/** * @fileoverview Vulnerability Detection Module - Main Entry Point * @module rules/vulnerabilities * * Enterprise-grade SAST vulnerability detection module. * Provides comprehensive security analysis covering OWASP Top 10, * CWE, SANS Top 25, and MITRE ATT&CK mapped vulnerabilities. * * @example * ```typescript * import { * VulnerabilityRuleEngine, * createDefaultEngine, * quickScan, * allVulnerabilityRules * } from '@/rules/vulnerabilities'; * * // Quick scan for vulnerabilities * const findings = await quickScan(code, 'javascript'); * * // Or use the full engine * const engine = createDefaultEngine(); * const results = await engine.analyze(code, context); * ``` */ export { VulnerabilityType, VulnerabilityCategory, VulnerabilitySeverity, ConfidenceLevel, SupportedLanguage, PatternType, type VulnerabilityRule, type VulnerabilityFinding, type VulnerabilityPattern, type VulnerabilityScore, type TaintSource, type TaintSink, type TaintSanitizer, type TaintFlow, type DataFlowTrace, type ImpactAssessment, type ExploitabilityAssessment, type RemediationGuidance, type SecurityStandards, type AnalysisContext, type PatternMatch } from './types'; export { SCORE_THRESHOLDS, LIMITS, JS_TAINT_SOURCES, PYTHON_TAINT_SOURCES, PHP_TAINT_SOURCES, JAVA_TAINT_SOURCES, CSHARP_TAINT_SOURCES, SQL_INJECTION_SINKS, COMMAND_INJECTION_SINKS, XSS_SINKS, PATH_TRAVERSAL_SINKS, SSRF_SINKS, SQL_SANITIZERS, XSS_SANITIZERS, COMMAND_SANITIZERS, PATH_SANITIZERS, OWASP_TOP_10_2021, CWE_REFERENCES } from './constants'; export { safeRegexMatch, extractSnippet, normalizeCode, findTaintSources, findTaintSinks, findSanitizers, isTestFile, isVendorCode, detectLanguage, calculateConfidence } from './utils'; export { VulnerabilityScoreCalculator } from './scoring'; export { VulnerabilityRuleEngine, PatternMatcher, SimpleTaintAnalyzer, createDefaultEngine, quickScan } from './engine'; export { sqlInjectionRules } from './rules/sqlInjection'; export { xssRules } from './rules/xss'; export { commandInjectionRules } from './rules/commandInjection'; export { pathTraversalRules } from './rules/pathTraversal'; export { ssrfRules } from './rules/ssrf'; export { deserializationRules } from './rules/deserialization'; export { hardcodedSecretsRules } from './rules/hardcodedSecrets'; export { authenticationRules } from './rules/authentication'; export { securityMisconfigurationRules } from './rules/securityMisconfiguration'; export { csrfRules } from './rules/csrf'; export { prototypePollutionRules } from './rules/prototypePollution'; export { fileUploadRules } from './rules/fileUpload'; /** * All vulnerability detection rules combined. * Use this for comprehensive scanning. */ export declare const allVulnerabilityRules: import("./types").VulnerabilityRule[]; /** * Critical severity rules only. * Use for quick scans focusing on the most severe issues. */ export declare const criticalRules: import("./types").VulnerabilityRule[]; /** * High severity and above rules. * Balanced between speed and coverage. */ export declare const highSeverityRules: import("./types").VulnerabilityRule[]; /** * OWASP Top 10 focused rules. * Rules specifically mapped to OWASP Top 10 2021. */ export declare const owaspTop10Rules: import("./types").VulnerabilityRule[]; /** * Injection category rules (SQL, Command, XSS, etc.). */ export declare const injectionRules: import("./types").VulnerabilityRule[]; /** * Authentication and access control rules. */ export declare const authRules: import("./types").VulnerabilityRule[]; /** * Configuration and cryptographic rules. */ export declare const configRules: import("./types").VulnerabilityRule[]; /** * Rules by language mapping. */ export declare const rulesByLanguage: { javascript: import("./types").VulnerabilityRule[]; typescript: import("./types").VulnerabilityRule[]; python: import("./types").VulnerabilityRule[]; php: import("./types").VulnerabilityRule[]; java: import("./types").VulnerabilityRule[]; csharp: import("./types").VulnerabilityRule[]; }; /** * Module statistics. */ export declare const moduleStats: { totalRules: number; criticalRules: number; highSeverityRules: number; byCategory: { injection: number; authentication: number; configuration: number; ssrf: number; pathTraversal: number; deserialization: number; fileUpload: number; }; byLanguage: { javascript: number; python: number; php: number; java: number; csharp: number; }; version: string; }; declare const _default: { rules: import("./types").VulnerabilityRule[]; criticalRules: import("./types").VulnerabilityRule[]; highSeverityRules: import("./types").VulnerabilityRule[]; owaspTop10Rules: import("./types").VulnerabilityRule[]; rulesByLanguage: { javascript: import("./types").VulnerabilityRule[]; typescript: import("./types").VulnerabilityRule[]; python: import("./types").VulnerabilityRule[]; php: import("./types").VulnerabilityRule[]; java: import("./types").VulnerabilityRule[]; csharp: import("./types").VulnerabilityRule[]; }; stats: { totalRules: number; criticalRules: number; highSeverityRules: number; byCategory: { injection: number; authentication: number; configuration: number; ssrf: number; pathTraversal: number; deserialization: number; fileUpload: number; }; byLanguage: { javascript: number; python: number; php: number; java: number; csharp: number; }; version: string; }; }; export default _default; //# sourceMappingURL=index.d.ts.map