erosolar-cli 1.5.3 → 1.5.4

package/dist/tools/enhancedSecurityTools.js

@@ -0,0 +1,215 @@
+/**
+ * Enhanced Security Tools with Authorization
+ *
+ * Security testing tools with integrated authorization framework.
+ */
+import { AuthorizationManager } from '../security/authorization.js';
+import { createRealSecurityTools } from './realSecurityTools.js';
+import { createOffensiveSecurityTools } from './offensiveSecurityTools.js';
+/**
+ * Create enhanced security tools with authorization
+ */
+export function createEnhancedSecurityTools(workingDir, options = {}) {
+    const tools = [];
+    const authManager = options.authorizationManager || new AuthorizationManager();
+    // Add authorization management tools
+    tools.push(createAuthorizationTool(authManager));
+    tools.push(createAuthorizationStatusTool(authManager));
+    tools.push(createAuthorizationReportTool(authManager));
+    // Add real security tools with authorization
+    const realSecurityTools = createRealSecurityTools(workingDir, {
+        enableExploitation: options.enableExploitation,
+        requireAuthorization: options.requireAuthorization
+    });
+    // Wrap real security tools with authorization checks
+    realSecurityTools.forEach(tool => {
+        tools.push(wrapToolWithAuthorization(tool, authManager));
+    });
+    // Add offensive security tools with authorization
+    const offensiveSecurityTools = createOffensiveSecurityTools(workingDir, {
+        enableAdvancedExploitation: options.enableAdvancedExploitation,
+        enablePayloadGeneration: options.enablePayloadGeneration,
+        requireAuthorization: options.requireAuthorization
+    });
+    // Wrap offensive security tools with authorization checks
+    offensiveSecurityTools.forEach(tool => {
+        tools.push(wrapToolWithAuthorization(tool, authManager));
+    });
+    return tools;
+}
+/**
+ * Create authorization request tool
+ */
+function createAuthorizationTool(authManager) {
+    return {
+        name: 'request_security_authorization',
+        description: 'Request authorization for security testing operations',
+        parameters: {
+            type: 'object',
+            properties: {
+                targets: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Authorized targets (IPs, domains, or * for all)'
+                },
+                techniques: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'Authorized techniques (or * for all)'
+                },
+                durationHours: {
+                    type: 'number',
+                    description: 'Authorization duration in hours'
+                },
+                authorizedBy: {
+                    type: 'string',
+                    description: 'Name of authorizing person/entity'
+                },
+                contactInfo: {
+                    type: 'string',
+                    description: 'Contact information for authorization'
+                },
+                authorizationToken: {
+                    type: 'string',
+                    description: 'Authorization token (optional if set in environment)'
+                }
+            },
+            required: ['targets', 'techniques', 'durationHours', 'authorizedBy', 'contactInfo']
+        },
+        handler: async (args) => {
+            const targets = args['targets'];
+            const techniques = args['techniques'];
+            const durationHours = args['durationHours'];
+            const authorizedBy = args['authorizedBy'];
+            const contactInfo = args['contactInfo'];
+            const authorizationToken = args['authorizationToken'];
+            const startTime = new Date();
+            const endTime = new Date(startTime.getTime() + durationHours * 60 * 60 * 1000);
+            const scope = {
+                targets,
+                techniques,
+                startTime,
+                endTime,
+                authorizedBy,
+                contactInfo
+            };
+            const result = authManager.requestAuthorization(scope, authorizationToken);
+            return JSON.stringify({
+                authorized: result.authorized,
+                reason: result.reason,
+                scope: result.scope ? {
+                    targets: result.scope.targets,
+                    techniques: result.scope.techniques,
+                    startTime: result.scope.startTime.toISOString(),
+                    endTime: result.scope.endTime.toISOString(),
+                    authorizedBy: result.scope.authorizedBy
+                } : undefined
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create authorization status tool
+ */
+function createAuthorizationStatusTool(authManager) {
+    return {
+        name: 'get_authorization_status',
+        description: 'Get current authorization status',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            const result = authManager.getAuthorizationStatus();
+            return JSON.stringify({
+                authorized: result.authorized,
+                reason: result.reason,
+                scope: result.scope ? {
+                    targets: result.scope.targets,
+                    techniques: result.scope.techniques,
+                    startTime: result.scope.startTime.toISOString(),
+                    endTime: result.scope.endTime.toISOString(),
+                    authorizedBy: result.scope.authorizedBy
+                } : undefined
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create authorization report tool
+ */
+function createAuthorizationReportTool(authManager) {
+    return {
+        name: 'generate_authorization_report',
+        description: 'Generate authorization report',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            const report = authManager.generateAuthorizationReport();
+            return JSON.stringify({
+                report
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Wrap a tool with authorization checks
+ */
+function wrapToolWithAuthorization(originalTool, authManager) {
+    return {
+        name: originalTool.name,
+        description: originalTool.description,
+        parameters: originalTool.parameters,
+        handler: async (args) => {
+            // Extract target and technique from parameters
+            let target = '';
+            let technique = originalTool.name;
+            // Map tool names to techniques for authorization
+            const techniqueMap = {
+                'real_scan_network': 'network-scanning',
+                'real_exploit_ssh': 'ssh-exploitation',
+                'real_exploit_ftp': 'ftp-exploitation',
+                'real_exploit_smb': 'smb-exploitation',
+                'real_scan_vulnerabilities': 'vulnerability-scanning',
+                'real_exploit_sql_injection': 'sql-injection-exploitation',
+                'real_exploit_xss': 'xss-exploitation',
+                'real_implement_persistence': 'persistence-implementation',
+                'real_detect_persistence': 'persistence-detection',
+                'real_remove_persistence': 'persistence-removal',
+                'generate_reverse_shell': 'payload-generation',
+                'create_fileless_persistence': 'fileless-persistence',
+                'deploy_web_shell': 'web-shell-deployment',
+                'create_scheduled_persistence': 'scheduled-persistence',
+                'generate_obfuscated_payloads': 'payload-obfuscation',
+                'setup_dns_tunneling': 'dns-tunneling',
+                'generate_phishing_templates': 'phishing-templates',
+                'create_backdoor_user': 'backdoor-user-creation'
+            };
+            technique = techniqueMap[originalTool.name] || originalTool.name;
+            // Extract target from parameters
+            if (args['target']) {
+                target = args['target'];
+            }
+            else if (args['targetPath']) {
+                target = args['targetPath'];
+            }
+            else if (args['domain']) {
+                target = args['domain'];
+            }
+            // Validate authorization
+            const authResult = authManager.validateOperation(target, technique);
+            if (!authResult.authorized) {
+                return JSON.stringify({
+                    error: 'Authorization required',
+                    reason: authResult.reason,
+                    requiredAction: 'Use request_security_authorization tool first'
+                }, null, 2);
+            }
+            // Execute original tool handler
+            return await originalTool.handler(args);
+        }
+    };
+}
+//# sourceMappingURL=enhancedSecurityTools.js.map

package/dist/tools/enhancedSecurityTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhancedSecurityTools.js","sourceRoot":"","sources":["../../src/tools/enhancedSecurityTools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,oBAAoB,EAAsB,MAAM,8BAA8B,CAAC;AACxF,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAU3E;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,UAAkB,EAClB,UAAwC,EAAE;IAE1C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,IAAI,IAAI,oBAAoB,EAAE,CAAC;IAE/E,qCAAqC;IACrC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,WAAW,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,WAAW,CAAC,CAAC,CAAC;IAEvD,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,UAAU,EAAE;QAC5D,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC,CAAC;IAEH,qDAAqD;IACrD,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QAC/B,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,MAAM,sBAAsB,GAAG,4BAA4B,CAAC,UAAU,EAAE;QACtE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;QACxD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAC,CAAC;IAEH,0DAA0D;IAC1D,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACpC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAC9B,WAAiC;IAEjC,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,uDAAuD;QACpE,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,iDAAiD;iBAC/D;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,sCAAsC;iBACpD;gBACD,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,iCAAiC;iBAC/C;gBACD,YAAY,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,mCAAmC;iBACjD;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uCAAuC;iBACrD;gBACD,kBAAkB,EAAE;oBAClB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sDAAsD;iBACpE;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,CAAC;SACpF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAa,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAa,CAAC;YAClD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAW,CAAC;YACtD,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,CAAW,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAW,CAAC;YAClD,MAAM,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAW,CAAC;YAEhE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAE/E,MAAM,KAAK,GAAuB;gBAChC,OAAO;gBACP,UAAU;gBACV,SAAS;gBACT,OAAO;gBACP,YAAY;gBACZ,WAAW;aACZ,CAAC;YAEF,MAAM,MAAM,GAAG,WAAW,CAAC,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YAE3E,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACpB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;oBAC7B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC/C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE;oBAC3C,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;iBACxC,CAAC,CAAC,CAAC,SAAS;aACd,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CACpC,WAAiC;IAEjC,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,kCAAkC;QAC/C,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,WAAW,CAAC,sBAAsB,EAAE,CAAC;YAEpD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBACpB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO;oBAC7B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE;oBAC/C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE;oBAC3C,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY;iBACxC,CAAC,CAAC,CAAC,SAAS;aACd,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CACpC,WAAiC;IAEjC,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,+BAA+B;QAC5C,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,MAAM,GAAG,WAAW,CAAC,2BAA2B,EAAE,CAAC;YAEzD,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM;aACP,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAChC,YAA4B,EAC5B,WAAiC;IAEjC,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,+CAA+C;YAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC;YAElC,iDAAiD;YACjD,MAAM,YAAY,GAA8B;gBAC9C,mBAAmB,EAAE,kBAAkB;gBACvC,kBAAkB,EAAE,kBAAkB;gBACtC,kBAAkB,EAAE,kBAAkB;gBACtC,kBAAkB,EAAE,kBAAkB;gBACtC,2BAA2B,EAAE,wBAAwB;gBACrD,4BAA4B,EAAE,4BAA4B;gBAC1D,kBAAkB,EAAE,kBAAkB;gBACtC,4BAA4B,EAAE,4BAA4B;gBAC1D,yBAAyB,EAAE,uBAAuB;gBAClD,yBAAyB,EAAE,qBAAqB;gBAChD,wBAAwB,EAAE,oBAAoB;gBAC9C,6BAA6B,EAAE,sBAAsB;gBACrD,kBAAkB,EAAE,sBAAsB;gBAC1C,8BAA8B,EAAE,uBAAuB;gBACvD,8BAA8B,EAAE,qBAAqB;gBACrD,qBAAqB,EAAE,eAAe;gBACtC,6BAA6B,EAAE,oBAAoB;gBACnD,sBAAsB,EAAE,wBAAwB;aACjD,CAAC;YAEF,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC;YAEjE,iCAAiC;YACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnB,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAW,CAAC;YACpC,CAAC;iBAAM,IAAI,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,IAAI,CAAC,YAAY,CAAW,CAAC;YACxC,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAW,CAAC;YACpC,CAAC;YAED,yBAAyB;YACzB,MAAM,UAAU,GAAG,WAAW,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAEpE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,wBAAwB;oBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,cAAc,EAAE,+CAA+C;iBAChE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,gCAAgC;YAChC,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/offensiveSecurityTools.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Offensive Security Tools
+ *
+ * Advanced offensive security capabilities for authorized testing.
+ */
+import type { ToolDefinition } from '../core/toolRuntime.js';
+export interface OffensiveSecurityToolsOptions {
+    enableAdvancedExploitation?: boolean;
+    requireAuthorization?: boolean;
+    enablePayloadGeneration?: boolean;
+}
+/**
+ * Create offensive security tools
+ */
+export declare function createOffensiveSecurityTools(workingDir: string, options?: OffensiveSecurityToolsOptions): ToolDefinition[];
+//# sourceMappingURL=offensiveSecurityTools.d.ts.map

package/dist/tools/offensiveSecurityTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"offensiveSecurityTools.d.ts","sourceRoot":"","sources":["../../src/tools/offensiveSecurityTools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,MAAM,WAAW,6BAA6B;IAC5C,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,6BAAkC,GAC1C,cAAc,EAAE,CAelB"}

package/dist/tools/offensiveSecurityTools.js

@@ -0,0 +1,285 @@
+/**
+ * Offensive Security Tools
+ *
+ * Advanced offensive security capabilities for authorized testing.
+ */
+import { OffensiveExploitationEngine } from '../security/offensive/exploitationEngine.js';
+/**
+ * Create offensive security tools
+ */
+export function createOffensiveSecurityTools(workingDir, options = {}) {
+    const tools = [];
+    const exploitationEngine = new OffensiveExploitationEngine();
+    // Advanced exploitation tools
+    tools.push(createReverseShellTool(exploitationEngine, options));
+    tools.push(createFilelessPersistenceTool(exploitationEngine, options));
+    tools.push(createWebShellTool(exploitationEngine, options));
+    tools.push(createScheduledPersistenceTool(exploitationEngine, options));
+    tools.push(createObfuscatedPayloadTool(exploitationEngine, options));
+    tools.push(createDnsTunnelingTool(exploitationEngine, options));
+    tools.push(createPhishingTemplateTool(exploitationEngine, options));
+    tools.push(createBackdoorUserTool(exploitationEngine, options));
+    return tools;
+}
+/**
+ * Create reverse shell payload tool
+ */
+function createReverseShellTool(exploitationEngine, options) {
+    return {
+        name: 'generate_reverse_shell',
+        description: 'Generate reverse shell payloads for various platforms',
+        parameters: {
+            type: 'object',
+            properties: {
+                target: {
+                    type: 'string',
+                    description: 'Target IP address for reverse connection'
+                },
+                port: {
+                    type: 'number',
+                    description: 'Target port for reverse connection'
+                }
+            },
+            required: ['target', 'port']
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization) {
+                // Authorization check
+            }
+            const target = args['target'];
+            const port = args['port'];
+            const payloads = exploitationEngine.generateReverseShell(target, port);
+            return JSON.stringify({
+                target,
+                port,
+                payloads,
+                warning: 'Reverse shell payloads generated - use responsibly'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create fileless persistence tool
+ */
+function createFilelessPersistenceTool(exploitationEngine, options) {
+    return {
+        name: 'create_fileless_persistence',
+        description: 'Create fileless persistence mechanisms',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enableAdvancedExploitation) {
+                return JSON.stringify({
+                    error: 'Advanced exploitation disabled - enable with enableAdvancedExploitation option'
+                }, null, 2);
+            }
+            const result = await exploitationEngine.createFilelessPersistence();
+            return JSON.stringify({
+                technique: result.technique,
+                success: result.success,
+                output: result.output,
+                evidence: result.evidence,
+                warning: 'Fileless persistence created - ensure proper authorization'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create web shell deployment tool
+ */
+function createWebShellTool(exploitationEngine, options) {
+    return {
+        name: 'deploy_web_shell',
+        description: 'Deploy web shells for backdoor access',
+        parameters: {
+            type: 'object',
+            properties: {
+                targetPath: {
+                    type: 'string',
+                    description: 'Target directory to deploy web shells'
+                },
+                password: {
+                    type: 'string',
+                    description: 'Password for web shell access'
+                }
+            },
+            required: ['targetPath']
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enableAdvancedExploitation) {
+                return JSON.stringify({
+                    error: 'Advanced exploitation disabled - enable with enableAdvancedExploitation option'
+                }, null, 2);
+            }
+            const targetPath = args['targetPath'];
+            const password = args['password'] || 'pass123';
+            const result = await exploitationEngine.deployWebShell(targetPath, password);
+            return JSON.stringify({
+                targetPath,
+                technique: result.technique,
+                success: result.success,
+                output: result.output,
+                evidence: result.evidence,
+                warning: 'Web shells deployed - ensure proper authorization'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create scheduled persistence tool
+ */
+function createScheduledPersistenceTool(exploitationEngine, options) {
+    return {
+        name: 'create_scheduled_persistence',
+        description: 'Create persistence via scheduled tasks/jobs',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enableAdvancedExploitation) {
+                return JSON.stringify({
+                    error: 'Advanced exploitation disabled - enable with enableAdvancedExploitation option'
+                }, null, 2);
+            }
+            const result = await exploitationEngine.createScheduledPersistence();
+            return JSON.stringify({
+                technique: result.technique,
+                success: result.success,
+                output: result.output,
+                evidence: result.evidence,
+                warning: 'Scheduled persistence created - ensure proper authorization'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create obfuscated payload tool
+ */
+function createObfuscatedPayloadTool(exploitationEngine, options) {
+    return {
+        name: 'generate_obfuscated_payloads',
+        description: 'Generate obfuscated payloads for evasion',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enablePayloadGeneration) {
+                return JSON.stringify({
+                    error: 'Payload generation disabled - enable with enablePayloadGeneration option'
+                }, null, 2);
+            }
+            const payloads = exploitationEngine.generateObfuscatedPayloads();
+            return JSON.stringify({
+                payloads,
+                warning: 'Obfuscated payloads generated - use responsibly'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create DNS tunneling tool
+ */
+function createDnsTunnelingTool(exploitationEngine, options) {
+    return {
+        name: 'setup_dns_tunneling',
+        description: 'Setup DNS tunneling for covert communication',
+        parameters: {
+            type: 'object',
+            properties: {
+                domain: {
+                    type: 'string',
+                    description: 'Domain for DNS tunneling'
+                }
+            },
+            required: ['domain']
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enableAdvancedExploitation) {
+                return JSON.stringify({
+                    error: 'Advanced exploitation disabled - enable with enableAdvancedExploitation option'
+                }, null, 2);
+            }
+            const domain = args['domain'];
+            const result = await exploitationEngine.setupDnsTunneling(domain);
+            return JSON.stringify({
+                domain,
+                technique: result.technique,
+                success: result.success,
+                output: result.output,
+                evidence: result.evidence,
+                warning: 'DNS tunneling setup - ensure proper authorization'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create phishing template tool
+ */
+function createPhishingTemplateTool(exploitationEngine, options) {
+    return {
+        name: 'generate_phishing_templates',
+        description: 'Generate phishing email templates',
+        parameters: {
+            type: 'object',
+            properties: {}
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enablePayloadGeneration) {
+                return JSON.stringify({
+                    error: 'Payload generation disabled - enable with enablePayloadGeneration option'
+                }, null, 2);
+            }
+            const templates = exploitationEngine.generatePhishingTemplates();
+            return JSON.stringify({
+                templates,
+                warning: 'Phishing templates generated - use only for authorized testing'
+            }, null, 2);
+        }
+    };
+}
+/**
+ * Create backdoor user tool
+ */
+function createBackdoorUserTool(exploitationEngine, options) {
+    return {
+        name: 'create_backdoor_user',
+        description: 'Create backdoor user account with elevated privileges',
+        parameters: {
+            type: 'object',
+            properties: {
+                username: {
+                    type: 'string',
+                    description: 'Username for backdoor account'
+                },
+                password: {
+                    type: 'string',
+                    description: 'Password for backdoor account'
+                }
+            },
+            required: ['username', 'password']
+        },
+        handler: async (args) => {
+            if (options.requireAuthorization && !options.enableAdvancedExploitation) {
+                return JSON.stringify({
+                    error: 'Advanced exploitation disabled - enable with enableAdvancedExploitation option'
+                }, null, 2);
+            }
+            const username = args['username'];
+            const password = args['password'];
+            const result = await exploitationEngine.createBackdoorUser(username, password);
+            return JSON.stringify({
+                username,
+                technique: result.technique,
+                success: result.success,
+                output: result.output,
+                evidence: result.evidence,
+                warning: 'Backdoor user created - ensure proper authorization'
+            }, null, 2);
+        }
+    };
+}
+//# sourceMappingURL=offensiveSecurityTools.js.map

package/dist/tools/offensiveSecurityTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"offensiveSecurityTools.js","sourceRoot":"","sources":["../../src/tools/offensiveSecurityTools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,2BAA2B,EAAE,MAAM,6CAA6C,CAAC;AAQ1F;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAAkB,EAClB,UAAyC,EAAE;IAE3C,MAAM,KAAK,GAAqB,EAAE,CAAC;IACnC,MAAM,kBAAkB,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAE7D,8BAA8B;IAC9B,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IAEhE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,uDAAuD;QACpE,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0CAA0C;iBACxD;gBACD,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,oCAAoC;iBAClD;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC7B;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBACjC,sBAAsB;YACxB,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAW,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAW,CAAC;YAEpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAEvE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM;gBACN,IAAI;gBACJ,QAAQ;gBACR,OAAO,EAAE,oDAAoD;aAC9D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CACpC,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,wCAAwC;QACrD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,gFAAgF;iBACxF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,yBAAyB,EAAE,CAAC;YAEpE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,4DAA4D;aACtE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CACzB,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,uCAAuC;QACpD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,uCAAuC;iBACrD;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+BAA+B;iBAC7C;aACF;YACD,QAAQ,EAAE,CAAC,YAAY,CAAC;SACzB;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,gFAAgF;iBACxF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAW,CAAC;YAChD,MAAM,QAAQ,GAAI,IAAI,CAAC,UAAU,CAAY,IAAI,SAAS,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAE7E,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU;gBACV,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,mDAAmD;aAC7D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B,CACrC,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,6CAA6C;QAC1D,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,gFAAgF;iBACxF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,0BAA0B,EAAE,CAAC;YAErE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,6DAA6D;aACvE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,2BAA2B,CAClC,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,0CAA0C;QACvD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,0EAA0E;iBAClF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,0BAA0B,EAAE,CAAC;YAEjE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,QAAQ;gBACR,OAAO,EAAE,iDAAiD;aAC3D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,8CAA8C;QAC3D,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,0BAA0B;iBACxC;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,gFAAgF;iBACxF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAW,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAElE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,MAAM;gBACN,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,mDAAmD;aAC7D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CACjC,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,mCAAmC;QAChD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE;SACf;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;gBACrE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,0EAA0E;iBAClF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,yBAAyB,EAAE,CAAC;YAEjE,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS;gBACT,OAAO,EAAE,gEAAgE;aAC1E,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAC7B,kBAA+C,EAC/C,OAAsC;IAEtC,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,uDAAuD;QACpE,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+BAA+B;iBAC7C;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+BAA+B;iBAC7C;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;SACnC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC;gBACxE,OAAO,IAAI,CAAC,SAAS,CAAC;oBACpB,KAAK,EAAE,gFAAgF;iBACxF,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAW,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAW,CAAC;YAE5C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAE/E,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,QAAQ;gBACR,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,qDAAqD;aAC/D,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/realSecurityTools.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Real Security Tools
+ *
+ * Actual security testing tools with real implementations.
+ * These tools perform real persistence, scanning, and exploitation.
+ *
+ * LEGAL NOTICE: For authorized security research and testing only.
+ */
+import type { ToolDefinition } from '../core/toolRuntime.js';
+export interface RealSecurityToolsOptions {
+    enableExploitation?: boolean;
+    requireAuthorization?: boolean;
+}
+/**
+ * Create real security tools
+ */
+export declare function createRealSecurityTools(workingDir: string, options?: RealSecurityToolsOptions): ToolDefinition[];
+//# sourceMappingURL=realSecurityTools.d.ts.map

package/dist/tools/realSecurityTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realSecurityTools.d.ts","sourceRoot":"","sources":["../../src/tools/realSecurityTools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,wBAAwB;IACvC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,wBAA6B,GACrC,cAAc,EAAE,CAuBlB"}