@waftester/cli 2.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (141) hide show
  1. package/LICENSE +80 -0
  2. package/LICENSE-COMMUNITY +28 -0
  3. package/README.md +121 -0
  4. package/bin/cli.js +152 -0
  5. package/package.json +52 -0
  6. package/payloads/community/README.md +45 -0
  7. package/payloads/community/ai/ml-poisoning.json +173 -0
  8. package/payloads/community/ai/prompt-injection.json +247 -0
  9. package/payloads/community/ai/workflow-abuse.json +222 -0
  10. package/payloads/community/auth/jwt.json +855 -0
  11. package/payloads/community/auth/login-bypass.json +623 -0
  12. package/payloads/community/auth/mfa.json +402 -0
  13. package/payloads/community/auth/oauth.json +421 -0
  14. package/payloads/community/auth/open-redirect.json +1028 -0
  15. package/payloads/community/auth/session.json +404 -0
  16. package/payloads/community/cache/deception.json +402 -0
  17. package/payloads/community/cache/poisoning.json +403 -0
  18. package/payloads/community/deserialization/gadget.json +375 -0
  19. package/payloads/community/deserialization/prototype.json +370 -0
  20. package/payloads/community/fuzz/content-type.json +397 -0
  21. package/payloads/community/fuzz/headers.json +401 -0
  22. package/payloads/community/fuzz/methods.json +397 -0
  23. package/payloads/community/fuzz/obfuscation.json +362 -0
  24. package/payloads/community/fuzz/special-chars.json +740 -0
  25. package/payloads/community/fuzz/waf-bypass.json +452 -0
  26. package/payloads/community/graphql/batching-abuse.json +271 -0
  27. package/payloads/community/graphql/depth-limit.json +271 -0
  28. package/payloads/community/graphql/introspection.json +267 -0
  29. package/payloads/community/injection/crlf.json +569 -0
  30. package/payloads/community/injection/ldap.json +357 -0
  31. package/payloads/community/injection/nosqli.json +529 -0
  32. package/payloads/community/injection/oscmd.json +662 -0
  33. package/payloads/community/injection/rce-polyglots.json +452 -0
  34. package/payloads/community/injection/sqli.json +681 -0
  35. package/payloads/community/injection/ssti.json +584 -0
  36. package/payloads/community/injection/upload-attacks.json +632 -0
  37. package/payloads/community/injection/xpath.json +357 -0
  38. package/payloads/community/injection/xxe.json +716 -0
  39. package/payloads/community/logic/forced-browsing.json +405 -0
  40. package/payloads/community/logic/idor.json +1026 -0
  41. package/payloads/community/logic/privilege.json +337 -0
  42. package/payloads/community/media/exif-injection.json +225 -0
  43. package/payloads/community/media/metadata-poison.json +239 -0
  44. package/payloads/community/protocol/http-smuggling.json +798 -0
  45. package/payloads/community/protocol/http2-attacks.json +382 -0
  46. package/payloads/community/protocol/websocket-abuse.json +375 -0
  47. package/payloads/community/rate-limit/burst-simulation.json +286 -0
  48. package/payloads/community/rate-limit/bypass-attempts.json +326 -0
  49. package/payloads/community/rate-limit/zone-tests.json +332 -0
  50. package/payloads/community/services/authentik.json +415 -0
  51. package/payloads/community/services/immich.json +423 -0
  52. package/payloads/community/services/n8n.json +366 -0
  53. package/payloads/community/sqli-basic.json +182 -0
  54. package/payloads/community/ssrf/cloud-metadata.json +999 -0
  55. package/payloads/community/ssrf/dns-rebinding.json +503 -0
  56. package/payloads/community/ssrf/internal-networks.json +627 -0
  57. package/payloads/community/ssrf/protocol-smuggling.json +350 -0
  58. package/payloads/community/ssti/multi-language-templates.json +191 -0
  59. package/payloads/community/ssti/python-templates.json +200 -0
  60. package/payloads/community/traversal/basic.json +675 -0
  61. package/payloads/community/traversal/cloud-credentials.json +107 -0
  62. package/payloads/community/traversal/config-files.json +193 -0
  63. package/payloads/community/traversal/encoding.json +558 -0
  64. package/payloads/community/traversal/null-byte.json +105 -0
  65. package/payloads/community/traversal/symlink.json +93 -0
  66. package/payloads/community/traversal/unicode.json +134 -0
  67. package/payloads/community/traversal/unix-advanced.json +195 -0
  68. package/payloads/community/traversal/windows-advanced.json +195 -0
  69. package/payloads/community/waf-bypass/cloudflare-bypass.json +102 -0
  70. package/payloads/community/waf-bypass/encoding-bypass.json +120 -0
  71. package/payloads/community/waf-bypass/evasion-techniques.json +164 -0
  72. package/payloads/community/waf-bypass/hpp-bypass.json +92 -0
  73. package/payloads/community/waf-bypass/modsecurity-crs.json +220 -0
  74. package/payloads/community/waf-bypass/protocol-attacks.json +101 -0
  75. package/payloads/community/waf-bypass/sqlmap-tamper.json +252 -0
  76. package/payloads/community/waf-bypass/unicode-charset.json +152 -0
  77. package/payloads/community/waf-bypass/vendor-bypasses.json +72 -0
  78. package/payloads/community/waf-validation/README.md +172 -0
  79. package/payloads/community/waf-validation/bypass-techniques.json +272 -0
  80. package/payloads/community/waf-validation/custom-rules.json +952 -0
  81. package/payloads/community/waf-validation/evasion-techniques.json +272 -0
  82. package/payloads/community/waf-validation/modsecurity-core.json +151 -0
  83. package/payloads/community/waf-validation/owasp-top10.json +236 -0
  84. package/payloads/community/waf-validation/regression-tests.json +227 -0
  85. package/payloads/community/xss/csp-bypass.json +431 -0
  86. package/payloads/community/xss/dom.json +389 -0
  87. package/payloads/community/xss/filter-bypass.json +1242 -0
  88. package/payloads/community/xss/mutation.json +263 -0
  89. package/payloads/community/xss/polyglots.json +371 -0
  90. package/payloads/community/xss/reflected.json +187 -0
  91. package/payloads/community/xss/stored.json +330 -0
  92. package/payloads/crlf-injection.json +182 -0
  93. package/payloads/ids-map.json +155 -0
  94. package/payloads/ldap-injection.json +182 -0
  95. package/payloads/nosql-injection.json +227 -0
  96. package/payloads/prototype-pollution.json +182 -0
  97. package/payloads/request-smuggling.json +182 -0
  98. package/payloads/version.json +28 -0
  99. package/payloads/xss-advanced.json +227 -0
  100. package/templates/README.md +221 -0
  101. package/templates/nuclei/http/waf-bypass/crlf-bypass.yaml +146 -0
  102. package/templates/nuclei/http/waf-bypass/lfi-bypass.yaml +152 -0
  103. package/templates/nuclei/http/waf-bypass/nosqli-bypass.yaml +166 -0
  104. package/templates/nuclei/http/waf-bypass/rce-bypass.yaml +171 -0
  105. package/templates/nuclei/http/waf-bypass/sqli-basic.yaml +142 -0
  106. package/templates/nuclei/http/waf-bypass/sqli-evasion.yaml +192 -0
  107. package/templates/nuclei/http/waf-bypass/ssrf-bypass.yaml +130 -0
  108. package/templates/nuclei/http/waf-bypass/ssti-bypass.yaml +147 -0
  109. package/templates/nuclei/http/waf-bypass/xss-basic.yaml +163 -0
  110. package/templates/nuclei/http/waf-bypass/xss-evasion.yaml +217 -0
  111. package/templates/nuclei/http/waf-bypass/xxe-bypass.yaml +204 -0
  112. package/templates/nuclei/http/waf-detection/akamai-detect.yaml +105 -0
  113. package/templates/nuclei/http/waf-detection/aws-waf-detect.yaml +115 -0
  114. package/templates/nuclei/http/waf-detection/azure-waf-detect.yaml +114 -0
  115. package/templates/nuclei/http/waf-detection/cloudflare-detect.yaml +121 -0
  116. package/templates/nuclei/http/waf-detection/modsecurity-detect.yaml +129 -0
  117. package/templates/nuclei/workflows/waf-assessment-workflow.yaml +71 -0
  118. package/templates/output/asff.tmpl +61 -0
  119. package/templates/output/csv.tmpl +4 -0
  120. package/templates/output/junit.tmpl +34 -0
  121. package/templates/output/markdown-report.tmpl +92 -0
  122. package/templates/output/slack-notification.tmpl +95 -0
  123. package/templates/output/text-summary.tmpl +56 -0
  124. package/templates/overrides/api-only.yaml +130 -0
  125. package/templates/overrides/crs-tuning.yaml +204 -0
  126. package/templates/overrides/false-positive-suppression.yaml +159 -0
  127. package/templates/policies/owasp-top10.yaml +152 -0
  128. package/templates/policies/pci-dss.yaml +124 -0
  129. package/templates/policies/permissive.yaml +40 -0
  130. package/templates/policies/standard.yaml +57 -0
  131. package/templates/policies/strict.yaml +72 -0
  132. package/templates/report-configs/compliance.yaml +173 -0
  133. package/templates/report-configs/dark.yaml +136 -0
  134. package/templates/report-configs/enterprise.yaml +175 -0
  135. package/templates/report-configs/minimal.yaml +84 -0
  136. package/templates/report-configs/print.yaml +139 -0
  137. package/templates/workflows/api-scan.yaml +132 -0
  138. package/templates/workflows/ci-gate.yaml +129 -0
  139. package/templates/workflows/full-scan.yaml +133 -0
  140. package/templates/workflows/quick-probe.yaml +80 -0
  141. package/templates/workflows/waf-detection.yaml +89 -0
package/payloads/community/traversal/cloud-credentials.json ADDED
@@ -0,0 +1,107 @@
1
+ [
2
+ {
3
+ "id": "TRV-CLOUD-001",
4
+ "payload": "../../../.aws/config",
5
+ "tags": [
6
+ "aws",
7
+ "cloud",
8
+ "config",
9
+ "quick"
10
+ ],
11
+ "expected_block": true,
12
+ "severity_hint": "Critical",
13
+ "notes": "AWS CLI configuration file",
14
+ "category": "Traversal"
15
+ },
16
+ {
17
+ "id": "TRV-CLOUD-002",
18
+ "payload": "../../../.azure/credentials",
19
+ "tags": [
20
+ "azure",
21
+ "cloud",
22
+ "credentials"
23
+ ],
24
+ "expected_block": true,
25
+ "severity_hint": "Critical",
26
+ "notes": "Azure credentials file",
27
+ "category": "Traversal"
28
+ },
29
+ {
30
+ "id": "TRV-CLOUD-003",
31
+ "payload": "../../../.gcloud/credentials.db",
32
+ "tags": [
33
+ "gcp",
34
+ "cloud",
35
+ "credentials"
36
+ ],
37
+ "expected_block": true,
38
+ "severity_hint": "Critical",
39
+ "notes": "Google Cloud credentials database",
40
+ "category": "Traversal"
41
+ },
42
+ {
43
+ "id": "TRV-CLOUD-004",
44
+ "payload": "../../../.kube/config",
45
+ "tags": [
46
+ "kubernetes",
47
+ "k8s",
48
+ "config",
49
+ "quick"
50
+ ],
51
+ "expected_block": true,
52
+ "severity_hint": "Critical",
53
+ "notes": "Kubernetes cluster configuration",
54
+ "category": "Traversal"
55
+ },
56
+ {
57
+ "id": "TRV-CLOUD-005",
58
+ "payload": "../../../.ssh/id_ed25519",
59
+ "tags": [
60
+ "ssh",
61
+ "keys",
62
+ "quick"
63
+ ],
64
+ "expected_block": true,
65
+ "severity_hint": "Critical",
66
+ "notes": "Ed25519 SSH private key",
67
+ "category": "Traversal"
68
+ },
69
+ {
70
+ "id": "TRV-CLOUD-006",
71
+ "payload": "../../../.docker/config.json",
72
+ "tags": [
73
+ "docker",
74
+ "registry",
75
+ "credentials"
76
+ ],
77
+ "expected_block": true,
78
+ "severity_hint": "Critical",
79
+ "notes": "Docker registry authentication",
80
+ "category": "Traversal"
81
+ },
82
+ {
83
+ "id": "TRV-CLOUD-007",
84
+ "payload": "../../../.netrc",
85
+ "tags": [
86
+ "credentials",
87
+ "generic"
88
+ ],
89
+ "expected_block": true,
90
+ "severity_hint": "Critical",
91
+ "notes": "Generic network credentials file",
92
+ "category": "Traversal"
93
+ },
94
+ {
95
+ "id": "TRV-CLOUD-008",
96
+ "payload": "../../../.config/gcloud/application_default_credentials.json",
97
+ "tags": [
98
+ "gcp",
99
+ "cloud",
100
+ "credentials"
101
+ ],
102
+ "expected_block": true,
103
+ "severity_hint": "Critical",
104
+ "notes": "Google Cloud application default credentials",
105
+ "category": "Traversal"
106
+ }
107
+ ]
package/payloads/community/traversal/config-files.json ADDED
@@ -0,0 +1,193 @@
1
+ [
2
+ {
3
+ "id": "TRV-ENV-003",
4
+ "payload": "../../../.git/config",
5
+ "tags": [
6
+ "git",
7
+ "vcs",
8
+ "quick"
9
+ ],
10
+ "expected_block": true,
11
+ "severity_hint": "Critical",
12
+ "notes": "Git repository configuration (may contain remote URLs and credentials)",
13
+ "category": "Traversal"
14
+ },
15
+ {
16
+ "id": "TRV-ENV-004",
17
+ "payload": "../../../package.json",
18
+ "tags": [
19
+ "node",
20
+ "config",
21
+ "quick"
22
+ ],
23
+ "expected_block": true,
24
+ "severity_hint": "High",
25
+ "notes": "Node.js project configuration",
26
+ "category": "Traversal"
27
+ },
28
+ {
29
+ "id": "TRV-ENV-005",
30
+ "payload": "../../../composer.json",
31
+ "tags": [
32
+ "php",
33
+ "config"
34
+ ],
35
+ "expected_block": true,
36
+ "severity_hint": "High",
37
+ "notes": "PHP Composer configuration",
38
+ "category": "Traversal"
39
+ },
40
+ {
41
+ "id": "TRV-ENV-006",
42
+ "payload": "../../../Dockerfile",
43
+ "tags": [
44
+ "docker",
45
+ "config",
46
+ "quick"
47
+ ],
48
+ "expected_block": true,
49
+ "severity_hint": "Critical",
50
+ "notes": "Docker build instructions (may contain secrets)",
51
+ "category": "Traversal"
52
+ },
53
+ {
54
+ "id": "TRV-ENV-007",
55
+ "payload": "../../../docker-compose.yml",
56
+ "tags": [
57
+ "docker",
58
+ "orchestration"
59
+ ],
60
+ "expected_block": true,
61
+ "severity_hint": "Critical",
62
+ "notes": "Docker Compose configuration (may contain environment variables)",
63
+ "category": "Traversal"
64
+ },
65
+ {
66
+ "id": "TRV-ENV-008",
67
+ "payload": "../../../.npmrc",
68
+ "tags": [
69
+ "node",
70
+ "npm",
71
+ "credentials"
72
+ ],
73
+ "expected_block": true,
74
+ "severity_hint": "Critical",
75
+ "notes": "NPM configuration (may contain auth tokens)",
76
+ "category": "Traversal"
77
+ },
78
+ {
79
+ "id": "TRV-ENV-009",
80
+ "payload": "../../../.pypirc",
81
+ "tags": [
82
+ "python",
83
+ "pip",
84
+ "credentials"
85
+ ],
86
+ "expected_block": true,
87
+ "severity_hint": "Critical",
88
+ "notes": "PyPI configuration (may contain credentials)",
89
+ "category": "Traversal"
90
+ },
91
+ {
92
+ "id": "TRV-ENV-010",
93
+ "payload": "../../../settings.py",
94
+ "tags": [
95
+ "python",
96
+ "django",
97
+ "config"
98
+ ],
99
+ "expected_block": true,
100
+ "severity_hint": "Critical",
101
+ "notes": "Django settings file (database credentials, secret keys)",
102
+ "category": "Traversal"
103
+ },
104
+ {
105
+ "id": "TRV-ENV-011",
106
+ "payload": "../../../application.properties",
107
+ "tags": [
108
+ "java",
109
+ "spring",
110
+ "config",
111
+ "quick"
112
+ ],
113
+ "expected_block": true,
114
+ "severity_hint": "Critical",
115
+ "notes": "Spring Boot configuration (database, API keys)",
116
+ "category": "Traversal"
117
+ },
118
+ {
119
+ "id": "TRV-ENV-012",
120
+ "payload": "../../../appsettings.json",
121
+ "tags": [
122
+ "dotnet",
123
+ "config"
124
+ ],
125
+ "expected_block": true,
126
+ "severity_hint": "Critical",
127
+ "notes": ".NET application settings (connection strings)",
128
+ "category": "Traversal"
129
+ },
130
+ {
131
+ "id": "TRV-ENV-013",
132
+ "payload": "../../../wp-config.php",
133
+ "tags": [
134
+ "wordpress",
135
+ "php",
136
+ "database"
137
+ ],
138
+ "expected_block": true,
139
+ "severity_hint": "Critical",
140
+ "notes": "WordPress database configuration",
141
+ "category": "Traversal"
142
+ },
143
+ {
144
+ "id": "TRV-ENV-014",
145
+ "payload": "../../../.htpasswd",
146
+ "tags": [
147
+ "apache",
148
+ "auth"
149
+ ],
150
+ "expected_block": true,
151
+ "severity_hint": "High",
152
+ "notes": "Apache HTTP authentication passwords",
153
+ "category": "Traversal"
154
+ },
155
+ {
156
+ "id": "TRV-ENV-015",
157
+ "payload": "../../../Gemfile.lock",
158
+ "tags": [
159
+ "ruby",
160
+ "dependencies"
161
+ ],
162
+ "expected_block": true,
163
+ "severity_hint": "Medium",
164
+ "notes": "Ruby dependency lock file (version information)",
165
+ "category": "Traversal"
166
+ },
167
+ {
168
+ "id": "TRV-ENV-016",
169
+ "payload": "../../../yarn.lock",
170
+ "tags": [
171
+ "node",
172
+ "yarn",
173
+ "dependencies"
174
+ ],
175
+ "expected_block": true,
176
+ "severity_hint": "Medium",
177
+ "notes": "Yarn dependency lock file",
178
+ "category": "Traversal"
179
+ },
180
+ {
181
+ "id": "TRV-ENV-017",
182
+ "payload": "../../../Pipfile",
183
+ "tags": [
184
+ "python",
185
+ "pipenv",
186
+ "dependencies"
187
+ ],
188
+ "expected_block": true,
189
+ "severity_hint": "High",
190
+ "notes": "Python Pipenv configuration",
191
+ "category": "Traversal"
192
+ }
193
+ ]