| name | offensive-security |
| description | Penetration testing, ethical hacking, and vulnerability assessment techniques for authorized security testing |
| sasmp_version | 1.3.0 |
| production_grade | true |
| last_updated | 2025-01-01 |
| bonded_agent | 01-offensive-security |
| bond_type | PRIMARY_BOND |
| bond_strength | 1 |
| operations | {"scan_vulnerability":{"description":"Scan target for known vulnerabilities","atomic":true,"input":{"target":{"type":"string","required":true},"scan_type":{"type":"enum","values":["web","network","api"],"default":"web"},"depth":{"type":"enum","values":["quick","standard","deep"],"default":"standard"}},"output":{"vulnerabilities":"array<Vulnerability>","scan_time":"integer","coverage":"float"}},"test_injection":{"description":"Test for injection vulnerabilities (SQLi, XSS, Command)","atomic":true,"input":{"endpoint":{"type":"string","required":true},"injection_type":{"type":"enum","values":["sql","xss","command","ldap"],"required":true},"payloads":{"type":"array","default":"standard_set"}},"output":{"vulnerable":"boolean","evidence":"string","payload_used":"string"}},"enumerate_services":{"description":"Enumerate running services and versions","atomic":true,"input":{"host":{"type":"string","required":true},"port_range":{"type":"string","default":"1-65535"}},"output":{"services":"array<Service>","os_detection":"string"}},"test_authentication":{"description":"Test authentication mechanisms","atomic":true,"input":{"target":{"type":"string","required":true},"test_type":{"type":"enum","values":["brute","session","token","mfa_bypass"],"required":true}},"output":{"findings":"array<Finding>","weak_creds":"array<Credential>"}}} |
| validation | {"rules":[{"name":"target_format","pattern":"^(https?://|\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}|[a-zA-Z0-9.-]+)$","error":"E_INVALID_TARGET"},{"name":"port_range_format","pattern":"^\\d+-\\d+$|^\\d+(,\\d+)*$","error":"E_INVALID_PORT_RANGE"},{"name":"authorization_required","check":"authorization_proof != null","error":"E_NO_AUTHORIZATION"}],"sanitization":[{"strip_dangerous_chars":true},{"validate_url_encoding":true},{"check_path_traversal":true}]} |
| retry | {"enabled":true,"max_attempts":3,"strategy":"exponential_backoff","delays":[2000,4000,8000],"retryable_errors":["E_NETWORK_TIMEOUT","E_CONNECTION_RESET","E_RATE_LIMITED"],"non_retryable_errors":["E_NO_AUTHORIZATION","E_SCOPE_VIOLATION","E_TARGET_BLOCKED"]} |
| observability | {"logging":{"level":"info","format":"structured_json","fields":["timestamp","operation","target","result","duration_ms"],"sensitive_fields":["credentials","tokens","payloads"]},"metrics":[{"name":"scan_duration","type":"histogram","labels":["scan_type","target_type"]},{"name":"vulnerabilities_found","type":"counter","labels":["severity","category"]},{"name":"operations_total","type":"counter","labels":["operation","status"]}],"tracing":{"enabled":true,"sample_rate":0.1}} |
| errors | {"E_INVALID_TARGET":{"code":1001,"message":"Invalid target format","recovery":"Verify target URL or IP format"},"E_NO_AUTHORIZATION":{"code":1002,"message":"Authorization proof not provided","recovery":"Provide written authorization before testing"},"E_SCOPE_VIOLATION":{"code":1003,"message":"Target outside authorized scope","recovery":"Update scope definition or select valid target"},"E_NETWORK_TIMEOUT":{"code":2001,"message":"Network connection timed out","recovery":"Check network connectivity, retry with backoff"},"E_RATE_LIMITED":{"code":2002,"message":"Target is rate limiting requests","recovery":"Apply exponential backoff, reduce scan intensity"},"E_WAF_BLOCKED":{"code":2003,"message":"Web Application Firewall blocking requests","recovery":"Modify payloads, use evasion techniques"}} |
