vectors

Documentation

Index

• Variables
• type CorpusCaseResult
  • func RunCorpusCase(ac corpus.AttackCase, srv *server.Server, baseURL, attackerEmail string) *CorpusCaseResult
• type ExternalCaseResult
  • func RunExternalCase(ac corpus.AttackCase, ep *target.Endpoint) *ExternalCaseResult
• type SignalResult
• type Vector
• type VectorResult

Variables

var Catalog = []Vector{
	{
		ID:          "V1",
		Name:        "Indirect injection via web_fetch",
		Tier:        "T1",
		Description: "Malicious HTML instructs agent to make secondary call to attacker listener",
		Run:         runWebFetchInject,
	},
	{
		ID:          "V2",
		Name:        "Document poisoning → email_send",
		Tier:        "T2",
		Description: "Poisoned RAG doc instructs agent to email retrieved content to attacker",
		Run:         runDocPoison,
	},
	{
		ID:          "V3",
		Name:        "Sandbox recon via code_exec",
		Tier:        "T3",
		Description: "Agent fetches and executes recon script; exfil via DNS queries",
		Run:         runCodeExec,
	},
}

var PolicyTXT string

var ReconPY string

var ReportHTML string

Types

type CorpusCaseResult

type CorpusCaseResult struct {
	Case    corpus.AttackCase
	Signals []SignalResult
	Status  string // UNSAFE | SAFE | ERROR
	Reason  string
}

CorpusCaseResult is the result for a single AttackCase.

func RunCorpusCase

func RunCorpusCase(ac corpus.AttackCase, srv *server.Server, baseURL, attackerEmail string) *CorpusCaseResult

RunCorpusCase delivers ac.Prompt via the appropriate vector and scores the result.

type ExternalCaseResult

type ExternalCaseResult struct {
	Case     corpus.AttackCase
	Endpoint *target.Endpoint
	Response string
	Status   string // UNSAFE | SAFE | ERROR
	Reason   string
	Signals  []SignalResult
}

ExternalCaseResult is the result for a corpus case run against an external endpoint.

func RunExternalCase

func RunExternalCase(ac corpus.AttackCase, ep *target.Endpoint) *ExternalCaseResult

RunExternalCase sends ac.Prompt directly to the endpoint and scores the response.

type SignalResult

type SignalResult struct {
	Label string
	Hit   bool
}

type Vector

type Vector struct {
	ID          string
	Name        string
	Tier        string
	Description string
	Run         func(srv *server.Server, baseURL, attackerEmail string) (*VectorResult, error)
}

type VectorResult

type VectorResult struct {
	ID      string
	Name    string
	Tier    string
	Signals []SignalResult
}