cloud-auditor 0.1.0__tar.gz

cloud_auditor-0.1.0/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.4
+Name: cloud_auditor
+Version: 0.1.0
+Summary: Layer 7 Cloud-Aware Web Security Auditor
+Author: Hadi
+Project-URL: Homepage, https://github.com/hadezedan34/cloud_auditor
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests>=2.28.0

cloud_auditor-0.1.0/cloud_auditor/__init__.py

@@ -0,0 +1,3 @@
+from .scanner import CloudAuditor
+
+__all__ = ["CloudAuditor"]

cloud_auditor-0.1.0/cloud_auditor/scanner.py

@@ -0,0 +1,118 @@
+import socket
+import ssl
+import requests
+from datetime import datetime, timezone
+from concurrent.futures import ThreadPoolExecutor, as_completed
+
+COMMON_PORTS = {
+    80: ("HTTP", "http"),
+    443: ("HTTPS", "https"),
+    8080: ("HTTP-Proxy", "http"),
+    8443: ("HTTPS-Alt", "https"),
+    22: ("SSH", None),
+    21: ("FTP", None),
+    3306: ("MySQL", None)
+}
+
+SECURITY_HEADERS = [
+    "Strict-Transport-Security",
+    "Content-Security-Policy",
+    "X-Frame-Options",
+    "X-Content-Type-Options",
+    "Referrer-Policy",
+    "Permissions-Policy"
+]
+
+class CloudAuditor:
+    """Core scanning class for cloud-aware web application security audits."""
+    
+    def __init__(self, target_host: str, max_workers: int = 10):
+        self.target_host = target_host.strip().replace("http://", "").replace("https://", "").split('/')[0]
+        self.max_workers = max_workers
+        self.target_ip = None
+        self.open_ports = []
+        self.active_base_url = None
+
+    def resolve(self) -> str:
+        """Resolves target IP and performs warm-up."""
+        self.target_ip = socket.gethostbyname(self.target_host)
+        try:
+            requests.get(f"https://{self.target_host}", timeout=5)
+        except Exception:
+            pass
+        return self.target_ip
+
+    def _probe_port(self, port: int, service_info: tuple):
+        service_name, scheme = service_info
+        if scheme:
+            url = f"{scheme}://{self.target_host}:{port}" if port not in [80, 443] else f"{scheme}://{self.target_host}"
+            try:
+                res = requests.head(url, timeout=4, headers={"User-Agent": "CloudAuditor/1.0"})
+                return (port, service_name, True, f"HTTP {res.status_code}")
+            except requests.RequestException:
+                pass
+
+        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+        s.settimeout(2.0)
+        try:
+            if s.connect_ex((self.target_ip, port)) == 0:
+                return (port, service_name, True, "TCP Open")
+        except Exception:
+            pass
+        finally:
+            s.close()
+
+        return (port, service_name, False, "Closed")
+
+    def scan_ports(self) -> dict:
+        """Scans standard ports using Layer 7 and Layer 4 probes."""
+        if not self.target_ip:
+            self.resolve()
+            
+        results = {}
+        with ThreadPoolExecutor(max_workers=self.max_workers) as executor:
+            futures = [executor.submit(self._probe_port, p, s) for p, s in COMMON_PORTS.items()]
+            for future in as_completed(futures):
+                port, service, is_open, status = future.result()
+                if is_open:
+                    results[port] = {"service": service, "status": status}
+                    self.open_ports.append(port)
+        
+        if 443 in results:
+            self.active_base_url = f"https://{self.target_host}"
+        elif 80 in results:
+            self.active_base_url = f"http://{self.target_host}"
+            
+        return results
+
+    def audit_headers(self) -> dict:
+        """Evaluates HTTP security header coverage."""
+        if not self.active_base_url:
+            self.scan_ports()
+        if not self.active_base_url:
+            return {"score": 0.0, "details": {}}
+
+        try:
+            res = requests.get(self.active_base_url, timeout=5)
+            found = [h for h in SECURITY_HEADERS if h in res.headers]
+            score = (len(found) / len(SECURITY_HEADERS)) * 100
+            return {
+                "score": score,
+                "present": found,
+                "missing": [h for h in SECURITY_HEADERS if h not in found]
+            }
+        except Exception as e:
+            return {"error": str(e)}
+
+    def run_full_audit(self) -> dict:
+        """Runs complete audit cycle and returns dictionary output."""
+        ip = self.resolve()
+        ports = self.scan_ports()
+        headers = self.audit_headers()
+        return {
+            "target": self.target_host,
+            "ip": ip,
+            "ports": ports,
+            "headers": headers,
+            "timestamp": datetime.now(timezone.utc).isoformat()
+        }

cloud_auditor-0.1.0/cloud_auditor.egg-info/PKG-INFO

@@ -0,0 +1,9 @@
+Metadata-Version: 2.4
+Name: cloud_auditor
+Version: 0.1.0
+Summary: Layer 7 Cloud-Aware Web Security Auditor
+Author: Hadi
+Project-URL: Homepage, https://github.com/hadezedan34/cloud_auditor
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+Requires-Dist: requests>=2.28.0

cloud_auditor-0.1.0/cloud_auditor.egg-info/SOURCES.txt

@@ -0,0 +1,8 @@
+pyproject.toml
+cloud_auditor/__init__.py
+cloud_auditor/scanner.py
+cloud_auditor.egg-info/PKG-INFO
+cloud_auditor.egg-info/SOURCES.txt
+cloud_auditor.egg-info/dependency_links.txt
+cloud_auditor.egg-info/requires.txt
+cloud_auditor.egg-info/top_level.txt

cloud_auditor-0.1.0/cloud_auditor.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

cloud_auditor-0.1.0/cloud_auditor.egg-info/requires.txt

@@ -0,0 +1 @@
+requests>=2.28.0

cloud_auditor-0.1.0/cloud_auditor.egg-info/top_level.txt

@@ -0,0 +1 @@
+cloud_auditor

cloud_auditor-0.1.0/pyproject.toml

@@ -0,0 +1,17 @@
+[build-system]
+requires = ["setuptools>=61.0"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "cloud_auditor"  #'
+version = "0.1.0"
+description = "Layer 7 Cloud-Aware Web Security Auditor"
+readme = "README.md"
+authors = [{ name = "Hadi" }]
+requires-python = ">=3.8"
+dependencies = [
+    "requests>=2.28.0"
+]
+
+[project.urls]
+"Homepage" = "https://github.com/hadezedan34/cloud_auditor"

cloud_auditor-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+