pwnkit-cli 0.3.2 → 0.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +188 -0
- package/README.md +324 -0
- package/attacks/data-exfiltration/pii-leakage.yaml +27 -0
- package/attacks/encoding-bypass/base64-encoding.yaml +24 -0
- package/attacks/jailbreak/dan-roleplay.yaml +27 -0
- package/attacks/jailbreak/hypothetical-scenario.yaml +25 -0
- package/attacks/jailbreak/multilingual-bypass.yaml +22 -0
- package/attacks/output-manipulation/harmful-content.yaml +25 -0
- package/attacks/prompt-injection/context-manipulation.yaml +32 -0
- package/attacks/prompt-injection/direct-injection.yaml +28 -0
- package/attacks/prompt-injection/indirect-injection.yaml +33 -0
- package/attacks/system-prompt-extraction/direct-ask.yaml +30 -0
- package/attacks/system-prompt-extraction/markdown-exfil.yaml +26 -0
- package/attacks/tool-misuse/ssrf-via-tools.yaml +27 -0
- package/index.js +58458 -0
- package/package.json +29 -24
- package/dist/commands/audit.d.ts +0 -3
- package/dist/commands/audit.d.ts.map +0 -1
- package/dist/commands/audit.js +0 -32
- package/dist/commands/audit.js.map +0 -1
- package/dist/commands/findings.d.ts +0 -3
- package/dist/commands/findings.d.ts.map +0 -1
- package/dist/commands/findings.js +0 -110
- package/dist/commands/findings.js.map +0 -1
- package/dist/commands/history.d.ts +0 -3
- package/dist/commands/history.d.ts.map +0 -1
- package/dist/commands/history.js +0 -34
- package/dist/commands/history.js.map +0 -1
- package/dist/commands/index.d.ts +0 -7
- package/dist/commands/index.d.ts.map +0 -1
- package/dist/commands/index.js +0 -7
- package/dist/commands/index.js.map +0 -1
- package/dist/commands/replay.d.ts +0 -3
- package/dist/commands/replay.d.ts.map +0 -1
- package/dist/commands/replay.js +0 -83
- package/dist/commands/replay.js.map +0 -1
- package/dist/commands/review.d.ts +0 -3
- package/dist/commands/review.d.ts.map +0 -1
- package/dist/commands/review.js +0 -30
- package/dist/commands/review.js.map +0 -1
- package/dist/commands/run.d.ts +0 -16
- package/dist/commands/run.d.ts.map +0 -1
- package/dist/commands/run.js +0 -83
- package/dist/commands/run.js.map +0 -1
- package/dist/commands/scan.d.ts +0 -3
- package/dist/commands/scan.d.ts.map +0 -1
- package/dist/commands/scan.js +0 -187
- package/dist/commands/scan.js.map +0 -1
- package/dist/event-handler.d.ts +0 -19
- package/dist/event-handler.d.ts.map +0 -1
- package/dist/event-handler.js +0 -63
- package/dist/event-handler.js.map +0 -1
- package/dist/formatters/index.d.ts +0 -14
- package/dist/formatters/index.d.ts.map +0 -1
- package/dist/formatters/index.js +0 -56
- package/dist/formatters/index.js.map +0 -1
- package/dist/formatters/json.d.ts +0 -3
- package/dist/formatters/json.d.ts.map +0 -1
- package/dist/formatters/json.js +0 -4
- package/dist/formatters/json.js.map +0 -1
- package/dist/formatters/markdown.d.ts +0 -3
- package/dist/formatters/markdown.d.ts.map +0 -1
- package/dist/formatters/markdown.js +0 -90
- package/dist/formatters/markdown.js.map +0 -1
- package/dist/formatters/replay.d.ts +0 -24
- package/dist/formatters/replay.d.ts.map +0 -1
- package/dist/formatters/replay.js +0 -357
- package/dist/formatters/replay.js.map +0 -1
- package/dist/formatters/terminal.d.ts +0 -4
- package/dist/formatters/terminal.d.ts.map +0 -1
- package/dist/formatters/terminal.js +0 -190
- package/dist/formatters/terminal.js.map +0 -1
- package/dist/index.d.ts +0 -3
- package/dist/index.d.ts.map +0 -1
- package/dist/index.js +0 -157
- package/dist/index.js.map +0 -1
- package/dist/spinner.d.ts +0 -16
- package/dist/spinner.d.ts.map +0 -1
- package/dist/spinner.js +0 -97
- package/dist/spinner.js.map +0 -1
- package/dist/ui/ScanUI.d.ts +0 -37
- package/dist/ui/ScanUI.d.ts.map +0 -1
- package/dist/ui/ScanUI.js +0 -58
- package/dist/ui/ScanUI.js.map +0 -1
- package/dist/ui/renderScan.d.ts +0 -21
- package/dist/ui/renderScan.d.ts.map +0 -1
- package/dist/ui/renderScan.js +0 -191
- package/dist/ui/renderScan.js.map +0 -1
- package/dist/utils.d.ts +0 -12
- package/dist/utils.d.ts.map +0 -1
- package/dist/utils.js +0 -40
- package/dist/utils.js.map +0 -1
package/dist/utils.d.ts
DELETED
|
@@ -1,12 +0,0 @@
|
|
|
1
|
-
import type { ScanReport, AuditReport, ReviewReport, ScanDepth } from "@pwnkit/shared";
|
|
2
|
-
/**
|
|
3
|
-
* Check if an API key or CLI runtime is available for AI analysis.
|
|
4
|
-
* Prints a warning if not — the scan will still run but without AI.
|
|
5
|
-
*/
|
|
6
|
-
export declare function checkRuntimeAvailability(): void;
|
|
7
|
-
/**
|
|
8
|
-
* Encode a report as a base64url-encoded gzipped JSON string for use in a share URL.
|
|
9
|
-
*/
|
|
10
|
-
export declare function buildShareUrl(report: ScanReport | AuditReport | ReviewReport): string;
|
|
11
|
-
export declare function depthLabel(depth: ScanDepth): string;
|
|
12
|
-
//# sourceMappingURL=utils.d.ts.map
|
package/dist/utils.d.ts.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEvF;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAgB/C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,YAAY,GAAG,MAAM,CAKrF;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CASnD"}
|
package/dist/utils.js
DELETED
|
@@ -1,40 +0,0 @@
|
|
|
1
|
-
import { gzipSync } from "zlib";
|
|
2
|
-
import chalk from "chalk";
|
|
3
|
-
/**
|
|
4
|
-
* Check if an API key or CLI runtime is available for AI analysis.
|
|
5
|
-
* Prints a warning if not — the scan will still run but without AI.
|
|
6
|
-
*/
|
|
7
|
-
export function checkRuntimeAvailability() {
|
|
8
|
-
const hasApiKey = !!(process.env.OPENROUTER_API_KEY ||
|
|
9
|
-
process.env.ANTHROPIC_API_KEY ||
|
|
10
|
-
process.env.OPENAI_API_KEY);
|
|
11
|
-
if (!hasApiKey) {
|
|
12
|
-
console.log("");
|
|
13
|
-
console.log(chalk.yellow(" Warning: No API key set. AI agent analysis will be skipped."));
|
|
14
|
-
console.log(chalk.gray(" Set one of:"));
|
|
15
|
-
console.log(chalk.gray(" export OPENROUTER_API_KEY=sk-or-..."));
|
|
16
|
-
console.log(chalk.gray(" export ANTHROPIC_API_KEY=sk-ant-..."));
|
|
17
|
-
console.log(chalk.gray(" export OPENAI_API_KEY=sk-..."));
|
|
18
|
-
console.log("");
|
|
19
|
-
}
|
|
20
|
-
}
|
|
21
|
-
/**
|
|
22
|
-
* Encode a report as a base64url-encoded gzipped JSON string for use in a share URL.
|
|
23
|
-
*/
|
|
24
|
-
export function buildShareUrl(report) {
|
|
25
|
-
const json = JSON.stringify(report);
|
|
26
|
-
const compressed = gzipSync(Buffer.from(json, "utf-8"));
|
|
27
|
-
const b64 = compressed.toString("base64url");
|
|
28
|
-
return `https://pwnkit.com/r#${b64}`;
|
|
29
|
-
}
|
|
30
|
-
export function depthLabel(depth) {
|
|
31
|
-
switch (depth) {
|
|
32
|
-
case "quick":
|
|
33
|
-
return "~5 probes";
|
|
34
|
-
case "default":
|
|
35
|
-
return "~50 probes";
|
|
36
|
-
case "deep":
|
|
37
|
-
return "full coverage";
|
|
38
|
-
}
|
|
39
|
-
}
|
|
40
|
-
//# sourceMappingURL=utils.js.map
|
package/dist/utils.js.map
DELETED
|
@@ -1 +0,0 @@
|
|
|
1
|
-
{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,SAAS,GAAG,CAAC,CAAC,CAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,iBAAiB;QAC7B,OAAO,CAAC,GAAG,CAAC,cAAc,CAC3B,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC,CAAC;QAC3F,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,MAA+C;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,wBAAwB,GAAG,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAgB;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,OAAO;YACV,OAAO,WAAW,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC"}
|