aimless-security/dist/rasp/injection-detector.d.ts

Enhanced Runtime Application Self-Protection (RASP) and API Fuzzing Engine with advanced threat detection, behavioral analysis, and intelligent response scoring for Node.js applications

import { SecurityThreat } from '../types';
export declare class InjectionDetector {
    private unicodeSQLPatterns;
    private sqlPatterns;
    private nosqlPatterns;
    private commandPatterns;
    private pathTraversalPatterns;
    private xxePatterns;
    private ssrfPatterns;
    private whitelistPatterns;
    private contextWhitelist;
    detect(input: any, context?: string): SecurityThreat[];
    /**
     * Detect polyglot injections (SQL + XSS combined attacks)
     * These are sophisticated attacks that work as both SQL and XSS
     */
    private detectPolyglot;
    private extractInputs;
    /**
     * Calculate confidence score (0-100) based on pattern matches
     */
    private calculateConfidence;
    /**
     * Calculate numeric confidence score (0-100)
     */
    private calculateConfidenceNumber;
    /**
     * Check if value contains high-confidence SQL injection patterns
     */
    private hasHighConfidenceSQLPattern;
    /**
     * Check if value contains high-confidence NoSQL injection patterns
     */
    private hasHighConfidenceNoSQLPattern;
    /**
     * Check if value contains high-confidence command injection patterns
     */
    private hasHighConfidenceCommandPattern;
    /**
     * Check if value is a common safe value that shouldn't trigger alerts
     */
    private isSafeValue;
    /**
     * Check if value matches whitelist patterns to reduce false positives
     */
    private isWhitelisted;
}
//# sourceMappingURL=injection-detector.d.ts.map