GuardianUnivalle-Benito-Yucra 0.1.3__py3-none-any.whl → 0.1.5__py3-none-any.whl

GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py

@@ -5,67 +5,57 @@ from typing import Tuple
 from django.http import JsonResponse
 from django.utils.deprecation import MiddlewareMixin
 
-# ---------- Patrones y normalización ----------
-_literal_single = re.compile(r"'([^'\\]|\\.)*'")
-_literal_double = re.compile(r'"([^"\\]|\\.)*"')
-_comment_sql = re.compile(r"(--[^\n]*|/\*.*?\*/)", re.S)
-
+# ---------- Patrones de ataques SQL ----------
 PATTERNS = [
-    (re.compile(r"\bunion\b\s+(all\s+)?\bselect\b", re.I), 0.95),
-    (re.compile(r"(?<!\w)or(?=\s+1=1)", re.I), 0.99),
-    (re.compile(r"\b(select\b.*\bfrom\b.*\bwhere\b.*\b(or|and)\b.*=)", re.I), 0.7),
-    (re.compile(r"\b(drop|truncate|delete|insert|update)\b", re.I), 0.8),
-    (re.compile(r"(--|#|;)", re.I), 0.4),
+    (
+        re.compile(r"\bunion\b\s+(all\s+)?\bselect\b", re.I),
+        "Intento de UNION SELECT detectado",
+    ),
+    (re.compile(r"or\s+\d+\s*=\s*\d+", re.I), "Intento de OR 1=1 detectado"),
+    (
+        re.compile(r"\b(select\b.*\bfrom\b.*\bwhere\b.*\b(or|and)\b.*=)", re.I),
+        "Intento de SELECT con OR/AND detectado",
+    ),
+    (
+        re.compile(r"\b(drop|truncate|delete|insert|update)\b", re.I),
+        "Intento de manipulación de tabla detectado",
+    ),
+    (
+        re.compile(r"(--|#|;)", re.I),
+        "Comentario o terminador de sentencia sospechoso detectado",
+    ),
 ]
 
 
 # ---------- Helpers ----------
-def normalize_text(s: str) -> str:
-    """Quita literales y comentarios para reducir falsos positivos"""
-    if not s:
-        return ""
-    s = _comment_sql.sub(" ", s)
-    s = _literal_single.sub("''", s)
-    s = _literal_double.sub('""', s)
-    s = re.sub(r"\s+", " ", s).strip()
-    return s
-
-
 def extract_payload_text(request) -> str:
     """Extrae texto potencialmente peligroso del request"""
     parts = []
+    # Query params
+    if request.META.get("QUERY_STRING"):
+        parts.append(request.META.get("QUERY_STRING"))
+    # Body
     try:
-        # query params
-        if request.META.get("QUERY_STRING"):
-            parts.append(request.META.get("QUERY_STRING"))
-        # body
         content_type = request.META.get("CONTENT_TYPE", "")
         if "application/json" in content_type:
-            try:
-                body_json = json.loads(request.body.decode("utf-8") or "{}")
-                parts.append(json.dumps(body_json))
-            except Exception:
-                parts.append((request.body or b"").decode("utf-8", errors="ignore"))
+            body_json = json.loads(request.body.decode("utf-8") or "{}")
+            parts.append(json.dumps(body_json))
         else:
-            try:
-                parts.append(request.body.decode("utf-8", errors="ignore"))
-            except Exception:
-                pass
-        # headers sospechosos
-        parts.append(request.META.get("HTTP_USER_AGENT", ""))
-        parts.append(request.META.get("HTTP_REFERER", ""))
+            parts.append(request.body.decode("utf-8", errors="ignore"))
     except Exception:
         pass
+    # Headers
+    parts.append(request.META.get("HTTP_USER_AGENT", ""))
+    parts.append(request.META.get("HTTP_REFERER", ""))
     return " ".join([p for p in parts if p])
 
 
 def detect_sqli_text(text: str) -> Tuple[bool, list]:
-    """Detecta patrones en un texto normalizado"""
-    q = normalize_text(text)
+    """Detecta ataques SQL en el texto"""
     matches = []
-    for patt, sev in PATTERNS:
-        if patt.search(q):
-            matches.append((patt.pattern, float(sev)))
+    for patt, message in PATTERNS:
+        if patt.search(text):
+            matches.append(message)
     return (len(matches) > 0, matches)
 
 
@@ -78,11 +68,11 @@ class SQLIDefenseMiddleware(MiddlewareMixin):
 
         flagged, matches = detect_sqli_text(text)
         if flagged:
-            # Bloqueo inmediato solo para pruebas
+            # Mensaje estandarizado
             return JsonResponse(
                 {
-                    "detail": "Request bloqueado: posible inyección SQL detectada",
-                    "matches": matches,
+                    "detail": "Request bloqueado: posible intento de inyección SQL detectado",
+                    "alerts": matches,
                 },
                 status=403,
             )

{guardianunivalle_benito_yucra-0.1.3.dist-info → guardianunivalle_benito_yucra-0.1.5.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: GuardianUnivalle-Benito-Yucra
-Version: 0.1.3
+Version: 0.1.5
 Summary: Middleware y detectores de seguridad (SQLi, XSS, CSRF, DoS, Keylogger) para Django/Flask
 Author-email: Andres Benito Calle Yucra <benitoandrescalle035@gmail.com>
 License: MIT

{guardianunivalle_benito_yucra-0.1.3.dist-info → guardianunivalle_benito_yucra-0.1.5.dist-info}/RECORD

@@ -7,14 +7,14 @@ GuardianUnivalle_Benito_Yucra/criptografia/kdf.py,sha256=_sbepEY1qHEKga0ExrX2WRg
 GuardianUnivalle_Benito_Yucra/detectores/detector_csrf.py,sha256=EAYfLkHuxGC5rXSu4mZJ4yZDCbwBpTX8xZWGKz7i5wA,692
 GuardianUnivalle_Benito_Yucra/detectores/detector_dos.py,sha256=lMWmCw6nccCEnek53nVjpoBCeiBqLdrSXxqRuI7VP2I,696
 GuardianUnivalle_Benito_Yucra/detectores/detector_keylogger.py,sha256=rEDG-Q_R56OsG2ypfHVBK7erolYjdvATnAxB3yvPXts,729
-GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=5p4ZvBIDzU6Ak0PneM0jm75RKddncAI5NUhGipdsqlU,3049
+GuardianUnivalle_Benito_Yucra/detectores/detector_sql.py,sha256=4yaATxsBEvx2wACJDbYfBIkjVTfIo9gwdcAFxN85ygA,2559
 GuardianUnivalle_Benito_Yucra/detectores/detector_xss.py,sha256=66V_xuxNOZEwluvWOT4-6pk5MJ3zWE1IwcVkBl7MZSg,719
 GuardianUnivalle_Benito_Yucra/middleware_web/middleware_web.py,sha256=23pLLYqliUoMrIC6ZEwz3hKXeDjWfHSm9vYPWGmDDik,495
 GuardianUnivalle_Benito_Yucra/mitigacion/limitador_peticion.py,sha256=ipMOebYhql-6mSyHs0ddYXOcXq9w8P_IXLlpiIqGncw,246
 GuardianUnivalle_Benito_Yucra/mitigacion/lista_bloqueo.py,sha256=6AYWII4mrmwCLHCvGTyoBxR4Oasr4raSHpFbVjqn7d8,193
 GuardianUnivalle_Benito_Yucra/puntuacion/puntuacion_amenaza.py,sha256=Wx5XfcII4oweLvZsTBEJ7kUc9pMpP5-36RfI5C5KJXo,561
-guardianunivalle_benito_yucra-0.1.3.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
-guardianunivalle_benito_yucra-0.1.3.dist-info/METADATA,sha256=gB-Ga931r_Ahn63rbb_upxcEZW_Y10p_J6lgkXSC1Ro,1892
-guardianunivalle_benito_yucra-0.1.3.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-guardianunivalle_benito_yucra-0.1.3.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
-guardianunivalle_benito_yucra-0.1.3.dist-info/RECORD,,
+guardianunivalle_benito_yucra-0.1.5.dist-info/licenses/LICENSE,sha256=5e4IdL542v1E8Ft0A24GZjrxZeTsVK7XrS3mZEUhPtM,37
+guardianunivalle_benito_yucra-0.1.5.dist-info/METADATA,sha256=hQDjXHgP4KpMSw2SyJH80dQ2ugvZBQC5asY159ZYDWw,1892
+guardianunivalle_benito_yucra-0.1.5.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+guardianunivalle_benito_yucra-0.1.5.dist-info/top_level.txt,sha256=HTWfZM64WAV_QYr5cnXnLuabQt92dvlxqlR3pCwpbDQ,30
+guardianunivalle_benito_yucra-0.1.5.dist-info/RECORD,,