detecti-cli 2.0.11__tar.gz → 2.0.12__tar.gz

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: detecti-cli
-Version: 2.0.11
+Version: 2.0.12
 Summary: Modern Attack Surface Management & Threat Intelligence Engine
 Author-email: "Lucas S. (Ls4ss)" <lucas@lucassouza.io>
 License: MIT

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/detecti/cli.py

@@ -419,18 +419,6 @@ def config_check_command(
 
 
 
-    print_section_header("API Credentials Status")
-    engine = ThreatTrackEngine()
-    api_statuses = asyncio.run(engine.verify_environment_apis())
-    for mod_key, info in api_statuses.items():
-        name = info.get("name", mod_key.title())
-        status = info.get("status", "Unknown")
-        status_styled = (
-            f"[bold green]{status}[/bold green]"
-            if info.get("valid")
-            else (f"[bold red]{status}[/bold red]" if info.get("configured") else f"[dim]{status}[/dim]")
-        )
-        console.print(f" • [cyan]{name}:[/cyan] {status_styled}")
 
 
 @hound_app.command("start")

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/detecti/config.py

@@ -99,6 +99,11 @@ class Settings(BaseSettings):
         validation_alias="WHOISFREAKS_API_KEY",
         description="WhoisFreaks API key for reverse WHOIS",
     )
+    securitytrails_api_key: Optional[str] = Field(
+        default=None,
+        validation_alias="SECURITYTRAILS_API_KEY",
+        description="SecurityTrails API key",
+    )
     github_token: Optional[str] = Field(
         default=None,
         validation_alias="GITHUB_TOKEN",
@@ -166,6 +171,9 @@ class Settings(BaseSettings):
         raw_whois = self.whoisfreaks_api_key or os.getenv("WHOISFREAKS_API_KEY")
         self.whoisfreaks_api_key = sanitize_api_key(raw_whois)
 
+        raw_sectrails = self.securitytrails_api_key or os.getenv("SECURITYTRAILS_API_KEY")
+        self.securitytrails_api_key = sanitize_api_key(raw_sectrails)
+
         raw_github = self.github_token or os.getenv("GITHUB_TOKEN")
         self.github_token = sanitize_api_key(raw_github)
 

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/detecti/core/engine.py

@@ -30,6 +30,7 @@ from detecti.modules.crtsh import CrtshModule
 from detecti.modules.exploitdb import ExploitDBModule
 from detecti.modules.nvd import NVDModule
 from detecti.modules.reverse_whois import ReverseWhoisModule
+from detecti.modules.securitytrails import SecurityTrailsModule
 from detecti.modules.shodan import ShodanModule
 from detecti.utils.http import AsyncHTTPClient, http_client
 
@@ -60,6 +61,7 @@ class ThreatTrackEngine:
         "censys": CensysModule,
         "crtsh": CrtshModule,
         "reverse_whois": ReverseWhoisModule,
+        "securitytrails": SecurityTrailsModule,
         "nvd": NVDModule,
         "exploitdb": ExploitDBModule,
     }
@@ -293,7 +295,27 @@ class ThreatTrackEngine:
                     "tier": "Free OSINT",
                 }
 
-        # 5. ExploitDB / GitHub Token
+        # 5. SecurityTrails
+        if "securitytrails" in active_mod_names:
+            st_mod = self.modules["securitytrails"]
+            if st_mod.is_configured():
+                status_report["securitytrails"] = {
+                    "name": "SecurityTrails",
+                    "configured": True,
+                    "valid": True,
+                    "status": "Active (API Key)",
+                    "tier": "Standard API",
+                }
+            else:
+                status_report["securitytrails"] = {
+                    "name": "SecurityTrails",
+                    "configured": False,
+                    "valid": False,
+                    "status": "Not Configured (Bypassed)",
+                    "tier": "None",
+                }
+
+        # 6. ExploitDB / GitHub Token
         if "exploitdb" in active_mod_names:
             from config import is_placeholder_key
             has_gh = bool(settings.github_token and not is_placeholder_key(settings.github_token))

detecti_cli-2.0.12/detecti/modules/securitytrails.py

@@ -0,0 +1,125 @@
+"""SecurityTrails passive collection module."""
+
+from __future__ import annotations
+
+import asyncio
+import ipaddress
+import logging
+from typing import Any, Dict, List, Optional
+
+from detecti.config import settings
+from detecti.core.models import Finding, FindingType, HostInfoData
+from detecti.modules.base import BaseModule
+
+logger = logging.getLogger("detecti.securitytrails")
+
+
+class SecurityTrailsModule(BaseModule):
+    """SecurityTrails module for subdomains and reverse IP."""
+
+    name: str = "securitytrails"
+    description: str = "SecurityTrails API for DNS and Reverse IP"
+    category: str = "recon"
+
+    def is_configured(self) -> bool:
+        """Check if valid SecurityTrails API key is set."""
+        from detecti.config import is_placeholder_key
+        return bool(settings.securitytrails_api_key and not is_placeholder_key(settings.securitytrails_api_key))
+
+    async def run(
+        self,
+        target: str,
+        context: Optional[Dict[str, Any]] = None,
+    ) -> List[Finding]:
+        """Execute SecurityTrails queries based on target input type."""
+        if not self.is_configured():
+            logger.warning("SecurityTrails API key is not configured. Skipping module.")
+            return []
+
+        target = target.strip()
+        findings: List[Finding] = []
+        headers = {
+            "APIKEY": settings.securitytrails_api_key,
+            "Accept": "application/json"
+        }
+
+        # Check if target is an IP or a domain
+        try:
+            ip_obj = ipaddress.ip_address(target)
+            is_ip = True
+        except ValueError:
+            is_ip = False
+
+        if is_ip:
+            self.notify(f"Querying SecurityTrails Reverse IP for {target}...")
+            # Query reverse DNS using DSL or IP endpoint
+            url = "https://api.securitytrails.com/v1/dns/search"
+            payload = {
+                "filter": {
+                    "ipv4": target
+                }
+            }
+            try:
+                resp = await self.http_client.post(
+                    url=url,
+                    headers=headers,
+                    json=payload,
+                    timeout=10.0,
+                    max_retries=2,
+                    raise_for_status=True,
+                )
+                data = resp.json()
+                records = data.get("records", [])
+                self.notify(f"Found {len(records)} domains resolving to {target} via SecurityTrails.")
+                for rec in records:
+                    hostname = rec.get("hostname")
+                    if hostname:
+                        findings.append(
+                            Finding(
+                                type=FindingType.HOST_INFO,
+                                target=target,
+                                source="SecurityTrails",
+                                data=HostInfoData(
+                                    ip=target,
+                                    associated_fqdns=[hostname],
+                                ),
+                                severity="info",
+                                description=f"SecurityTrails mapped {hostname} to IP {target}"
+                            )
+                        )
+            except Exception as e:
+                logger.error(f"SecurityTrails IP search error for {target}: {e}")
+                self.notify(f"Error querying SecurityTrails for IP: {e}")
+        else:
+            self.notify(f"Querying SecurityTrails subdomains for {target}...")
+            url = f"https://api.securitytrails.com/v1/domain/{target}/subdomains"
+            try:
+                resp = await self.http_client.get(
+                    url=url,
+                    headers=headers,
+                    timeout=10.0,
+                    max_retries=2,
+                    raise_for_status=True,
+                )
+                data = resp.json()
+                subdomains = data.get("subdomains", [])
+                self.notify(f"Found {len(subdomains)} subdomains for {target} via SecurityTrails.")
+                for sub in subdomains:
+                    fqdn = f"{sub}.{target}"
+                    findings.append(
+                        Finding(
+                            type=FindingType.HOST_INFO,
+                            target=target,
+                            source="SecurityTrails",
+                            data=HostInfoData(
+                                associated_fqdns=[fqdn]
+                            ),
+                            severity="info",
+                            description=f"SecurityTrails discovered subdomain {fqdn}"
+                        )
+                    )
+            except Exception as e:
+                logger.error(f"SecurityTrails domain search error for {target}: {e}")
+                self.notify(f"Error querying SecurityTrails for domain: {e}")
+
+        return findings

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/detecti/utils/http.py

@@ -38,12 +38,15 @@ class AsyncHTTPClient:
 
         self._headers = default_headers
         self._client: Optional[httpx.AsyncClient] = None
-        self._semaphore = asyncio.Semaphore(self.concurrency_limit)
+        self._semaphore: Optional[asyncio.Semaphore] = None
         self._domain_locks: Dict[str, asyncio.Lock] = {}
         self._domain_last_request: Dict[str, float] = {}
 
     async def get_client(self) -> httpx.AsyncClient:
         """Get or initialize the underlying httpx.AsyncClient."""
+        if self._semaphore is None:
+            self._semaphore = asyncio.Semaphore(self.concurrency_limit)
+            
         if self._client is None or self._client.is_closed:
             self._client = httpx.AsyncClient(
                 timeout=httpx.Timeout(self.timeout, connect=10.0),

{detecti_cli-2.0.11 → detecti_cli-2.0.12}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "detecti-cli"
-version = "2.0.11"
+version = "2.0.12"
 description = "Modern Attack Surface Management & Threat Intelligence Engine"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -69,7 +69,6 @@ dev = [
 ]
 
 [project.scripts]
-detecti = "detecti.cli:app"
 detecti-cli = "detecti.cli:app"
 
 [tool.pytest.ini_options]