scanner

type ActiveModules struct {
	PortScanner   PortScanner
	WebScanner    WebScanner
	VulnScanner   VulnerabilityScanner
	ExploitEngine ExploitEngine
	FuzzingEngine FuzzingEngine
	AuthTester    AuthenticationTester
}

type Asset struct {
	Type       string // domain, subdomain, ip, service
	Value      string
	Confidence float64
	Source     string
	Metadata   map[string]interface{}
}

type AttackChain struct {
	Name        string
	Description string
	Steps       []AttackStep
	Impact      string
	Likelihood  float64
	Verified    bool
}

type AttackEdge struct {
	From       string
	To         string
	Likelihood float64
}

type AttackGraph struct {
	Nodes map[string]*AttackNode
	Edges []*AttackEdge
}

type AttackNode struct {
	ID            string
	Vulnerability Vulnerability
	Type          string
	Exploitable   bool
}

type AttackStep struct {
	Order   int
	Action  string
	Target  string
	Result  string
	Success bool
}

type AuthenticationTester interface {
	TestAuthBypass(ctx context.Context, url string) *Vulnerability
	TestWeakCredentials(ctx context.Context, url string) []Credential
}

type BypassedOrigin struct {
	Protection string // CloudFlare, Akamai, etc
	OriginIP   string
	Method     string
	Evidence   []string
	Verified   bool
}

type Credential struct {
	Username string
	Password string
	Valid    bool
}

type Endpoint struct {
	URL         string
	Method      string
	Parameters  []string
	StatusCode  int
	Title       string
	Technology  []string
	Interesting bool
}

type ExploitEngine interface {
	ExploitVulnerability(ctx context.Context, vuln Vulnerability) (*ExploitResult, error)
	GeneratePayload(vulnType string) string
}

type ExploitResult struct {
	Success bool
	Output  string
	Impact  string
}

type ExploitStep struct {
	Vulnerability string
	Exploit       string
	Result        string
	Output        string
}

type ExploitedChain struct {
	ChainID        string
	Target         string
	Steps          []ExploitStep
	Impact         string
	ProofOfConcept string
}

type FuzzingEngine interface {
	FuzzEndpoint(ctx context.Context, url string, params []string) []Vulnerability
	GenerateFuzzPayloads(paramType string) []string
}

type IntelligentScanConfig struct {
	// Scan targeting
	PrioritizeBypassedOrigins bool
	ScanDeletedEndpoints      bool
	TestPredictedEndpoints    bool
	VerifySecurityChanges     bool

	// Performance
	MaxConcurrency   int
	TimeoutPerTarget time.Duration
	RetryFailedScans bool

	// Intelligence thresholds
	MinConfidenceForScan   float64
	MinSeverityForPriority types.Severity

	// Scan depth
	DeepScanHighValue bool
	ChainExploits     bool
}

type IntelligentScanResult struct {
	Target    string
	StartTime time.Time
	EndTime   time.Time
	Duration  time.Duration

	// Discovered assets
	Assets    []Asset
	Services  []Service
	Endpoints []Endpoint

	// Findings
	Findings        []types.Finding
	Vulnerabilities []Vulnerability
	AttackChains    []AttackChain

	// Intelligence-driven results
	BypassedOrigins      []BypassedOrigin
	ResurrectedEndpoints []ResurrectedEndpoint
	ExploitedChains      []ExploitedChain

	// Metrics
	IntelligenceHits int
	FalsePositives   int
	TruePositives    int
}

type IntelligentScanner struct {
	// contains filtered or unexported fields
}

type PortScanner interface {
	ScanPorts(ctx context.Context, host string) []Service
	ScanAllPorts(ctx context.Context, host string) []Service
}

type Prediction struct {
	Type       string // endpoint, subdomain, parameter
	Value      string
	Pattern    string
	Confidence float64
}

type ResurrectedEndpoint struct {
	URL             string
	OriginalStatus  int
	CurrentStatus   int
	Parameters      []string
	StillFunctional bool
	LastSeen        time.Time
}

type ScanTarget struct {
	Type       string                 // origin_ip, endpoint, subdomain, predicted
	Value      string                 // IP, URL, or domain
	Priority   int                    // 1-10, higher is more important
	Confidence float64                // 0-1, confidence in the target
	Context    map[string]interface{} // Additional context for scanning
}

type Service struct {
	Host        string
	Port        int
	Protocol    string
	Name        string
	Version     string
	Banner      string
	Fingerprint map[string]string
}

type Vulnerability struct {
	Type        string
	Severity    types.Severity
	Title       string
	Description string
	Endpoint    string
	Evidence    string
	Exploitable bool
	ExploitCode string
}

type VulnerabilityScanner interface {
	TestSQLInjection(ctx context.Context, url string, params []string) *Vulnerability
	TestXSS(ctx context.Context, url string, params []string) *Vulnerability
	TestSSRF(ctx context.Context, url string, params []string) *Vulnerability
}

type WebScanner interface {
	TestEndpoint(ctx context.Context, url string) (*http.Response, error)
	ScanEndpoints(ctx context.Context, baseURL string) []Endpoint
}