defense-mcp-server 0.6.0

package/build/tools/dns-security.d.ts

@@ -0,0 +1,93 @@
+/**
+ * DNS security tools for Kali Defense MCP Server.
+ *
+ * Registers 1 tool: dns_security (actions: audit_resolv, check_dnssec,
+ * detect_tunneling, block_domains, query_log_audit)
+ *
+ * Provides DNS configuration auditing, DNSSEC validation checking,
+ * DNS tunneling detection, domain blocking, and query log analysis.
+ */
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+/**
+ * Calculate Shannon entropy of a string.
+ * Pure function — no external dependencies.
+ *
+ * Higher entropy values indicate more randomness, which is characteristic
+ * of DNS tunneling and DGA (Domain Generation Algorithm) domains.
+ *
+ * @param str - Input string to calculate entropy for
+ * @returns Entropy value in bits per character
+ */
+export declare function calculateShannonEntropy(str: string): number;
+interface DnssecResult {
+    domain: string;
+    dnssecEnabled: boolean;
+    hasRRSIG: boolean;
+    hasDNSKEY: boolean;
+    hasDS: boolean;
+    adFlag: boolean;
+    chainValid: boolean;
+    records: string[];
+    issues: string[];
+}
+/**
+ * Parse dig +dnssec output and determine DNSSEC status.
+ */
+export declare function parseDnssecOutput(domain: string, digOutput: string): DnssecResult;
+interface SuspiciousQuery {
+    domain: string;
+    entropy: number;
+    labelLength: number;
+    reason: string;
+}
+/**
+ * Analyze captured DNS queries for tunneling indicators.
+ */
+export declare function analyzeDnsQueries(capturedOutput: string, entropyThreshold: number): {
+    suspicious: SuspiciousQuery[];
+    totalQueries: number;
+    txtQueries: number;
+    nullQueries: number;
+    domainCounts: Record<string, number>;
+};
+interface ResolvAuditResult {
+    nameservers: Array<{
+        ip: string;
+        type: "public" | "internal" | "loopback";
+        provider?: string;
+    }>;
+    searchDomains: string[];
+    options: string[];
+    findings: Array<{
+        check: string;
+        status: "PASS" | "FAIL" | "INFO" | "WARN";
+        detail: string;
+    }>;
+    recommendations: string[];
+}
+/**
+ * Audit resolv.conf content.
+ */
+export declare function auditResolvConf(resolvContent: string, resolvedStatus: string): ResolvAuditResult;
+interface QueryLogAnalysis {
+    totalEntries: number;
+    topDomains: Array<{
+        domain: string;
+        count: number;
+    }>;
+    suspiciousTldQueries: Array<{
+        domain: string;
+        tld: string;
+    }>;
+    nxdomainCount: number;
+    nxdomainRate: number;
+    queryTimeline: Record<string, number>;
+    findings: string[];
+}
+/**
+ * Analyze DNS query log content.
+ */
+export declare function analyzeQueryLog(logContent: string): QueryLogAnalysis;
+export declare function registerDnsSecurityTools(server: McpServer): void;
+export {};
+//# sourceMappingURL=dns-security.d.ts.map

package/build/tools/dns-security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dns-security.d.ts","sourceRoot":"","sources":["../../src/tools/dns-security.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAoHpE;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAkB3D;AAID,UAAU,YAAY;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,YAAY,CA4DjF;AAID,UAAU,eAAe;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,GACvB;IAAE,UAAU,EAAE,eAAe,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CA4DxI;AAID,UAAU,iBAAiB;IACzB,WAAW,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChG,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9F,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,iBAAiB,CAyEhG;AAID,UAAU,gBAAgB;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,oBAAoB,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,gBAAgB,CAyFpE;AAID,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAwZhE"}