blitzstrike 1.0.82 → 1.0.84

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/CHANGELOG.md +34 -0
  2. package/README.md +24 -24
  3. package/THIRD-PARTY-NOTICES.md +1 -1
  4. package/dist/index.js +51 -1
  5. package/docs/AUTONOMY.md +48 -136
  6. package/docs/usage.md +1 -1
  7. package/intelligence/retry_guidance.json +67 -0
  8. package/package.json +1 -1
  9. package/intelligence/ab_signals.json +0 -722
  10. package/intelligence/attack_chains.json +0 -666
  11. package/intelligence/awaiting_input_markers.json +0 -37
  12. package/intelligence/endpoint_patterns.json +0 -541
  13. package/intelligence/escalation_patterns.json +0 -224
  14. package/intelligence/file_extensions.json +0 -6
  15. package/intelligence/patterns.json +0 -437
  16. package/intelligence/refusal_markers.json +0 -35
  17. package/intelligence/scan_profiles.json +0 -40
  18. package/intelligence/skills.json +0 -1185
  19. package/intelligence/tools.json +0 -1292
  20. package/intelligence/tools_meta.json +0 -1247
  21. package/intelligence/unified_patterns.json +0 -2329
  22. package/intelligence/verification_patterns.json +0 -52
  23. package/intelligence/vuln_ontology.json +0 -189
  24. package/intelligence/waff_bypass.json +0 -677
package/intelligence/escalation_patterns.json DELETED
@@ -1,224 +0,0 @@
1
- {
2
- "_comment": "Escalation patterns + templates \u2014 merged into single file",
3
- "_version": "2.0.0",
4
- "patterns": [
5
- {
6
- "id": "seed_cred_to_access",
7
- "from": [
8
- "CREDENTIAL_EXPOSURE",
9
- "AUTH"
10
- ],
11
- "to": "ACCESS",
12
- "description": "Use exposed credentials to access protected resources",
13
- "probability": 0.8
14
- },
15
- {
16
- "id": "seed_file_to_code",
17
- "from": [
18
- "PATH_TRAVERSAL",
19
- "QUERY_INJECTION"
20
- ],
21
- "to": "CODE",
22
- "description": "Escalate to code execution via file write or database injection",
23
- "probability": 0.7
24
- },
25
- {
26
- "id": "seed_xss_to_auth",
27
- "from": [
28
- "SCRIPT_INJECTION"
29
- ],
30
- "to": "AUTH",
31
- "description": "Use XSS to steal session tokens and hijack accounts",
32
- "probability": 0.9
33
- },
34
- {
35
- "id": "seed_sqli_to_data",
36
- "from": [
37
- "QUERY_INJECTION"
38
- ],
39
- "to": "DATA",
40
- "description": "Extract sensitive data via UNION queries",
41
- "probability": 0.85
42
- },
43
- {
44
- "id": "seed_deser_to_code",
45
- "from": [
46
- "DESERIALIZATION"
47
- ],
48
- "to": "CODE",
49
- "description": "Execute commands via gadget chain exploitation",
50
- "probability": 0.75
51
- },
52
- {
53
- "id": "seed_rce_to_network",
54
- "from": [
55
- "INSECURE_CODE_EXECUTION"
56
- ],
57
- "to": "NETWORK",
58
- "description": "Pivot to internal network from compromised host",
59
- "probability": 0.6
60
- },
61
- {
62
- "id": "seed_cloud_to_access",
63
- "from": [
64
- "CLOUD_MISCONFIGURATION"
65
- ],
66
- "to": "ACCESS",
67
- "description": "Escalate cloud access to full account compromise",
68
- "probability": 0.8
69
- },
70
- {
71
- "id": "seed_inject_to_config",
72
- "from": [
73
- "QUERY_INJECTION",
74
- "PATH_TRAVERSAL"
75
- ],
76
- "to": "CONFIG",
77
- "description": "Extract configuration files containing secrets",
78
- "probability": 0.7
79
- }
80
- ],
81
- "_learned_patterns": [],
82
- "templates": {
83
- "INJECTION": [
84
- {
85
- "step": "Try escalation via {param} parameter with different encoding",
86
- "tool_hint": "advanced_fuzz"
87
- },
88
- {
89
- "step": "Test for second-order injection in stored data",
90
- "tool_hint": "manual"
91
- },
92
- {
93
- "step": "Check for stack trace disclosure that reveals internals",
94
- "tool_hint": "http_observe"
95
- }
96
- ],
97
- "AUTH": [
98
- {
99
- "step": "Check if session token can be reused across different accounts",
100
- "tool_hint": "manual"
101
- },
102
- {
103
- "step": "Test for token expiration bypass",
104
- "tool_hint": "manual"
105
- },
106
- {
107
- "step": "Check for OAuth state parameter tampering",
108
- "tool_hint": "manual"
109
- }
110
- ],
111
- "ACCESS": [
112
- {
113
- "step": "Enumerate horizontal privilege escalation paths",
114
- "tool_hint": "manual"
115
- },
116
- {
117
- "step": "Check for IDOR in related resources",
118
- "tool_hint": "manual"
119
- },
120
- {
121
- "step": "Test for forced browsing to admin endpoints",
122
- "tool_hint": "ffuf"
123
- }
124
- ],
125
- "DATA": [
126
- {
127
- "step": "Check if sensitive data is cached by CDN/proxy",
128
- "tool_hint": "browser"
129
- },
130
- {
131
- "step": "Test for data exfiltration via response headers",
132
- "tool_hint": "manual"
133
- },
134
- {
135
- "step": "Check for PII in client-side storage",
136
- "tool_hint": "browser_devtools"
137
- }
138
- ],
139
- "CODE": [
140
- {
141
- "step": "Check for code execution in background jobs",
142
- "tool_hint": "manual"
143
- },
144
- {
145
- "step": "Test for deserialization gadget chains",
146
- "tool_hint": "manual"
147
- },
148
- {
149
- "step": "Check for template injection in email",
150
- "tool_hint": "manual"
151
- }
152
- ],
153
- "CONFIG": [
154
- {
155
- "step": "Check for debug endpoints in non-standard paths",
156
- "tool_hint": "ffuf"
157
- },
158
- {
159
- "step": "Test for alternate channel exposure (WebSocket, gRPC)",
160
- "tool_hint": "manual"
161
- },
162
- {
163
- "step": "Check for source code disclosure via backup files",
164
- "tool_hint": "ffuf"
165
- }
166
- ],
167
- "NETWORK": [
168
- {
169
- "step": "Check for internal service fingerprinting via SSRF",
170
- "tool_hint": "manual"
171
- },
172
- {
173
- "step": "Test for DNS zone transfer possibilities",
174
- "tool_hint": "manual"
175
- },
176
- {
177
- "step": "Check for internal port scanning via webhooks",
178
- "tool_hint": "manual"
179
- }
180
- ],
181
- "FILE": [
182
- {
183
- "step": "Check for symlink-based path traversal",
184
- "tool_hint": "manual"
185
- },
186
- {
187
- "step": "Test for archive extraction vulnerabilities",
188
- "tool_hint": "manual"
189
- },
190
- {
191
- "step": "Check for XML external entity in file upload",
192
- "tool_hint": "manual"
193
- }
194
- ],
195
- "BUSINESS_LOGIC": [
196
- {
197
- "step": "Test for negative quantity exploitation in checkout flow",
198
- "tool_hint": "manual"
199
- },
200
- {
201
- "step": "Check for race condition in coupon/promo code application",
202
- "tool_hint": "manual"
203
- },
204
- {
205
- "step": "Verify workflow state machine bypass (skip steps)",
206
- "tool_hint": "manual"
207
- }
208
- ],
209
- "API_ABUSE": [
210
- {
211
- "step": "Test for rate limit bypass via header manipulation",
212
- "tool_hint": "manual"
213
- },
214
- {
215
- "step": "Check for bulk operation abuse (mass actions)",
216
- "tool_hint": "manual"
217
- },
218
- {
219
- "step": "Test for GraphQL batching/alias abuse",
220
- "tool_hint": "manual"
221
- }
222
- ]
223
- }
224
- }
package/intelligence/file_extensions.json DELETED
@@ -1,6 +0,0 @@
1
- {
2
- "static": ["png", "jpg", "jpeg", "gif", "svg", "ico", "bmp", "webp", "avif", "tiff", "woff", "woff2", "ttf", "otf", "eot", "mp4", "webm", "ogg", "mp3", "wav", "flac", "avi", "mov", "dat", "bin", "exe", "dll", "so", "css", "scss", "sass", "less", "lock"],
3
- "high_value": ["js", "jsx", "ts", "tsx", "mjs", "cjs", "map"],
4
- "document": ["pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "xml", "yml", "yaml", "json", "toml", "ini", "conf", "cfg", "txt", "md", "log", "zip", "tar", "gz", "rar", "7z", "bz2"],
5
- "backend": ["php", "phtml", "php3", "php4", "php5", "phps", "asp", "aspx", "ascx", "ashx", "asmx", "jsp", "jspx", "jhtml", "cgi", "pl", "py", "rb", "sh", "html", "htm"]
6
- }