@iota-big3/sdk-security
Version:
Advanced security features including zero trust, quantum-safe crypto, and ML threat detection
49 lines • 1.37 kB
TypeScript
/**
* Web Application Scanner
* OWASP Top 10 vulnerability detection and web security testing
*/
import { EventEmitter } from 'events';
import { WebScanResult } from '../types';
interface WebScanOptions {
depth?: number;
maxUrls?: number;
followRedirects?: boolean;
checkCookies?: boolean;
checkHeaders?: boolean;
fuzzInputs?: boolean;
authCookie?: string;
}
export declare class WebScanner extends EventEmitter {
private readonly userAgent;
private readonly xssPayloads;
private readonly sqlPayloads;
private readonly pathTraversalPayloads;
constructor();
/**
* Scan web application
*/
scanWebApp(url: string, options?: WebScanOptions): Promise<WebScanResult>;
/**
* Private methods
*/
private crawlApplication;
private checkSecurityHeaders;
private checkCookieSecurity;
private testXSS;
private createXSSVulnerability;
private testSQLInjection;
private detectSQLError;
private createSQLInjectionVulnerability;
private testPathTraversal;
private detectPathTraversalSuccess;
private createPathTraversalVulnerability;
private testIDOR;
private testCSRF;
private testXXE;
private testAuthentication;
private extractLinks;
private submitForm;
private mockHttpRequest;
}
export {};
//# sourceMappingURL=web-scanner.d.ts.map