defendking 1.0.0__tar.gz

defendking-1.0.0/PKG-INFO

@@ -0,0 +1,97 @@
+Metadata-Version: 2.1
+Name: defendking
+Version: 1.0.0
+Summary: A defensive-only Python security toolkit: passwords, phishing/URL checks, brute-force protection, file hygiene, web-app security, network checks, crypto helpers, and monitoring/reporting.
+Author: Barman
+License: MIT
+Project-URL: Repository, https://github.com/Barman-Zarei/defendking.git
+Keywords: security,defensive-security,password,phishing,xss,sql-injection,hardening
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Topic :: Security
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+Provides-Extra: full
+Requires-Dist: requests>=2.31; extra == "full"
+Requires-Dist: cryptography>=42.0; extra == "full"
+Requires-Dist: pyjwt>=2.8; extra == "full"
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0; extra == "dev"
+
+# DefendKing
+
+A defensive-only Python security toolkit (~60 functions) covering:
+
+1. Passwords & authentication
+2. Phishing & URL/email safety
+3. Brute-force / abuse protection
+4. File / malware hygiene
+5. Web application security (XSS, CSRF, SQLi heuristics, headers)
+6. Network-level defense (TLS, firewall rules, ARP/DNS checks)
+7. Cryptography & secrets management
+8. Monitoring, risk scoring & reporting
+
+Every function protects, detects, or reports — none of them attack, exploit,
+or access systems you don't own/manage.
+
+**Author:** Barman
+**License:** MIT
+
+## Structure
+
+```
+defendking/
+├── pyproject.toml
+├── README.md
+├── tests/
+│   └── test_defendking.py
+└── defendking/            ← the actual package
+    ├── __init__.py        ← re-exports everything from handler.py
+    └── handler.py         ← all ~60 functions live here
+```
+
+## Install
+
+```bash
+pip install -e .            # core package, no third-party deps required
+pip install -e ".[full]"    # adds requests / cryptography / pyjwt for the
+                             # functions that call external APIs or do AES/JWT
+pip install -e ".[dev]"     # adds pytest for running the test suite
+```
+
+```python
+import defendking
+defendking.check_password_strength("...")
+
+# or
+from defendking import check_password_strength
+```
+
+## Run the tests
+
+```bash
+python -m pytest tests/ -v
+```
+
+## Known limitations
+
+- **Heuristic detection isn't a real classifier.** `detect_xss_patterns`,
+  `validate_input_against_sql_injection`, and `check_suspicious_url` are
+  regex-based signals, not a guarantee of safety. Always pair them with the
+  real defenses: parameterized queries/ORM for SQL, contextual output
+  encoding + a strict CSP for XSS, and a reputation/block-list service for
+  URLs.
+- **The local common-password list is a small sample**, not a real breach
+  corpus. `check_password_breached` queries the Have I Been Pwned API by
+  default — the local list is only an offline fallback.
+- **`detect_anomalous_login_location`** gives an accurate result only when
+  you pass real `previous_coords` / `new_coords` (it then uses haversine
+  distance via `distance_km_between`). Without coordinates it falls back to
+  a conservative fixed-distance estimate, which is a rough approximation.
+
+## Versioning
+
+Following semantic-ish convention: first digit = structural changes, second
+= new features, third = bug fixes.

defendking-1.0.0/README.md

@@ -0,0 +1,75 @@
+# DefendKing
+
+A defensive-only Python security toolkit (~60 functions) covering:
+
+1. Passwords & authentication
+2. Phishing & URL/email safety
+3. Brute-force / abuse protection
+4. File / malware hygiene
+5. Web application security (XSS, CSRF, SQLi heuristics, headers)
+6. Network-level defense (TLS, firewall rules, ARP/DNS checks)
+7. Cryptography & secrets management
+8. Monitoring, risk scoring & reporting
+
+Every function protects, detects, or reports — none of them attack, exploit,
+or access systems you don't own/manage.
+
+**Author:** Barman
+**License:** MIT
+
+## Structure
+
+```
+defendking/
+├── pyproject.toml
+├── README.md
+├── tests/
+│   └── test_defendking.py
+└── defendking/            ← the actual package
+    ├── __init__.py        ← re-exports everything from handler.py
+    └── handler.py         ← all ~60 functions live here
+```
+
+## Install
+
+```bash
+pip install -e .            # core package, no third-party deps required
+pip install -e ".[full]"    # adds requests / cryptography / pyjwt for the
+                             # functions that call external APIs or do AES/JWT
+pip install -e ".[dev]"     # adds pytest for running the test suite
+```
+
+```python
+import defendking
+defendking.check_password_strength("...")
+
+# or
+from defendking import check_password_strength
+```
+
+## Run the tests
+
+```bash
+python -m pytest tests/ -v
+```
+
+## Known limitations
+
+- **Heuristic detection isn't a real classifier.** `detect_xss_patterns`,
+  `validate_input_against_sql_injection`, and `check_suspicious_url` are
+  regex-based signals, not a guarantee of safety. Always pair them with the
+  real defenses: parameterized queries/ORM for SQL, contextual output
+  encoding + a strict CSP for XSS, and a reputation/block-list service for
+  URLs.
+- **The local common-password list is a small sample**, not a real breach
+  corpus. `check_password_breached` queries the Have I Been Pwned API by
+  default — the local list is only an offline fallback.
+- **`detect_anomalous_login_location`** gives an accurate result only when
+  you pass real `previous_coords` / `new_coords` (it then uses haversine
+  distance via `distance_km_between`). Without coordinates it falls back to
+  a conservative fixed-distance estimate, which is a rough approximation.
+
+## Versioning
+
+Following semantic-ish convention: first digit = structural changes, second
+= new features, third = bug fixes.

defendking-1.0.0/defendking/__init__.py

@@ -0,0 +1,135 @@
+"""
+DefendKing - Defensive Security Toolkit
+=========================================
+
+This package keeps all logic in a single module (`handler.py`) for
+simplicity, and re-exports everything here so consumers can just do:
+
+    import defendking
+    defendking.check_password_strength("...")
+
+or:
+
+    from defendking import check_password_strength
+
+Author: Barman
+License: MIT
+"""
+
+from .handler import (
+    # Section 1 - Passwords & authentication
+    check_password_strength,
+    check_password_breached,
+    generate_strong_password,
+    hash_password,
+    verify_password,
+    detect_common_password_patterns,
+    check_two_factor_status,
+    check_password_expiry,
+    validate_password_policy_compliance,
+    check_default_credentials,
+
+    # Section 2 - Phishing & URL / email safety
+    check_suspicious_url,
+    check_domain_similarity,
+    check_ssl_certificate,
+    scan_email_for_phishing_signs,
+    extract_and_check_links,
+    validate_email_format_and_mx,
+
+    # Section 3 - Brute-force / abuse protection
+    RateLimiter,
+    rate_limiter,
+    detect_brute_force_attempt,
+    IPBlocklist,
+    block_ip_temporarily,
+    implement_captcha_trigger,
+    log_failed_login_attempt,
+    distance_km_between,
+    detect_anomalous_login_location,
+    detect_privilege_escalation_attempt,
+
+    # Section 4 - File / malware hygiene
+    compute_file_hash,
+    scan_file_hash_virustotal,
+    detect_suspicious_file_extension,
+    check_file_integrity,
+    scan_directory_for_malware_signatures,
+    quarantine_suspicious_file,
+    verify_backup_integrity,
+
+    # Section 5 - Web application security
+    sanitize_user_input,
+    generate_csrf_token,
+    check_csrf_token_validity,
+    validate_cors_policy,
+    detect_xss_patterns,
+    check_secure_cookie_flags,
+    validate_input_against_sql_injection,
+    check_security_headers,
+    verify_csp_header,
+
+    # Section 6 - Network-level defense
+    check_tls_version_support,
+    check_firewall_rules_status,
+    detect_arp_spoofing,
+    validate_dns_response,
+    check_vpn_connection_security,
+    audit_server_config,
+
+    # Section 7 - Cryptography & secrets management
+    generate_secure_token,
+    ApiKeyRecord,
+    rotate_api_key,
+    mask_sensitive_data_in_logs,
+    encrypt_sensitive_data,
+    decrypt_sensitive_data,
+    validate_jwt_token,
+    check_secrets_in_codebase,
+
+    # Section 8 - Monitoring, risk scoring & reporting
+    SecurityFinding,
+    calculate_risk_score,
+    generate_security_report,
+    export_findings_to_json,
+    generate_incident_response_report,
+    audit_user_permissions,
+    notify_admin_dashboard,
+    send_security_alert,
+    schedule_periodic_scan,
+    generate_security_checklist,
+
+    # module logger, in case a consumer wants to attach their own handler
+    logger,
+)
+
+__all__ = [
+    "check_password_strength", "check_password_breached", "generate_strong_password",
+    "hash_password", "verify_password", "detect_common_password_patterns",
+    "check_two_factor_status", "check_password_expiry", "validate_password_policy_compliance",
+    "check_default_credentials",
+    "check_suspicious_url", "check_domain_similarity", "check_ssl_certificate",
+    "scan_email_for_phishing_signs", "extract_and_check_links", "validate_email_format_and_mx",
+    "RateLimiter", "rate_limiter", "detect_brute_force_attempt", "IPBlocklist",
+    "block_ip_temporarily", "implement_captcha_trigger", "log_failed_login_attempt",
+    "distance_km_between", "detect_anomalous_login_location", "detect_privilege_escalation_attempt",
+    "compute_file_hash", "scan_file_hash_virustotal", "detect_suspicious_file_extension",
+    "check_file_integrity", "scan_directory_for_malware_signatures", "quarantine_suspicious_file",
+    "verify_backup_integrity",
+    "sanitize_user_input", "generate_csrf_token", "check_csrf_token_validity",
+    "validate_cors_policy", "detect_xss_patterns", "check_secure_cookie_flags",
+    "validate_input_against_sql_injection", "check_security_headers", "verify_csp_header",
+    "check_tls_version_support", "check_firewall_rules_status", "detect_arp_spoofing",
+    "validate_dns_response", "check_vpn_connection_security", "audit_server_config",
+    "generate_secure_token", "ApiKeyRecord", "rotate_api_key", "mask_sensitive_data_in_logs",
+    "encrypt_sensitive_data", "decrypt_sensitive_data", "validate_jwt_token",
+    "check_secrets_in_codebase",
+    "SecurityFinding", "calculate_risk_score", "generate_security_report",
+    "export_findings_to_json", "generate_incident_response_report", "audit_user_permissions",
+    "notify_admin_dashboard", "send_security_alert", "schedule_periodic_scan",
+    "generate_security_checklist",
+    "logger",
+]
+
+__version__ = "1.0.0"
+__author__ = "Barman"