erosolar-cli 1.7.327 → 1.7.328

package/dist/alpha-zero/security/core.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Core Security Research Framework
+ *
+ * Base authorization system and reconnaissance capabilities.
+ * All operations require explicit authorization.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+/**
+ * Scope of authorization for security testing
+ */
+export declare enum AuthorizationScope {
+    OWNED_SYSTEMS = "owned_systems",
+    BUG_BOUNTY = "bug_bounty",
+    PENTEST_ENGAGEMENT = "pentest_engagement",
+    CTF_COMPETITION = "ctf_competition",
+    RED_TEAM = "red_team",
+    EDUCATIONAL = "educational"
+}
+/**
+ * Authorization record for security testing
+ */
+export interface AuthorizationRecord {
+    scope: AuthorizationScope;
+    targetDomain: string;
+    authorizedBy: string;
+    authorizationDate: string;
+    expirationDate?: string;
+    scopeLimitations: string[];
+    outOfScope: string[];
+    notes: string;
+}
+/**
+ * Reconnaissance result
+ */
+export interface ReconResult {
+    target: string;
+    timestamp: number;
+    dnsRecords: Record<string, string[]>;
+    openPorts: number[];
+    sslInfo: Record<string, unknown>;
+    httpHeaders: Record<string, string>;
+    technologies: string[];
+    subdomains: string[];
+    potentialVectors: string[];
+}
+/**
+ * Vulnerability finding
+ */
+export interface VulnerabilityFinding {
+    title: string;
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
+    category: string;
+    description: string;
+    evidence: string;
+    remediation: string;
+    cvssScore?: number;
+    cweId?: string;
+    affectedComponent?: string;
+}
+/**
+ * Security research engine configuration
+ */
+export interface SecurityResearchConfig {
+    dataDir: string;
+    verbose: boolean;
+}
+/**
+ * Security Research Engine
+ *
+ * All operations require explicit authorization records.
+ */
+export declare class SecurityResearchEngine {
+    private config;
+    private authorization;
+    findings: VulnerabilityFinding[];
+    reconResults: ReconResult[];
+    constructor(config?: Partial<SecurityResearchConfig>);
+    /**
+     * Set authorization for testing
+     */
+    setAuthorization(authorization: AuthorizationRecord): void;
+    /**
+     * Check if authorization is valid
+     */
+    private checkAuthorization;
+    /**
+     * Perform passive reconnaissance
+     */
+    passiveRecon(target: string): Promise<ReconResult>;
+    /**
+     * Perform active reconnaissance (requires stronger authorization)
+     */
+    activeRecon(target: string, ports?: number[]): Promise<ReconResult>;
+    /**
+     * Scan ports
+     */
+    private scanPorts;
+    /**
+     * Identify potential attack vectors
+     */
+    private identifyVectors;
+    /**
+     * Analyze for vulnerabilities
+     */
+    analyzeForVulnerabilities(recon: ReconResult): VulnerabilityFinding[];
+    /**
+     * Generate report
+     */
+    generateReport(format?: 'text' | 'json'): string;
+}
+/**
+ * Create bug bounty authorization
+ */
+export declare function createBugBountyAuthorization(targetDomain: string, programName: string, scopeLimitations?: string[], outOfScope?: string[]): AuthorizationRecord;
+/**
+ * Create pentest authorization
+ */
+export declare function createPentestAuthorization(targetDomain: string, clientName: string, engagementId: string, expirationDate: string): AuthorizationRecord;
+/**
+ * Create CTF authorization
+ */
+export declare function createCtfAuthorization(targetDomain: string, ctfName: string): AuthorizationRecord;
+//# sourceMappingURL=core.d.ts.map

package/dist/alpha-zero/security/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/alpha-zero/security/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAOD;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,aAAa,CAAoC;IAClD,QAAQ,EAAE,oBAAoB,EAAE,CAAM;IACtC,YAAY,EAAE,WAAW,EAAE,CAAM;gBAE5B,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAIxD;;OAEG;IACH,gBAAgB,CAAC,aAAa,EAAE,mBAAmB,GAAG,IAAI;IAO1D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuB1B;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAwCxD;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,WAAW,CAAC;IA0BhG;;OAEG;YACW,SAAS;IAiCvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkBvB;;OAEG;IACH,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,EAAE;IAoBrE;;OAEG;IACH,cAAc,CAAC,MAAM,GAAE,MAAM,GAAG,MAAe,GAAG,MAAM;CA+BzD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,gBAAgB,GAAE,MAAM,EAAO,EAC/B,UAAU,GAAE,MAAM,EAAO,GACxB,mBAAmB,CAUrB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,mBAAmB,CAWrB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,mBAAmB,CAUrB"}

package/dist/alpha-zero/security/core.js

@@ -0,0 +1,271 @@
+/**
+ * Core Security Research Framework
+ *
+ * Base authorization system and reconnaissance capabilities.
+ * All operations require explicit authorization.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+import * as dns from 'dns/promises';
+import * as net from 'net';
+/**
+ * Scope of authorization for security testing
+ */
+export var AuthorizationScope;
+(function (AuthorizationScope) {
+    AuthorizationScope["OWNED_SYSTEMS"] = "owned_systems";
+    AuthorizationScope["BUG_BOUNTY"] = "bug_bounty";
+    AuthorizationScope["PENTEST_ENGAGEMENT"] = "pentest_engagement";
+    AuthorizationScope["CTF_COMPETITION"] = "ctf_competition";
+    AuthorizationScope["RED_TEAM"] = "red_team";
+    AuthorizationScope["EDUCATIONAL"] = "educational";
+})(AuthorizationScope || (AuthorizationScope = {}));
+const DEFAULT_CONFIG = {
+    dataDir: '.security_research',
+    verbose: false,
+};
+/**
+ * Security Research Engine
+ *
+ * All operations require explicit authorization records.
+ */
+export class SecurityResearchEngine {
+    config;
+    authorization = null;
+    findings = [];
+    reconResults = [];
+    constructor(config = {}) {
+        this.config = { ...DEFAULT_CONFIG, ...config };
+    }
+    /**
+     * Set authorization for testing
+     */
+    setAuthorization(authorization) {
+        this.authorization = authorization;
+        if (this.config.verbose) {
+            console.log(`[Authorization] Set for ${authorization.targetDomain}`);
+        }
+    }
+    /**
+     * Check if authorization is valid
+     */
+    checkAuthorization(target) {
+        if (!this.authorization) {
+            throw new Error('No authorization record set.');
+        }
+        // Check expiration
+        if (this.authorization.expirationDate) {
+            const exp = new Date(this.authorization.expirationDate);
+            if (new Date() > exp) {
+                throw new Error('Authorization has expired.');
+            }
+        }
+        // Check scope
+        const inScope = this.authorization.targetDomain.includes(target) ||
+            target.endsWith(this.authorization.targetDomain);
+        const outOfScope = this.authorization.outOfScope.some(oos => target.includes(oos));
+        if (!inScope || outOfScope) {
+            throw new Error(`Target ${target} is not within authorized scope.`);
+        }
+    }
+    /**
+     * Perform passive reconnaissance
+     */
+    async passiveRecon(target) {
+        this.checkAuthorization(target);
+        if (this.config.verbose) {
+            console.log(`[Recon] Starting passive recon on ${target}`);
+        }
+        const result = {
+            target,
+            timestamp: Date.now(),
+            dnsRecords: {},
+            openPorts: [],
+            sslInfo: {},
+            httpHeaders: {},
+            technologies: [],
+            subdomains: [],
+            potentialVectors: [],
+        };
+        // DNS lookup
+        try {
+            result.dnsRecords['A'] = await dns.resolve4(target);
+        }
+        catch { /* ignore */ }
+        try {
+            result.dnsRecords['MX'] = (await dns.resolveMx(target)).map(r => r.exchange);
+        }
+        catch { /* ignore */ }
+        try {
+            result.dnsRecords['TXT'] = await dns.resolveTxt(target).then(r => r.flat());
+        }
+        catch { /* ignore */ }
+        // Common subdomain patterns
+        const prefixes = ['www', 'mail', 'api', 'dev', 'staging', 'admin'];
+        result.subdomains = prefixes.map(p => `${p}.${target}`);
+        this.reconResults.push(result);
+        return result;
+    }
+    /**
+     * Perform active reconnaissance (requires stronger authorization)
+     */
+    async activeRecon(target, ports = [80, 443, 8080, 8443]) {
+        this.checkAuthorization(target);
+        // Active recon requires stronger authorization
+        const allowed = [
+            AuthorizationScope.OWNED_SYSTEMS,
+            AuthorizationScope.PENTEST_ENGAGEMENT,
+            AuthorizationScope.RED_TEAM,
+            AuthorizationScope.CTF_COMPETITION,
+        ];
+        if (!allowed.includes(this.authorization.scope)) {
+            throw new Error('Active recon requires stronger authorization.');
+        }
+        const result = await this.passiveRecon(target);
+        // Port scan
+        result.openPorts = await this.scanPorts(target, ports);
+        // Identify vectors
+        result.potentialVectors = this.identifyVectors(result);
+        return result;
+    }
+    /**
+     * Scan ports
+     */
+    async scanPorts(host, ports) {
+        const checkPort = (port) => {
+            return new Promise(resolve => {
+                const socket = new net.Socket();
+                socket.setTimeout(2000);
+                socket.on('connect', () => {
+                    socket.destroy();
+                    resolve(true);
+                });
+                socket.on('error', () => {
+                    socket.destroy();
+                    resolve(false);
+                });
+                socket.on('timeout', () => {
+                    socket.destroy();
+                    resolve(false);
+                });
+                socket.connect(port, host);
+            });
+        };
+        const results = await Promise.all(ports.map(async (port) => {
+            const isOpen = await checkPort(port);
+            return isOpen ? port : null;
+        }));
+        return results.filter((p) => p !== null);
+    }
+    /**
+     * Identify potential attack vectors
+     */
+    identifyVectors(recon) {
+        const vectors = [];
+        // Missing security headers (would need HTTP request to determine)
+        // Placeholder for now
+        vectors.push('Check for missing security headers');
+        // Open ports analysis
+        if (recon.openPorts.includes(21)) {
+            vectors.push('FTP port open - check for anonymous access');
+        }
+        if (recon.openPorts.includes(22)) {
+            vectors.push('SSH port open - check for weak credentials');
+        }
+        return vectors;
+    }
+    /**
+     * Analyze for vulnerabilities
+     */
+    analyzeForVulnerabilities(recon) {
+        this.checkAuthorization(recon.target);
+        const findings = [];
+        // Example: missing HSTS (would need actual HTTP response)
+        findings.push({
+            title: 'Missing HSTS Header (Verify Required)',
+            severity: 'medium',
+            category: 'config',
+            description: 'Verify HSTS header is present.',
+            evidence: 'Requires HTTP response analysis',
+            remediation: 'Add Strict-Transport-Security header',
+            cweId: 'CWE-319',
+        });
+        this.findings.push(...findings);
+        return findings;
+    }
+    /**
+     * Generate report
+     */
+    generateReport(format = 'text') {
+        if (format === 'json') {
+            return JSON.stringify({
+                generated: new Date().toISOString(),
+                authorization: this.authorization,
+                findings: this.findings,
+                reconResults: this.reconResults,
+            }, null, 2);
+        }
+        const lines = [
+            '='.repeat(60),
+            'SECURITY RESEARCH REPORT',
+            '='.repeat(60),
+            `Generated: ${new Date().toISOString()}`,
+        ];
+        if (this.authorization) {
+            lines.push(`Target: ${this.authorization.targetDomain}`);
+            lines.push(`Scope: ${this.authorization.scope}`);
+        }
+        if (this.findings.length > 0) {
+            lines.push('', `Findings: ${this.findings.length}`);
+            for (const f of this.findings) {
+                lines.push(`  [${f.severity.toUpperCase()}] ${f.title}`);
+            }
+        }
+        return lines.join('\n');
+    }
+}
+/**
+ * Create bug bounty authorization
+ */
+export function createBugBountyAuthorization(targetDomain, programName, scopeLimitations = [], outOfScope = []) {
+    return {
+        scope: AuthorizationScope.BUG_BOUNTY,
+        targetDomain,
+        authorizedBy: `Bug Bounty: ${programName}`,
+        authorizationDate: new Date().toISOString(),
+        scopeLimitations,
+        outOfScope,
+        notes: 'Testing authorized under bug bounty program terms',
+    };
+}
+/**
+ * Create pentest authorization
+ */
+export function createPentestAuthorization(targetDomain, clientName, engagementId, expirationDate) {
+    return {
+        scope: AuthorizationScope.PENTEST_ENGAGEMENT,
+        targetDomain,
+        authorizedBy: `Client: ${clientName} (${engagementId})`,
+        authorizationDate: new Date().toISOString(),
+        expirationDate,
+        scopeLimitations: [],
+        outOfScope: [],
+        notes: 'Testing authorized under penetration testing agreement',
+    };
+}
+/**
+ * Create CTF authorization
+ */
+export function createCtfAuthorization(targetDomain, ctfName) {
+    return {
+        scope: AuthorizationScope.CTF_COMPETITION,
+        targetDomain,
+        authorizedBy: `CTF: ${ctfName}`,
+        authorizationDate: new Date().toISOString(),
+        scopeLimitations: [],
+        outOfScope: [],
+        notes: 'CTF competition testing',
+    };
+}
+//# sourceMappingURL=core.js.map

package/dist/alpha-zero/security/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/alpha-zero/security/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B;;GAEG;AACH,MAAM,CAAN,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,qDAA+B,CAAA;IAC/B,+CAAyB,CAAA;IACzB,+DAAyC,CAAA;IACzC,yDAAmC,CAAA;IACnC,2CAAqB,CAAA;IACrB,iDAA2B,CAAA;AAC7B,CAAC,EAPW,kBAAkB,KAAlB,kBAAkB,QAO7B;AAsDD,MAAM,cAAc,GAA2B;IAC7C,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAyB;IAC/B,aAAa,GAA+B,IAAI,CAAC;IAClD,QAAQ,GAA2B,EAAE,CAAC;IACtC,YAAY,GAAkB,EAAE,CAAC;IAExC,YAAY,SAA0C,EAAE;QACtD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,aAAkC;QACjD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAc;QACvC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,IAAI,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,cAAc;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAgB;YAC1B,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,EAAE;SACrB,CAAC;QAEF,aAAa;QACb,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;QACvE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhC,+CAA+C;QAC/C,MAAM,OAAO,GAAG;YACd,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;YACrC,kBAAkB,CAAC,QAAQ;YAC3B,kBAAkB,CAAC,eAAe;SACnC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE/C,YAAY;QACZ,MAAM,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEvD,mBAAmB;QACnB,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAe;QACnD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAoB,EAAE;YACnD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAExB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9B,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAkB;QACxC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,kEAAkE;QAClE,sBAAsB;QACtB,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAEnD,sBAAsB;QACtB,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,yBAAyB,CAAC,KAAkB;QAC1C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,0DAA0D;QAC1D,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,uCAAuC;YAC9C,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,gCAAgC;YAC7C,QAAQ,EAAE,iCAAiC;YAC3C,WAAW,EAAE,sCAAsC;YACnD,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAA0B,MAAM;QAC7C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,0BAA0B;YAC1B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACzC,CAAC;QAEF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,WAAmB,EACnB,mBAA6B,EAAE,EAC/B,aAAuB,EAAE;IAEzB,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,UAAU;QACpC,YAAY;QACZ,YAAY,EAAE,eAAe,WAAW,EAAE;QAC1C,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,gBAAgB;QAChB,UAAU;QACV,KAAK,EAAE,mDAAmD;KAC3D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,UAAkB,EAClB,YAAoB,EACpB,cAAsB;IAEtB,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,kBAAkB;QAC5C,YAAY;QACZ,YAAY,EAAE,WAAW,UAAU,KAAK,YAAY,GAAG;QACvD,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,cAAc;QACd,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,wDAAwD;KAChE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,eAAe;QACzC,YAAY;QACZ,YAAY,EAAE,QAAQ,OAAO,EAAE;QAC/B,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,yBAAyB;KACjC,CAAC;AACJ,CAAC"}

package/dist/alpha-zero/security/google.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Google Infrastructure Persistence Vector Research
+ *
+ * OPTIONAL MODULE - Only loaded when Google security research is enabled.
+ *
+ * Provides research tools for identifying persistence mechanisms
+ * in Google Cloud Platform and Google Workspace environments.
+ *
+ * AUTHORIZATION: Designed for authorized red team engagements and
+ * penetration testing of Google infrastructure under contract.
+ *
+ * Principal Investigator: Bo Shang
+ * Framework: erosolar-cli
+ */
+import { AuthorizationRecord } from './core.js';
+/**
+ * Google services for persistence research
+ */
+export declare enum GoogleService {
+    GCP_COMPUTE = "gcp_compute_engine",
+    GCP_GKE = "gcp_kubernetes_engine",
+    GCP_CLOUD_FUNCTIONS = "gcp_cloud_functions",
+    GCP_IAM = "gcp_iam",
+    GCP_SERVICE_ACCOUNTS = "gcp_service_accounts",
+    GCP_CLOUD_STORAGE = "gcp_cloud_storage",
+    GCP_SECRETS_MANAGER = "gcp_secrets_manager",
+    WORKSPACE_GMAIL = "workspace_gmail",
+    WORKSPACE_DRIVE = "workspace_drive",
+    WORKSPACE_ADMIN = "workspace_admin",
+    WORKSPACE_APPS_SCRIPT = "workspace_apps_script",
+    GOOGLE_OAUTH = "google_oauth"
+}
+/**
+ * Categories of persistence mechanisms
+ */
+export declare enum PersistenceCategory {
+    SERVICE_ACCOUNT_ABUSE = "service_account_abuse",
+    IAM_POLICY_MODIFICATION = "iam_policy_modification",
+    OAUTH_APP_CONSENT = "oauth_app_consent",
+    API_KEYS = "api_keys",
+    CLOUD_FUNCTION_TRIGGER = "cloud_function_trigger",
+    APPS_SCRIPT_TRIGGER = "apps_script_trigger",
+    DELEGATION_ABUSE = "delegation_abuse"
+}
+/**
+ * Persistence vector definition
+ */
+export interface PersistenceVector {
+    name: string;
+    service: GoogleService;
+    category: PersistenceCategory;
+    description: string;
+    techniqueId: string;
+    requiredPermissions: string[];
+    detectionMethods: string[];
+    mitigations: string[];
+    stealthRating: number;
+}
+/**
+ * Persistence test result
+ */
+export interface PersistenceTestResult {
+    vector: PersistenceVector;
+    targetProject: string;
+    timestamp: number;
+    testable: boolean;
+    permissionsVerified: string[];
+    missingPermissions: string[];
+    detectionRisk: string;
+    notes: string;
+}
+/**
+ * GCP Persistence Vectors
+ */
+export declare const GCP_PERSISTENCE_VECTORS: Record<string, PersistenceVector>;
+/**
+ * Workspace Persistence Vectors
+ */
+export declare const WORKSPACE_PERSISTENCE_VECTORS: Record<string, PersistenceVector>;
+/**
+ * Google Persistence Researcher
+ */
+export declare class GooglePersistenceResearcher {
+    private authorization;
+    private verbose;
+    testResults: PersistenceTestResult[];
+    constructor(authorization: AuthorizationRecord, verbose?: boolean);
+    /**
+     * Check authorization
+     */
+    private checkAuthorization;
+    /**
+     * Get all Google persistence vectors
+     */
+    getAllVectors(): Record<string, PersistenceVector>;
+    /**
+     * Get vectors by service
+     */
+    getVectorsByService(service: GoogleService): PersistenceVector[];
+    /**
+     * Get vectors by category
+     */
+    getVectorsByCategory(category: PersistenceCategory): PersistenceVector[];
+    /**
+     * Get stealthy vectors
+     */
+    getStealthyVectors(minRating?: number): PersistenceVector[];
+    /**
+     * Analyze a persistence vector
+     */
+    analyzeVector(vectorId: string, targetProject: string): PersistenceTestResult;
+    /**
+     * Generate attack playbook
+     */
+    generateAttackPlaybook(targetProject: string, vectors?: PersistenceVector[]): Record<string, unknown>;
+    /**
+     * Generate detection report (blue team)
+     */
+    generateDetectionReport(): string;
+}
+/**
+ * Create Google authorization
+ */
+export declare function createGoogleAuthorization(engagementType: 'bug_bounty' | 'pentest' | 'red_team' | 'owned', authorizedBy: string, targetProject?: string, scopeNotes?: string): AuthorizationRecord;
+//# sourceMappingURL=google.d.ts.map

package/dist/alpha-zero/security/google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../src/alpha-zero/security/google.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AAEpE;;GAEG;AACH,oBAAY,aAAa;IAEvB,WAAW,uBAAuB;IAClC,OAAO,0BAA0B;IACjC,mBAAmB,wBAAwB;IAC3C,OAAO,YAAY;IACnB,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAG3C,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,qBAAqB,0BAA0B;IAG/C,YAAY,iBAAiB;CAC9B;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,iBAAiB,sBAAsB;IACvC,QAAQ,aAAa;IACrB,sBAAsB,2BAA2B;IACjD,mBAAmB,wBAAwB;IAC3C,gBAAgB,qBAAqB;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAkCrE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAkC3E,CAAC;AAEF;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,OAAO,CAAU;IAClB,WAAW,EAAE,qBAAqB,EAAE,CAAM;gBAErC,aAAa,EAAE,mBAAmB,EAAE,OAAO,UAAQ;IAK/D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIlD;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAKhE;;OAEG;IACH,oBAAoB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,iBAAiB,EAAE;IAKxE;;OAEG;IACH,kBAAkB,CAAC,SAAS,SAAI,GAAG,iBAAiB,EAAE;IAKtD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,qBAAqB;IAmC7E;;OAEG;IACH,sBAAsB,CACpB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,iBAAiB,EAAE,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA4B1B;;OAEG;IACH,uBAAuB,IAAI,MAAM;CAsDlC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,EAC/D,YAAY,EAAE,MAAM,EACpB,aAAa,SAAM,EACnB,UAAU,SAAK,GACd,mBAAmB,CAiBrB"}