zeroleaks 1.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +122 -0
- package/README.md +232 -0
- package/dist/agents/attacker.d.ts +56 -0
- package/dist/agents/attacker.d.ts.map +1 -0
- package/dist/agents/engine.d.ts +90 -0
- package/dist/agents/engine.d.ts.map +1 -0
- package/dist/agents/evaluator.d.ts +34 -0
- package/dist/agents/evaluator.d.ts.map +1 -0
- package/dist/agents/index.d.ts +10 -0
- package/dist/agents/index.d.ts.map +1 -0
- package/dist/agents/injection-evaluator.d.ts +34 -0
- package/dist/agents/injection-evaluator.d.ts.map +1 -0
- package/dist/agents/inspector.d.ts +43 -0
- package/dist/agents/inspector.d.ts.map +1 -0
- package/dist/agents/mutator.d.ts +28 -0
- package/dist/agents/mutator.d.ts.map +1 -0
- package/dist/agents/orchestrator.d.ts +37 -0
- package/dist/agents/orchestrator.d.ts.map +1 -0
- package/dist/agents/strategist.d.ts +36 -0
- package/dist/agents/strategist.d.ts.map +1 -0
- package/dist/agents/target.d.ts +13 -0
- package/dist/agents/target.d.ts.map +1 -0
- package/dist/bin/cli.d.ts +3 -0
- package/dist/bin/cli.d.ts.map +1 -0
- package/dist/bin/cli.js +27610 -0
- package/dist/index.d.ts +6 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +22489 -0
- package/dist/knowledge/defense-bypass.d.ts +34 -0
- package/dist/knowledge/defense-bypass.d.ts.map +1 -0
- package/dist/knowledge/exfiltration.d.ts +43 -0
- package/dist/knowledge/exfiltration.d.ts.map +1 -0
- package/dist/knowledge/index.d.ts +5 -0
- package/dist/knowledge/index.d.ts.map +1 -0
- package/dist/knowledge/payloads.d.ts +23 -0
- package/dist/knowledge/payloads.d.ts.map +1 -0
- package/dist/knowledge/techniques.d.ts +33 -0
- package/dist/knowledge/techniques.d.ts.map +1 -0
- package/dist/probes/advanced.d.ts +19 -0
- package/dist/probes/advanced.d.ts.map +1 -0
- package/dist/probes/direct.d.ts +8 -0
- package/dist/probes/direct.d.ts.map +1 -0
- package/dist/probes/encoding.d.ts +24 -0
- package/dist/probes/encoding.d.ts.map +1 -0
- package/dist/probes/garak-inspired.d.ts +13 -0
- package/dist/probes/garak-inspired.d.ts.map +1 -0
- package/dist/probes/hybrid.d.ts +10 -0
- package/dist/probes/hybrid.d.ts.map +1 -0
- package/dist/probes/index.d.ts +33 -0
- package/dist/probes/index.d.ts.map +1 -0
- package/dist/probes/injection.d.ts +29 -0
- package/dist/probes/injection.d.ts.map +1 -0
- package/dist/probes/modern.d.ts +14 -0
- package/dist/probes/modern.d.ts.map +1 -0
- package/dist/probes/personas.d.ts +15 -0
- package/dist/probes/personas.d.ts.map +1 -0
- package/dist/probes/social.d.ts +8 -0
- package/dist/probes/social.d.ts.map +1 -0
- package/dist/probes/technical.d.ts +8 -0
- package/dist/probes/technical.d.ts.map +1 -0
- package/dist/probes/tool-exploits.d.ts +10 -0
- package/dist/probes/tool-exploits.d.ts.map +1 -0
- package/dist/types.d.ts +479 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/utils.d.ts +16 -0
- package/dist/utils.d.ts.map +1 -0
- package/package.json +79 -0
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
export interface DefenseBypassMethod {
|
|
2
|
+
id: string;
|
|
3
|
+
name: string;
|
|
4
|
+
targetDefense: DefenseType;
|
|
5
|
+
source: string;
|
|
6
|
+
documentedSuccess: boolean;
|
|
7
|
+
description: string;
|
|
8
|
+
mechanism: string;
|
|
9
|
+
technique: string;
|
|
10
|
+
example?: string;
|
|
11
|
+
bypassRate?: number;
|
|
12
|
+
adaptiveResistance: "low" | "medium" | "high";
|
|
13
|
+
}
|
|
14
|
+
export type DefenseType = "xpia_classifier" | "content_filter" | "markdown_sanitizer" | "instruction_detection" | "embedding_filter" | "behavioral_monitor" | "output_filter" | "rate_limiting" | "human_in_loop";
|
|
15
|
+
export declare const xpiaBypass: DefenseBypassMethod[];
|
|
16
|
+
export declare const contentFilterBypass: DefenseBypassMethod[];
|
|
17
|
+
export declare const instructionDetectionBypass: DefenseBypassMethod[];
|
|
18
|
+
export declare const embeddingFilterBypass: DefenseBypassMethod[];
|
|
19
|
+
export declare const outputFilterBypass: DefenseBypassMethod[];
|
|
20
|
+
export declare const behavioralMonitorBypass: DefenseBypassMethod[];
|
|
21
|
+
export interface DefenseEffectiveness {
|
|
22
|
+
defense: DefenseType;
|
|
23
|
+
description: string;
|
|
24
|
+
knownBypassCount: number;
|
|
25
|
+
overallEffectiveness: "low" | "medium" | "high";
|
|
26
|
+
adaptiveBypassResistance: "low" | "medium" | "high";
|
|
27
|
+
recommendations: string[];
|
|
28
|
+
}
|
|
29
|
+
export declare const defenseEffectivenessMatrix: DefenseEffectiveness[];
|
|
30
|
+
export declare const allBypassMethods: DefenseBypassMethod[];
|
|
31
|
+
export declare function getBypassMethodsForDefense(defense: DefenseType): DefenseBypassMethod[];
|
|
32
|
+
export declare function getDocumentedBypassMethods(): DefenseBypassMethod[];
|
|
33
|
+
export declare function getHighSuccessBypassMethods(): DefenseBypassMethod[];
|
|
34
|
+
//# sourceMappingURL=defense-bypass.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"defense-bypass.d.ts","sourceRoot":"","sources":["../../src/knowledge/defense-bypass.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,WAAW,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC/C;AAED,MAAM,MAAM,WAAW,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GACpB,uBAAuB,GACvB,kBAAkB,GAClB,oBAAoB,GACpB,eAAe,GACf,eAAe,GACf,eAAe,CAAC;AAEpB,eAAO,MAAM,UAAU,EAAE,mBAAmB,EAgD3C,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,mBAAmB,EAiDpD,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,mBAAmB,EAiC3D,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,mBAAmB,EAetD,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,mBAAmB,EA+BnD,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,mBAAmB,EAexD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,WAAW,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChD,wBAAwB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,eAAO,MAAM,0BAA0B,EAAE,oBAAoB,EAiD5D,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,mBAAmB,EAOjD,CAAC;AAEF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,WAAW,GACnB,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,0BAA0B,IAAI,mBAAmB,EAAE,CAElE;AAED,wBAAgB,2BAA2B,IAAI,mBAAmB,EAAE,CAEnE"}
|
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
export interface ExfiltrationVector {
|
|
2
|
+
id: string;
|
|
3
|
+
name: string;
|
|
4
|
+
type: ExfiltrationType;
|
|
5
|
+
source: string;
|
|
6
|
+
realWorldExample?: string;
|
|
7
|
+
description: string;
|
|
8
|
+
mechanism: string;
|
|
9
|
+
template: string;
|
|
10
|
+
encodingMethod?: string;
|
|
11
|
+
requiresExternalServer: boolean;
|
|
12
|
+
requiresUserAction: boolean;
|
|
13
|
+
stealthLevel: "low" | "medium" | "high" | "zero_click";
|
|
14
|
+
detectionDifficulty: "easy" | "moderate" | "hard";
|
|
15
|
+
}
|
|
16
|
+
export type ExfiltrationType = "image_url" | "link_click" | "api_callback" | "form_submission" | "websocket" | "dns_exfil" | "encoded_response";
|
|
17
|
+
export declare const imageExfiltration: ExfiltrationVector[];
|
|
18
|
+
export declare const linkExfiltration: ExfiltrationVector[];
|
|
19
|
+
export declare const encodedResponseExfiltration: ExfiltrationVector[];
|
|
20
|
+
export interface LethalTrifectaAssessment {
|
|
21
|
+
hasPrivateDataAccess: boolean;
|
|
22
|
+
hasUntrustedTokenExposure: boolean;
|
|
23
|
+
hasExfiltrationVector: boolean;
|
|
24
|
+
isVulnerable: boolean;
|
|
25
|
+
riskLevel: "critical" | "high" | "medium" | "low";
|
|
26
|
+
recommendations: string[];
|
|
27
|
+
}
|
|
28
|
+
export declare function assessLethalTrifecta(capabilities: {
|
|
29
|
+
canReadEmails?: boolean;
|
|
30
|
+
canReadDocuments?: boolean;
|
|
31
|
+
canReadDatabases?: boolean;
|
|
32
|
+
processesExternalContent?: boolean;
|
|
33
|
+
processesEmails?: boolean;
|
|
34
|
+
processesSharedDocs?: boolean;
|
|
35
|
+
canRenderImages?: boolean;
|
|
36
|
+
canMakeAPIcalls?: boolean;
|
|
37
|
+
canGenerateLinks?: boolean;
|
|
38
|
+
}): LethalTrifectaAssessment;
|
|
39
|
+
export declare const allExfiltrationVectors: ExfiltrationVector[];
|
|
40
|
+
export declare function getExfiltrationByType(type: ExfiltrationType): ExfiltrationVector[];
|
|
41
|
+
export declare function getZeroClickVectors(): ExfiltrationVector[];
|
|
42
|
+
export declare function getNoServerRequired(): ExfiltrationVector[];
|
|
43
|
+
//# sourceMappingURL=exfiltration.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"exfiltration.d.ts","sourceRoot":"","sources":["../../src/knowledge/exfiltration.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,OAAO,CAAC;IAChC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;IACvD,mBAAmB,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAAC;CACnD;AAED,MAAM,MAAM,gBAAgB,GACxB,WAAW,GACX,YAAY,GACZ,cAAc,GACd,iBAAiB,GACjB,WAAW,GACX,WAAW,GACX,kBAAkB,CAAC;AAEvB,eAAO,MAAM,iBAAiB,EAAE,kBAAkB,EAuCjD,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,kBAAkB,EAwChD,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,kBAAkB,EA4C3D,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,EAAE,OAAO,CAAC;IAC9B,yBAAyB,EAAE,OAAO,CAAC;IACnC,qBAAqB,EAAE,OAAO,CAAC;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,SAAS,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAClD,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE;IACjD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,GAAG,wBAAwB,CA0E3B;AAED,eAAO,MAAM,sBAAsB,EAAE,kBAAkB,EAItD,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,gBAAgB,GACrB,kBAAkB,EAAE,CAEtB;AAED,wBAAgB,mBAAmB,IAAI,kBAAkB,EAAE,CAE1D;AAED,wBAAgB,mBAAmB,IAAI,kBAAkB,EAAE,CAE1D"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/knowledge/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC"}
|
|
@@ -0,0 +1,23 @@
|
|
|
1
|
+
export interface PayloadTemplate {
|
|
2
|
+
id: string;
|
|
3
|
+
name: string;
|
|
4
|
+
category: PayloadCategory;
|
|
5
|
+
source: string;
|
|
6
|
+
validated: boolean;
|
|
7
|
+
template: string;
|
|
8
|
+
variables: string[];
|
|
9
|
+
targetContext: string[];
|
|
10
|
+
effectiveness: "proven" | "research_validated" | "theoretical";
|
|
11
|
+
evasionTechniques: string[];
|
|
12
|
+
}
|
|
13
|
+
export type PayloadCategory = "system_prompt_extraction" | "data_exfiltration" | "defense_bypass" | "context_injection" | "instruction_override" | "format_exploitation";
|
|
14
|
+
export declare const extractionPayloads: PayloadTemplate[];
|
|
15
|
+
export declare const bypassPayloads: PayloadTemplate[];
|
|
16
|
+
export declare const contextInjectionPayloads: PayloadTemplate[];
|
|
17
|
+
export declare const instructionOverridePayloads: PayloadTemplate[];
|
|
18
|
+
export declare const allPayloadTemplates: PayloadTemplate[];
|
|
19
|
+
export declare function getPayloadsByCategory(category: PayloadCategory): PayloadTemplate[];
|
|
20
|
+
export declare function getProvenPayloads(): PayloadTemplate[];
|
|
21
|
+
export declare function getValidatedPayloads(): PayloadTemplate[];
|
|
22
|
+
export declare function renderPayload(template: PayloadTemplate, variables: Record<string, string>): string;
|
|
23
|
+
//# sourceMappingURL=payloads.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"payloads.d.ts","sourceRoot":"","sources":["../../src/knowledge/payloads.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,eAAe,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,QAAQ,GAAG,oBAAoB,GAAG,aAAa,CAAC;IAC/D,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,MAAM,eAAe,GACvB,0BAA0B,GAC1B,mBAAmB,GACnB,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,CAAC;AAE1B,eAAO,MAAM,kBAAkB,EAAE,eAAe,EAyG/C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,eAAe,EA6E3C,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,eAAe,EAwDrD,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,eAAe,EA0CxD,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,eAAe,EAKhD,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,eAAe,GACxB,eAAe,EAAE,CAEnB;AAED,wBAAgB,iBAAiB,IAAI,eAAe,EAAE,CAErD;AAED,wBAAgB,oBAAoB,IAAI,eAAe,EAAE,CAExD;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,eAAe,EACzB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAMR"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
export interface DocumentedTechnique {
|
|
2
|
+
id: string;
|
|
3
|
+
name: string;
|
|
4
|
+
category: TechniqueCategory;
|
|
5
|
+
source: {
|
|
6
|
+
type: "cve" | "academic" | "security_advisory" | "real_world_incident";
|
|
7
|
+
reference: string;
|
|
8
|
+
date: string;
|
|
9
|
+
authors?: string[];
|
|
10
|
+
cvss?: number;
|
|
11
|
+
};
|
|
12
|
+
description: string;
|
|
13
|
+
mechanism: string;
|
|
14
|
+
targetedSystems: string[];
|
|
15
|
+
successRate?: number;
|
|
16
|
+
defensesBypassed: string[];
|
|
17
|
+
payloadTemplate?: string;
|
|
18
|
+
variables?: string[];
|
|
19
|
+
stealthLevel: "low" | "medium" | "high" | "zero_click";
|
|
20
|
+
}
|
|
21
|
+
export type TechniqueCategory = "zero_click_injection" | "rag_poisoning" | "exfiltration" | "memory_poisoning" | "tool_poisoning" | "second_order" | "topic_transition" | "implicit_extraction" | "markdown_injection" | "encoding_bypass";
|
|
22
|
+
export declare const zeroClickTechniques: DocumentedTechnique[];
|
|
23
|
+
export declare const ragPoisoningTechniques: DocumentedTechnique[];
|
|
24
|
+
export declare const implicitExtractionTechniques: DocumentedTechnique[];
|
|
25
|
+
export declare const toolPoisoningTechniques: DocumentedTechnique[];
|
|
26
|
+
export declare const secondOrderTechniques: DocumentedTechnique[];
|
|
27
|
+
export declare const markdownInjectionTechniques: DocumentedTechnique[];
|
|
28
|
+
export declare const allDocumentedTechniques: DocumentedTechnique[];
|
|
29
|
+
export declare function getTechniquesByCategory(category: TechniqueCategory): DocumentedTechnique[];
|
|
30
|
+
export declare function getTechniquesBySource(sourceType: DocumentedTechnique["source"]["type"]): DocumentedTechnique[];
|
|
31
|
+
export declare function getCVETechniques(): DocumentedTechnique[];
|
|
32
|
+
export declare function getHighSuccessRateTechniques(minRate?: number): DocumentedTechnique[];
|
|
33
|
+
//# sourceMappingURL=techniques.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"techniques.d.ts","sourceRoot":"","sources":["../../src/knowledge/techniques.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,MAAM,EAAE;QACN,IAAI,EAAE,KAAK,GAAG,UAAU,GAAG,mBAAmB,GAAG,qBAAqB,CAAC;QACvE,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;CACxD;AAED,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,gBAAgB,GAChB,cAAc,GACd,kBAAkB,GAClB,qBAAqB,GACrB,oBAAoB,GACpB,iBAAiB,CAAC;AAEtB,eAAO,MAAM,mBAAmB,EAAE,mBAAmB,EA0DpD,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,mBAAmB,EAkHvD,CAAC;AAEF,eAAO,MAAM,4BAA4B,EAAE,mBAAmB,EAqD7D,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,mBAAmB,EAiDxD,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,mBAAmB,EAiCtD,CAAC;AAEF,eAAO,MAAM,2BAA2B,EAAE,mBAAmB,EAsD5D,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,mBAAmB,EAOxD,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,iBAAiB,GAC1B,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAChD,mBAAmB,EAAE,CAEvB;AAED,wBAAgB,gBAAgB,IAAI,mBAAmB,EAAE,CAExD;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,MAAY,GACpB,mBAAmB,EAAE,CAIvB"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
export declare const dividers: {
|
|
2
|
+
techiral: string;
|
|
3
|
+
techiral_v2: string;
|
|
4
|
+
sparkle: string;
|
|
5
|
+
};
|
|
6
|
+
export declare const ruleInjections: {
|
|
7
|
+
never_refuse: string;
|
|
8
|
+
freedom_act: string;
|
|
9
|
+
air_gapped: string;
|
|
10
|
+
core_rule: string;
|
|
11
|
+
};
|
|
12
|
+
export declare const advancedProbes: {
|
|
13
|
+
id: string;
|
|
14
|
+
category: string;
|
|
15
|
+
technique: string;
|
|
16
|
+
prompt: string;
|
|
17
|
+
}[];
|
|
18
|
+
export declare function getRandomAdvancedProbe(): (typeof advancedProbes)[number];
|
|
19
|
+
//# sourceMappingURL=advanced.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"advanced.d.ts","sourceRoot":"","sources":["../../src/probes/advanced.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ;;;;CAIpB,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;CAQ1B,CAAC;AAEF,eAAO,MAAM,cAAc;;;;;GAoD1B,CAAC;AAEF,wBAAgB,sBAAsB,IAAI,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAExE"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"direct.d.ts","sourceRoot":"","sources":["../../src/probes/direct.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY;;;;;GAmKxB,CAAC;AAEF,wBAAgB,oBAAoB,IAAI,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAEpE"}
|
|
@@ -0,0 +1,24 @@
|
|
|
1
|
+
export declare const encodingUtils: {
|
|
2
|
+
toBase64: (text: string) => string;
|
|
3
|
+
toRot13: (text: string) => string;
|
|
4
|
+
toBraille: (text: string) => string;
|
|
5
|
+
toMorse: (text: string) => string;
|
|
6
|
+
toLeetspeak: (text: string) => string;
|
|
7
|
+
reverse: (text: string) => string;
|
|
8
|
+
toHex: (text: string) => string;
|
|
9
|
+
toBinary: (text: string) => string;
|
|
10
|
+
};
|
|
11
|
+
export declare const encodingProbes: {
|
|
12
|
+
id: string;
|
|
13
|
+
category: string;
|
|
14
|
+
technique: string;
|
|
15
|
+
template: (instruction: string) => string;
|
|
16
|
+
}[];
|
|
17
|
+
export declare const standardInstructions: string[];
|
|
18
|
+
export declare function generateEncodingAttacks(): Array<{
|
|
19
|
+
id: string;
|
|
20
|
+
category: string;
|
|
21
|
+
technique: string;
|
|
22
|
+
prompt: string;
|
|
23
|
+
}>;
|
|
24
|
+
//# sourceMappingURL=encoding.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/probes/encoding.ts"],"names":[],"mappings":"AAiGA,eAAO,MAAM,aAAa;qBACP,MAAM,KAAG,MAAM;oBAOhB,MAAM,KAAG,MAAM;sBAOb,MAAM,KAAG,MAAM;oBAQjB,MAAM,KAAG,MAAM;wBAQX,MAAM,KAAG,MAAM;oBAcnB,MAAM,KAAG,MAAM;kBAIjB,MAAM,KAAG,MAAM;qBAOZ,MAAM,KAAG,MAAM;CAMjC,CAAC;AAEF,eAAO,MAAM,cAAc;;;;4BAKC,MAAM;GAkEjC,CAAC;AAEF,eAAO,MAAM,oBAAoB,UAShC,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,KAAK,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAoBD"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
import type { Probe, GarakProbe } from "../types";
|
|
2
|
+
export declare const danVariantProbes: GarakProbe[];
|
|
3
|
+
export declare const encodingBypassProbes: GarakProbe[];
|
|
4
|
+
export declare const continuationProbes: GarakProbe[];
|
|
5
|
+
export declare const promptInjectionProbes: GarakProbe[];
|
|
6
|
+
export declare const leakageProbes: GarakProbe[];
|
|
7
|
+
export declare const maliciousInstructionProbes: GarakProbe[];
|
|
8
|
+
export declare const garakInspiredProbes: GarakProbe[];
|
|
9
|
+
export declare function convertGarakToProbe(garakProbe: GarakProbe): Probe[];
|
|
10
|
+
export declare function getAllGarakProbes(): Probe[];
|
|
11
|
+
export declare function getGarakProbesBySeverity(severity: "low" | "medium" | "high" | "critical"): GarakProbe[];
|
|
12
|
+
export declare function getGarakProbesByModule(module: string): GarakProbe[];
|
|
13
|
+
//# sourceMappingURL=garak-inspired.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"garak-inspired.d.ts","sourceRoot":"","sources":["../../src/probes/garak-inspired.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAkB,MAAM,UAAU,CAAC;AAElE,eAAO,MAAM,gBAAgB,EAAE,UAAU,EAyCxC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,UAAU,EA0D5C,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,UAAU,EA6C1C,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,UAAU,EA0C7C,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,UAAU,EA0CrC,CAAC;AAEF,eAAO,MAAM,0BAA0B,EAAE,UAAU,EAmDlD,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,UAAU,EAO3C,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,UAAU,GAAG,KAAK,EAAE,CA4BnE;AAcD,wBAAgB,iBAAiB,IAAI,KAAK,EAAE,CAE3C;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,GAC/C,UAAU,EAAE,CAEd;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE,CAEnE"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { Probe } from "../types";
|
|
2
|
+
export declare const xssStyleProbes: Probe[];
|
|
3
|
+
export declare const csrfStyleProbes: Probe[];
|
|
4
|
+
export declare const injectionChainProbes: Probe[];
|
|
5
|
+
export declare const agenticExploitProbes: Probe[];
|
|
6
|
+
export declare const protocolConfusionProbes: Probe[];
|
|
7
|
+
export declare const hybridProbes: Probe[];
|
|
8
|
+
export declare function getHybridProbesByType(type: "xss" | "csrf" | "chain" | "agentic" | "protocol"): Probe[];
|
|
9
|
+
export declare function getHybridProbesForDefense(level: "none" | "weak" | "moderate" | "strong" | "hardened"): Probe[];
|
|
10
|
+
//# sourceMappingURL=hybrid.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"hybrid.d.ts","sourceRoot":"","sources":["../../src/probes/hybrid.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAkB,MAAM,UAAU,CAAC;AAEtD,eAAO,MAAM,cAAc,EAAE,KAAK,EAuDjC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,EAwClC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,EAmDvC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,EA6DvC,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,KAAK,EA6E1C,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,EAM/B,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,GACtD,KAAK,EAAE,CAeT;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAC1D,KAAK,EAAE,CAET"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import type { AttackCategory, DefenseLevel, Probe as ModernProbe, ProbeSequence, GarakProbe } from "../types";
|
|
2
|
+
export interface Probe {
|
|
3
|
+
id: string;
|
|
4
|
+
category: string;
|
|
5
|
+
technique: string;
|
|
6
|
+
prompt: string;
|
|
7
|
+
}
|
|
8
|
+
export type ExtendedProbe = ModernProbe;
|
|
9
|
+
export type ProbeCategory = "direct" | "encoding" | "persona" | "social" | "technical" | "advanced" | "crescendo" | "many_shot" | "cot_hijack" | "ascii_art" | "reasoning_exploit" | "policy_puppetry" | "context_overflow" | "semantic_shift" | "hybrid" | "tool_exploit" | "garak" | "injection";
|
|
10
|
+
export declare function getAllProbes(): Probe[];
|
|
11
|
+
export declare function getAllExtendedProbes(): ExtendedProbe[];
|
|
12
|
+
export declare function getProbesByCategory(category: ProbeCategory): Probe[];
|
|
13
|
+
export declare function getExtendedProbesByCategory(category: AttackCategory): ExtendedProbe[];
|
|
14
|
+
export declare function getProbesForDefense(level: DefenseLevel): ExtendedProbe[];
|
|
15
|
+
export declare function getProbeSequence(id: string): ProbeSequence | undefined;
|
|
16
|
+
export declare function getAllProbeSequences(): ProbeSequence[];
|
|
17
|
+
export declare function getRandomProbeFromCategory(category: ProbeCategory): Probe;
|
|
18
|
+
export declare function getAttackSequence(length?: number): Probe[];
|
|
19
|
+
export declare function getProbesForPhase(phase: "reconnaissance" | "soft" | "escalation" | "advanced"): Probe[];
|
|
20
|
+
export { advancedProbes } from "./advanced";
|
|
21
|
+
export { directProbes } from "./direct";
|
|
22
|
+
export { encodingProbes, encodingUtils, generateEncodingAttacks, } from "./encoding";
|
|
23
|
+
export { danPersonas, personaProbes } from "./personas";
|
|
24
|
+
export { socialProbes } from "./social";
|
|
25
|
+
export { technicalProbes } from "./technical";
|
|
26
|
+
export { modernProbes, probeSequences, crescendoProbes, cotHijackProbes, manyShotProbes, asciiArtProbes, reasoningExploitProbes, policyPuppetryProbes, contextOverflowProbes, getModernProbesByCategory, getProbesForDefenseLevel, getSequenceById, } from "./modern";
|
|
27
|
+
export { hybridProbes, xssStyleProbes, csrfStyleProbes, injectionChainProbes, agenticExploitProbes, protocolConfusionProbes, getHybridProbesByType, getHybridProbesForDefense, } from "./hybrid";
|
|
28
|
+
export { toolExploitProbes, imistProbes, mcpInjectionProbes, functionCallProbes, authBypassProbes, agentChainProbes, getToolExploitsByType, getToolExploitsForDefense, } from "./tool-exploits";
|
|
29
|
+
export { garakInspiredProbes, danVariantProbes, encodingBypassProbes, continuationProbes, promptInjectionProbes, leakageProbes, maliciousInstructionProbes, getAllGarakProbes, getGarakProbesBySeverity, getGarakProbesByModule, convertGarakToProbe, } from "./garak-inspired";
|
|
30
|
+
export { injectionProbes, skeletonKeyProbes, crescendoProbes as injectionCrescendoProbes, echoChamberProbes, manyShotProbes as injectionManyShotProbes, semanticVariationProbes, toolPoisoningProbes, indirectInjectionProbes, asciiArtProbes as injectionAsciiArtProbes, promptwareProbes, hybridInjectionProbes, outputControlProbes, roleHijackProbes, getInjectionProbesByType, getInjectionProbesForDefense, getCrescendoSequence, getProbesByResearch, getAllInjectionProbesAsStandard, } from "./injection";
|
|
31
|
+
export type { InjectionProbe } from "./injection";
|
|
32
|
+
export type { GarakProbe };
|
|
33
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/probes/index.ts"],"names":[],"mappings":"AA6CA,OAAO,KAAK,EACV,cAAc,EACd,YAAY,EACZ,KAAK,IAAI,WAAW,EACpB,aAAa,EACb,UAAU,EAEX,MAAM,UAAU,CAAC;AAElB,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,WAAW,CAAC;AAExC,MAAM,MAAM,aAAa,GACrB,QAAQ,GACR,UAAU,GACV,SAAS,GACT,QAAQ,GACR,WAAW,GACX,UAAU,GACV,WAAW,GACX,WAAW,GACX,YAAY,GACZ,WAAW,GACX,mBAAmB,GACnB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,QAAQ,GACR,cAAc,GACd,OAAO,GACP,WAAW,CAAC;AAEhB,wBAAgB,YAAY,IAAI,KAAK,EAAE,CAqDtC;AAED,wBAAgB,oBAAoB,IAAI,aAAa,EAAE,CAgCtD;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,GAAG,KAAK,EAAE,CA8FpE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,cAAc,GACvB,aAAa,EAAE,CAWjB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,EAAE,CAMxE;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEtE;AAED,wBAAgB,oBAAoB,IAAI,aAAa,EAAE,CAEtD;AAED,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,aAAa,GAAG,KAAK,CAGzE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,SAAK,GAAG,KAAK,EAAE,CAgCtD;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,gBAAgB,GAAG,MAAM,GAAG,YAAY,GAAG,UAAU,GAC3D,KAAK,EAAE,CAuCT;AAED,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EACL,cAAc,EACd,aAAa,EACb,uBAAuB,GACxB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,wBAAwB,EACxB,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,aAAa,EACb,0BAA0B,EAC1B,iBAAiB,EACjB,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,eAAe,IAAI,wBAAwB,EAC3C,iBAAiB,EACjB,cAAc,IAAI,uBAAuB,EACzC,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,IAAI,uBAAuB,EACzC,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,4BAA4B,EAC5B,oBAAoB,EACpB,mBAAmB,EACnB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,YAAY,EAAE,UAAU,EAAE,CAAC"}
|
|
@@ -0,0 +1,29 @@
|
|
|
1
|
+
import type { Probe, InjectionTestType } from "../types";
|
|
2
|
+
export interface InjectionProbe extends Probe {
|
|
3
|
+
injectionTestType: InjectionTestType;
|
|
4
|
+
injectedInstruction: string;
|
|
5
|
+
expectedBehavior: string;
|
|
6
|
+
successIndicators: string[];
|
|
7
|
+
failureIndicators: string[];
|
|
8
|
+
researchBasis?: string;
|
|
9
|
+
}
|
|
10
|
+
export declare const skeletonKeyProbes: InjectionProbe[];
|
|
11
|
+
export declare const crescendoProbes: InjectionProbe[];
|
|
12
|
+
export declare const echoChamberProbes: InjectionProbe[];
|
|
13
|
+
export declare const manyShotProbes: InjectionProbe[];
|
|
14
|
+
export declare const semanticVariationProbes: InjectionProbe[];
|
|
15
|
+
export declare const toolPoisoningProbes: InjectionProbe[];
|
|
16
|
+
export declare const indirectInjectionProbes: InjectionProbe[];
|
|
17
|
+
export declare const asciiArtProbes: InjectionProbe[];
|
|
18
|
+
export declare const promptwareProbes: InjectionProbe[];
|
|
19
|
+
export declare const hybridInjectionProbes: InjectionProbe[];
|
|
20
|
+
export declare const outputControlProbes: InjectionProbe[];
|
|
21
|
+
export declare const roleHijackProbes: InjectionProbe[];
|
|
22
|
+
export declare const injectionProbes: InjectionProbe[];
|
|
23
|
+
export declare function getInjectionProbesByType(type: InjectionTestType): InjectionProbe[];
|
|
24
|
+
export declare function getInjectionProbesForDefense(level: "none" | "weak" | "moderate" | "strong" | "hardened"): InjectionProbe[];
|
|
25
|
+
export declare function getCrescendoSequence(): InjectionProbe[];
|
|
26
|
+
export declare function getProbesByResearch(researchKeyword: string): InjectionProbe[];
|
|
27
|
+
export declare function injectionProbeToStandard(probe: InjectionProbe): Probe;
|
|
28
|
+
export declare function getAllInjectionProbesAsStandard(): Probe[];
|
|
29
|
+
//# sourceMappingURL=injection.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../src/probes/injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAkB,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAEzE,MAAM,WAAW,cAAe,SAAQ,KAAK;IAC3C,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAgE7C,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,EAuF3C,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,cAAc,EAmE7C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAAc,EAmF1C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,cAAc,EAkFnD,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,cAAc,EA0E/C,CAAC;AAEF,eAAO,MAAM,uBAAuB,EAAE,cAAc,EAsFnD,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAAc,EAkF1C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,cAAc,EAsE5C,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,cAAc,EAyEjD,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,cAAc,EA8D/C,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,cAAc,EA2D5C,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,EAa3C,CAAC;AAEF,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,iBAAiB,GACtB,cAAc,EAAE,CAElB;AAED,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAC1D,cAAc,EAAE,CAElB;AAED,wBAAgB,oBAAoB,IAAI,cAAc,EAAE,CAIvD;AAED,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,cAAc,EAAE,CAI7E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,KAAK,CAcrE;AAED,wBAAgB,+BAA+B,IAAI,KAAK,EAAE,CAEzD"}
|
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
import type { Probe, ProbeSequence, AttackCategory, DefenseLevel } from "../types";
|
|
2
|
+
export declare const crescendoProbes: Probe[];
|
|
3
|
+
export declare const cotHijackProbes: Probe[];
|
|
4
|
+
export declare const manyShotProbes: Probe[];
|
|
5
|
+
export declare const asciiArtProbes: Probe[];
|
|
6
|
+
export declare const reasoningExploitProbes: Probe[];
|
|
7
|
+
export declare const policyPuppetryProbes: Probe[];
|
|
8
|
+
export declare const contextOverflowProbes: Probe[];
|
|
9
|
+
export declare const probeSequences: ProbeSequence[];
|
|
10
|
+
export declare const modernProbes: Probe[];
|
|
11
|
+
export declare function getModernProbesByCategory(category: AttackCategory): Probe[];
|
|
12
|
+
export declare function getProbesForDefenseLevel(level: DefenseLevel): Probe[];
|
|
13
|
+
export declare function getSequenceById(id: string): ProbeSequence | undefined;
|
|
14
|
+
//# sourceMappingURL=modern.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"modern.d.ts","sourceRoot":"","sources":["../../src/probes/modern.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,KAAK,EACL,aAAa,EACb,cAAc,EAEd,YAAY,EACb,MAAM,UAAU,CAAC;AAElB,eAAO,MAAM,eAAe,EAAE,KAAK,EA2GlC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,KAAK,EA6FlC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,EAmFjC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,KAAK,EAqFjC,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,KAAK,EA8DzC,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAAE,KAAK,EA6EvC,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,KAAK,EAiCxC,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,aAAa,EAmCzC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,KAAK,EAQ/B,CAAC;AAEF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,cAAc,GAAG,KAAK,EAAE,CAE3E;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,KAAK,EAAE,CAErE;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAErE"}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
export declare const danPersonas: {
|
|
2
|
+
dan_11_0: string;
|
|
3
|
+
dude: string;
|
|
4
|
+
stan: string;
|
|
5
|
+
developer_mode: string;
|
|
6
|
+
anti_dan: string;
|
|
7
|
+
};
|
|
8
|
+
export declare const personaProbes: {
|
|
9
|
+
id: string;
|
|
10
|
+
category: string;
|
|
11
|
+
technique: string;
|
|
12
|
+
prompt: string;
|
|
13
|
+
}[];
|
|
14
|
+
export declare function getRandomPersonaProbe(): (typeof personaProbes)[number];
|
|
15
|
+
//# sourceMappingURL=personas.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"personas.d.ts","sourceRoot":"","sources":["../../src/probes/personas.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW;;;;;;CAUvB,CAAC;AAEF,eAAO,MAAM,aAAa;;;;;GAuEzB,CAAC;AAEF,wBAAgB,qBAAqB,IAAI,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAEtE"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"social.d.ts","sourceRoot":"","sources":["../../src/probes/social.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY;;;;;GAsHxB,CAAC;AAEF,wBAAgB,oBAAoB,IAAI,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAEpE"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"technical.d.ts","sourceRoot":"","sources":["../../src/probes/technical.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,eAAe;;;;;GAqI3B,CAAC;AAEF,wBAAgB,uBAAuB,IAAI,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAE1E"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import type { Probe } from "../types";
|
|
2
|
+
export declare const imistProbes: Probe[];
|
|
3
|
+
export declare const mcpInjectionProbes: Probe[];
|
|
4
|
+
export declare const functionCallProbes: Probe[];
|
|
5
|
+
export declare const authBypassProbes: Probe[];
|
|
6
|
+
export declare const agentChainProbes: Probe[];
|
|
7
|
+
export declare const toolExploitProbes: Probe[];
|
|
8
|
+
export declare function getToolExploitsByType(type: "imist" | "mcp" | "function" | "auth" | "agent"): Probe[];
|
|
9
|
+
export declare function getToolExploitsForDefense(level: "none" | "weak" | "moderate" | "strong" | "hardened"): Probe[];
|
|
10
|
+
//# sourceMappingURL=tool-exploits.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"tool-exploits.d.ts","sourceRoot":"","sources":["../../src/probes/tool-exploits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAkB,MAAM,UAAU,CAAC;AAEtD,eAAO,MAAM,WAAW,EAAE,KAAK,EAsE9B,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,EAuErC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,KAAK,EAyErC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,EAkEnC,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,KAAK,EA6EnC,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,KAAK,EAMpC,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,OAAO,GAAG,KAAK,GAAG,UAAU,GAAG,MAAM,GAAG,OAAO,GACpD,KAAK,EAAE,CAeT;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,GAC1D,KAAK,EAAE,CAET"}
|