opencode-api-security-testing 2.1.0 → 2.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (61) hide show
  1. package/SKILL.md +1797 -0
  2. package/core/advanced_recon.py +788 -0
  3. package/core/agentic_analyzer.py +445 -0
  4. package/core/analyzers/api_parser.py +210 -0
  5. package/core/analyzers/response_analyzer.py +212 -0
  6. package/core/analyzers/sensitive_finder.py +184 -0
  7. package/core/api_fuzzer.py +422 -0
  8. package/core/api_interceptor.py +525 -0
  9. package/core/api_parser.py +955 -0
  10. package/core/browser_tester.py +479 -0
  11. package/core/cloud_storage_tester.py +1330 -0
  12. package/core/collectors/__init__.py +23 -0
  13. package/core/collectors/api_path_finder.py +300 -0
  14. package/core/collectors/browser_collect.py +645 -0
  15. package/core/collectors/browser_collector.py +411 -0
  16. package/core/collectors/http_client.py +111 -0
  17. package/core/collectors/js_collector.py +490 -0
  18. package/core/collectors/js_parser.py +780 -0
  19. package/core/collectors/url_collector.py +319 -0
  20. package/core/context_manager.py +682 -0
  21. package/core/deep_api_tester_v35.py +844 -0
  22. package/core/deep_api_tester_v55.py +366 -0
  23. package/core/dynamic_api_analyzer.py +532 -0
  24. package/core/http_client.py +179 -0
  25. package/core/models.py +296 -0
  26. package/core/orchestrator.py +890 -0
  27. package/core/prerequisite.py +227 -0
  28. package/core/reasoning_engine.py +1042 -0
  29. package/core/response_classifier.py +606 -0
  30. package/core/runner.py +938 -0
  31. package/core/scan_engine.py +599 -0
  32. package/core/skill_executor.py +435 -0
  33. package/core/skill_executor_v2.py +670 -0
  34. package/core/skill_executor_v3.py +704 -0
  35. package/core/smart_analyzer.py +687 -0
  36. package/core/strategy_pool.py +707 -0
  37. package/core/testers/auth_tester.py +264 -0
  38. package/core/testers/idor_tester.py +200 -0
  39. package/core/testers/sqli_tester.py +211 -0
  40. package/core/testing_loop.py +655 -0
  41. package/core/utils/base_path_dict.py +255 -0
  42. package/core/utils/payload_lib.py +167 -0
  43. package/core/utils/ssrf_detector.py +220 -0
  44. package/core/verifiers/vuln_verifier.py +536 -0
  45. package/package.json +17 -13
  46. package/references/asset-discovery.md +119 -612
  47. package/references/graphql-guidance.md +65 -641
  48. package/references/intake.md +84 -0
  49. package/references/report-template.md +131 -38
  50. package/references/rest-guidance.md +55 -526
  51. package/references/severity-model.md +52 -264
  52. package/references/test-matrix.md +65 -263
  53. package/references/validation.md +53 -400
  54. package/scripts/postinstall.js +46 -0
  55. package/agents/cyber-supervisor.md +0 -55
  56. package/agents/probing-miner.md +0 -42
  57. package/agents/resource-specialist.md +0 -31
  58. package/commands/api-security-testing-scan.md +0 -59
  59. package/commands/api-security-testing-test.md +0 -49
  60. package/commands/api-security-testing.md +0 -72
  61. package/tsconfig.json +0 -17
package/commands/api-security-testing-scan.md DELETED
@@ -1,59 +0,0 @@
1
- ---
2
- description: API 安全测试 - 启动安全扫描任务
3
- ---
4
-
5
- <command-instruction>
6
- 启动 API 安全测试扫描任务。
7
-
8
- ## 使用方法
9
-
10
- ```
11
- /api-security-testing-scan <目标URL>
12
- ```
13
-
14
- ## 示例
15
-
16
- ```
17
- /api-security-testing-scan https://example.com/api
18
- ```
19
-
20
- ## 工作流程
21
-
22
- 1. **Phase 1**: 端点发现 - 采集所有 API 端点
23
- 2. **Phase 2**: 漏洞挖掘 - 针对每个端点测试漏洞
24
- 3. **Phase 3**: 报告生成 - 输出安全报告
25
-
26
- ## 可用 Agent
27
-
28
- | Agent | 说明 |
29
- |-------|------|
30
- | @cyber-supervisor | 赛博监工 - 监督整个测试流程 |
31
- | @probing-miner | 探测挖掘专家 - 漏洞挖掘 |
32
- | @resource-specialist | 资源探测专家 - 端点发现 |
33
-
34
- ## 漏洞类型
35
-
36
- - SQL 注入 (SQLi)
37
- - 用户枚举
38
- - JWT 安全
39
- - IDOR 越权
40
- - 敏感数据泄露
41
- - 业务逻辑漏洞
42
- - 安全配置错误
43
- - 暴力破解
44
- - GraphQL 安全
45
- - SSRF
46
-
47
- ## 报告格式
48
-
49
- 生成 Markdown 格式的安全报告，包含：
50
- - 测试目标信息
51
- - 发现的端点列表
52
- - 漏洞详情（严重程度、位置、验证步骤）
53
- - 利用链说明
54
- - 修复建议
55
-
56
- ## 注意
57
-
58
- 仅用于合法授权的安全测试，测试前确保有书面授权。
59
- </command-instruction>
package/commands/api-security-testing-test.md DELETED
@@ -1,49 +0,0 @@
1
- ---
2
- description: API 安全测试 - 快速测试特定端点
3
- ---
4
-
5
- <command-instruction>
6
- 对特定 API 端点进行快速安全测试。
7
-
8
- ## 使用方法
9
-
10
- ```
11
- /api-security-testing-test <端点URL> [测试类型]
12
- ```
13
-
14
- ## 示例
15
-
16
- ```
17
- /api-security-testing-test https://example.com/api/login sqli
18
- /api-security-testing-test https://example.com/api/user idor
19
- ```
20
-
21
- ## 测试类型
22
-
23
- | 类型 | 说明 |
24
- |------|------|
25
- | sqli | SQL 注入测试 |
26
- | idor | IDOR 越权测试 |
27
- | jwt | JWT 安全测试 |
28
- | auth | 认证漏洞测试 |
29
- | xss | XSS 测试 |
30
- | ssrf | SSRF 测试 |
31
- | all | 全部测试 |
32
-
33
- ## 输出格式
34
-
35
- ### 发现漏洞
36
-
37
- | 漏洞类型 | 端点 | 严重程度 | 验证状态 | PoC |
38
- |---------|------|---------|---------|-----|
39
- | SQL注入 | /api/user?id=1 | HIGH | 已验证 | payload... |
40
-
41
- ### 详细分析
42
-
43
- 对每个漏洞提供：
44
- 1. **描述**: 漏洞的详细说明
45
- 2. **位置**: 具体的端点和参数
46
- 3. **验证步骤**: 如何验证漏洞存在
47
- 4. **PoC**: 具体的测试payload
48
- 5. **修复建议**: 如何修复该漏洞
49
- </command-instruction>
package/commands/api-security-testing.md DELETED
@@ -1,72 +0,0 @@
1
- ---
2
- description: API 安全测试 - 主入口
3
- ---
4
-
5
- <command-instruction>
6
- API Security Testing - API 安全测试插件
7
-
8
- ## 简介
9
-
10
- 全自动 API 安全测试插件，支持漏洞扫描、渗透测试、API检测。
11
-
12
- ## 可用命令
13
-
14
- | 命令 | 说明 |
15
- |------|------|
16
- | `/api-security-testing-scan` | 完整扫描模式 |
17
- | `/api-security-testing-test` | 快速测试特定端点 |
18
-
19
- ## 可用 Agent
20
-
21
- | Agent | 说明 |
22
- |-------|------|
23
- | `@cyber-supervisor` | 赛博监工 - 永不停止的测试监督 |
24
- | `@probing-miner` | 探测挖掘专家 - 针对性漏洞挖掘 |
25
- | `@resource-specialist` | 资源探测专家 - 端点发现和采集 |
26
-
27
- ## 核心能力
28
-
29
- 1. **端点发现** - Playwright 动态采集 + JS 静态分析
30
- 2. **漏洞检测** - SQLi、XSS、IDOR、敏感数据、安全头部
31
- 3. **智能分析** - 自动判断技术栈，选择最佳测试策略
32
- 4. **压力升级** - 失败时自动切换测试方法 (L1-L4)
33
-
34
- ## 快速开始
35
-
36
- ### 1. 启动完整扫描
37
-
38
- ```
39
- delegate_task @cyber-supervisor
40
- ```
41
-
42
- ### 2. 发现端点
43
-
44
- ```
45
- delegate_task @resource-specialist
46
- ```
47
-
48
- ### 3. 挖掘漏洞
49
-
50
- ```
51
- delegate_task @probing-miner
52
- ```
53
-
54
- ## 漏洞测试参考
55
-
56
- 详细的漏洞测试指南位于 `references/vulnerabilities/` 目录：
57
-
58
- - 01-sqli-tests.md - SQL 注入测试
59
- - 02-user-enum-tests.md - 用户枚举测试
60
- - 03-jwt-tests.md - JWT 认证测试
61
- - 04-idor-tests.md - IDOR 越权测试
62
- - 05-sensitive-data-tests.md - 敏感数据泄露
63
- - 06-biz-logic-tests.md - 业务逻辑漏洞
64
- - 07-security-config-tests.md - 安全配置漏洞
65
- - 08-brute-force-tests.md - 暴力破解测试
66
- - 11-graphql-tests.md - GraphQL 安全测试
67
- - 12-ssrf-tests.md - SSRF 安全测试
68
-
69
- ## 注意
70
-
71
- **仅用于合法授权的安全测试，测试前确保有书面授权。**
72
- </command-instruction>
package/tsconfig.json DELETED
@@ -1,17 +0,0 @@
1
- {
2
- "compilerOptions": {
3
- "target": "ESNext",
4
- "module": "ESNext",
5
- "moduleResolution": "bundler",
6
- "strict": true,
7
- "esModuleInterop": true,
8
- "skipLibCheck": true,
9
- "forceConsistentCasingInFileNames": true,
10
- "outDir": "dist",
11
- "declaration": true,
12
- "declarationMap": true,
13
- "sourceMap": true
14
- },
15
- "include": ["src/**/*"],
16
- "exclude": ["node_modules", "dist"]
17
- }