived from CAPEC view 1000 (Mechanisms of Attack), filtered to Standard and\n * Detailed abstractions because Meta patterns are too abstract to help anyone triaging\n * a finding.\n *\n * **Attribution, not conformance.** A CAPEC id tells a reader which family of attack a\n * finding belongs to and where to read more. It does not assert that the rule detects\n * every technique in that pattern, and nothing here changes a score or a verdict.\n *\n * Regenerate with `bun scripts/generate-capec.ts <capec-1000.csv>`.\n *\n * @module @resq-systems/security/threats/capec\n */\n\n/** One CAPEC attack pattern, reduced to what a consumer triaging a finding needs. */\nexport interface AttackPattern {\n\t/** CAPEC identifier. */\n\treadonly capec: number;\n\t/** Pattern name, as published by MITRE. */\n\treadonly name: string;\n\t/** MITRE abstraction level: \"Standard\" or \"Detailed\". */\n\treadonly abstraction: string;\n\t/** MITRE's typical severity for the pattern. */\n\treadonly severity: string;\n\t/** Catalog CWEs this pattern relates to. */\n\treadonly cwes: readonly number[];\n}\n\n/** Every relevant pattern, ordered by CAPEC id. */\nexport const ATTACK_PATTERNS: readonly AttackPattern[] = [\n\t{\n\t\tcapec: 1,\n\t\tname: \"Accessing Functionality Not Properly Constrained by ACLs\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [1321],\n\t},\n\t{\n\t\tcapec: 3,\n\t\tname: \"Using Leading 'Ghost' Character Sequences to Bypass Input Filters\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 6,\n\t\tname: \"Argument Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 78],\n\t},\n\t{\n\t\tcapec: 7,\n\t\tname: \"Blind SQL Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 89],\n\t},\n\t{\n\t\tcapec: 8,\n\t\tname: \"Buffer Overflow in an API Call\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 9,\n\t\tname: \"Buffer Overflow in Local Command-Line Utilities\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 10,\n\t\tname: \"Buffer Overflow via Environment Variables\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 13,\n\t\tname: \"Subverting Environment Variable Values\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 14,\n\t\tname: \"Client-side Injection-induced Buffer Overflow\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 15,\n\t\tname: \"Command Delimiters\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [78],\n\t},\n\t{\n\t\tcapec: 24,\n\t\tname: \"Filter Failure through Buffer Overflow\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 31,\n\t\tname: \"Accessing/Intercepting/Modifying HTTP Cookies\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [113],\n\t},\n\t{\n\t\tcapec: 34,\n\t\tname: \"HTTP Response Splitting\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 113],\n\t},\n\t{\n\t\tcapec: 35,\n\t\tname: \"Leverage Executable Code in Non-Executable Files\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [94, 95, 97],\n\t},\n\t{\n\t\tcapec: 41,\n\t\tname: \"Using Meta-characters in E-mail Headers to Inject Malicious Payloads\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [88],\n\t},\n\t{\n\t\tcapec: 42,\n\t\tname: \"MIME Conversion\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 43,\n\t\tname: \"Exploiting Multiple Input Interpretation Layers\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 78],\n\t},\n\t{\n\t\tcapec: 45,\n\t\tname: \"Buffer Overflow via Symbolic Links\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 46,\n\t\tname: \"Overflow Variables and Tags\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 47,\n\t\tname: \"Buffer Overflow via Parameter Expansion\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 50,\n\t\tname: \"Password Recovery Exploitation\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 51,\n\t\tname: \"Poison Web Service Registry\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 52,\n\t\tname: \"Embedding NULL Bytes\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 158],\n\t},\n\t{\n\t\tcapec: 53,\n\t\tname: \"Postfix, Null Terminate, and Backslash\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 158],\n\t},\n\t{\n\t\tcapec: 63,\n\t\tname: \"Cross-Site Scripting (XSS)\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [79],\n\t},\n\t{\n\t\tcapec: 64,\n\t\tname: \"Using Slashes and URL Encoding Combined to Bypass Validation Logic\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [22, 74, 177],\n\t},\n\t{\n\t\tcapec: 66,\n\t\tname: \"SQL Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [89],\n\t},\n\t{\n\t\tcapec: 67,\n\t\tname: \"String Format Overflow in syslog()\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 71,\n\t\tname: \"Using Unicode Encoding to Bypass Validation Logic\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 72,\n\t\tname: \"URL Encoding\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 177],\n\t},\n\t{\n\t\tcapec: 76,\n\t\tname: \"Manipulating Web Input to File System Calls\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [22, 74],\n\t},\n\t{\n\t\tcapec: 77,\n\t\tname: \"Manipulating User-Controlled Variables\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [94, 1321],\n\t},\n\t{\n\t\tcapec: 78,\n\t\tname: \"Using Escaped Slashes in Alternate Encoding\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [22, 74],\n\t},\n\t{\n\t\tcapec: 79,\n\t\tname: \"Using Slashes in Alternate Encoding\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [22, 74],\n\t},\n\t{\n\t\tcapec: 80,\n\t\tname: \"Using UTF-8 Encoding to Bypass Validation Logic\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 81,\n\t\tname: \"Web Server Logs Tampering\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [117],\n\t},\n\t{\n\t\tcapec: 83,\n\t\tname: \"XPath Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 91],\n\t},\n\t{\n\t\tcapec: 84,\n\t\tname: \"XQuery Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 85,\n\t\tname: \"AJAX Footprinting\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Low\",\n\t\tcwes: [79, 113],\n\t},\n\t{\n\t\tcapec: 88,\n\t\tname: \"OS Command Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [78, 88],\n\t},\n\t{\n\t\tcapec: 93,\n\t\tname: \"Log Injection-Tampering-Forging\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [117],\n\t},\n\t{\n\t\tcapec: 98,\n\t\tname: \"Phishing\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [451],\n\t},\n\t{\n\t\tcapec: 101,\n\t\tname: \"Server Side Include (SSI) Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 97],\n\t},\n\t{\n\t\tcapec: 102,\n\t\tname: \"Session Sidejacking\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 105,\n\t\tname: \"HTTP Request Splitting\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74, 113],\n\t},\n\t{\n\t\tcapec: 108,\n\t\tname: \"Command Line Execution through SQL Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [74, 78, 89],\n\t},\n\t{\n\t\tcapec: 109,\n\t\tname: \"Object Relational Mapping Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [89],\n\t},\n\t{\n\t\tcapec: 110,\n\t\tname: \"SQL Injection through SOAP Parameter Tampering\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [89],\n\t},\n\t{\n\t\tcapec: 120,\n\t\tname: \"Double Encoding\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [74, 177],\n\t},\n\t{\n\t\tcapec: 126,\n\t\tname: \"Path Traversal\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [22],\n\t},\n\t{\n\t\tcapec: 135,\n\t\tname: \"Format String Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 136,\n\t\tname: \"LDAP Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [90],\n\t},\n\t{\n\t\tcapec: 163,\n\t\tname: \"Spear Phishing\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [451],\n\t},\n\t{\n\t\tcapec: 164,\n\t\tname: \"Mobile Phishing\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [451],\n\t},\n\t{\n\t\tcapec: 174,\n\t\tname: \"Flash Parameter Injection\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [88],\n\t},\n\t{\n\t\tcapec: 180,\n\t\tname: \"Exploiting Incorrectly Configured Access Control Security Levels\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [1321],\n\t},\n\t{\n\t\tcapec: 193,\n\t\tname: \"PHP Remote File Inclusion\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [98],\n\t},\n\t{\n\t\tcapec: 209,\n\t\tname: \"XSS Using MIME Type Mismatch\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [79],\n\t},\n\t{\n\t\tcapec: 215,\n\t\tname: \"Fuzzing for application mapping\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Low\",\n\t\tcwes: [532],\n\t},\n\t{\n\t\tcapec: 221,\n\t\tname: \"Data Serialization External Entities Blowup\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"\",\n\t\tcwes: [611],\n\t},\n\t{\n\t\tcapec: 250,\n\t\tname: \"XML Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"\",\n\t\tcwes: [74, 91],\n\t},\n\t{\n\t\tcapec: 267,\n\t\tname: \"Leverage Alternate Encoding\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 268,\n\t\tname: \"Audit Log Manipulation\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"\",\n\t\tcwes: [117],\n\t},\n\t{\n\t\tcapec: 273,\n\t\tname: \"HTTP Response Smuggling\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [74],\n\t},\n\t{\n\t\tcapec: 460,\n\t\tname: \"HTTP Parameter Pollution (HPP)\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [88, 235],\n\t},\n\t{\n\t\tcapec: 463,\n\t\tname: \"Padding Oracle Crypto Attack\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [347],\n\t},\n\t{\n\t\tcapec: 468,\n\t\tname: \"Generic Cross-Browser Cross-Domain Theft\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [177],\n\t},\n\t{\n\t\tcapec: 470,\n\t\tname: \"Expanding Control over the Operating System from the Database\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [89],\n\t},\n\t{\n\t\tcapec: 474,\n\t\tname: \"Signature Spoofing by Key Theft\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 475,\n\t\tname: \"Signature Spoofing by Improper Validation\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [347],\n\t},\n\t{\n\t\tcapec: 509,\n\t\tname: \"Kerberoasting\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 551,\n\t\tname: \"Modify Existing Service\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 555,\n\t\tname: \"Remote Services with Stolen Credentials\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 561,\n\t\tname: \"Windows Admin Shares with Stolen Credentials\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 588,\n\t\tname: \"DOM-Based XSS\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [79],\n\t},\n\t{\n\t\tcapec: 591,\n\t\tname: \"Reflected XSS\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [79],\n\t},\n\t{\n\t\tcapec: 592,\n\t\tname: \"Stored XSS\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Very High\",\n\t\tcwes: [79],\n\t},\n\t{\n\t\tcapec: 597,\n\t\tname: \"Absolute Path Traversal\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"\",\n\t\tcwes: [36],\n\t},\n\t{\n\t\tcapec: 600,\n\t\tname: \"Credential Stuffing\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 632,\n\t\tname: \"Homograph Attack via Homoglyphs\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"Medium\",\n\t\tcwes: [1007],\n\t},\n\t{\n\t\tcapec: 644,\n\t\tname: \"Use of Captured Hashes (Pass The Hash)\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 645,\n\t\tname: \"Use of Captured Tickets (Pass The Ticket)\",\n\t\tabstraction: \"Detailed\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 652,\n\t\tname: \"Use of Known Kerberos Credentials\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 653,\n\t\tname: \"Use of Known Operating System Credentials\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [522],\n\t},\n\t{\n\t\tcapec: 664,\n\t\tname: \"Server Side Request Forgery\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [918],\n\t},\n\t{\n\t\tcapec: 676,\n\t\tname: \"NoSQL Injection\",\n\t\tabstraction: \"Standard\",\n\t\tseverity: \"High\",\n\t\tcwes: [943],\n\t},\n];\n\n/** Index from CWE to the patterns referencing it, built once at module load. */\nconst BY_CWE: ReadonlyMap<number, readonly AttackPattern[]> = (() => {\n\tconst index = new Map<number, AttackPattern[]>();\n\tfor (const pattern of ATTACK_PATTERNS) {\n\t\tfor (const cwe of pattern.cwes) {\n\t\t\tconst bucket = index.get(cwe);\n\t\t\tif (bucket) bucket.push(pattern);\n\t\t\telse index.set(cwe, [pattern]);\n\t\t}\n\t}\n\treturn index;\n})();\n\n/**\n * Attack patterns related to a weakness.\n *\n * @param cwe - CWE identifier, typically a rule's `cwe` field.\n * @returns Related patterns, or an empty array when none is mapped. Empty means MITRE\n *   publishes no Standard or Detailed pattern for that weakness — not that the weakness\n *   is unimportant.\n */\nexport function attackPatternsForCwe(cwe: number | undefined): readonly AttackPattern[] {\n\tif (typeof cwe !== \"number\") return [];\n\treturn BY_CWE.get(cwe) ?? [];\n}\n"],"mappings":";;AAgDA,MAAa,kBAA4C;CACxD;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI;CACZ;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAI;GAAI;EAAE;CAClB;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAI;GAAI;EAAG;CACnB;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,IAAI;CAChB;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM;GAAC;GAAI;GAAI;EAAE;CAClB;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI;CACZ;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,EAAE;CACd;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI,GAAG;CACf;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,EAAE;CACV;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,IAAI;CACZ;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;CACA;EACC,OAAO;EACP,MAAM;EACN,aAAa;EACb,UAAU;EACV,MAAM,CAAC,GAAG;CACX;AACD;;AAGA,MAAM,gBAA+D;CACpE,MAAM,wBAAQ,IAAI,IAA6B;CAC/C,KAAK,MAAM,WAAW,iBACrB,KAAK,MAAM,OAAO,QAAQ,MAAM;EAC/B,MAAM,SAAS,MAAM,IAAI,GAAG;EAC5B,IAAI,QAAQ,OAAO,KAAK,OAAO;OAC1B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC;CAC9B;CAED,OAAO;AACR,EAAA,CAAG;;;;;;;;;AAUH,SAAgB,qBAAqB,KAAmD;CACvF,IAAI,OAAO,QAAQ,UAAU,OAAO,CAAC;CACrC,OAAO,OAAO,IAAI,GAAG,KAAK,CAAC;AAC5B"}