/** * Zero-Day Discovery Engine * * MAXIMUM CAPABILITIES FOR DISCOVERING ZERO-DAYS IN ANY POSSIBLE WAY * * Integrates with universal security audit, tournament RL, and provides * comprehensive zero-day discovery pathways across all attack surfaces. */ import { type SecurityFinding } from './universalSecurityAudit.js'; export interface ZeroDayDiscoveryConfig { /** Primary target (domain, IP, cloud project, etc.) */ target: string; /** Type of target for focused discovery */ targetType: 'web' | 'cloud' | 'mobile' | 'api' | 'infrastructure' | 'iot' | 'network' | 'binary' | 'source'; /** Specific attack surfaces to target */ attackSurface: string[]; /** Discovery aggressiveness 0-1 */ aggressiveness: number; /** Enable live exploitation verification */ liveVerification: boolean; /** Enable tournament RL optimization */ enableTournament: boolean; /** Zero-day heuristic categories to apply */ heuristics: ZeroDayHeuristic[]; /** Output directory for findings */ outputDir: string; } export type ZeroDayHeuristic = 'complexityCorrelation' | 'trustBoundaryAnalysis' | 'temporalCoupling' | 'serializationBoundaries' | 'emergentBehaviors' | 'errorHandlingAsymmetry' | 'implicitStateDependencies' | 'resourceExhaustion' | 'supplyChainAnalysis' | 'cryptographicWeakness' | 'raceConditions' | 'memoryCorruption' | 'logicBugs' | 'configurationDrift'; export interface ZeroDayFinding extends SecurityFinding { zeroDayConfidence: number; heuristic: ZeroDayHeuristic; attackVector: string; exploitationComplexity: 'low' | 'medium' | 'high' | 'expert'; patchedIn: string | null; discoveryMethod: 'heuristic' | 'tournament' | 'fuzzing' | 'symbolic' | 'taint' | 'pattern'; } export interface ZeroDayDiscoveryResult { target: string; targetType: string; startTime: string; endTime: string; duration: number; findings: ZeroDayFinding[]; discoveryMetrics: { totalPathsExplored: number; uniqueAttackVectors: number; heuristicMatches: number; tournamentRounds: number; verificationAttempts: number; falsePositives: number; }; recommendations: { immediate: string[]; shortTerm: string[]; longTerm: string[]; }; evidence: { logs: string[]; screenshots?: string[]; networkTraces?: string[]; memoryDumps?: string[]; }; } export declare class ZeroDayDiscovery { private config; private findings; private evidence; constructor(config: Partial & { target: string; }); /** * MAXIMUM CAPABILITY ZERO-DAY DISCOVERY * * Executes comprehensive discovery across all available pathways: * 1. Heuristic-based vulnerability prediction * 2. Universal security audit integration * 3. Tournament RL optimization * 4. Live verification and exploitation * 5. Multi-vector attack surface exploration */ discover(): Promise; private discoverViaHeuristics; private generateHeuristicFindings; private discoverViaUniversalAudit; private discoverViaTournament; private verifyFindings; private generateDiscoveryResult; private saveFindings; private inferProviderFromTarget; private determineAttackVectorFromFinding; private determineSeverity; private determineExploitability; private determineAttackVector; private determineExploitationComplexity; } //# sourceMappingURL=zeroDayDiscovery.d.ts.map