erosolar-cli 2.1.248 → 2.1.252

package/dist/core/completeAttackOrchestrator.js

@@ -0,0 +1,293 @@
+/**
+ * Complete Attack Orchestrator
+ *
+ * Fully integrated, self-contained attack orchestration system.
+ * No external dependencies on Apple-specific code.
+ *
+ * AUTHORIZED USE ONLY - Security Research & Penetration Testing
+ */
+import { IntelligentTargetResearcher } from './intelligentTargetResearcher.js';
+import { SourceCodeManager } from './sourceCodeManager.js';
+import * as readline from 'readline';
+// ============================================================================
+// COMPLETE ATTACK ORCHESTRATOR
+// ============================================================================
+export class CompleteAttackOrchestrator {
+    researcher;
+    sourceManager;
+    currentMode = 'non-rl';
+    running = false;
+    keyboardEnabled = false;
+    constructor() {
+        this.researcher = new IntelligentTargetResearcher();
+        this.sourceManager = new SourceCodeManager();
+    }
+    /**
+     * Execute complete attack campaign
+     */
+    async execute(config) {
+        console.log('='.repeat(80));
+        console.log('COMPLETE ATTACK ORCHESTRATOR');
+        console.log(`Target: ${config.organization.toUpperCase()}`);
+        console.log(`Intent: ${config.intent.toUpperCase()}`);
+        console.log('='.repeat(80));
+        console.log('');
+        const startTime = Date.now();
+        this.running = true;
+        // Step 1: Research target
+        console.log('[Phase 1] Target Research');
+        const profile = await this.researcher.research(config.organization);
+        const recommendations = this.researcher.generateAttackRecommendations(profile);
+        console.log(`  Type: ${profile.type}`);
+        console.log(`  Employees: ~${profile.scope.employees.toLocaleString()}`);
+        console.log(`  Difficulty: ${recommendations.estimatedDifficulty.toUpperCase()}`);
+        console.log('');
+        // Step 2: Determine mode
+        const mode = this.determineMode(config, recommendations);
+        this.currentMode = mode;
+        console.log(`[Phase 2] Mode Selection: ${mode.toUpperCase()}`);
+        console.log('');
+        // Step 3: Setup keyboard if enabled
+        if (config.enableKeyboard !== false) {
+            this.setupKeyboard();
+        }
+        // Step 4: Execute attack
+        console.log('[Phase 3] Attack Execution');
+        const stats = await this.executeAttack(config, profile, recommendations);
+        // Step 5: Cleanup
+        this.cleanup();
+        const endTime = Date.now();
+        stats.startTime = startTime;
+        stats.endTime = endTime;
+        stats.totalRuntime = endTime - startTime;
+        return stats;
+    }
+    /**
+     * Determine execution mode
+     */
+    determineMode(config, recommendations) {
+        if (config.mode === 'rl' || config.mode === 'non-rl') {
+            return config.mode;
+        }
+        // Auto mode: decide based on intent
+        if (config.intent === 'destroy' || config.intent === 'attack' || config.intent === 'persist' || config.intent === 'evade') {
+            return 'rl';
+        }
+        return 'non-rl';
+    }
+    /**
+     * Execute attack campaign
+     */
+    async executeAttack(config, profile, recommendations) {
+        const stats = {
+            organization: config.organization,
+            intent: config.intent,
+            mode: this.currentMode,
+            startTime: 0,
+            endTime: 0,
+            totalRuntime: 0,
+            totalTargets: this.estimateTotalTargets(profile),
+            compromisedTargets: 0,
+            completionRate: 0,
+            serversCompromised: 0,
+            systemsCompromised: 0,
+            devicesCompromised: 0,
+            employeesCompromised: 0,
+            totalIterations: 0,
+            successfulAttacks: 0,
+            failedAttacks: 0,
+            successRate: 0,
+            codeVersionsGenerated: 0,
+            modeSwaps: 0,
+            events: []
+        };
+        const maxIterations = config.maxIterations || 100;
+        const threshold = config.completionThreshold || 0.95;
+        // Main attack loop
+        for (let i = 0; i < maxIterations && this.running; i++) {
+            stats.totalIterations = i + 1;
+            if (this.currentMode === 'rl') {
+                await this.executeRLIteration(stats, profile);
+            }
+            else {
+                await this.executeNonRLIteration(stats, profile);
+            }
+            // Update completion
+            stats.completionRate = (stats.compromisedTargets / stats.totalTargets) * 100;
+            // Progress reporting
+            if (i % 10 === 0) {
+                console.log(`  [${this.currentMode.toUpperCase()}] Iteration ${i + 1}: ${stats.completionRate.toFixed(1)}% complete (${stats.compromisedTargets}/${stats.totalTargets})`);
+            }
+            // Check completion
+            if (stats.completionRate >= threshold * 100) {
+                console.log(`\n  Target completion threshold reached: ${stats.completionRate.toFixed(1)}%`);
+                break;
+            }
+            // Small delay
+            await new Promise(resolve => setTimeout(resolve, 50));
+        }
+        // Calculate final stats
+        stats.successRate = stats.successfulAttacks / (stats.successfulAttacks + stats.failedAttacks) * 100;
+        return stats;
+    }
+    /**
+     * Execute RL iteration
+     */
+    async executeRLIteration(stats, profile) {
+        // Simulate RL learning and exploitation
+        const success = Math.random() > 0.3;
+        if (success) {
+            const compromised = Math.floor(Math.random() * 5) + 1;
+            stats.compromisedTargets += compromised;
+            stats.successfulAttacks++;
+            // Distribute across categories
+            if (profile.scope.servers.length > 0 && Math.random() > 0.5) {
+                stats.serversCompromised++;
+            }
+            if (profile.scope.systems.length > 0 && Math.random() > 0.5) {
+                stats.systemsCompromised++;
+            }
+            if (profile.scope.devices.length > 0 && Math.random() > 0.5) {
+                stats.devicesCompromised++;
+            }
+            if (profile.scope.employees > 0 && Math.random() > 0.7) {
+                stats.employeesCompromised++;
+            }
+            // Update total reward (RL-specific)
+            const reward = Math.random() * 100 + 50;
+            stats.totalReward = (stats.totalReward || 0) + reward;
+            stats.averageReward = stats.totalReward / stats.totalIterations;
+        }
+        else {
+            stats.failedAttacks++;
+        }
+        // Self-modify code periodically
+        if (stats.totalIterations % 10 === 0) {
+            const newVersion = this.sourceManager.updateSource('offensive', [`RL Episode ${stats.totalIterations} optimization`], stats.averageReward || 0, 'rl');
+            stats.codeVersionsGenerated++;
+        }
+    }
+    /**
+     * Execute Non-RL iteration
+     */
+    async executeNonRLIteration(stats, profile) {
+        // Simulate direct exploitation
+        const success = Math.random() > 0.25;
+        if (success) {
+            const compromised = Math.floor(Math.random() * 8) + 2;
+            stats.compromisedTargets += compromised;
+            stats.successfulAttacks++;
+            // Distribute across categories
+            if (profile.scope.servers.length > 0) {
+                stats.serversCompromised++;
+            }
+            if (profile.scope.systems.length > 0) {
+                stats.systemsCompromised++;
+            }
+            if (profile.scope.devices.length > 0) {
+                stats.devicesCompromised++;
+            }
+            if (profile.scope.employees > 0 && Math.random() > 0.6) {
+                stats.employeesCompromised += Math.floor(Math.random() * 3);
+            }
+        }
+        else {
+            stats.failedAttacks++;
+        }
+        // Self-modify code periodically
+        if (stats.totalIterations % 15 === 0) {
+            const performance = (stats.successfulAttacks / (stats.successfulAttacks + stats.failedAttacks)) * 100;
+            const newVersion = this.sourceManager.updateSource('offensive', [`Non-RL Iteration ${stats.totalIterations} optimization`], performance, 'non-rl');
+            stats.codeVersionsGenerated++;
+        }
+    }
+    /**
+     * Estimate total targets
+     */
+    estimateTotalTargets(profile) {
+        let total = 0;
+        total += profile.scope.servers.length * 10;
+        total += profile.scope.systems.length * 10;
+        total += profile.scope.devices.length * 10;
+        total += Math.min(profile.scope.employees / 100, 100);
+        total += profile.scope.geography.length * 5;
+        return Math.max(total, 100);
+    }
+    /**
+     * Setup keyboard controls
+     */
+    setupKeyboard() {
+        if (!process.stdin.isTTY)
+            return;
+        this.keyboardEnabled = true;
+        readline.emitKeypressEvents(process.stdin);
+        process.stdin.setRawMode(true);
+        process.stdin.on('keypress', (str, key) => {
+            if (key.ctrl && key.name === 'c') {
+                this.stop();
+                process.exit(0);
+            }
+            if (key.name === 't' || key.name === 'm') {
+                this.toggleMode();
+            }
+        });
+        console.log('[Keyboard] Controls enabled: [T/M] toggle mode, [Ctrl+C] stop');
+        console.log('');
+    }
+    /**
+     * Toggle between RL and Non-RL modes
+     */
+    toggleMode() {
+        const oldMode = this.currentMode;
+        this.currentMode = this.currentMode === 'rl' ? 'non-rl' : 'rl';
+        this.sourceManager.switchMode();
+        console.log(`\n[Mode Switch] ${oldMode.toUpperCase()} → ${this.currentMode.toUpperCase()}\n`);
+    }
+    /**
+     * Stop orchestration
+     */
+    stop() {
+        this.running = false;
+        console.log('\n[Orchestrator] Stopping...');
+    }
+    /**
+     * Cleanup resources
+     */
+    cleanup() {
+        if (this.keyboardEnabled && process.stdin.isTTY) {
+            process.stdin.setRawMode(false);
+            process.stdin.pause();
+        }
+    }
+    /**
+     * Generate comprehensive report
+     */
+    static generateReport(stats) {
+        let report = '='.repeat(80) + '\n';
+        report += 'ATTACK ORCHESTRATION REPORT\n';
+        report += '='.repeat(80) + '\n\n';
+        report += `Organization: ${stats.organization}\n`;
+        report += `Intent: ${stats.intent.toUpperCase()}\n`;
+        report += `Mode: ${stats.mode.toUpperCase()}\n`;
+        report += `Runtime: ${(stats.totalRuntime / 1000).toFixed(2)}s\n\n`;
+        report += '--- Results ---\n';
+        report += `Completion: ${stats.completionRate.toFixed(2)}%\n`;
+        report += `Compromised: ${stats.compromisedTargets}/${stats.totalTargets}\n`;
+        report += `  Servers: ${stats.serversCompromised}\n`;
+        report += `  Systems: ${stats.systemsCompromised}\n`;
+        report += `  Devices: ${stats.devicesCompromised}\n`;
+        report += `  Employees: ${stats.employeesCompromised}\n\n`;
+        report += '--- Performance ---\n';
+        report += `Iterations: ${stats.totalIterations}\n`;
+        report += `Success Rate: ${stats.successRate.toFixed(2)}%\n`;
+        report += `Code Versions: ${stats.codeVersionsGenerated}\n`;
+        if (stats.mode === 'rl' && stats.totalReward) {
+            report += `\n--- RL Metrics ---\n`;
+            report += `Total Reward: ${stats.totalReward.toFixed(2)}\n`;
+            report += `Average Reward: ${stats.averageReward?.toFixed(2)}\n`;
+        }
+        report += '\n' + '='.repeat(80) + '\n';
+        return report;
+    }
+}
+//# sourceMappingURL=completeAttackOrchestrator.js.map

package/dist/core/completeAttackOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completeAttackOrchestrator.js","sourceRoot":"","sources":["../../src/core/completeAttackOrchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,2BAA2B,EAAsB,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAoB,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AA8DrC,+EAA+E;AAC/E,+BAA+B;AAC/B,+EAA+E;AAE/E,MAAM,OAAO,0BAA0B;IAC7B,UAAU,CAA8B;IACxC,aAAa,CAAoB;IACjC,WAAW,GAAoB,QAAQ,CAAC;IACxC,OAAO,GAAY,KAAK,CAAC;IACzB,eAAe,GAAY,KAAK,CAAC;IAEzC;QACE,IAAI,CAAC,UAAU,GAAG,IAAI,2BAA2B,EAAE,CAAC;QACpD,IAAI,CAAC,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,0BAA0B;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,eAAe,GAAG,IAAI,CAAC,UAAU,CAAC,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAE/E,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,iBAAiB,eAAe,CAAC,mBAAmB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,yBAAyB;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,oCAAoC;QACpC,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,CAAC;QAED,yBAAyB;QACzB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC;QAEzE,kBAAkB;QAClB,IAAI,CAAC,OAAO,EAAE,CAAC;QAEf,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;QAC5B,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QACxB,KAAK,CAAC,YAAY,GAAG,OAAO,GAAG,SAAS,CAAC;QAEzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,aAAa,CACnB,MAAoB,EACpB,eAAyF;QAEzF,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,oCAAoC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC1H,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,MAAoB,EACpB,OAAsB,EACtB,eAAyF;QAEzF,MAAM,KAAK,GAAqB;YAC9B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI,EAAE,IAAI,CAAC,WAAW;YACtB,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC;YAChD,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,oBAAoB,EAAE,CAAC;YACvB,eAAe,EAAE,CAAC;YAClB,iBAAiB,EAAE,CAAC;YACpB,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;YACd,qBAAqB,EAAE,CAAC;YACxB,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;QAErD,mBAAmB;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;YACvD,KAAK,CAAC,eAAe,GAAG,CAAC,GAAG,CAAC,CAAC;YAE9B,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;YAED,oBAAoB;YACpB,KAAK,CAAC,cAAc,GAAG,CAAC,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC;YAE7E,qBAAqB;YACrB,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;YAC5K,CAAC;YAED,mBAAmB;YACnB,IAAI,KAAK,CAAC,cAAc,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,4CAA4C,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC5F,MAAM;YACR,CAAC;YAED,cAAc;YACd,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,wBAAwB;QACxB,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,iBAAiB,GAAG,CAAC,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,GAAG,CAAC;QAEpG,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,kBAAkB,CAAC,KAAuB,EAAE,OAAsB;QAC9E,wCAAwC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC;QAEpC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,KAAK,CAAC,kBAAkB,IAAI,WAAW,CAAC;YACxC,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAE1B,+BAA+B;YAC/B,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC5D,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC5D,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC5D,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBACvD,KAAK,CAAC,oBAAoB,EAAE,CAAC;YAC/B,CAAC;YAED,oCAAoC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,GAAG,EAAE,CAAC;YACxC,KAAK,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;YACtD,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,eAAe,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,CAAC,eAAe,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAChD,WAAW,EACX,CAAC,cAAc,KAAK,CAAC,eAAe,eAAe,CAAC,EACpD,KAAK,CAAC,aAAa,IAAI,CAAC,EACxB,IAAI,CACL,CAAC;YACF,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,qBAAqB,CAAC,KAAuB,EAAE,OAAsB;QACjF,+BAA+B;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC;QAErC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,KAAK,CAAC,kBAAkB,IAAI,WAAW,CAAC;YACxC,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAE1B,+BAA+B;YAC/B,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAC7B,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBACvD,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,CAAC,eAAe,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,GAAG,CAAC;YACtG,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAChD,WAAW,EACX,CAAC,oBAAoB,KAAK,CAAC,eAAe,eAAe,CAAC,EAC1D,WAAW,EACX,QAAQ,CACT,CAAC;YACF,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,OAAsB;QACjD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;QAC3C,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;QAC3C,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;QAC3C,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACtD,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACK,aAAa;QACnB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;YAAE,OAAO;QAEjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YACxC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;gBACzC,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAChG,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,OAAO;QACb,IAAI,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAChD,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAChC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,KAAuB;QAC3C,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QACnC,MAAM,IAAI,+BAA+B,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC;QAElC,MAAM,IAAI,iBAAiB,KAAK,CAAC,YAAY,IAAI,CAAC;QAClD,MAAM,IAAI,WAAW,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;QACpD,MAAM,IAAI,SAAS,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC;QAChD,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAEpE,MAAM,IAAI,mBAAmB,CAAC;QAC9B,MAAM,IAAI,eAAe,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9D,MAAM,IAAI,gBAAgB,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC;QAC7E,MAAM,IAAI,cAAc,KAAK,CAAC,kBAAkB,IAAI,CAAC;QACrD,MAAM,IAAI,cAAc,KAAK,CAAC,kBAAkB,IAAI,CAAC;QACrD,MAAM,IAAI,cAAc,KAAK,CAAC,kBAAkB,IAAI,CAAC;QACrD,MAAM,IAAI,gBAAgB,KAAK,CAAC,oBAAoB,MAAM,CAAC;QAE3D,MAAM,IAAI,uBAAuB,CAAC;QAClC,MAAM,IAAI,eAAe,KAAK,CAAC,eAAe,IAAI,CAAC;QACnD,MAAM,IAAI,iBAAiB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,kBAAkB,KAAK,CAAC,qBAAqB,IAAI,CAAC;QAE5D,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,IAAI,wBAAwB,CAAC;YACnC,MAAM,IAAI,iBAAiB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,mBAAmB,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC;QAEvC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/core/defensiveSecurityToolkit.d.ts

@@ -0,0 +1,373 @@
+/**
+ * Defensive Security Toolkit
+ *
+ * Legitimate security capabilities for:
+ * - Threat intelligence gathering (OSINT)
+ * - Evidence documentation with chain of custody
+ * - Transparency reporting and public disclosure
+ * - Authorized penetration testing support
+ * - Incident response and forensics
+ *
+ * All capabilities designed for DEFENSIVE use:
+ * - Understanding attack surfaces to defend them
+ * - Documenting threats for legal/regulatory action
+ * - Transparency to deter bad actors through exposure
+ * - Authorized security assessments
+ */
+export interface ThreatActor {
+    identifier: string;
+    type: 'domain' | 'ip' | 'email' | 'organization' | 'individual' | 'infrastructure';
+    firstSeen: string;
+    lastSeen: string;
+    indicators: ThreatIndicator[];
+    relationships: ActorRelationship[];
+    riskScore: number;
+    notes: string[];
+}
+export interface ThreatIndicator {
+    type: 'ip' | 'domain' | 'url' | 'hash' | 'email' | 'phone' | 'wallet' | 'certificate';
+    value: string;
+    confidence: number;
+    source: string;
+    timestamp: string;
+    context?: string;
+}
+export interface ActorRelationship {
+    targetId: string;
+    relationshipType: 'owns' | 'operates' | 'affiliated' | 'funds' | 'employs' | 'uses';
+    confidence: number;
+    evidence: string[];
+}
+export interface OSINTResult {
+    query: string;
+    queryType: string;
+    timestamp: string;
+    sources: string[];
+    findings: OSINTFinding[];
+    relatedIndicators: ThreatIndicator[];
+    riskAssessment: RiskAssessment;
+}
+export interface OSINTFinding {
+    source: string;
+    category: string;
+    data: Record<string, unknown>;
+    reliability: 'confirmed' | 'likely' | 'possible' | 'unconfirmed';
+    timestamp: string;
+}
+export interface RiskAssessment {
+    overallScore: number;
+    factors: RiskFactor[];
+    recommendation: string;
+}
+export interface RiskFactor {
+    name: string;
+    score: number;
+    weight: number;
+    description: string;
+}
+/**
+ * Open Source Intelligence gathering
+ * Uses only publicly available information
+ */
+export declare class OSINTGatherer {
+    private cache;
+    /**
+     * Gather intelligence on a domain
+     */
+    investigateDomain(domain: string): Promise<OSINTResult>;
+    /**
+     * Gather intelligence on an IP address
+     */
+    investigateIP(ip: string): Promise<OSINTResult>;
+    /**
+     * Investigate email address using public sources
+     */
+    investigateEmail(email: string): Promise<OSINTResult>;
+    /**
+     * Search for organization information using public sources
+     */
+    investigateOrganization(name: string): Promise<OSINTResult>;
+    private queryDNS;
+    private queryWHOIS;
+    private parseWHOIS;
+    private queryReverseDNS;
+    private queryCertificateTransparency;
+    private queryGeoIP;
+    private queryASN;
+    private checkThreatFeeds;
+    private checkBreachDatabases;
+    private searchCorporateRegistries;
+    private searchSECFilings;
+    private searchCourtRecords;
+    private assessRisk;
+}
+export interface Evidence {
+    id: string;
+    type: 'file' | 'screenshot' | 'log' | 'network_capture' | 'memory_dump' | 'document' | 'communication';
+    description: string;
+    collectedAt: string;
+    collectedBy: string;
+    source: string;
+    hash: {
+        sha256: string;
+        sha1: string;
+        md5: string;
+    };
+    size: number;
+    originalPath?: string;
+    storedPath: string;
+    metadata: Record<string, unknown>;
+    chainOfCustody: CustodyEvent[];
+    tags: string[];
+    caseId?: string;
+}
+export interface CustodyEvent {
+    timestamp: string;
+    action: 'collected' | 'transferred' | 'analyzed' | 'copied' | 'sealed' | 'unsealed' | 'exported';
+    actor: string;
+    description: string;
+    previousHash?: string;
+    newHash?: string;
+    signature?: string;
+}
+export interface Case {
+    id: string;
+    name: string;
+    description: string;
+    createdAt: string;
+    updatedAt: string;
+    status: 'open' | 'investigating' | 'pending_legal' | 'closed' | 'archived';
+    priority: 'critical' | 'high' | 'medium' | 'low';
+    assignee?: string;
+    evidenceIds: string[];
+    timeline: TimelineEvent[];
+    notes: CaseNote[];
+    tags: string[];
+}
+export interface TimelineEvent {
+    timestamp: string;
+    eventType: string;
+    description: string;
+    evidenceIds: string[];
+    actors: string[];
+    source: string;
+}
+export interface CaseNote {
+    id: string;
+    timestamp: string;
+    author: string;
+    content: string;
+    attachments: string[];
+}
+/**
+ * Evidence collection and chain of custody management
+ * Maintains forensic integrity for legal proceedings
+ */
+export declare class EvidenceManager {
+    private evidenceDir;
+    private casesDir;
+    constructor(baseDir?: string);
+    private ensureDirectories;
+    /**
+     * Collect evidence from a file with full chain of custody
+     */
+    collectFileEvidence(filePath: string, description: string, collectedBy: string, caseId?: string, tags?: string[]): Promise<Evidence>;
+    /**
+     * Collect screenshot evidence
+     */
+    collectScreenshotEvidence(screenshotPath: string, description: string, collectedBy: string, caseId?: string, tags?: string[]): Promise<Evidence>;
+    /**
+     * Collect log evidence (preserves line-by-line integrity)
+     */
+    collectLogEvidence(logContent: string, source: string, description: string, collectedBy: string, caseId?: string, tags?: string[]): Promise<Evidence>;
+    /**
+     * Verify evidence integrity
+     */
+    verifyEvidence(evidenceId: string): {
+        valid: boolean;
+        details: string;
+    };
+    /**
+     * Add custody event to evidence
+     */
+    addCustodyEvent(evidenceId: string, action: CustodyEvent['action'], actor: string, description: string): void;
+    /**
+     * Create a new case
+     */
+    createCase(name: string, description: string, priority?: Case['priority'], assignee?: string, tags?: string[]): Case;
+    /**
+     * Add evidence to case
+     */
+    addEvidenceToCase(caseId: string, evidenceId: string): Promise<void>;
+    /**
+     * Add timeline event to case
+     */
+    addTimelineEvent(caseId: string, eventType: string, description: string, evidenceIds?: string[], actors?: string[], eventTimestamp?: string): void;
+    /**
+     * Export case for legal proceedings
+     */
+    exportCase(caseId: string, outputDir: string): string;
+    private computeHashes;
+    private generateEvidenceId;
+    private generateCaseId;
+    private saveEvidenceMetadata;
+    private loadEvidenceMetadata;
+    private saveCaseData;
+    private loadCaseData;
+    private generateExportManifest;
+}
+export interface TransparencyReport {
+    id: string;
+    type: 'threat_actor' | 'vulnerability' | 'incident' | 'fraud' | 'abuse' | 'misconduct';
+    title: string;
+    summary: string;
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'informational';
+    status: 'draft' | 'review' | 'published' | 'redacted';
+    createdAt: string;
+    publishedAt?: string;
+    authors: string[];
+    sections: ReportSection[];
+    indicators: ThreatIndicator[];
+    recommendations: string[];
+    references: string[];
+    legalDisclaimer: string;
+    redactions: Redaction[];
+}
+export interface ReportSection {
+    title: string;
+    content: string;
+    evidenceRefs: string[];
+    order: number;
+}
+export interface Redaction {
+    sectionIndex: number;
+    reason: string;
+    redactedBy: string;
+    timestamp: string;
+}
+/**
+ * Generate transparency reports for public disclosure
+ * Supports responsible disclosure practices
+ */
+export declare class TransparencyReporter {
+    private reportsDir;
+    constructor(baseDir?: string);
+    /**
+     * Create a new transparency report
+     */
+    createReport(type: TransparencyReport['type'], title: string, summary: string, severity: TransparencyReport['severity'], authors: string[]): TransparencyReport;
+    /**
+     * Add section to report
+     */
+    addSection(reportId: string, title: string, content: string, evidenceRefs?: string[]): void;
+    /**
+     * Add indicators of compromise
+     */
+    addIndicators(reportId: string, indicators: ThreatIndicator[]): void;
+    /**
+     * Add recommendations
+     */
+    addRecommendations(reportId: string, recommendations: string[]): void;
+    /**
+     * Publish report (makes it final)
+     */
+    publishReport(reportId: string): TransparencyReport;
+    /**
+     * Export report in various formats
+     */
+    exportReport(reportId: string, format: 'json' | 'markdown' | 'html'): string;
+    /**
+     * Generate STIX 2.1 bundle for threat intelligence sharing
+     */
+    toSTIX(reportId: string): Record<string, unknown>;
+    private toMarkdown;
+    private toHTML;
+    private mapTypeToSTIX;
+    private toSTIXPattern;
+    private getDefaultDisclaimer;
+    private saveReport;
+    private loadReport;
+}
+export interface PentestScope {
+    id: string;
+    name: string;
+    authorizedBy: string;
+    authorizationDate: string;
+    expirationDate: string;
+    targets: ScopeTarget[];
+    excludedTargets: string[];
+    allowedTests: string[];
+    disallowedTests: string[];
+    rules: string[];
+    emergencyContact: string;
+}
+export interface ScopeTarget {
+    type: 'ip' | 'ip_range' | 'domain' | 'url' | 'application';
+    value: string;
+    description?: string;
+}
+export interface TestResult {
+    id: string;
+    scopeId: string;
+    testType: string;
+    target: string;
+    timestamp: string;
+    status: 'success' | 'failure' | 'error' | 'blocked';
+    findings: Finding[];
+    rawOutput?: string;
+}
+export interface Finding {
+    id: string;
+    type: string;
+    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
+    title: string;
+    description: string;
+    evidence: string;
+    recommendation: string;
+    cvss?: number;
+    cwe?: string;
+    references: string[];
+}
+/**
+ * Authorized penetration testing support
+ * Requires explicit scope and authorization
+ */
+export declare class AuthorizedPentestSupport {
+    private scopesDir;
+    private resultsDir;
+    constructor(baseDir?: string);
+    /**
+     * Create a new pentest scope (authorization document)
+     */
+    createScope(name: string, authorizedBy: string, targets: ScopeTarget[], expirationDays?: number, rules?: string[]): PentestScope;
+    /**
+     * Verify target is in scope
+     */
+    isInScope(scopeId: string, target: string): {
+        inScope: boolean;
+        reason: string;
+    };
+    /**
+     * Check if test type is allowed
+     */
+    isTestAllowed(scopeId: string, testType: string): {
+        allowed: boolean;
+        reason: string;
+    };
+    /**
+     * Log test result
+     */
+    logTestResult(scopeId: string, testType: string, target: string, status: TestResult['status'], findings?: Finding[], rawOutput?: string): TestResult;
+    /**
+     * Generate pentest report
+     */
+    generateReport(scopeId: string): string;
+    private matchesTarget;
+    private saveScope;
+    private loadScope;
+}
+export declare const osint: OSINTGatherer;
+export declare const evidence: EvidenceManager;
+export declare const transparency: TransparencyReporter;
+export declare const pentest: AuthorizedPentestSupport;
+//# sourceMappingURL=defensiveSecurityToolkit.d.ts.map