feat: Killsweep 通杀闭环 + Escalation 升级空发射不落库 - #46
Open
moliyu1101 wants to merge 2 commits into
Open
Conversation
通杀确认后，把 affected_table 里 status=verified 的同类站点批量入队，走原生 Target→Worker→（Stage-0 预筛）→落库链路，让每个实证中招的站点逐步复现并产出独立 Finding；candidate 不入队、跳过 origin/重复/无效/敏感主机，受 KILLSWEEP_REPLAY_ENQUEUE_LIMIT 上限约束。新增 2 条单测。
扩大危害深挖虽过显著性门槛仍可能返回空结果，空升级洞落库会污染报告。新增 escalation_guard.has_emission 守卫：升级结果无任一实证（poc/raw_request/raw_response/description 全空）即放弃落库，只记一条 escalate_skip 事件。新增 4 条单测。
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
两个挖洞闭环收口合并为一：
Killsweep 通杀闭环：通杀确认后，把 affected_table 里 status=verified 的同类站点批量入队，走原生 Target→Worker→落库链路，每个实证中招站点逐步复现并产出独立 Finding；candidate 不入队、跳过 origin/重复/无效/敏感主机，受 KILLSWEEP_REPLAY_ENQUEUE_LIMIT 上限约束。
Escalation 升级空发射不落库：扩大危害深挖过显著性门槛但返回空结果时不落库污染报告，新增 escalation_guard.has_emission 守卫，空结果只记 escalate_skip 事件。
新增 tests/test_killsweep_closed_loop.py（2 条）与 tests/test_escalation_guard.py（4 条），均通过。