cybersecure-easy 0.1.0__tar.gz

cybersecure_easy-0.1.0/PKG-INFO

@@ -0,0 +1,77 @@
+Metadata-Version: 2.4
+Name: cybersecure-easy
+Version: 0.1.0
+Summary: A beginner-friendly facade for common defensive security tasks
+License: MIT
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Provides-Extra: network
+Requires-Dist: scapy>=2.5; extra == "network"
+Requires-Dist: python-nmap>=0.7; extra == "network"
+Provides-Extra: web
+Requires-Dist: requests>=2.31; extra == "web"
+Requires-Dist: beautifulsoup4>=4.12; extra == "web"
+Provides-Extra: crypto
+Requires-Dist: pycryptodome>=3.19; extra == "crypto"
+Provides-Extra: yara
+Requires-Dist: yara-python>=4.3; extra == "yara"
+Provides-Extra: ml
+Requires-Dist: scikit-learn>=1.3; extra == "ml"
+Provides-Extra: all
+Requires-Dist: scapy>=2.5; extra == "all"
+Requires-Dist: python-nmap>=0.7; extra == "all"
+Requires-Dist: requests>=2.31; extra == "all"
+Requires-Dist: beautifulsoup4>=4.12; extra == "all"
+Requires-Dist: pycryptodome>=3.19; extra == "all"
+Requires-Dist: yara-python>=4.3; extra == "all"
+Requires-Dist: scikit-learn>=1.3; extra == "all"
+
+# Cybersecure Easy
+
+A small beginner-friendly Python facade for common defensive security operations.
+It gives common tasks readable names while keeping their underlying tools visible.
+It is a starter wrapper, not a replacement for learning the tools or a claim that one
+library covers every item in a security stack.
+
+## Install
+
+From this folder:
+
+```powershell
+python -m pip install -e ".[network,web,crypto]"
+```
+
+Install all supported optional Python dependencies with `python -m pip install -e ".[all]"`.
+Some tasks also need external tools: Nmap for `scan_ports`, Bandit for `audit_python`,
+and Node.js/npm for `audit_dependencies`. Socket, Snyk, Helmet, Express, bcrypt,
+Argon2, JWT, Zod, CORS, Paramiko, Impacket, TensorFlow and similar ecosystems remain
+their own tools/frameworks; this package does not silently install or wrap all of them.
+
+## Examples
+
+```python
+from cybersecure import Cybersecure
+
+# Sends a TCP SYN to a private or loopback address (may need administrator rights).
+Cybersecure.send_packet(Ip="127.0.0.1", Port=80)
+
+# Scan only your private/loopback host.
+print(Cybersecure.scan_ports(Ip="192.168.1.10", Ports="22,80,443"))
+
+print(Cybersecure.get_page(URL="https://example.com")["status"])
+print(Cybersecure.extract_links(URL="https://example.com"))
+print(Cybersecure.sha256(File="download.bin"))
+
+blob = Cybersecure.encrypt_text(Text="hello", Password="use a long unique passphrase")
+print(Cybersecure.decrypt_text(Encrypted=blob, Password="use a long unique passphrase"))
+
+print(Cybersecure.audit_python(PathToCode="./src"))
+print(Cybersecure.audit_dependencies(PathToProject="./web-app"))
+print(Cybersecure.express_security_template())  # starter code for a separate Express app
+```
+
+Network helpers accept loopback and private IPs by default. For an authorized public
+target only, explicitly set `CYBERSECURE_ALLOW_PUBLIC_TARGETS=1`. Get written
+authorization before sending traffic or scanning any system. HTTP helpers only fetch
+pages and do not fuzz or exploit endpoints. Never use this package to access systems
+without permission. Secret material and passwords are never logged by this package.

cybersecure_easy-0.1.0/README.md

@@ -0,0 +1,49 @@
+# Cybersecure Easy
+
+A small beginner-friendly Python facade for common defensive security operations.
+It gives common tasks readable names while keeping their underlying tools visible.
+It is a starter wrapper, not a replacement for learning the tools or a claim that one
+library covers every item in a security stack.
+
+## Install
+
+From this folder:
+
+```powershell
+python -m pip install -e ".[network,web,crypto]"
+```
+
+Install all supported optional Python dependencies with `python -m pip install -e ".[all]"`.
+Some tasks also need external tools: Nmap for `scan_ports`, Bandit for `audit_python`,
+and Node.js/npm for `audit_dependencies`. Socket, Snyk, Helmet, Express, bcrypt,
+Argon2, JWT, Zod, CORS, Paramiko, Impacket, TensorFlow and similar ecosystems remain
+their own tools/frameworks; this package does not silently install or wrap all of them.
+
+## Examples
+
+```python
+from cybersecure import Cybersecure
+
+# Sends a TCP SYN to a private or loopback address (may need administrator rights).
+Cybersecure.send_packet(Ip="127.0.0.1", Port=80)
+
+# Scan only your private/loopback host.
+print(Cybersecure.scan_ports(Ip="192.168.1.10", Ports="22,80,443"))
+
+print(Cybersecure.get_page(URL="https://example.com")["status"])
+print(Cybersecure.extract_links(URL="https://example.com"))
+print(Cybersecure.sha256(File="download.bin"))
+
+blob = Cybersecure.encrypt_text(Text="hello", Password="use a long unique passphrase")
+print(Cybersecure.decrypt_text(Encrypted=blob, Password="use a long unique passphrase"))
+
+print(Cybersecure.audit_python(PathToCode="./src"))
+print(Cybersecure.audit_dependencies(PathToProject="./web-app"))
+print(Cybersecure.express_security_template())  # starter code for a separate Express app
+```
+
+Network helpers accept loopback and private IPs by default. For an authorized public
+target only, explicitly set `CYBERSECURE_ALLOW_PUBLIC_TARGETS=1`. Get written
+authorization before sending traffic or scanning any system. HTTP helpers only fetch
+pages and do not fuzz or exploit endpoints. Never use this package to access systems
+without permission. Secret material and passwords are never logged by this package.

cybersecure_easy-0.1.0/cybersecure.py

@@ -0,0 +1,187 @@
+"""Simple, safety-conscious wrappers for common security tasks.
+
+The module loads optional security dependencies only when the related helper is used.
+Network scanning/sending is restricted to loopback and RFC1918 private addresses by
+default. Only use the opt-in public-target override on systems you are authorized to test.
+"""
+from __future__ import annotations
+
+import hashlib
+import ipaddress
+import json
+import os
+import re
+import shutil
+import subprocess
+import urllib.request
+from pathlib import Path
+from typing import Any
+from urllib.parse import urlparse
+
+
+def _private_ip(value: str):
+    try:
+        address = ipaddress.ip_address(value)
+    except ValueError as exc:
+        raise ValueError(f"Invalid IP address: {value!r}") from exc
+    if not (address.is_private or address.is_loopback):
+        if os.getenv("CYBERSECURE_ALLOW_PUBLIC_TARGETS") != "1":
+            raise ValueError("Target must be loopback/private. For an authorized public test, set CYBERSECURE_ALLOW_PUBLIC_TARGETS=1.")
+    return address
+
+
+def _url(value: str) -> str:
+    parsed = urlparse(value)
+    if parsed.scheme not in {"http", "https"} or not parsed.hostname:
+        raise ValueError("Provide a complete http:// or https:// URL")
+    return value
+
+
+class Cybersecure:
+    """Readable wrappers; examples: ``Cybersecure.send_packet(Ip="127.0.0.1")``."""
+
+    @staticmethod
+    def send_packet(Ip: str, Port: int = 80, Protocol: str = "tcp", **options: Any) -> dict:
+        """Send a TCP SYN or UDP packet; Scapy and administrator privileges may be required."""
+        _private_ip(Ip)
+        if not 1 <= int(Port) <= 65535:
+            raise ValueError("Port must be between 1 and 65535")
+        protocol = Protocol.lower()
+        if protocol not in {"tcp", "udp"}:
+            raise ValueError("Protocol must be 'tcp' or 'udp'")
+        try:
+            from scapy.all import IP, TCP, UDP, send
+        except ImportError as exc:
+            raise RuntimeError("Scapy is optional. Install it with: pip install 'cybersecure-easy[network]'") from exc
+        packet = IP(dst=Ip) / (TCP(dport=int(Port), flags="S") if protocol == "tcp" else UDP(dport=int(Port)))
+        send(packet, verbose=False, **options)
+        return {"sent": True, "ip": Ip, "port": int(Port), "protocol": protocol}
+
+    @staticmethod
+    def scan_ports(Ip: str, Ports: str = "22,80,443") -> dict:
+        """Scan explicitly listed ports on a private/loopback host with Nmap."""
+        _private_ip(Ip)
+        if not re.fullmatch(r"\d+(?:[-,]\d+)*", Ports):
+            raise ValueError("Ports should look like '22,80,443' or '20-25'")
+        try:
+            import nmap
+        except ImportError as exc:
+            raise RuntimeError("Install python-nmap: pip install 'cybersecure-easy[network]'; Nmap must also be installed on the system.") from exc
+        scanner = nmap.PortScanner()
+        scanner.scan(hosts=Ip, ports=Ports, arguments="-sT -T2")
+        return scanner[Ip].get("tcp", {}) if Ip in scanner.all_hosts() else {}
+
+    @staticmethod
+    def get_page(URL: str, Timeout: int = 10) -> dict:
+        """Fetch a web page with Requests and return status, final URL, and text."""
+        _url(URL)
+        try:
+            import requests
+        except ImportError as exc:
+            raise RuntimeError("Install Requests: pip install 'cybersecure-easy[web]'") from exc
+        response = requests.get(URL, timeout=Timeout, headers={"User-Agent": "CybersecureEasy/0.1"})
+        response.raise_for_status()
+        return {"status": response.status_code, "url": response.url, "text": response.text}
+
+    @staticmethod
+    def extract_links(URL: str, Timeout: int = 10) -> list[str]:
+        """List links from a page using Requests and BeautifulSoup."""
+        page = Cybersecure.get_page(URL, Timeout)
+        try:
+            from bs4 import BeautifulSoup
+        except ImportError as exc:
+            raise RuntimeError("Install BeautifulSoup: pip install 'cybersecure-easy[web]'") from exc
+        from urllib.parse import urljoin
+        soup = BeautifulSoup(page["text"], "html.parser")
+        return [urljoin(page["url"], item["href"]) for item in soup.select("a[href]")]
+
+    @staticmethod
+    def sha256(File: str) -> str:
+        """Compute a SHA-256 checksum for a file."""
+        digest = hashlib.sha256()
+        with open(File, "rb") as stream:
+            for block in iter(lambda: stream.read(1024 * 1024), b""):
+                digest.update(block)
+        return digest.hexdigest()
+
+    @staticmethod
+    def encrypt_text(Text: str, Password: str) -> str:
+        """Password-encrypt UTF-8 text using AES-GCM with scrypt key derivation."""
+        if not Password:
+            raise ValueError("Password cannot be empty")
+        try:
+            from Crypto.Cipher import AES
+            from Crypto.Protocol.KDF import scrypt
+            from Crypto.Random import get_random_bytes
+        except ImportError as exc:
+            raise RuntimeError("Install PyCryptodome: pip install 'cybersecure-easy[crypto]'") from exc
+        salt, nonce = get_random_bytes(16), get_random_bytes(12)
+        key = scrypt(Password.encode(), salt, 32, N=2**14, r=8, p=1)
+        cipher = AES.new(key, AES.MODE_GCM, nonce=nonce)
+        ciphertext, tag = cipher.encrypt_and_digest(Text.encode())
+        return json.dumps({"v": 1, "salt": salt.hex(), "nonce": nonce.hex(), "tag": tag.hex(), "data": ciphertext.hex()})
+
+    @staticmethod
+    def decrypt_text(Encrypted: str, Password: str) -> str:
+        """Decrypt text produced by ``encrypt_text``; wrong passwords raise an error."""
+        from Crypto.Cipher import AES
+        from Crypto.Protocol.KDF import scrypt
+        item = json.loads(Encrypted)
+        key = scrypt(Password.encode(), bytes.fromhex(item["salt"]), 32, N=2**14, r=8, p=1)
+        cipher = AES.new(key, AES.MODE_GCM, nonce=bytes.fromhex(item["nonce"]))
+        return cipher.decrypt_and_verify(bytes.fromhex(item["data"]), bytes.fromhex(item["tag"])).decode()
+
+    @staticmethod
+    def scan_file(File: str, Rules: str) -> list[dict]:
+        """Scan a local file with YARA rules from a local rule file."""
+        try:
+            import yara
+        except ImportError as exc:
+            raise RuntimeError("Install yara-python: pip install 'cybersecure-easy[yara]'") from exc
+        matches = yara.compile(filepath=Rules).match(filepath=File)
+        return [{"rule": match.rule, "tags": list(match.tags)} for match in matches]
+
+    @staticmethod
+    def audit_python(PathToCode: str = ".") -> dict:
+        """Run Bandit on local Python source (Bandit must be installed)."""
+        if not shutil.which("bandit"):
+            raise RuntimeError("Install Bandit first: python -m pip install bandit")
+        result = subprocess.run(["bandit", "-r", PathToCode, "-f", "json"], text=True, capture_output=True, check=False)
+        if result.returncode not in (0, 1):
+            raise RuntimeError(result.stderr.strip() or "Bandit failed")
+        return json.loads(result.stdout or "{}")
+
+    @staticmethod
+    def audit_dependencies(PathToProject: str = ".") -> str:
+        """Run npm audit for a local Node project (npm must be installed)."""
+        if not shutil.which("npm"):
+            raise RuntimeError("npm was not found. Install Node.js/npm to use dependency auditing.")
+        result = subprocess.run(["npm", "audit", "--json"], cwd=Path(PathToProject), text=True, capture_output=True, check=False)
+        return result.stdout or result.stderr
+
+    @staticmethod
+    def express_security_template() -> str:
+        """Return a concise Express middleware template; install its npm dependencies separately."""
+        return '''// npm install helmet express-rate-limit cors zod argon2
+import helmet from "helmet";
+import rateLimit from "express-rate-limit";
+import cors from "cors";
+import { z } from "zod";
+import argon2 from "argon2";
+
+app.use(helmet());
+app.use(cors({ origin: ["https://your-real-site.example"] })); // replace with your exact trusted origins
+app.use("/login", rateLimit({ windowMs: 15 * 60 * 1000, limit: 10 }));
+const LoginInput = z.object({ email: z.string().email(), password: z.string().min(12) });
+// const input = LoginInput.parse(req.body); // reject invalid input
+// const passwordHash = await argon2.hash(password); // store hash, never plaintext
+// const ok = await argon2.verify(passwordHash, password);
+// For JWTs, use a vetted library, validate issuer/audience/expiry, and keep keys secret.
+'''
+
+    @staticmethod
+    def help() -> str:
+        return "Try Cybersecure.send_packet(Ip='127.0.0.1'), Cybersecure.scan_ports(Ip='127.0.0.1'), Cybersecure.get_page(URL='https://example.com'), Cybersecure.sha256(File='sample.bin'), or Cybersecure.audit_python('.')"
+
+
+Cybersecure = Cybersecure

cybersecure_easy-0.1.0/cybersecure_easy.egg-info/PKG-INFO

@@ -0,0 +1,77 @@
+Metadata-Version: 2.4
+Name: cybersecure-easy
+Version: 0.1.0
+Summary: A beginner-friendly facade for common defensive security tasks
+License: MIT
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Provides-Extra: network
+Requires-Dist: scapy>=2.5; extra == "network"
+Requires-Dist: python-nmap>=0.7; extra == "network"
+Provides-Extra: web
+Requires-Dist: requests>=2.31; extra == "web"
+Requires-Dist: beautifulsoup4>=4.12; extra == "web"
+Provides-Extra: crypto
+Requires-Dist: pycryptodome>=3.19; extra == "crypto"
+Provides-Extra: yara
+Requires-Dist: yara-python>=4.3; extra == "yara"
+Provides-Extra: ml
+Requires-Dist: scikit-learn>=1.3; extra == "ml"
+Provides-Extra: all
+Requires-Dist: scapy>=2.5; extra == "all"
+Requires-Dist: python-nmap>=0.7; extra == "all"
+Requires-Dist: requests>=2.31; extra == "all"
+Requires-Dist: beautifulsoup4>=4.12; extra == "all"
+Requires-Dist: pycryptodome>=3.19; extra == "all"
+Requires-Dist: yara-python>=4.3; extra == "all"
+Requires-Dist: scikit-learn>=1.3; extra == "all"
+
+# Cybersecure Easy
+
+A small beginner-friendly Python facade for common defensive security operations.
+It gives common tasks readable names while keeping their underlying tools visible.
+It is a starter wrapper, not a replacement for learning the tools or a claim that one
+library covers every item in a security stack.
+
+## Install
+
+From this folder:
+
+```powershell
+python -m pip install -e ".[network,web,crypto]"
+```
+
+Install all supported optional Python dependencies with `python -m pip install -e ".[all]"`.
+Some tasks also need external tools: Nmap for `scan_ports`, Bandit for `audit_python`,
+and Node.js/npm for `audit_dependencies`. Socket, Snyk, Helmet, Express, bcrypt,
+Argon2, JWT, Zod, CORS, Paramiko, Impacket, TensorFlow and similar ecosystems remain
+their own tools/frameworks; this package does not silently install or wrap all of them.
+
+## Examples
+
+```python
+from cybersecure import Cybersecure
+
+# Sends a TCP SYN to a private or loopback address (may need administrator rights).
+Cybersecure.send_packet(Ip="127.0.0.1", Port=80)
+
+# Scan only your private/loopback host.
+print(Cybersecure.scan_ports(Ip="192.168.1.10", Ports="22,80,443"))
+
+print(Cybersecure.get_page(URL="https://example.com")["status"])
+print(Cybersecure.extract_links(URL="https://example.com"))
+print(Cybersecure.sha256(File="download.bin"))
+
+blob = Cybersecure.encrypt_text(Text="hello", Password="use a long unique passphrase")
+print(Cybersecure.decrypt_text(Encrypted=blob, Password="use a long unique passphrase"))
+
+print(Cybersecure.audit_python(PathToCode="./src"))
+print(Cybersecure.audit_dependencies(PathToProject="./web-app"))
+print(Cybersecure.express_security_template())  # starter code for a separate Express app
+```
+
+Network helpers accept loopback and private IPs by default. For an authorized public
+target only, explicitly set `CYBERSECURE_ALLOW_PUBLIC_TARGETS=1`. Get written
+authorization before sending traffic or scanning any system. HTTP helpers only fetch
+pages and do not fuzz or exploit endpoints. Never use this package to access systems
+without permission. Secret material and passwords are never logged by this package.

cybersecure_easy-0.1.0/cybersecure_easy.egg-info/SOURCES.txt

@@ -0,0 +1,8 @@
+README.md
+cybersecure.py
+pyproject.toml
+cybersecure_easy.egg-info/PKG-INFO
+cybersecure_easy.egg-info/SOURCES.txt
+cybersecure_easy.egg-info/dependency_links.txt
+cybersecure_easy.egg-info/requires.txt
+cybersecure_easy.egg-info/top_level.txt

cybersecure_easy-0.1.0/cybersecure_easy.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

cybersecure_easy-0.1.0/cybersecure_easy.egg-info/requires.txt

@@ -0,0 +1,26 @@
+
+[all]
+scapy>=2.5
+python-nmap>=0.7
+requests>=2.31
+beautifulsoup4>=4.12
+pycryptodome>=3.19
+yara-python>=4.3
+scikit-learn>=1.3
+
+[crypto]
+pycryptodome>=3.19
+
+[ml]
+scikit-learn>=1.3
+
+[network]
+scapy>=2.5
+python-nmap>=0.7
+
+[web]
+requests>=2.31
+beautifulsoup4>=4.12
+
+[yara]
+yara-python>=4.3

cybersecure_easy-0.1.0/cybersecure_easy.egg-info/top_level.txt

@@ -0,0 +1 @@
+cybersecure

cybersecure_easy-0.1.0/pyproject.toml

@@ -0,0 +1,23 @@
+[build-system]
+requires = ["setuptools>=68"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "cybersecure-easy"
+version = "0.1.0"
+description = "A beginner-friendly facade for common defensive security tasks"
+readme = "README.md"
+requires-python = ">=3.10"
+license = { text = "MIT" }
+dependencies = []
+
+[project.optional-dependencies]
+network = ["scapy>=2.5", "python-nmap>=0.7"]
+web = ["requests>=2.31", "beautifulsoup4>=4.12"]
+crypto = ["pycryptodome>=3.19"]
+yara = ["yara-python>=4.3"]
+ml = ["scikit-learn>=1.3"]
+all = ["scapy>=2.5", "python-nmap>=0.7", "requests>=2.31", "beautifulsoup4>=4.12", "pycryptodome>=3.19", "yara-python>=4.3", "scikit-learn>=1.3"]
+
+[tool.setuptools]
+py-modules = ["cybersecure"]

cybersecure_easy-0.1.0/setup.cfg

@@ -0,0 +1,4 @@
+[egg_info]
+tag_build = 
+tag_date = 0
+