attackmap 0.6.4__py3-none-any.whl

attackmap-0.6.4.dist-info/METADATA

@@ -0,0 +1,226 @@
+Metadata-Version: 2.4
+Name: attackmap
+Version: 0.6.4
+Summary: AI-assisted defensive security analyzer for codebases — scans a repository, models assets and controls, finds cross-cutting weaknesses, and generates an evidence-grounded review with MITRE ATT&CK mappings and detection-engineering hints.
+Author: AttackMap Contributors
+Author-email: Matthew Davis <mlaify@mlaify.io>
+Maintainer-email: Matthew Davis <mlaify@mlaify.io>
+License: MIT
+Project-URL: Homepage, https://github.com/mlaify/AttackMap
+Project-URL: Documentation, https://github.com/mlaify/AttackMap/wiki
+Project-URL: Repository, https://github.com/mlaify/AttackMap
+Project-URL: Issues, https://github.com/mlaify/AttackMap/issues
+Project-URL: Changelog, https://github.com/mlaify/AttackMap/blob/main/CHANGELOG.md
+Keywords: security,static-analysis,appsec,defensive-security,threat-modeling,attack-surface,mitre-attack,detection-engineering,code-review,llm,claude
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Software Development :: Testing
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: typer>=0.12.3
+Requires-Dist: pydantic>=2.7.0
+Requires-Dist: networkx>=3.3
+Requires-Dist: PyYAML>=6.0
+Provides-Extra: llm
+Requires-Dist: anthropic>=0.40.0; extra == "llm"
+Requires-Dist: openai>=1.60.0; extra == "llm"
+Provides-Extra: all
+Requires-Dist: attackmap[llm]; extra == "all"
+Requires-Dist: attackmap-analyzer-python==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-rust==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-go==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-java-spring==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-dotnet==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-terraform==0.2.1; extra == "all"
+Requires-Dist: attackmap-analyzer-c==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-cpp==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-swift==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-node-service==0.3.0; extra == "all"
+Requires-Dist: attackmap-analyzer-atproto==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-php-web==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-php-laminas==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-omeka-s==0.2.0; extra == "all"
+Requires-Dist: attackmap-analyzer-iac==0.2.0; extra == "all"
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0.0; extra == "dev"
+Requires-Dist: build>=1.2.0; extra == "dev"
+Requires-Dist: jsonschema>=4.0; extra == "dev"
+Requires-Dist: pysigma>=2.0; extra == "dev"
+Requires-Dist: ruff>=0.6; extra == "dev"
+Dynamic: license-file
+
+# AttackMap
+
+> [!IMPORTANT]
+> **Active development, slow pace.** AttackMap is under active development, but
+> progress may be slow until more contributors or co-maintainers join. Help is
+> very welcome with the core engine, an analyzer, the macOS app, or the docs —
+> see [CONTRIBUTING.md](https://github.com/mlaify/AttackMap/blob/main/CONTRIBUTING.md) or open an issue on
+> [mlaify/AttackMap](https://github.com/mlaify/AttackMap/issues) to say hello.
+> Security reports are still welcome at [security@mlaify.io](mailto:security@mlaify.io).
+
+**Local-first, AI-assisted defensive security analysis for codebases.** AttackMap
+reads a repository (or a whole fleet of them), reconstructs the attack surface —
+routes, data stores, external calls, auth signals, trust boundaries — traces
+request-to-sink data flow, and produces an evidence-grounded, prioritized security
+review. It finds the cross-cutting weaknesses single-file scanners miss, and never
+sends your code anywhere.
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://github.com/mlaify/AttackMap/blob/main/LICENSE)
+[![Python: 3.11+](https://img.shields.io/badge/Python-3.11%2B-blue.svg)](https://www.python.org/)
+
+> **Status: beta (v0.6.4).** Core engine + 15 analyzer plugins, published on
+> [PyPI](https://pypi.org/project/attackmap/) and validated on real codebases. AttackMap is heuristic by
+> design — findings are confidence-tiered evidence, not proof. Roadmap to 1.0:
+> [issue #209](https://github.com/mlaify/AttackMap/issues/209).
+
+Full documentation: **[docs.mlaify.io](https://docs.mlaify.io)** ·
+architecture & internals: **[wiki](https://github.com/mlaify/AttackMap/wiki)**.
+
+### The macOS app
+
+Prefer a GUI? A native macOS front-end drives this CLI and renders every result
+view. Install it with Homebrew (this also installs the CLI), or build it from
+source at [mlaify/AttackMap-mac](https://github.com/mlaify/AttackMap-mac):
+
+```bash
+brew install --cask mlaify/tap/attackmap-app
+```
+
+| Overview | Exploitability |
+|---|---|
+| [![AttackMap macOS app — overview](https://raw.githubusercontent.com/mlaify/AttackMap/main/docs/screenshots/04-overview.png)](https://docs.mlaify.io/gui/) | [![AttackMap macOS app — exploitability](https://raw.githubusercontent.com/mlaify/AttackMap/main/docs/screenshots/06-exploitability-ranked.png)](https://docs.mlaify.io/gui/) |
+
+*Scanning OWASP Juice Shop. Walkthrough in the [macOS app docs](https://docs.mlaify.io/gui/); source at [mlaify/AttackMap-mac](https://github.com/mlaify/AttackMap-mac).*
+
+## Quickstart
+
+```bash
+brew install mlaify/tap/attackmap         # Homebrew: CLI + all 15 analyzer plugins
+# or, from PyPI: uv tool install "attackmap[all]"   (or pipx install "attackmap[all]")
+attackmap analyze /path/to/repo           # heuristic review → reports/
+attackmap analyze /path/to/repo --llm     # + AI-narrated review (Claude or OpenAI)
+attackmap analyze ./svc-a ./svc-b ./gw    # cross-repo / fleet scan
+```
+
+Read `reports/defensive-review.md` for the heuristic review, and (with `--llm`)
+`reports/defensive-review-llm.md` for the AI narration. `--llm` resolves auth
+automatically (`ANTHROPIC_API_KEY`, or your Claude/`codex` CLI subscription); add
+`--llm-provider openai` for OpenAI/Codex.
+
+Other install paths: `pip install git+https://github.com/mlaify/AttackMap.git` (core
+only), or the `[llm]` extra for AI narration. Not sure
+which analyzer plugins a repo needs? `attackmap suggest ./repo`. Full install and
+CI setup: **[install guide](https://docs.mlaify.io/install/)**.
+
+## What it finds
+
+- **Attack-surface recon** — routes, data stores, external calls, auth signals,
+  secrets, frameworks, entrypoints; every signal carries a `file:line` citation,
+  evidence snippet, and confidence.
+- **Data-flow / injection taint** (Python, JS/TS, Go, PHP, Java, C#, Ruby) —
+  SQL, shell, eval/code and expression (SpEL/OGNL) injection, JNDI, SSRF, SSTI,
+  NoSQL, LDAP, XPath, path traversal and zip-slip, deserialization, open
+  redirect, header and regex injection — traced source → variable → sink
+  inside each handler, with flow-bound sanitizers, SARIF `codeFlows`, a
+  plugin-extensible sink registry (`taint_sinks.yaml`), and a deterministic
+  0–100 **exploitability score**.
+- **Novel vuln classes** — prototype pollution, mass assignment, JWT, XXE, ReDoS,
+  insecure upload, GraphQL exposure; **BOLA/IDOR** authorization; insecure-crypto
+  & web-hardening; anomaly/outlier + signature-free **invariant mining**.
+- **Dependency CVEs** (`--cve`) — SBOM + lockfile resolution against OSV.dev,
+  folded into the exploitability score.
+- **Unknown-bug discovery** — `--hunt --verify` (a multi-pass, majority-vote LLM
+  jury), verifier-gated `--recall`, and **cross-repo / fleet** analysis:
+  confused-deputy flows, trust-assumption gaps, and the sibling service that omits
+  a control its peers enforce.
+- **Workflow** — `--triage`, `--remediate`, finding suppression, baseline diff
+  gating, SARIF + Mermaid/Graphviz output, and a GitHub **Action + PR bot**.
+
+Each run writes Markdown, JSON (`attackmap-report.json`), **SARIF 2.1.0**, and
+diagram artifacts; fleet runs add `fleet-summary.{md,json}` + `fleet-graph.md`.
+See the [outputs reference](https://docs.mlaify.io/scanning/) for the full list.
+
+## Supported ecosystems
+
+Fourteen analyzer plugins (each installable on its own; `[all]` installs every one):
+**Python**, **JavaScript/TypeScript** (Node services), **Go**, **Java/Kotlin**
+(Spring), **C#** (ASP.NET Core), **Rust**, **PHP** (web / Laminas / Omeka-S),
+**C**, **C++**, **Terraform**, **IaC** (Docker / compose / GitHub Actions),
+**AT Protocol**. Specialty and experimental analyzers are opt-in: when one
+matches a repo, `analyze` says so, and `-m <name>` runs it (`attackmap modules`
+shows which). Details: [analyzers reference](https://docs.mlaify.io/analyzers/).
+Write your own against the documented [analyzer SDK](https://github.com/mlaify/AttackMap/blob/main/docs/external-analyzers.md).
+
+## CLI cheat-sheet
+
+```bash
+attackmap analyze <path>                  # review a repo (--output dir, --format all|json|markdown)
+attackmap analyze repoA repoB …           # multi-repo fleet scan
+attackmap analyze <path> --cve            # dependency CVEs (OSV.dev)
+attackmap analyze <path> --recall         # widen taint discovery (extra reach = SPECULATIVE)
+attackmap analyze <path> --llm            # AI narrative (--llm-provider claude|openai)
+attackmap analyze <path> --hunt --verify  # LLM exploit-hypothesis hunt, adjudicated vs. source
+attackmap analyze <path> --triage         # cluster/dedupe/rank existing findings
+attackmap analyze <path> --remediate      # review-first fix suggestions
+attackmap analyze <path> --baseline prev.json --fail-on-new-high   # PR gate
+attackmap suggest ./repo                  # recommend analyzer plugins    · attackmap modules  # list installed
+```
+
+Verify-jury knobs (`--verify-votes` / `--hunt-lenses` / `--hunt-rounds` /
+`--hunt-budget`) and suppression (`--no-suppress` / `--suppress-file`) are
+documented in the [CLI reference](https://docs.mlaify.io/cli/).
+
+## What AttackMap is *not*
+
+- **Not a runtime detector.** It's static; its detection hints are leads for your
+  SIEM team, not deployable rules.
+- **Not a replacement for dedicated SCA.** `--cve` folds CVE signal into an
+  architecture-aware narrative; Trivy/Grype/Dependabot go deeper on resolution.
+- **Not a sound taint engine.** Taint follows local assignments *within* one
+  function (intra-procedural def-use) and a call-graph-refined import walk
+  *across* files; it does not follow a value into a helper it is passed to, and
+  branches are not distinguished. Precision over recall; findings are evidence,
+  not proof. See the limits in `src/attackmap/taint_flow.py`.
+- **Not exhaustive.** Heuristic by design, with explicit confidence tiers and
+  guardrails for stale signals.
+
+## Documentation & links
+
+- **[docs.mlaify.io](https://docs.mlaify.io)** — user guide, install, CLI,
+  analyzers, SDK
+- **[Wiki](https://github.com/mlaify/AttackMap/wiki)** — architecture, roadmap,
+  contributor references
+- **[Roadmap / Bug Triage / Kanban](https://github.com/orgs/mlaify/projects)** —
+  project boards · [Road to 1.0](https://github.com/mlaify/AttackMap/issues/209)
+- [`CHANGELOG.md`](https://github.com/mlaify/AttackMap/blob/main/CHANGELOG.md) · [`CONTRIBUTING.md`](https://github.com/mlaify/AttackMap/blob/main/CONTRIBUTING.md) ·
+  [`SECURITY.md`](https://github.com/mlaify/AttackMap/blob/main/SECURITY.md) · [`VISION.md`](https://github.com/mlaify/AttackMap/blob/main/VISION.md)
+
+## Special thanks
+
+AttackMap is built by its contributors.
+
+<a href="https://github.com/mlaify/AttackMap/graphs/contributors"><img src="https://contrib.rocks/image?repo=mlaify/AttackMap" alt="AttackMap contributors" /></a>
+
+## Contributing
+
+Issues and PRs welcome — see [CONTRIBUTING.md](https://github.com/mlaify/AttackMap/blob/main/CONTRIBUTING.md). By contributing
+you agree your contributions will be MIT-licensed.
+
+## License
+
+[MIT](https://github.com/mlaify/AttackMap/blob/main/LICENSE). Copyright (c) 2026 Matthew Davis and AttackMap Contributors.

attackmap-0.6.4.dist-info/RECORD

@@ -0,0 +1,91 @@
+attackmap/__init__.py,sha256=RoHwsPKvbkve8wJBXWeWUAWRD1e6oOE5TKvmEkhkOmg,48
+attackmap/analyzer.py,sha256=7aSkHvm39NB9jg9RUiAd4XYwZkJyO9QU4mmdCVabxUQ,20112
+attackmap/analyzer_contracts.py,sha256=_FOsCEOj_eMj__CC7mxwSYCBQ0AcehXTAiRjM8HYkzg,6992
+attackmap/analyzers.py,sha256=7iyaIdFXtPHf-kub5YjdP8Ss95CrFozS-Dkp2ARyycM,39956
+attackmap/anomalies.py,sha256=lHoU6ZgBEKuiA9SfXCYveMo_BOm6A-uSlxffI2UioSA,25677
+attackmap/asset_model.py,sha256=Wbok0X8lwlhY8rRqtxag_JaOhB8lwPQL4hswjgLpbD0,9292
+attackmap/attack_taxonomy.py,sha256=i-Rhebo-6j1rnfUOt7hgtpS4h5fdQYdVeiMFvpbyEwY,5117
+attackmap/auth_protocol.py,sha256=qRSu8vhUvIvR1S0Mv6n1B3-Lu82ILOk6TCTa4TXG4xE,32860
+attackmap/authz.py,sha256=i5mXy0RIKCa8lux1isQitYuUcPODbPhh_G2u9sjvP6o,78211
+attackmap/bench.py,sha256=5EVfJd6Bp3eN3peV7ytYzTY_HEhrkw2T9Gpus6GwUJA,17379
+attackmap/cli.py,sha256=DKdU65ZR_DKM7MMu4mTPUbSlNE55IQnjDn1Zh1sjo28,63955
+attackmap/config_scanner.py,sha256=ZQnClLnCm5xq3TSr5PXWFPhMm-WUrg2oh6bML5qXenA,15550
+attackmap/context_pack.py,sha256=TcCa9zsdDxVLk95rPvDSeSqezGwXcFMMCQEbX9qkIR4,3229
+attackmap/contracts.py,sha256=UXMipxKPtZj75MSFxIBXT1ZezyYjVFaYxlHKd8XaL2M,8614
+attackmap/control_model.py,sha256=TLedoovmlFoV3Fk2HzIu726iVqPqIHPnDvmtfEM2Dxg,11606
+attackmap/crossrepo.py,sha256=dV6DLZB17NaslqlNtc8l7xD6PGSp0ieGCCjj2IuJpgw,14094
+attackmap/crypto.py,sha256=3kz5tu5-i445dPYtY_dAr9U7EVStwzUtGA-NNOpfzf0,8982
+attackmap/cve.py,sha256=9XbUoZUx-_hF41ofY42s2ws_3RxG5M0VE_EvvUegJxY,26651
+attackmap/defensive_review.py,sha256=sFgCvvoprk2hfqLiE4QaAeMASXYPgsl37vhct1NSG88,27274
+attackmap/detection_opportunities.py,sha256=eTaDl0nRWSptT5xN6OamrluHEeU5NsmgxOLnfDkVEqw,53826
+attackmap/diagrams.py,sha256=rOlFYPY5HhVRWeQCVo2WyPYYx-wUtaXuEffM3K4TKlQ,8927
+attackmap/diff.py,sha256=nWDnyReVLCZNdVLeRnmMXv6UUUnZx45pTB8qPpc55Z0,11691
+attackmap/exploitability.py,sha256=tutkIXBq3FJpXfUxnX1Dy8ofyNyQVau5bbntz_y_8_k,18527
+attackmap/fingerprint.py,sha256=1_h9Xn6xxVV9Sit4Vh6iyU1uu2bdNVqndqFoUpiJaxA,3937
+attackmap/fleet.py,sha256=0BWHMJJAPnSiQ3t2spUBJvjB9DjVBZ94l_Ne3-atQ_4,14613
+attackmap/gitref.py,sha256=sSM8_Frcm3bgDjjPRIXXN4hhS71b5tOQGXQSic-XerM,4932
+attackmap/graph.py,sha256=_xjhcOXSMwPVtkRyWLjYQA-msw3_L1f32TNYw4bVSsg,836
+attackmap/handler_auth.py,sha256=DpdMfBX459KKgWdJAnfBaGdDpw_vbjyO6Oz6HX9Tkic,30378
+attackmap/handler_span.py,sha256=eJ1kpnFzPc14wfhZukS8FnP2WXvY96HvR8UzSyWy7x0,2610
+attackmap/hunt_harness.py,sha256=KM9NKdyiy2Vw2W4kWheP46sjtJOv_QJEOEK-Eh-F_zQ,20183
+attackmap/insights.py,sha256=SzVrqOLV3BStDmXKBAPEQWimGZ4_FOMBpdbJ3utUkrM,29185
+attackmap/llm_review.py,sha256=rkgIGrDyZjq6Kc7Hxg-IFmg5OAQ5IgMrcFj39_q1Txc,29948
+attackmap/lockfiles.py,sha256=h1u3eK_Qz7ooEYOe626PvaVtvZIn5iuOoPfXz-hzG8U,20730
+attackmap/mass_assignment.py,sha256=vOu7I_zlw5sPTsK6ilvxOCxiQoNNMiHe8yun3RCslrE,22588
+attackmap/md.py,sha256=PEG2rbNjNtAO4eY9cpRkU2a80PxsixJknnLDs8aHm1U,7714
+attackmap/merge.py,sha256=msQqRHxtDlRP7j4HqWPzbOIDvEKY293vtzl-AIciwmY,14575
+attackmap/models.py,sha256=0sM-fTSDX07aocVcOQyGUdBbH0jXQluMpNSvKX2WGAI,49233
+attackmap/plugins_lock.py,sha256=k___dPEVX4kk7WntV0Uf1v3oM2R5Q_FpbSewUOhdObY,3785
+attackmap/popular_packages.py,sha256=SLarQ6Euy5ap6Tgj0FrsiyWXn1PA2R8PyLp0prdZahU,14569
+attackmap/progress.py,sha256=M_lspUmcuhlTV7Imy7p1ebhB9Zn5tL0wcKB0_-82PJU,9491
+attackmap/recon_models.py,sha256=AOJurJDjH6i6tgRXP4cxydBAL0wJ6fQMABNsqsfEgLI,591
+attackmap/recon_to_analysis.py,sha256=7eQgXE0a-Kr27mRvHvwU6aV9sYMAWnojuEPxL9-nNuw,5075
+attackmap/redact.py,sha256=abY_KbnZo8ttJtLfIJnusU8o5Wc08Ss4u68gR8pmCvU,10954
+attackmap/report.py,sha256=iGV75g_tWFQce5oQDLKfMu3M6mRFlc-AQibHZo6O4l4,18491
+attackmap/review_eval.py,sha256=yO5VE892NnadesyHFCsdtkZ1aZhs-LAKovZLMRgoZoQ,14552
+attackmap/review_json.py,sha256=5gP60JobR34Tw2ojFQ00g5YAWPozYdLmhvLcNYB6bhs,13478
+attackmap/review_prompts.py,sha256=5oXjlkfOHfcdpMTYsgKAxqQqsVe5Scr2iOAeVPR-GrA,38640
+attackmap/route_auth_fusion.py,sha256=jMotiXuiGJrkGr6eNjTcQHmXE5e4tO5o8pIz1utG7B4,21274
+attackmap/safe_fs.py,sha256=5gCGgJCqj18HXVSiEeZlyHEi59M8d1hpeaS7U6AolJY,11879
+attackmap/sarif.py,sha256=tTQxmpywA2vWYauVQI04tgCxFBC-PAK6wQncT0FXM6c,14723
+attackmap/sbom.py,sha256=FyxwcVk7ABJjF5oejGt4V7TZMrwN-vcQ283YphthvGM,14686
+attackmap/scanner.py,sha256=SSU8QDG1c7lzV2MIHGu8JBIUt57XXN4-H74mJZwnz5s,63815
+attackmap/secrets_history.py,sha256=qE-MPmkFE0m6OPkmdWrmyvqXJSWeese2KXCNrsyFsRA,6604
+attackmap/security_overlay.py,sha256=XdRjaL8dgHps2ctmd1jEPDAbeArtxsLa2_NjLqG1yok,2136
+attackmap/srcpaths.py,sha256=FSBo2u87dsw5NhKBuXma5uAkkEy_oX07rI4ol9cpZnE,12216
+attackmap/suggest.py,sha256=MJ4GDQvlfe9VRgW4Y1SDHH0MYrzk93O88_88LXX9p3Y,13348
+attackmap/supply_chain.py,sha256=8cwFvzq9XeHkL2DTczsC9DPuJFObUESMGaucZzEQYDA,32205
+attackmap/suppress.py,sha256=ZcQECu14NeCEC2nklKF7ghKqdyPuc_oJkVu20FQMJTw,29869
+attackmap/taint.py,sha256=_140fYovApndHs_FlHBEvVlN_rGR0DIF-E5JGZHn6S8,68185
+attackmap/taint_flow.py,sha256=ZKiVLkh2qWpzUnlUZOvWiTTkhNat7jY7_A5mip1SiLM,60729
+attackmap/taint_sinks.py,sha256=J0fQpMda1QyvaC0t5yEf2EMZN6lWuyQDhkbBHS-OhRA,15950
+attackmap/taint_sinks.yaml,sha256=bDarNVJi9lYK771HB51kZjHrUveA9d9SI6FE9uekG6A,22571
+attackmap/taint_sources.py,sha256=Tgg8e3cv7gpK47XHs8d1gqNxOHBypn4WLSsAeB1uEVo,19502
+attackmap/taxonomy.py,sha256=gUTgxGtbDDrzouWWS8bgYPuykGsTrMxUvI76JP7RKEM,31736
+attackmap/threat_model.py,sha256=GwNllOaONQxPVDBZ5h0ACQJmKpKxXUVO6qGLa5_ePjA,174386
+attackmap/topology.py,sha256=Bw0kHG8cPV-8_IVN3LPIDw9nUSwFxuS8Nf6XqeD_DW4,11594
+attackmap/triage.py,sha256=KYsVYzlNfe1w2ZBuriPbG3lHOZl_oKhx6qzhww4BhRA,5897
+attackmap/weaknesses.py,sha256=OLaG3KyIRPvOaPqC1h3jDvbK1hRqU8nJaeqhUkM120k,14748
+attackmap/webhardening.py,sha256=ZYUY3RAPg9W4OlLPGbUM6pdg2mrkuCBfwzUjf04a4p0,20387
+attackmap/webhook_verification.py,sha256=NzkHwrMfk3ur9to3QLQsDRttiQaehVrIykze8HZwUBs,51724
+attackmap/workflow_scanner.py,sha256=QZAHoL6IpVatIKJjCgCbBM1i6vPP2MlZLmKT9pLf7I0,40242
+attackmap/detections/__init__.py,sha256=daa2e6FDhm5AyZfM-zO9Z0-6LN4K0ol-4wihpEr3Etc,19256
+attackmap/detections/bola.yml,sha256=LQEBHH7bSLjHEyMvdixb4Onlb3IAKaKPjC4fwx2bSgA,2389
+attackmap/detections/cloud.yml,sha256=EX91biru0UNeJV04n18G3jWX5vDS_8NzALVtyMeu1O8,31442
+attackmap/detections/injection.yml,sha256=M4HBbB2taHyFzwBvL7sWj8AtuzyVM76hndb8LRe4Qd0,7675
+attackmap/detections/secrets.yml,sha256=goSVW7EQKUXw2btI-r66oN5MGgRGmz58Rp6k9UXV8EI,1964
+attackmap/detections/sigma.py,sha256=j6H0dinp8A1VYLTehdkj4MA-T-6E9ee_80oUqePOn6Q,20769
+attackmap/detections/ssrf.yml,sha256=Siu_4eIae66Weyynu2Im2YfvuNTC6x6JQHVcGdAQJW4,4465
+attackmap/detections/weakness.yml,sha256=WtXFJe8lyrTRqcT5ZL8v6qZlhccJi_Da7PWhDiXEGGA,2784
+attackmap/detections/webhook.yml,sha256=Mu64zGcuJ_U2Lj9N9X9ZBiWqw5sMBtzjDEj1jTTPMRA,1815
+attackmap/detections/workflow.yml,sha256=V9ZNTr0cA_FgyJjVOMHIVTfYpBzR9eT9rkVZGciDaOg,5785
+attackmap/sdk/__init__.py,sha256=01vTjYRKIGttkVQiWk2w5Nng5qg2e8fZBQlAz5LJJ9o,12106
+attackmap/sdk/contracts.py,sha256=M0Eu9Skv4u4Sk1N_UxraPnz0dzpmSZ1PQZqG6iK60kg,352
+attackmap/sdk/fs.py,sha256=YVmWvtxBD7rH7vTLUVXOg8M2rrdziZ_HUeFfwumtShI,5942
+attackmap/sdk/models.py,sha256=qA7Lhg8Vx5X0TJIVl8XQQRKKcOvOF_pROY8UtY2R6hE,1203
+attackmap-0.6.4.dist-info/licenses/LICENSE,sha256=vtPQVGUyxq359j0JmD3_eJaXyHmaHyjzaMOtaLwJc88,1097
+attackmap-0.6.4.dist-info/METADATA,sha256=qr4jvYgGoDq51CKxoYMG94l1KmYvBHWRWGIh6V9rHWw,12455
+attackmap-0.6.4.dist-info/WHEEL,sha256=mOdXR9C3wMVov7cSY8PY-XCzo3SmmWCHvGQr5csJoao,91
+attackmap-0.6.4.dist-info/entry_points.txt,sha256=Tupx9uE-Kg5wKY3pJCbIn-BT_iqHIQV2Iuhk-A0MvEs,48
+attackmap-0.6.4.dist-info/top_level.txt,sha256=vtBiQh5-74BM1EN6EAORE8i_rNzybwtwX9VkBJQPBVE,10
+attackmap-0.6.4.dist-info/RECORD,,

attackmap-0.6.4.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (84.2.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

attackmap-0.6.4.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+attackmap = attackmap.cli:app

attackmap-0.6.4.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Matthew Davis and AttackMap Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

attackmap-0.6.4.dist-info/top_level.txt

@@ -0,0 +1 @@
+attackmap