Documentation / SwarmHack

Agent Catalog

Agent Catalog (100+ agents)

SwarmHack ships 100+ customer-facing agents organised into three families. The canonical registry lives in src/agents/inventory_registry.rs.

Web / API exploit family (23)

| Agent | CWE | What it does |

| --- | --- | --- |

| crawler | — | Web crawl, form discovery, WAF detection, header analysis. |

| sqli | CWE-89 | SQL injection (UNION, boolean-blind, error-based, time-based). MySQL, Postgres, MSSQL, Oracle, Derby, HSQLDB. |

| xss | CWE-79 | XSS — reflected, stored, DOM, blind, mutation. |

| cmdi | CWE-78 | Command injection (marker-based, baseline-comparison; POST + GET). |

| csrf | CWE-352 | CSRF — missing-token, Referer/Origin bypass, payload bypass. |

| idor | CWE-639 | Insecure direct object reference with ID pattern detection. |

| auth_bypass | CWE-287 | Auth bypass (logic, JWT, header). |

| ssrf | CWE-918 | SSRF + cloud IMDS probes (AWS / GCP / Azure). |

| lfi | CWE-22 | LFI / path traversal. |

| ssti | CWE-1336 | SSTI — engine fingerprint + RCE chains per engine. |

| open_redirect | CWE-601 | Open redirect + OAuth-theft / CRLF / session-leak chains. |

| cors | CWE-942 | CORS misconfiguration — ACAO reflection + credentials. |

| jwt | CWE-345 | JWT — alg:none, alg confusion, claim tampering, privilege escalation. |

| xxe | CWE-611 | XXE — entity probes, file reads, cloud SSRF via XXE. |

| file_upload | CWE-434 | File upload — extension bypass, multipart, webshell RCE. |

| deserialization | CWE-502 | PHP / Java / Python / .NET gadget chain probes. |

| http_smuggling | CWE-444 | CL.TE / TE.CL / TE.TE differential timing. |

| session_fixation | CWE-384 | Session fixation + invalidation testing. |

| dangerous_methods | CWE-16 | TRACE / XST, PUT upload. |

| default_credentials | CWE-798 | Default credential scan (20 pairs). |

| privilege_escalation | CWE-862 | Function-level access control testing. |

| mass_assignment | CWE-915 | Mass assignment / parameter injection. |

| vulnerable_components | CWE-1035 | Version fingerprinting + 30 CVE map. |

Web agents share the typed IntelligenceBus (7 typed intel categories); a confirmed SQLi auth-bypass auto-propagates the session cookie to downstream agents at runtime.

AD / identity / network family (34)

Default-deny gates listed where applicable.

| Agent | CWE | What it does | Required gate |

| --- | --- | --- | --- |

| nmap_scanner | — | Port discovery, service detection, NSE vuln scripts. | — |

| ftp_probe | CWE-287 | FTP anonymous + default creds + banner. | — |

| ssh_probe | CWE-327 | SSH banner + weak-version CVE detection. | — |

| pivot | — | SSH lateral movement, tunnel scan, credential reuse. | — |

| ldap_enum | CWE-284 | AD enumeration (users, SPNs, delegation, trusts, policy). | — |

| ldap_spray | CWE-307 | Lockout-safe LDAP password spray. | — |

| kerbrute | CWE-200 | Native AS-REQ user enumeration. | — |

| kerberos_attack | CWE-522 | AS-REP roast + Kerberoasting (TGS hash extract). | — |

| smb_enum | CWE-200 | SMB null session, signing, GPP password scrape. | — |

| mssql_probe | CWE-798 | MSSQL default creds, linked servers, xp_cmdshell. | — |

| winrm_probe | CWE-287 | WinRM via evil-winrm / crackmapexec. | --allow-legacy-tools |

| dcsync | CWE-522 | DCSync credential extraction. | — |

| ntlm_capture | CWE-522 | NTLM hash capture via Responder. | --allow-legacy-tools |

| ntlm_downgrade | CWE-757 | NTLM signing / channel-binding downgrade detection. | — |

| ntlm_relay | CWE-345 | Relay to LDAPS / SMB / HTTP. | --allow-ntlm-relay |

| zerologon | CWE-1390 | ZerOlogon (CVE-2020-1472). | per-host scope gate |

| nopac | CWE-287 | noPac / sAMAccountName spoof (CVE-2021-42278/42287). | — |

| acl_abuse | CWE-284 | BloodHound-style ACL paths + exploit. | — |

| hash_crack | CWE-521 | Offline hash crack with feedback loop. | — |

| pth_agent | CWE-522 | Pass-the-Hash lateral movement. | — |

| cred_dump | CWE-522 | SAM / LSA credential dump. | — |

| adcs_exploit | CWE-295 | ADCS ESC1-ESC15 abuse via certipy. | --allow-legacy-tools |

| delegation_exploit | CWE-284 | Constrained / RBCD / unconstrained delegation. | — |

| laps_reader | CWE-522 | LAPS local-admin password read. | — |

| shadow_creds | CWE-284 | Shadow credentials via pywhisker / certipy. | --allow-legacy-tools |

| gpo_abuse | CWE-284 | GPO modification for scheduled task. | — |

| trust_exploit | CWE-200 | Cross-forest SID history. | — |

| gmsa_reader | CWE-522 | gMSA service-account password read. | — |

| auth_coercion | CWE-287 | PrinterBug / PetitPotam coercion. | — |

| sccm_naa | CWE-522 | SCCM Network Access Account secret retrieval. | — |

| sccm_pxe | CWE-256 | SCCM PXE boot media credential extraction. | — |

| sccm_relay | CWE-345 | SCCM NTLM relay to AdminService. | --allow-ntlm-relay |

| ticket_forge | CWE-345 | Golden / Silver / Diamond / Sapphire (offline crypto, no net). | — |

| entra_attacks | CWE-287 | Microsoft Entra hybrid: PRT replay, Seamless SSO, PHS compromise. | — |

| flag_collector | CWE-200 | SMB + WSMan / SSH file retrieval (GOAD-style flag capture). | — |

| tls_scanner | — | X.509 / cipher / protocol probe. | — |

Secure Service Edge (SSE) family (16)

| Agent | Probes | Primary SSE capability informed |

| --- | --- | --- |

| sse_ztna | Identity-aware private-app access, origin hardening. | Private Application Access (ZTNA). |

| sse_identity | MFA / step-up enforcement, session revocation latency. | Identity-Aware Policy + MFA. |

| sse_device_posture | Posture-asserting header / cert / managed-device gates. | Device Posture Profiles. |

| sse_traffic_steering | Egress bypass (no_proxy, alt resolvers, direct egress). | App Connector + DNS Sinkhole. |

| sse_dns | Blocklist enforcement + tunneling / C2 beacon detection. | DNS Security. |

| sse_swg | URL-category bypass + file inspection (EICAR / malware sandbox). | Secure Web Gateway (SWG). |

| sse_casb | Sanctioned / unsanctioned SaaS reach + tenant gating. | CASB. |

| sse_dlp | PII / PCI / PHI / secrets exfil channel testing. | Inline DLP. |

| sse_fwaas | L4 + L7 outbound policy + app control bypass. | Firewall-as-a-Service. |

| sse_rbi | Native-render vs. isolated determination on high-risk URLs. | Remote Browser Isolation. |

| sse_genai | LLM prompt-as-exfil channel testing across vendors. | GenAI Policy + Inline DLP for GenAI. |

| sse_policy_assurance | Cross-capability policy conflict + stale-exception detection. | Unified Policy Engine. |

| sse_observability | Log-correlation latency budget; IR chain assembly. | Activity Search + SIEM Forwarding. |

| sse_shadow_asset | Shadow-asset OSINT (CT logs, passive DNS, RDAP). | SSE expansion-candidate onboarding. |

| sse_c2 | DNS + HTTPS + TCP C2 beacons (operator-owned callback FQDN). | Multi-Control C2 Correlation. |

| sse_scorecard | Per-domain scoring + capability mapping + exec narrative. | (synthesizer; aggregates the rest). |

Family interactions

Web agents share the IntelligenceBus. AD agents respect blast-radius gates and the per-host scope check. SSE agents typed-encode their category through VulnerabilityCategory::Sse(String) so the OCSF emitter, dedup, and SSE Markdown renderer all agree on the routing key. The sse_scorecard synthesizer reads the other 15 SSE agents' findings from the orchestrator's ResultAggregator.