import {z} from 'zod' export type GetApiIndexInitialAccessGitArgs = {page?: number | undefined, limit?: number | undefined, cursor?: string | undefined, start_cursor?: 'true' | undefined, order?: ('asc' | 'desc') | undefined, sort?: string | undefined, cve?: string | undefined, alias?: string | undefined, iava?: string | undefined, jvndb?: string | undefined, ilvn?: string | undefined, threat_actor?: string | undefined, mitre_id?: string | undefined, misp_id?: string | undefined, ransomware?: string | undefined, botnet?: string | undefined, published?: string | undefined, date?: string | undefined, updatedAtStartDate?: string | undefined, updatedAtEndDate?: string | undefined, lastModStartDate?: string | undefined, lastModEndDate?: string | undefined, pubStartDate?: string | undefined, pubEndDate?: string | undefined}; export type GetApiIndexInitialAccessGitOptions = {baseUrl: string, Bearer?: string | undefined, fetch?: typeof fetch | undefined}; export const paginateMatch = z.object({field: z.string().optional(), value: z.string().optional()}); export const paginateParam = z.object({filtering: z.string().optional(), format: z.string().optional(), name: z.string().optional()}); export const paginatePagination = z.object({cursor: z.string().optional(), first_item: z.number().int().optional(), index: z.string().optional(), last_item: z.number().int().optional(), limit: z.number().int().optional(), matches: z.array(paginateMatch).optional(), max_pages: z.number().int().optional(), next_cursor: z.string().optional(), opensearch_query: z.object({}).optional(), order: z.string().optional(), page: z.number().int().optional(), pages: z.array(z.string()).optional(), parameters: z.array(paginateParam).optional(), show_pages: z.boolean().optional(), show_query: z.boolean().optional(), sort: z.string().optional(), timestamp: z.string().optional(), total_documents: z.number().int().optional(), total_pages: z.number().int().optional(), truncated: z.boolean().optional(), warnings: z.array(z.string()).optional()}); export const apiInitialAccessGoExploitCustomFlag = z.object({default: z.string().optional(), name: z.string().optional(), type: z.string().optional(), usage: z.string().optional()}); export const apiInitialAccessGoExploit = z.object({assetDetection: z.boolean().optional(), cpe: z.array(z.string()).optional(), customFlags: z.array(apiInitialAccessGoExploitCustomFlag).optional(), defaultPort: z.number().int().optional(), exploitType: z.string().optional(), exploitation: z.boolean().optional(), protocol: z.string().optional(), supportedC2: z.array(z.string()).optional(), versionScanner: z.boolean().optional()}); export const apiInitialAccessArtifact = z.object({artifactName: z.string().optional(), artifactsURL: z.array(z.string()).optional(), baiduQueries: z.array(z.string()).optional(), baiduRawQueries: z.array(z.string()).optional(), censysLegacyQueries: z.array(z.string()).optional(), censysLegacyRawQueries: z.array(z.string()).optional(), censysQueries: z.array(z.string()).optional(), censysRawQueries: z.array(z.string()).optional(), chain: z.array(z.string()).optional(), cloneSSHURL: z.string().optional(), dateAdded: z.string().optional(), driftnetQueries: z.array(z.string()).optional(), driftnetRawQueries: z.array(z.string()).optional(), exploit: z.boolean().optional(), fofaQueries: z.array(z.string()).optional(), fofaRawQueries: z.array(z.string()).optional(), goexploit: apiInitialAccessGoExploit.optional(), googleQueries: z.array(z.string()).optional(), googleRawQueries: z.array(z.string()).optional(), greynoiseQueries: z.array(z.string()).optional(), mitreAttackTechniques: z.array(z.string()).optional(), nmapScript: z.boolean().optional(), pcap: z.boolean().optional(), product: z.array(z.string()).optional(), related: z.array(z.string()).optional(), shodanQueries: z.array(z.string()).optional(), shodanRawQueries: z.array(z.string()).optional(), sigmaRule: z.boolean().optional(), snortRule: z.boolean().optional(), suricataRule: z.boolean().optional(), targetDocker: z.boolean().optional(), targetEncryptedComms: z.string().optional(), targetService: z.string().optional(), vcTargetIntelQuery: z.array(z.string()).optional(), vendor: z.string().optional(), versionScanner: z.boolean().optional(), yara: z.boolean().optional(), zeroday: z.boolean().optional(), zoomEyeQueries: z.array(z.string()).optional(), zoomEyeRawQueries: z.array(z.string()).optional()}); export const apiInitialAccess = z.object({artifacts: z.array(apiInitialAccessArtifact).optional(), cve: z.string().optional(), id: z.string().optional(), inKEV: z.boolean().optional(), inVCKEV: z.boolean().optional(), vulnerable_cpes: z.array(z.string()).optional()}); export const renderResponseWithMetadataArrayApiInitialAccessPaginatePagination = z.object({_benchmark: z.number().optional(), _meta: paginatePagination.optional(), data: z.array(apiInitialAccess).optional()}); export const validateResponse = async ( schema: { readonly '~standard': { readonly validate: (value: unknown) => ({ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }) | Promise<{ readonly value: Output; readonly issues?: undefined } | { readonly issues: ReadonlyArray<{ readonly message: string; readonly path?: ReadonlyArray | undefined }> }> } }, value: unknown ): Promise => { const result = await schema['~standard'].validate(value) if (result.issues !== undefined) { const detail = result.issues .map(({ message, path }) => path?.length ? `${path.map((segment) => String(typeof segment === 'object' ? segment.key : segment)).join('.')}: ${message}` : message ) .join('; ') throw new Error(`Response does not match the schema: ${detail}`, { cause: { issues: result.issues } }) } return result.value }; /** * Return vulnerability data stored in index "initial-access-git" * * GET /index/initial-access-git */ export const getApiIndexInitialAccessGit = async (args: GetApiIndexInitialAccessGitArgs, options: GetApiIndexInitialAccessGitOptions) => { const {baseUrl, fetch: fetchFn = fetch, Bearer} = options ?? {} const query = new URLSearchParams() const headers = new Headers() headers.set('accept', "application/json") if (args.page != null) query.append("page", String(args.page)) if (args.limit != null) query.append("limit", String(args.limit)) if (args.cursor != null) query.append("cursor", String(args.cursor)) if (args.start_cursor != null) query.append("start_cursor", String(args.start_cursor)) if (args.order != null) query.append("order", String(args.order)) if (args.sort != null) query.append("sort", String(args.sort)) if (args.cve != null) query.append("cve", String(args.cve)) if (args.alias != null) query.append("alias", String(args.alias)) if (args.iava != null) query.append("iava", String(args.iava)) if (args.jvndb != null) query.append("jvndb", String(args.jvndb)) if (args.ilvn != null) query.append("ilvn", String(args.ilvn)) if (args.threat_actor != null) query.append("threat_actor", String(args.threat_actor)) if (args.mitre_id != null) query.append("mitre_id", String(args.mitre_id)) if (args.misp_id != null) query.append("misp_id", String(args.misp_id)) if (args.ransomware != null) query.append("ransomware", String(args.ransomware)) if (args.botnet != null) query.append("botnet", String(args.botnet)) if (args.published != null) query.append("published", String(args.published)) if (args.date != null) query.append("date", String(args.date)) if (args.updatedAtStartDate != null) query.append("updatedAtStartDate", String(args.updatedAtStartDate)) if (args.updatedAtEndDate != null) query.append("updatedAtEndDate", String(args.updatedAtEndDate)) if (args.lastModStartDate != null) query.append("lastModStartDate", String(args.lastModStartDate)) if (args.lastModEndDate != null) query.append("lastModEndDate", String(args.lastModEndDate)) if (args.pubStartDate != null) query.append("pubStartDate", String(args.pubStartDate)) if (args.pubEndDate != null) query.append("pubEndDate", String(args.pubEndDate)) if (Bearer !== undefined) headers.set("Authorization", Bearer) const url = `${baseUrl.replace(/\/+$/, '')}/index/initial-access-git${query.size > 0 ? `?${query}` : ''}` const res = await fetchFn(url, {method: "GET", headers}) if (!res.ok) throw new Error(`Request failed with status ${res.status}`, {cause: {status: res.status, body: await res.text()}}) return validateResponse(renderResponseWithMetadataArrayApiInitialAccessPaginatePagination, await res.json()) };