fingerprint-mcp 0.1.0

package/dist/composite/scan-tls.js

@@ -0,0 +1,32 @@
+import { z } from "zod";
+import { callToolsParallel, buildCompositeResponse } from "./helpers.js";
+export const scanTlsTool = {
+    name: "scan_tls",
+    description: "Complete TLS/SSL analysis: handshake probe, JARM fingerprint, certificate deep inspection, JA4X generation fingerprint, cipher suite enumeration, SNI probing, certificate cross-referencing, and CT subdomain discovery. 8 techniques in a single call.",
+    schema: {
+        host: z
+            .string()
+            .describe("Target hostname"),
+        port: z
+            .number()
+            .optional()
+            .describe("TLS port (default: 443)"),
+    },
+    async execute(args, ctx) {
+        const host = args.host;
+        const port = args.port ?? 443;
+        const domain = host;
+        const results = await callToolsParallel([
+            { name: "tls_probe", args: { host, port } },
+            { name: "tls_jarm", args: { host, port } },
+            { name: "tls_cert", args: { host, port } },
+            { name: "tls_ja4x", args: { host, port } },
+            { name: "tls_ciphers", args: { host, port } },
+            { name: "tls_sni", args: { host, port } },
+            { name: "tls_cert_cross_ref", args: { host, port } },
+            { name: "tls_ct_subdomains", args: { domain } },
+        ], ctx);
+        return buildCompositeResponse("scan_tls", results);
+    },
+};
+//# sourceMappingURL=scan-tls.js.map

package/dist/composite/scan-tls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-tls.js","sourceRoot":"","sources":["../../src/composite/scan-tls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEzE,MAAM,CAAC,MAAM,WAAW,GAAY;IAClC,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,0PAA0P;IAC5P,MAAM,EAAE;QACN,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,CAAC,iBAAiB,CAAC;QAC9B,IAAI,EAAE,CAAC;aACJ,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,yBAAyB,CAAC;KACvC;IAED,KAAK,CAAC,OAAO,CACX,IAA6B,EAC7B,GAAgB;QAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;QACjC,MAAM,IAAI,GAAI,IAAI,CAAC,IAAe,IAAI,GAAG,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC;QAEpB,MAAM,OAAO,GAAG,MAAM,iBAAiB,CACrC;YACE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1C,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1C,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC7C,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACzC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YACpD,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE;SAChD,EACD,GAAG,CACJ,CAAC;QAEF,OAAO,sBAAsB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;CACF,CAAC"}

package/dist/composite/scan-waf.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDef } from "../types/index.js";
+export declare const scanWafTool: ToolDef;
+//# sourceMappingURL=scan-waf.d.ts.map

package/dist/composite/scan-waf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-waf.d.ts","sourceRoot":"","sources":["../../src/composite/scan-waf.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAA2B,MAAM,mBAAmB,CAAC;AAG1E,eAAO,MAAM,WAAW,EAAE,OA6CzB,CAAC"}

package/dist/composite/scan-waf.js

@@ -0,0 +1,35 @@
+import { z } from "zod";
+import { callTool, callToolsParallel, buildCompositeResponse, parseTarget } from "./helpers.js";
+export const scanWafTool = {
+    name: "scan_waf",
+    description: "WAF and CDN analysis: WAF identification via attack payload probing, CDN provider detection from headers/DNS, deep WAF technology fingerprinting from block pages, and origin IP discovery behind CDN. 4 techniques with conditional origin discovery.",
+    schema: {
+        url: z
+            .string()
+            .describe("Target URL for WAF/CDN analysis"),
+    },
+    async execute(args, ctx) {
+        const url = args.url;
+        // Phase 1: Run 3 WAF tools in parallel
+        const phase1Results = await callToolsParallel([
+            { name: "waf_detect", args: { url } },
+            { name: "waf_cdn_detect", args: { url } },
+            { name: "waf_fingerprint", args: { url } },
+        ], ctx);
+        const allResults = [...phase1Results];
+        // Phase 2: If CDN detected, attempt origin IP discovery
+        const cdnResult = phase1Results.find((r) => r.tool === "waf_cdn_detect");
+        if (cdnResult?.ok && cdnResult.data) {
+            const data = cdnResult.data;
+            // Check for truthy cdn or provider field indicating CDN is present
+            const cdnDetected = data.cdn || data.provider;
+            if (cdnDetected) {
+                const { domain } = parseTarget(url);
+                const originResult = await callTool("waf_origin", { domain }, ctx);
+                allResults.push(originResult);
+            }
+        }
+        return buildCompositeResponse("scan_waf", allResults);
+    },
+};
+//# sourceMappingURL=scan-waf.js.map

package/dist/composite/scan-waf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-waf.js","sourceRoot":"","sources":["../../src/composite/scan-waf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhG,MAAM,CAAC,MAAM,WAAW,GAAY;IAClC,IAAI,EAAE,UAAU;IAChB,WAAW,EACT,wPAAwP;IAC1P,MAAM,EAAE;QACN,GAAG,EAAE,CAAC;aACH,MAAM,EAAE;aACR,QAAQ,CAAC,iCAAiC,CAAC;KAC/C;IAED,KAAK,CAAC,OAAO,CACX,IAA6B,EAC7B,GAAgB;QAEhB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;QAE/B,uCAAuC;QACvC,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C;YACE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE;YACrC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE;YACzC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE;SAC3C,EACD,GAAG,CACJ,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;QAEtC,wDAAwD;QACxD,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;QACzE,IAAI,SAAS,EAAE,EAAE,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAA+B,CAAC;YAEvD,mEAAmE;YACnE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC;YAE9C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACpC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnE,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;CACF,CAAC"}

package/dist/correlation/index.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDef } from "../types/index.js";
+export declare const correlationTools: ToolDef[];
+//# sourceMappingURL=index.d.ts.map

package/dist/correlation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/correlation/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,mBAAmB,CAAC;AA4nC9D,eAAO,MAAM,gBAAgB,EAAE,OAAO,EAMrC,CAAC"}