omen-sec-cli 1.0.14 → 1.0.15

package/bin/index.js

@@ -15,7 +15,7 @@ async function main() {
   }
 
   if (args.flags.version) {
-    console.log('1.0.6');
+    console.log('1.0.14');
     return;
   }
 

package/core/ai-protocol.js

@@ -1,5 +1,26 @@
 export function getMassiveAIProtocol(scanData) {
-  return `
+  const summary = `
+================================================================================
+OMEN SEC-CLI: TARGET INTELLIGENCE SUMMARY
+================================================================================
+Target: ${scanData.target}
+Scan Date: ${new Date().toISOString()}
+Risk Level: ${scanData.riskLevel} (${scanData.score}/100)
+
+--- DETECTED SURFACE ---
+Endpoints Discovered: ${scanData.attack_surface.endpoints.length}
+Forms Found: ${scanData.attack_surface.forms.length}
+Tech Stack: ${(scanData.attack_surface.tech_stack || []).join(', ')}
+
+--- TOP VULNERABILITIES ---
+${scanData.vulnerabilities.slice(0, 5).map(v => `[${v.severity}] ${v.description} (Category: ${v.category})`).join('\n')}
+
+================================================================================
+FULL SCAN DATA ATTACHED BELOW
+================================================================================
+`;
+
+  return summary + `
 ================================================================================
 [OMEN_AI_PROTOCOL_V2_MAXIMUM_OVERRIDE]
 ================================================================================

package/core/local-scanner.js

@@ -188,6 +188,7 @@ export async function scanLocalProject() {
 
   return {
     localFilesScanned: filesScanned.length,
+    filesScanned,
     vulnerabilities
   };
 }

package/core/remote-scanner.js

@@ -41,7 +41,11 @@ export async function scanRemoteTarget(targetUrl) {
         severity: 'Medium',
         description: `HSTS Header is missing. This lacks forced HTTPS enforcement for browsers that have already visited the site.`,
         cwe: 'CWE-319',
-        evidence: { request: { headers: { ...response.request.headers } }, response: { headers: response.headers } }
+        evidence: { 
+          request: { headers: { ...response.request.headers } }, 
+          response: { status: response.status, headers: response.headers },
+          reason: 'Security header "Strict-Transport-Security" not found in server response.'
+        }
       });
     } else {
       headers_analysis["Strict-Transport-Security"] = headers['strict-transport-security'];
@@ -56,7 +60,11 @@ export async function scanRemoteTarget(targetUrl) {
         severity: 'High',
         description: `CSP header is missing. Without a strict Content-Security-Policy, the application is highly vulnerable to Cross-Site Scripting (XSS) and data injection attacks.`,
         cwe: 'CWE-1022',
-        evidence: { request: { headers: { ...response.request.headers } }, response: { headers: response.headers } }
+        evidence: { 
+          request: { headers: { ...response.request.headers } }, 
+          response: { status: response.status, headers: response.headers },
+          reason: 'Security header "Content-Security-Policy" not found in server response.'
+        }
       });
     } else {
       headers_analysis["Content-Security-Policy"] = headers['content-security-policy'];
@@ -83,7 +91,11 @@ export async function scanRemoteTarget(targetUrl) {
         severity: 'Low',
         description: `Missing X-Frame-Options. Increases risk of Clickjacking.`,
         cwe: 'CWE-1021',
-        evidence: { request: { headers: { ...response.request.headers } }, response: { headers: response.headers } }
+        evidence: { 
+          request: { headers: { ...response.request.headers } }, 
+          response: { status: response.status, headers: response.headers },
+          reason: 'Security header "X-Frame-Options" not found. This allows the site to be embedded in iframes on third-party domains.'
+        }
       });
     } else {
       headers_analysis["X-Frame-Options"] = headers['x-frame-options'];
@@ -326,9 +338,19 @@ async function validateFuzzerFinding(path, response, url) {
         category: 'Confirmed',
         confidence: 'High',
         severity: 'Critical',
-        description: `CRITICAL: Sensitive file exposed at ${url}. Contents may contain credentials, private keys, or configuration secrets.`,
-        cwe: 'CWE-538', // File and Directory Information Exposure
-        evidence
+        description: `CRITICAL: Sensitive file exposed at ${url}. Contents contain raw configuration data.`,
+        cwe: 'CWE-538',
+        evidence: { ...evidence, reason: 'Raw sensitive file content detected (Non-HTML response on sensitive path)' }
+      };
+    } else {
+      return {
+        id: `REM-POTENTIAL-FILE-${Date.now()}`,
+        category: 'Informational',
+        confidence: 'Low',
+        severity: 'Info',
+        description: `Potential sensitive path found at ${url}, but returned HTML content. Likely a redirect or custom error page.`,
+        cwe: 'CWE-200',
+        evidence: { ...evidence, reason: 'HTML response on sensitive file path' }
       };
     }
   }
@@ -366,8 +388,8 @@ async function validateFuzzerFinding(path, response, url) {
       category: 'Informational',
       confidence: 'Low',
       severity: 'Info',
-      description: `Path exists but is protected (403 Forbidden): ${url}. This confirms the path's existence.`,
-      cwe: 'CWE-406', // Insufficient Guarantees of Data Integrity
+      description: `Path exists but access is restricted (403 Forbidden): ${url}. This confirms the path's existence but does not prove exposure.`,
+      cwe: 'CWE-204', // Response Discrepancy (Path Enumeration)
       evidence
     };
   }

package/core/scanner.js

@@ -17,10 +17,10 @@ export async function runScannerSteps(target, flags) {
   let allVulnerabilities = [];
   let headers_analysis = {};
   let attack_surface = {
-    endpoints_discovered: 0,
-    parameters_extracted: 0,
-    forms_detected: 0,
-    api_routes: 0
+    endpoints: [],
+    parameters: [],
+    forms: [],
+    tech_stack: []
   };
 
   for (let i = 0; i < steps.length; i++) {
@@ -32,16 +32,16 @@ export async function runScannerSteps(target, flags) {
       const remoteData = await scanRemoteTarget(target);
       headers_analysis = remoteData.headers_analysis;
       allVulnerabilities.push(...remoteData.vulnerabilities);
-      attack_surface.endpoints_discovered = remoteData.discoveredLinks.length;
-      attack_surface.parameters_extracted = remoteData.discoveredParams.length;
-      attack_surface.forms_detected = remoteData.discoveredForms.length;
+      attack_surface.endpoints = remoteData.discoveredLinks;
+      attack_surface.parameters = remoteData.discoveredParams;
+      attack_surface.forms = remoteData.discoveredForms;
       attack_surface.tech_stack = remoteData.techStack;
     }
 
     if (step.text === 'Scanning endpoints...' && flags.local) {
       const localData = await scanLocalProject();
       allVulnerabilities.push(...localData.vulnerabilities);
-      attack_surface.endpoints_discovered += localData.localFilesScanned;
+      attack_surface.endpoints.push(...(localData.filesScanned || []));
     }
 
     await sleep(step.delay);

package/core/ui-server.js

@@ -97,9 +97,9 @@ export async function startUIServer() {
               <!-- Attack Surface Tab -->
               <div id="surface" class="tab-content hidden">
                   <div class="grid grid-cols-1 md:grid-cols-2 gap-4">
-                      <div class="card p-4 rounded-lg"> <h3 class="font-bold mb-2">Tech Stack</h3> <pre>${(report.attack_surface.tech_stack || []).join('\n')}</pre> </div>
-                      <div class="card p-4 rounded-lg"> <h3 class="font-bold mb-2">Forms</h3> <pre>${JSON.stringify(report.attack_surface.forms_detected, null, 2)}</pre> </div>
-                      <div class="card p-4 rounded-lg col-span-1 md:col-span-2"> <h3 class="font-bold mb-2">Discovered Links</h3> <pre class="max-h-96">${(report.attack_surface.endpoints_discovered || []).join('\n')}</pre> </div>
+                      <div class="card p-4 rounded-lg"> <h3 class="font-bold mb-2">Tech Stack</h3> <pre>${Array.isArray(report.attack_surface.tech_stack) ? report.attack_surface.tech_stack.join('\n') : (report.attack_surface.tech_stack || '')}</pre> </div>
+                      <div class="card p-4 rounded-lg"> <h3 class="font-bold mb-2">Forms</h3> <pre>${JSON.stringify(report.attack_surface.forms || report.attack_surface.forms_detected || [], null, 2)}</pre> </div>
+                      <div class="card p-4 rounded-lg col-span-1 md:col-span-2"> <h3 class="font-bold mb-2">Discovered Links</h3> <pre class="max-h-96">${Array.isArray(report.attack_surface.endpoints) ? report.attack_surface.endpoints.join('\n') : (report.attack_surface.endpoints || report.attack_surface.endpoints_discovered || '')}</pre> </div>
                   </div>
               </div>
 
@@ -111,6 +111,9 @@ export async function startUIServer() {
                   </div>
               </div>
 
+              <footer class="text-center text-gray-600 mt-12 border-t border-gray-800 pt-4">
+                  <p>OMEN Security Framework - v1.0.14</p>
+              </footer>
           </div>
           <script>
               function showTab(tabName) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omen-sec-cli",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "description": "OMEN — AI Security Engine",
   "main": "bin/index.js",
   "type": "module",

package/ui/banner.js

@@ -9,7 +9,7 @@ export function showBanner() {
  ╚██████╔╝██║ ╚═╝ ██║███████╗██║ ╚████║ 
  `));
   console.log(chalk.cyan.bold(' OMEN — AI Security Engine '));
-  console.log(chalk.gray(' Version: 1.0.6 \n'));
+  console.log(chalk.gray(' Version: 1.0.14 \n'));
 }
 
 export function showHelp() {