firewallxpl 2.0.0__tar.gz

firewallxpl-2.0.0/LICENSE

@@ -0,0 +1,16 @@
+Copyright 2018, The RouterXPL Framework by Threat9 
+All rights reserved. 
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+    * Neither the name of RouterXPL Framework nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+The above licensing was taken from the BSD licensing and is applied to RouterXPL Framework as well.
+
+Note that the RouterXPL Framework is provided as is, and is a royalty free open-source application.
+
+Feel free to modify, use, change, market, do whatever you want with it as long as you give the appropriate credit.

firewallxpl-2.0.0/MANIFEST.in

@@ -0,0 +1,7 @@
+recursive-include firewallxpl/resources/ssh_keys *.json *.key
+recursive-include firewallxpl/resources/vendors *.dat *.csv
+recursive-include firewallxpl/resources/wordlists *.txt
+recursive-include firewallxpl/resources/mibs *.*
+recursive-include firewallxpl/resources/catalogs *.json
+recursive-include firewallxpl/resources/arsenal *.*
+recursive-include firewallxpl/resources/ml *.json

firewallxpl-2.0.0/PKG-INFO

@@ -0,0 +1,290 @@
+Metadata-Version: 2.4
+Name: firewallxpl
+Version: 2.0.0
+Summary: Perimeter security exploitation framework — NGFW, UTM, WAF, VPN, NAC, LB, and OT/ICS firewalls
+Home-page: https://github.com/mrhenrike/FirewallXPL-Forge
+Download-URL: https://github.com/mrhenrike/FirewallXPL-Forge
+Author: André Henrique (@mrhenrike)
+Author-email: André Henrique <mrhenrike@users.noreply.github.com>
+License: BSD-3-Clause
+Project-URL: Homepage, https://github.com/mrhenrike/FirewallXPL-Forge
+Project-URL: Repository, https://github.com/mrhenrike/FirewallXPL-Forge
+Project-URL: Issues, https://github.com/mrhenrike/FirewallXPL-Forge/issues
+Project-URL: Wiki, https://github.com/mrhenrike/FirewallXPL-Forge/wiki
+Keywords: security,exploitation,penetration-testing,firewall,ngfw,utm,waf,vpn,nac,load-balancer,ics,ot,scada,vulnerability-scanner,pentest,red-team,security-audit
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: BSD License
+Classifier: Operating System :: POSIX
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Networking
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: requests>=2.32.4
+Requires-Dist: paramiko
+Requires-Dist: pysnmp
+Requires-Dist: pycryptodome
+Requires-Dist: setuptools
+Requires-Dist: psutil>=5.9.0
+Requires-Dist: telnetlib3; python_version >= "3.13"
+Provides-Extra: tui
+Requires-Dist: rich>=13.0.0; extra == "tui"
+Provides-Extra: tui-full
+Requires-Dist: rich>=13.0.0; extra == "tui-full"
+Requires-Dist: textual>=0.40.0; extra == "tui-full"
+Provides-Extra: ml
+Requires-Dist: scikit-learn>=1.3.0; extra == "ml"
+Requires-Dist: joblib>=1.3.0; extra == "ml"
+Provides-Extra: ml-gpu
+Requires-Dist: torch>=2.0.0; extra == "ml-gpu"
+Provides-Extra: gpu-nvidia
+Requires-Dist: torch>=2.0.0; extra == "gpu-nvidia"
+Requires-Dist: cupy-cuda12x>=12.0.0; extra == "gpu-nvidia"
+Provides-Extra: gpu-amd
+Requires-Dist: torch>=2.0.0; extra == "gpu-amd"
+Provides-Extra: gpu-intel
+Requires-Dist: torch>=2.0.0; extra == "gpu-intel"
+Requires-Dist: intel-extension-for-pytorch>=2.1.0; extra == "gpu-intel"
+Provides-Extra: gpu-apple
+Requires-Dist: torch>=2.0.0; extra == "gpu-apple"
+Provides-Extra: gpu-opencl
+Requires-Dist: pyopencl>=2023.1; extra == "gpu-opencl"
+Requires-Dist: numpy>=1.24.0; extra == "gpu-opencl"
+Provides-Extra: discovery
+Requires-Dist: python-nmap>=0.7.1; extra == "discovery"
+Provides-Extra: async
+Requires-Dist: aiohttp>=3.9.0; extra == "async"
+Requires-Dist: asyncssh>=2.14.0; extra == "async"
+Provides-Extra: full
+Requires-Dist: rich>=13.0.0; extra == "full"
+Requires-Dist: scikit-learn>=1.3.0; extra == "full"
+Requires-Dist: torch>=2.0.0; extra == "full"
+Requires-Dist: python-nmap>=0.7.1; extra == "full"
+Requires-Dist: aiohttp>=3.9.0; extra == "full"
+Dynamic: author
+Dynamic: download-url
+Dynamic: home-page
+Dynamic: license-file
+Dynamic: requires-python
+
+# FirewallXPL-Forge
+
+Fork focado em **perímetro e caixa de estado**: **NGFW, UTM, WAF**, firewalls de **cloud** (AWS/Azure/GCP/OCI, Cloudflare, ELB/WAF labels em catálogo), e SSL-VPN concentrators — laboratório autorizado.  
+O ramo **FirewallXPL-Forge** permanece para **roteadores, switches L2/L3, TAPs e CPE ISP**. **Wi‑Fi/BLE/PCAP** ficam em [**WirelessXPL-Forge**](https://github.com/mrhenrike/WirelessXPL-Forge) (private).
+
+**Maintainer:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) \| [União Geek](https://github.com/Uniao-Geek)  
+**Project:** [mrhenrike/FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge) → [FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge)
+
+**Language:** **English (en-US)** — this file is the default. **Português (pt-BR):** [README.pt-BR.md](README.pt-BR.md)
+
+[![Python 3.8–3.13](https://img.shields.io/badge/Python-3.8--3.13-blue.svg)](https://www.python.org/downloads/)
+[![CI](https://github.com/mrhenrike/FirewallXPL-Forge/actions/workflows/compat-matrix.yml/badge.svg)](https://github.com/mrhenrike/FirewallXPL-Forge/actions)
+
+---
+
+## What the project does
+
+FirewallXPL-Forge fornece **módulos** para ensaios **autorizados** contra superfície **firewall / VPN / gestão centralizada** (pentest, laboratório, red team controlado). Classes de alvo por omissão: `fw`, `ngfw`, `utm`, `waf`, `cloud_fw` (ver `module_target_scope.json`).
+
+| Type | Role |
+|------|------|
+| **exploits** | Abuse known vulnerabilities (with `check()` where implemented) |
+| **creds** | Default credentials and brute force against network services |
+| **scanners** | Weakness identification; **autopwn** orchestrates modules with Nmap-like timing profiles |
+| **generic** | Cross-cutting utilities: SNMP, SSDP, **CVE lookup**, wordlist, external bridges *(802.11 PCAP → WirelessXPL-Forge)* |
+| **payloads** | Payload generation by architecture (ARM/MIPS/x86, reverse/bind shells) |
+| **encoders** | Payload encoding (Python, PHP, Perl) |
+
+**Out of scope in this repository:** modules whose primary target is IP cameras, printers, or DVRs.
+
+### Attack-surface architecture (by device class)
+
+Hub-and-spoke diagrams (same idea as [MikrotikAPI-BF](https://github.com/mrhenrike/MikrotikAPI-BF) `img/mikrotik_*`): device core, remote **access vectors**, and how they map to **FirewallXPL-Forge** coverage. Mermaid sources: [docs/diagrams/architecture/](docs/diagrams/architecture/).
+
+| SOHO / home router | Managed L2–L3 switch |
+|:---:|:---:|
+| ![SOHO router — attack surface & RXF coverage](docs/img/architecture/rxf_arch_router_soho.png) | ![Switch — attack surface & RXF coverage](docs/img/architecture/rxf_arch_switch_l2l3.png) |
+
+| NGFW / UTM | ISP CPE / residential gateway |
+|:---:|:---:|
+| ![NGFW UTM — attack surface & RXF coverage](docs/img/architecture/rxf_arch_ngfw_utm.png) | ![ISP CPE — attack surface & RXF coverage](docs/img/architecture/rxf_arch_isp_cpe.png) |
+
+| Mixed edge (router + UTM-lite) |
+|:---:|
+| ![Mixed edge — attack surface & RXF coverage](docs/img/architecture/rxf_arch_edge_mixed.png) |
+
+---
+
+## Compatibility notice
+
+> Some platforms have **not** been field-tested. If something breaks, open an issue with OS, Python version, and traceback.
+
+| Platform | Status |
+|----------|--------|
+| Windows 10/11 | CI + local validation |
+| WSL / Debian / Ubuntu | CI + local validation |
+| Kali Linux | Validated locally |
+| macOS | CI (limited field validation) |
+| RHEL / Fedora / Termux | Expected compatible — not validated |
+
+**Python:** 3.8 through 3.13. Includes a shim for removed `telnetlib` on 3.13+ (`telnetlib3`).
+
+---
+
+## Quick install
+
+### Dependencies (`requirements.txt`)
+
+- `requests`, `paramiko`, `pysnmp`, `pycryptodome`, `scapy`, `setuptools`
+- `telnetlib3` on Python ≥ 3.13
+
+### Clone and run
+
+```bash
+git clone https://github.com/mrhenrike/FirewallXPL-Forge.git
+cd FirewallXPL-Forge
+python3 -m venv .venv
+# Linux/macOS:
+source .venv/bin/activate
+# Windows:
+# .venv\Scripts\activate
+python3 -m pip install -r requirements.txt
+python3 rxf.py
+```
+
+### Environment diagnostics
+
+```bash
+python tools/env_doctor.py
+```
+
+---
+
+## Usage overview
+
+### Interactive shell
+
+After `python rxf.py`:
+
+```text
+help                          # global help (+ module help if one is loaded)
+use creds/generic/ssh_default # load module (slashes like paths)
+set target 192.168.0.1
+show options                  # editable options
+show info                     # module metadata
+check                         # check if target looks vulnerable (if implemented)
+run                           # execute
+back                          # unload module
+search exit                   # modules whose path contains "exit"
+search type=exploits vendor=linksys wrt
+exec uname -a                 # OS shell command
+exit                          # Ctrl+D also exits
+```
+
+**Search:** space-separated words are **AND**ed (all must appear in the module path). Filters: `type=`, `device=`, `language=`, `payload=`, `vendor=`.
+
+**Global options:** `setg name value` applies across modules; `unsetg name` removes.
+
+**Prompt:** environment variables `FXF_RAW_PROMPT` and `FXF_MODULE_PROMPT` (see `firewallxpl/interpreter.py`).
+
+### Non-interactive mode
+
+```bash
+python rxf.py -m creds/generic/ssh_default -s "target 192.168.0.1" -s "port 22"
+```
+
+`-s` may repeat; each string is parsed like interactive `set`.
+
+### Logs
+
+Bootstrap logging writes to **`firewallxpl.log`** (rotating log in the current working directory).
+
+---
+
+## Full documentation (Wiki)
+
+Syntax, examples by module family, troubleshooting, and the module index:
+
+- **English (en-US, default):** [docs/wiki/en-US/README.md](docs/wiki/en-US/README.md)  
+- **Português (pt-BR):** [docs/wiki/pt-BR/README.md](docs/wiki/pt-BR/README.md)  
+- **Hub (both):** [docs/wiki/README.md](docs/wiki/README.md)
+
+To publish on **GitHub Wiki**, copy the chosen locale folder (or both) into the wiki repository (separate Git clone).
+
+---
+
+## Other docs in the repo
+
+| Path | Contents |
+|------|----------|
+| [docs/README.md](docs/README.md) · [docs/README.pt-BR.md](docs/README.pt-BR.md) | Documentation hub (en-US + pt-BR) |
+| [docs/diagrams/architecture/](docs/diagrams/architecture/) | Attack-surface architecture (MikrotikAPI-BF style) + [PNGs](docs/img/architecture/) |
+| [docs/COVERAGE_MATRIX.md](docs/COVERAGE_MATRIX.md) | Coverage matrix and external intel (en-US body) |
+| [docs/FULL_CATALOG.md](docs/FULL_CATALOG.md) | Extended device/CVE-oriented catalog (en-US body) |
+| `firewallxpl/resources/catalogs/` | JSON catalogs (market, Discord, extended CVE, etc.) |
+| `tools/report_market_priority_gaps.py` | Gap report vs market-priority catalog |
+| `tools/validate_market_priority_minimums.py` | Yearly minimum validation |
+| `tools/generate_coverage_matrix.py` | Regenerate matrix docs |
+| `tools/generate_full_catalog.py` | Regenerate `FULL_CATALOG` (footprint, sizes, module stats) |
+| `tools/refresh_cve_extended_catalog.py` | Regenerate merged `cve_extended_catalog.json` |
+| `# (removed tool)` | Vendor PoC snapshots into `arsenal/pocs/integrated_modules/` |
+
+---
+
+## Release notes — 3.4.8
+
+- **CVE catalog:** `cve_extended_catalog.json` now merges the static matrix, `external_tool_intel_sources.json` hints, CVE strings from `firewallxpl/modules`, embedded `_EMBEDDED_CVES` scope, Discord `related_cves_hint`, and **PoC repository URLs** normalized from the vendored tg12 `cve_links.txt` (in-scope IDs only; does not load the whole global index into RAM at runtime).
+- **Docs:** `FULL_CATALOG` adds **on-disk footprint**, largest paths, and first-party `.py` counts (`tools/generate_full_catalog.py`).
+- **Offline Exploit-DB:** `generic/external/exploitdb_embedded_lookup` searches the bundled `files_exploits.csv` tree (no `searchsploit` CLI); legacy SearchSploit bridge modules were removed.
+- **Arsenal:** Curated PoC catalog live under `firewallxpl/resources/arsenal/pocs/integrated_modules/` (GPLv2 Exploit-DB and selected repos); indexes in `firewallxpl/resources/catalogs/`. **SOHO exploit catalog** bundle + `scanners/misc/soho_exploit_catalog_server` for local HTTP viewing in lab.
+
+---
+
+## Tests and quality (contributors)
+
+```bash
+python tools/compat_smoke.py
+python tools/validate_market_priority_minimums.py
+python tools/generate_coverage_matrix.py
+```
+
+---
+
+## Governance (bilingual files)
+
+| English (default) | Português (pt-BR) |
+|-------------------|---------------------|
+| [CONTRIBUTING.md](CONTRIBUTING.md) | [CONTRIBUTING.pt-BR.md](CONTRIBUTING.pt-BR.md) |
+| [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) | [CODE_OF_CONDUCT.pt-BR.md](CODE_OF_CONDUCT.pt-BR.md) |
+| [SECURITY.md](SECURITY.md) | [SECURITY.pt-BR.md](SECURITY.pt-BR.md) |
+| [CONTRIBUTORS.md](CONTRIBUTORS.md) | [CONTRIBUTORS.pt-BR.md](CONTRIBUTORS.pt-BR.md) |
+
+---
+
+## License
+
+BSD — see [LICENSE](LICENSE). Current maintenance is described in this file and in project metadata.
+
+---
+
+## Acknowledgments
+
+- [Riposte](https://github.com/fwkz/riposte) — interactive shell pattern
+- Community contributions to the original [mrhenrike/FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge)
+- Contributors listed in [CONTRIBUTORS.md](CONTRIBUTORS.md)
+
+---
+
+> **Author:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) \| **União Geek** — [https://github.com/Uniao-Geek](https://github.com/Uniao-Geek)

firewallxpl-2.0.0/README.md

@@ -0,0 +1,209 @@
+# FirewallXPL-Forge
+
+Fork focado em **perímetro e caixa de estado**: **NGFW, UTM, WAF**, firewalls de **cloud** (AWS/Azure/GCP/OCI, Cloudflare, ELB/WAF labels em catálogo), e SSL-VPN concentrators — laboratório autorizado.  
+O ramo **FirewallXPL-Forge** permanece para **roteadores, switches L2/L3, TAPs e CPE ISP**. **Wi‑Fi/BLE/PCAP** ficam em [**WirelessXPL-Forge**](https://github.com/mrhenrike/WirelessXPL-Forge) (private).
+
+**Maintainer:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) \| [União Geek](https://github.com/Uniao-Geek)  
+**Project:** [mrhenrike/FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge) → [FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge)
+
+**Language:** **English (en-US)** — this file is the default. **Português (pt-BR):** [README.pt-BR.md](README.pt-BR.md)
+
+[![Python 3.8–3.13](https://img.shields.io/badge/Python-3.8--3.13-blue.svg)](https://www.python.org/downloads/)
+[![CI](https://github.com/mrhenrike/FirewallXPL-Forge/actions/workflows/compat-matrix.yml/badge.svg)](https://github.com/mrhenrike/FirewallXPL-Forge/actions)
+
+---
+
+## What the project does
+
+FirewallXPL-Forge fornece **módulos** para ensaios **autorizados** contra superfície **firewall / VPN / gestão centralizada** (pentest, laboratório, red team controlado). Classes de alvo por omissão: `fw`, `ngfw`, `utm`, `waf`, `cloud_fw` (ver `module_target_scope.json`).
+
+| Type | Role |
+|------|------|
+| **exploits** | Abuse known vulnerabilities (with `check()` where implemented) |
+| **creds** | Default credentials and brute force against network services |
+| **scanners** | Weakness identification; **autopwn** orchestrates modules with Nmap-like timing profiles |
+| **generic** | Cross-cutting utilities: SNMP, SSDP, **CVE lookup**, wordlist, external bridges *(802.11 PCAP → WirelessXPL-Forge)* |
+| **payloads** | Payload generation by architecture (ARM/MIPS/x86, reverse/bind shells) |
+| **encoders** | Payload encoding (Python, PHP, Perl) |
+
+**Out of scope in this repository:** modules whose primary target is IP cameras, printers, or DVRs.
+
+### Attack-surface architecture (by device class)
+
+Hub-and-spoke diagrams (same idea as [MikrotikAPI-BF](https://github.com/mrhenrike/MikrotikAPI-BF) `img/mikrotik_*`): device core, remote **access vectors**, and how they map to **FirewallXPL-Forge** coverage. Mermaid sources: [docs/diagrams/architecture/](docs/diagrams/architecture/).
+
+| SOHO / home router | Managed L2–L3 switch |
+|:---:|:---:|
+| ![SOHO router — attack surface & RXF coverage](docs/img/architecture/rxf_arch_router_soho.png) | ![Switch — attack surface & RXF coverage](docs/img/architecture/rxf_arch_switch_l2l3.png) |
+
+| NGFW / UTM | ISP CPE / residential gateway |
+|:---:|:---:|
+| ![NGFW UTM — attack surface & RXF coverage](docs/img/architecture/rxf_arch_ngfw_utm.png) | ![ISP CPE — attack surface & RXF coverage](docs/img/architecture/rxf_arch_isp_cpe.png) |
+
+| Mixed edge (router + UTM-lite) |
+|:---:|
+| ![Mixed edge — attack surface & RXF coverage](docs/img/architecture/rxf_arch_edge_mixed.png) |
+
+---
+
+## Compatibility notice
+
+> Some platforms have **not** been field-tested. If something breaks, open an issue with OS, Python version, and traceback.
+
+| Platform | Status |
+|----------|--------|
+| Windows 10/11 | CI + local validation |
+| WSL / Debian / Ubuntu | CI + local validation |
+| Kali Linux | Validated locally |
+| macOS | CI (limited field validation) |
+| RHEL / Fedora / Termux | Expected compatible — not validated |
+
+**Python:** 3.8 through 3.13. Includes a shim for removed `telnetlib` on 3.13+ (`telnetlib3`).
+
+---
+
+## Quick install
+
+### Dependencies (`requirements.txt`)
+
+- `requests`, `paramiko`, `pysnmp`, `pycryptodome`, `scapy`, `setuptools`
+- `telnetlib3` on Python ≥ 3.13
+
+### Clone and run
+
+```bash
+git clone https://github.com/mrhenrike/FirewallXPL-Forge.git
+cd FirewallXPL-Forge
+python3 -m venv .venv
+# Linux/macOS:
+source .venv/bin/activate
+# Windows:
+# .venv\Scripts\activate
+python3 -m pip install -r requirements.txt
+python3 rxf.py
+```
+
+### Environment diagnostics
+
+```bash
+python tools/env_doctor.py
+```
+
+---
+
+## Usage overview
+
+### Interactive shell
+
+After `python rxf.py`:
+
+```text
+help                          # global help (+ module help if one is loaded)
+use creds/generic/ssh_default # load module (slashes like paths)
+set target 192.168.0.1
+show options                  # editable options
+show info                     # module metadata
+check                         # check if target looks vulnerable (if implemented)
+run                           # execute
+back                          # unload module
+search exit                   # modules whose path contains "exit"
+search type=exploits vendor=linksys wrt
+exec uname -a                 # OS shell command
+exit                          # Ctrl+D also exits
+```
+
+**Search:** space-separated words are **AND**ed (all must appear in the module path). Filters: `type=`, `device=`, `language=`, `payload=`, `vendor=`.
+
+**Global options:** `setg name value` applies across modules; `unsetg name` removes.
+
+**Prompt:** environment variables `FXF_RAW_PROMPT` and `FXF_MODULE_PROMPT` (see `firewallxpl/interpreter.py`).
+
+### Non-interactive mode
+
+```bash
+python rxf.py -m creds/generic/ssh_default -s "target 192.168.0.1" -s "port 22"
+```
+
+`-s` may repeat; each string is parsed like interactive `set`.
+
+### Logs
+
+Bootstrap logging writes to **`firewallxpl.log`** (rotating log in the current working directory).
+
+---
+
+## Full documentation (Wiki)
+
+Syntax, examples by module family, troubleshooting, and the module index:
+
+- **English (en-US, default):** [docs/wiki/en-US/README.md](docs/wiki/en-US/README.md)  
+- **Português (pt-BR):** [docs/wiki/pt-BR/README.md](docs/wiki/pt-BR/README.md)  
+- **Hub (both):** [docs/wiki/README.md](docs/wiki/README.md)
+
+To publish on **GitHub Wiki**, copy the chosen locale folder (or both) into the wiki repository (separate Git clone).
+
+---
+
+## Other docs in the repo
+
+| Path | Contents |
+|------|----------|
+| [docs/README.md](docs/README.md) · [docs/README.pt-BR.md](docs/README.pt-BR.md) | Documentation hub (en-US + pt-BR) |
+| [docs/diagrams/architecture/](docs/diagrams/architecture/) | Attack-surface architecture (MikrotikAPI-BF style) + [PNGs](docs/img/architecture/) |
+| [docs/COVERAGE_MATRIX.md](docs/COVERAGE_MATRIX.md) | Coverage matrix and external intel (en-US body) |
+| [docs/FULL_CATALOG.md](docs/FULL_CATALOG.md) | Extended device/CVE-oriented catalog (en-US body) |
+| `firewallxpl/resources/catalogs/` | JSON catalogs (market, Discord, extended CVE, etc.) |
+| `tools/report_market_priority_gaps.py` | Gap report vs market-priority catalog |
+| `tools/validate_market_priority_minimums.py` | Yearly minimum validation |
+| `tools/generate_coverage_matrix.py` | Regenerate matrix docs |
+| `tools/generate_full_catalog.py` | Regenerate `FULL_CATALOG` (footprint, sizes, module stats) |
+| `tools/refresh_cve_extended_catalog.py` | Regenerate merged `cve_extended_catalog.json` |
+| `# (removed tool)` | Vendor PoC snapshots into `arsenal/pocs/integrated_modules/` |
+
+---
+
+## Release notes — 3.4.8
+
+- **CVE catalog:** `cve_extended_catalog.json` now merges the static matrix, `external_tool_intel_sources.json` hints, CVE strings from `firewallxpl/modules`, embedded `_EMBEDDED_CVES` scope, Discord `related_cves_hint`, and **PoC repository URLs** normalized from the vendored tg12 `cve_links.txt` (in-scope IDs only; does not load the whole global index into RAM at runtime).
+- **Docs:** `FULL_CATALOG` adds **on-disk footprint**, largest paths, and first-party `.py` counts (`tools/generate_full_catalog.py`).
+- **Offline Exploit-DB:** `generic/external/exploitdb_embedded_lookup` searches the bundled `files_exploits.csv` tree (no `searchsploit` CLI); legacy SearchSploit bridge modules were removed.
+- **Arsenal:** Curated PoC catalog live under `firewallxpl/resources/arsenal/pocs/integrated_modules/` (GPLv2 Exploit-DB and selected repos); indexes in `firewallxpl/resources/catalogs/`. **SOHO exploit catalog** bundle + `scanners/misc/soho_exploit_catalog_server` for local HTTP viewing in lab.
+
+---
+
+## Tests and quality (contributors)
+
+```bash
+python tools/compat_smoke.py
+python tools/validate_market_priority_minimums.py
+python tools/generate_coverage_matrix.py
+```
+
+---
+
+## Governance (bilingual files)
+
+| English (default) | Português (pt-BR) |
+|-------------------|---------------------|
+| [CONTRIBUTING.md](CONTRIBUTING.md) | [CONTRIBUTING.pt-BR.md](CONTRIBUTING.pt-BR.md) |
+| [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) | [CODE_OF_CONDUCT.pt-BR.md](CODE_OF_CONDUCT.pt-BR.md) |
+| [SECURITY.md](SECURITY.md) | [SECURITY.pt-BR.md](SECURITY.pt-BR.md) |
+| [CONTRIBUTORS.md](CONTRIBUTORS.md) | [CONTRIBUTORS.pt-BR.md](CONTRIBUTORS.pt-BR.md) |
+
+---
+
+## License
+
+BSD — see [LICENSE](LICENSE). Current maintenance is described in this file and in project metadata.
+
+---
+
+## Acknowledgments
+
+- [Riposte](https://github.com/fwkz/riposte) — interactive shell pattern
+- Community contributions to the original [mrhenrike/FirewallXPL-Forge](https://github.com/mrhenrike/FirewallXPL-Forge)
+- Contributors listed in [CONTRIBUTORS.md](CONTRIBUTORS.md)
+
+---
+
+> **Author:** André Henrique ([@mrhenrike](https://github.com/mrhenrike)) \| **União Geek** — [https://github.com/Uniao-Geek](https://github.com/Uniao-Geek)

firewallxpl-2.0.0/firewallxpl/core/concurrency/__init__.py

@@ -0,0 +1,21 @@
+"""Concurrency engine for FirewallXPL-Forge.
+
+Provides async I/O, thread/process pools, connection pooling, rate limiting,
+and pipeline orchestration for multi-target scanning.
+
+Author: André Henrique (@mrhenrike) | União Geek
+"""
+
+from firewallxpl.core.concurrency.async_engine import AsyncScanEngine
+from firewallxpl.core.concurrency.thread_pool import ManagedThreadPool
+from firewallxpl.core.concurrency.process_pool import ManagedProcessPool
+from firewallxpl.core.concurrency.rate_limiter import TokenBucket
+from firewallxpl.core.concurrency.pipeline import ScanPipeline
+
+__all__ = [
+    "AsyncScanEngine",
+    "ManagedThreadPool",
+    "ManagedProcessPool",
+    "TokenBucket",
+    "ScanPipeline",
+]