mirror of
https://github.com/evilsocket/audit
synced 2026-06-06 15:44:27 +00:00
Simone Margaritelli
34 lines
1.5 KiB
JSON
34 lines
1.5 KiB
JSON
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "HuntTask",
|
|
"description": "A narrowly-scoped vulnerability hunt assignment: ONE attack class against a specific code region.",
|
|
"type": "object",
|
|
"required": ["task_id", "attack_class", "scope_hint", "target_files", "rationale", "priority"],
|
|
"additionalProperties": false,
|
|
"properties": {
|
|
"task_id": { "type": "string", "pattern": "^[a-z0-9_-]{1,64}$" },
|
|
"attack_class": {
|
|
"type": "string",
|
|
"description": "One concrete vulnerability class. Examples: sql_injection, command_injection, path_traversal, ssrf, xxe, deserialization, prototype_pollution, race_condition, integer_overflow, use_after_free, auth_bypass, idor, ssti, open_redirect, xss_stored, xss_reflected, regex_dos, zip_slip, log_injection."
|
|
},
|
|
"scope_hint": {
|
|
"type": "string",
|
|
"minLength": 10,
|
|
"description": "Concrete locus to focus on. Include the trust boundary above the sink, e.g. 'HTTP handler in routes/users.py reads name from request.GET, passed unchanged to subprocess.Popen in services/exporter.py'."
|
|
},
|
|
"target_files": {
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"items": { "type": "string" },
|
|
"description": "Repo-relative file paths the hunter should focus on."
|
|
},
|
|
"rationale": { "type": "string", "minLength": 10 },
|
|
"priority": { "type": "integer", "minimum": 1, "maximum": 5 },
|
|
"source": {
|
|
"type": "string",
|
|
"enum": ["recon", "gapfill", "feedback"],
|
|
"description": "Which stage produced this task."
|
|
}
|
|
}
|
|
}
|