gyntoolkit 2.2.0__tar.gz → 2.3.0__tar.gz

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gyntoolkit
-Version: 2.2.0
+Version: 2.3.0
 Summary: Canivete suíço de pentest — recon, port scan, CVE lookup e brute force.
 Author: PH, Fl4vs
 License-Expression: MIT
@@ -49,7 +49,7 @@ Dynamic: license-file
  ██████╗██╗   ██╗███╗   ██╗    ████████╗ ██████╗  ██████╗ ██╗     ██╗  ██╗██╗████████╗
 ██╔════╝╚██╗ ██╔╝████╗  ██║    ╚══██╔══╝██╔═══██╗██╔═══██╗██║     ██║ ██╔╝██║╚══██╔══╝
 ██║  ███╗╚████╔╝ ██╔██╗ ██║       ██║   ██║   ██║██║   ██║██║     █████╔╝ ██║   ██║
-██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.2
+██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.3
 ╚██████╔╝  ██║   ██║ ╚████║       ██║   ╚██████╔╝╚██████╔╝███████╗██║  ██╗██║   ██║   by: PH,Fl4vs
  ╚═════╝   ╚═╝   ╚═╝  ╚═══╝       ╚═╝    ╚═════╝  ╚═════╝ ╚══════╝╚═╝  ╚═╝╚═╝   ╚═╝
 ```
@@ -127,6 +127,7 @@ Dynamic: license-file
 | 12 | **DNS Zone Transfer (AXFR)** | `dnspython` — tries AXFR against each authoritative NS |
 | 13 | **Web Content Discovery** | `aiohttp` — robots.txt / sitemap / security.txt + built-in path wordlist |
 | 14 | **Shodan Host** | Full `api.shodan.io` host lookup (ports, CPEs, CVEs, tags) — needs `api_keys.shodan`; falls back to InternetDB hint without a key |
+| 15 | **Email Security** | `dnspython` — SPF, DKIM, DMARC, DNSSEC and CAA analyzer with per-item verdict (`ok`/`weak`/`missing`) |
 
 ### `[2]` Brute Force
 
@@ -148,6 +149,9 @@ Dynamic: license-file
 - **CVE analysis** per service via **NVD API v2.0** — parses product + version
   from the banner and matches by **CPE** (`virtualMatchString`), falling back to
   keyword search; rate-limited and deduplicated per banner
+- **Risk scoring** — each CVE is enriched with **CVSS** base score/severity,
+  **EPSS** exploitation probability and a **CISA KEV** flag; host risk is the
+  highest severity found (KEV forces critical). Filter with `--min-cvss` / `--kev-only`
 - **Host discovery** (ARP scan) by CIDR — e.g. `192.168.0.0/24`
 - Automatic risk classification based on CVEs found
 
@@ -161,6 +165,12 @@ Dynamic: license-file
 | 4 | **Base64 decode** | base64 → UTF-8 with auto-padding |
 | 5 | **JWT decode** | Header + payload without signature verification |
 
+### `[5]` Audit — one target, consolidated profile
+
+Orchestrates the recon modules (and, with `--active --authorize`, the port scan)
+into a **single report** with an executive summary. Passive by default; stage
+selection via `--only` / `--skip`. See the [CLI examples](#non-interactive-cli-scriptable).
+
 ---
 
 ## Installation
@@ -221,13 +231,22 @@ gyntoolkit recon axfr example.com                 # zone transfer attempt
 gyntoolkit recon webscan http://example.com       # web content discovery
 gyntoolkit recon shodan 1.1.1.1                   # Shodan host (needs api_keys.shodan)
 gyntoolkit recon ssl example.com --port 443       # TLS cert
-gyntoolkit scan 127.0.0.1 --type fast             # port scan + CVEs
+gyntoolkit scan 127.0.0.1 --type fast             # port scan + CVEs (CVSS/EPSS/KEV)
+gyntoolkit scan 10.0.0.5 --min-cvss 7.0 --kev-only # only high-risk / actively exploited
 gyntoolkit scan 192.168.0.0/24                    # host discovery (CIDR)
+gyntoolkit audit example.com                      # full passive profile → one report
+gyntoolkit audit 10.0.0.5 --active --authorize    # + active port scan (authorized)
 gyntoolkit utils hash "text" --algo sha1
 gyntoolkit utils jwt <token>
 gyntoolkit wordlist --terms alice,fluffy,acme --years 1990,2020 --leet --save wl.txt
 ```
 
+`audit` runs a pipeline over one target and consolidates everything into a single
+report with an executive summary. It is **passive by default** (WHOIS, DNS, geo,
+subdomains, TLS, HTTP fingerprint, InternetDB, HIBP, email security); the active
+port scan only runs with `--active --authorize`. Narrow it with `--only a,b` or
+`--skip a,b`.
+
 Global flags (place after the subcommand): `-o/--output DIR` saves a report,
 `-f/--format {json,html,csv,md}` picks its format, `-q/--quiet` silences stdout,
 `--lang {en,pt}` overrides the language.

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/README.md

@@ -6,7 +6,7 @@
  ██████╗██╗   ██╗███╗   ██╗    ████████╗ ██████╗  ██████╗ ██╗     ██╗  ██╗██╗████████╗
 ██╔════╝╚██╗ ██╔╝████╗  ██║    ╚══██╔══╝██╔═══██╗██╔═══██╗██║     ██║ ██╔╝██║╚══██╔══╝
 ██║  ███╗╚████╔╝ ██╔██╗ ██║       ██║   ██║   ██║██║   ██║██║     █████╔╝ ██║   ██║
-██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.2
+██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.3
 ╚██████╔╝  ██║   ██║ ╚████║       ██║   ╚██████╔╝╚██████╔╝███████╗██║  ██╗██║   ██║   by: PH,Fl4vs
  ╚═════╝   ╚═╝   ╚═╝  ╚═══╝       ╚═╝    ╚═════╝  ╚═════╝ ╚══════╝╚═╝  ╚═╝╚═╝   ╚═╝
 ```
@@ -84,6 +84,7 @@
 | 12 | **DNS Zone Transfer (AXFR)** | `dnspython` — tries AXFR against each authoritative NS |
 | 13 | **Web Content Discovery** | `aiohttp` — robots.txt / sitemap / security.txt + built-in path wordlist |
 | 14 | **Shodan Host** | Full `api.shodan.io` host lookup (ports, CPEs, CVEs, tags) — needs `api_keys.shodan`; falls back to InternetDB hint without a key |
+| 15 | **Email Security** | `dnspython` — SPF, DKIM, DMARC, DNSSEC and CAA analyzer with per-item verdict (`ok`/`weak`/`missing`) |
 
 ### `[2]` Brute Force
 
@@ -105,6 +106,9 @@
 - **CVE analysis** per service via **NVD API v2.0** — parses product + version
   from the banner and matches by **CPE** (`virtualMatchString`), falling back to
   keyword search; rate-limited and deduplicated per banner
+- **Risk scoring** — each CVE is enriched with **CVSS** base score/severity,
+  **EPSS** exploitation probability and a **CISA KEV** flag; host risk is the
+  highest severity found (KEV forces critical). Filter with `--min-cvss` / `--kev-only`
 - **Host discovery** (ARP scan) by CIDR — e.g. `192.168.0.0/24`
 - Automatic risk classification based on CVEs found
 
@@ -118,6 +122,12 @@
 | 4 | **Base64 decode** | base64 → UTF-8 with auto-padding |
 | 5 | **JWT decode** | Header + payload without signature verification |
 
+### `[5]` Audit — one target, consolidated profile
+
+Orchestrates the recon modules (and, with `--active --authorize`, the port scan)
+into a **single report** with an executive summary. Passive by default; stage
+selection via `--only` / `--skip`. See the [CLI examples](#non-interactive-cli-scriptable).
+
 ---
 
 ## Installation
@@ -178,13 +188,22 @@ gyntoolkit recon axfr example.com                 # zone transfer attempt
 gyntoolkit recon webscan http://example.com       # web content discovery
 gyntoolkit recon shodan 1.1.1.1                   # Shodan host (needs api_keys.shodan)
 gyntoolkit recon ssl example.com --port 443       # TLS cert
-gyntoolkit scan 127.0.0.1 --type fast             # port scan + CVEs
+gyntoolkit scan 127.0.0.1 --type fast             # port scan + CVEs (CVSS/EPSS/KEV)
+gyntoolkit scan 10.0.0.5 --min-cvss 7.0 --kev-only # only high-risk / actively exploited
 gyntoolkit scan 192.168.0.0/24                    # host discovery (CIDR)
+gyntoolkit audit example.com                      # full passive profile → one report
+gyntoolkit audit 10.0.0.5 --active --authorize    # + active port scan (authorized)
 gyntoolkit utils hash "text" --algo sha1
 gyntoolkit utils jwt <token>
 gyntoolkit wordlist --terms alice,fluffy,acme --years 1990,2020 --leet --save wl.txt
 ```
 
+`audit` runs a pipeline over one target and consolidates everything into a single
+report with an executive summary. It is **passive by default** (WHOIS, DNS, geo,
+subdomains, TLS, HTTP fingerprint, InternetDB, HIBP, email security); the active
+port scan only runs with `--active --authorize`. Narrow it with `--only a,b` or
+`--skip a,b`.
+
 Global flags (place after the subcommand): `-o/--output DIR` saves a report,
 `-f/--format {json,html,csv,md}` picks its format, `-q/--quiet` silences stdout,
 `--lang {en,pt}` overrides the language.

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/gyntoolkit/__init__.py

@@ -5,9 +5,10 @@ Este ``__init__`` re-exporta a API pública para manter compatibilidade com
 ``import gyntoolkit as g`` (usado pelo lab E2E) e pelo entry point do pyproject.
 """
 
-__version__ = "2.2.0"
+__version__ = "2.3.0"
 
 from . import i18n, ui
+from .audit import run_audit
 from .brute import (
     cupp_generate,
     http_bruteforce,
@@ -30,6 +31,7 @@ from .core import (
     show_menu,
 )
 from .export import export_csv, export_html, export_json, export_md, save_report
+from .mailsec import DEFAULT_DKIM_SELECTORS, mailsec_report
 from .recon import (
     DNS_TYPES,
     TECH_SIGNATURES,
@@ -76,6 +78,10 @@ __all__ = [
     "escolher_tipo_dns", "DNS_TYPES", "TECH_SIGNATURES",
     # web discovery
     "web_discovery", "COMMON_PATHS",
+    # mail security
+    "mailsec_report", "DEFAULT_DKIM_SELECTORS",
+    # audit
+    "run_audit",
     # wordlist
     "generate_wordlist",
     # brute

gyntoolkit-2.3.0/gyntoolkit/audit.py

@@ -0,0 +1,162 @@
+#!/usr/bin/env python3
+"""Audit: orquestrador de engajamento — 1 alvo, perfil consolidado.
+
+Roda um pipeline de etapas (recon passivo por padrão; scan ativo só com
+``active=True`` + ``authorized=True``) e agrega tudo num único relatório com
+resumo executivo. Reaproveita os módulos existentes (recon/scan/mailsec).
+
+Etapas são resilientes: a falha de uma registra ``{"error": ...}`` na sua seção
+sem derrubar o resto.
+"""
+
+import asyncio
+import ipaddress
+import socket
+from datetime import datetime, timezone
+from typing import Any
+
+from .core import log, sanitize_input
+
+# Etapas passivas (seguras) e ativas (intrusivas). Ordem define a saída.
+PASSIVE_STAGES = ("whois", "dns", "geo", "subdomains", "ssl", "httpfp",
+                  "internetdb", "hibp", "mailsec")
+ACTIVE_STAGES = ("scan",)
+ALL_STAGES = PASSIVE_STAGES + ACTIVE_STAGES
+
+# Etapas que só fazem sentido p/ domínio (não p/ IP literal).
+_DOMAIN_ONLY = {"whois", "subdomains", "hibp", "mailsec"}
+
+
+def _is_ip(target: str) -> bool:
+    try:
+        ipaddress.ip_address(target)
+        return True
+    except ValueError:
+        return False
+
+
+def _resolve(target: str) -> str | None:
+    try:
+        return socket.gethostbyname(target)
+    except socket.gaierror:
+        return None
+
+
+# --------------------------------------------------------------------------
+# Runners por etapa.
+# --------------------------------------------------------------------------
+def _passive_stage(name: str, target: str, ctx: dict) -> Any:
+    """Executa uma etapa passiva (síncrona: requests/dns). Roda em thread."""
+    from . import recon
+    from .mailsec import mailsec_report
+
+    is_ip = ctx["is_ip"]
+    if name == "whois":
+        return {"whois": str(recon.whois_lookup(target))}
+    if name == "dns":
+        return {t: recon.dns_lookup(target, t) for t in ("A", "MX", "NS", "TXT")}
+    if name == "geo":
+        return recon.geo_ip(target)
+    if name == "subdomains":
+        subs = recon.subdomain_enum(target)
+        return {"total": len(subs), "subdomains": subs}
+    if name == "ssl":
+        return recon.ssl_inspect(target, 443)
+    if name == "httpfp":
+        scheme = "http" if is_ip else "https"
+        return recon.http_fingerprint(f"{scheme}://{target}")
+    if name == "internetdb":
+        return recon.internetdb_lookup(target)
+    if name == "hibp":
+        return {"breaches": recon.hibp_breaches(target)}
+    if name == "mailsec":
+        return mailsec_report(target)
+    raise ValueError(f"unknown passive stage: {name}")
+
+
+async def _run_one(name: str, target: str, ctx: dict) -> tuple[str, Any]:
+    """Executa uma etapa com captura de erro. Passivas rodam em thread."""
+    try:
+        if name == "scan":
+            from .scan import perform_scan
+
+            ip = target if ctx["is_ip"] else (_resolve(target) or target)
+            results = await perform_scan(
+                ip, ctx["scan_type"], concurrency=ctx["concurrency"], nvd_api_key=ctx["nvd_key"],
+            )
+            return (name, {str(port): data for port, data in results.items()})
+        return (name, await asyncio.to_thread(_passive_stage, name, target, ctx))
+    except Exception as e:  # noqa: BLE001 - etapa resiliente
+        log.warning("audit stage '%s' falhou: %s", name, e)
+        return (name, {"error": str(e)})
+
+
+def _select_stages(is_ip: bool, active: bool, only: list[str] | None,
+                   skip: list[str] | None) -> list[str]:
+    """Resolve a lista final de etapas conforme tipo de alvo e flags."""
+    stages = list(PASSIVE_STAGES) + (list(ACTIVE_STAGES) if active else [])
+    if only:
+        wanted = set(only)
+        stages = [s for s in ALL_STAGES if s in wanted and (active or s not in ACTIVE_STAGES)]
+    if skip:
+        stages = [s for s in stages if s not in set(skip)]
+    if is_ip:
+        stages = [s for s in stages if s not in _DOMAIN_ONLY]
+    return stages
+
+
+def _summarize(stages_out: dict) -> dict:
+    """Resumo executivo: contagens e destaques das seções coletadas."""
+    summary: dict[str, Any] = {}
+    scan = stages_out.get("scan")
+    if isinstance(scan, dict) and "error" not in scan:
+        open_ports = list(scan.keys())
+        cves = [c for port in scan.values() for c in port.get("vulnerabilidades", [])]
+        kev = [c for c in cves if c.get("kev")]
+        summary["open_ports"] = len(open_ports)
+        summary["cves"] = len(cves)
+        summary["kev_cves"] = len(kev)
+    subs = stages_out.get("subdomains")
+    if isinstance(subs, dict) and "total" in subs:
+        summary["subdomains"] = subs["total"]
+    mail = stages_out.get("mailsec")
+    if isinstance(mail, dict) and "summary" in mail:
+        summary["mailsec_weak"] = mail["summary"].get("weak", 0) + mail["summary"].get("missing", 0)
+    return summary
+
+
+async def run_audit(
+    target: str,
+    active: bool = False,
+    authorized: bool = False,
+    only: list[str] | None = None,
+    skip: list[str] | None = None,
+    concurrency: int = 100,
+    nvd_key: str = "",
+    scan_type: str = "fast",
+) -> dict:
+    """Roda o audit e devolve o relatório consolidado.
+
+    Etapas ativas (scan) só rodam com ``active=True`` **e** ``authorized=True`` —
+    autorização é exigida p/ qualquer ação intrusiva.
+    """
+    target = sanitize_input(target, r"[A-Za-z0-9.:/-]")
+    is_ip = _is_ip(target)
+    run_active = active and authorized
+    ctx = {"is_ip": is_ip, "concurrency": concurrency, "nvd_key": nvd_key, "scan_type": scan_type}
+
+    stages = _select_stages(is_ip, run_active, only, skip)
+    results = await asyncio.gather(*[_run_one(s, target, ctx) for s in stages])
+    stages_out = dict(results)
+    # reordena conforme ALL_STAGES p/ saída estável
+    ordered = {s: stages_out[s] for s in ALL_STAGES if s in stages_out}
+
+    return {
+        "target": target,
+        "is_ip": is_ip,
+        "active": run_active,
+        "active_requested_without_auth": active and not authorized,
+        "generated": datetime.now(timezone.utc).strftime("%Y-%m-%d %H:%M:%S UTC"),
+        "summary": _summarize(ordered),
+        "stages": ordered,
+    }

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/gyntoolkit/cli.py

@@ -10,6 +10,7 @@ from pathlib import Path
 from colorama import Fore, Style
 
 from . import i18n, ui
+from .audit import run_audit
 from .brute import (
     cupp_generate,
     http_bruteforce,
@@ -20,6 +21,7 @@ from .brute import (
 from .config import CONFIG
 from .core import is_admin_windows, sanitize_input, show_menu
 from .export import save_report
+from .mailsec import mailsec_report
 from .recon import (
     dns_lookup,
     escolher_tipo_dns,
@@ -63,13 +65,44 @@ def _normalize_scan_type(raw: str, default: str) -> str:
 
 
 def _scan_risk_label(risco: str) -> str:
-    return i18n.t("scan.risk_high") if risco == "high" else i18n.t("scan.risk_low")
+    return i18n.t(f"scan.risk_{risco}") if risco in ("critical", "high", "medium", "low") else risco
 
 
 def _scan_service_label(service: str) -> str:
     return i18n.t("scan.service_unknown") if service == "unknown" else service
 
 
+def _fmt_cve(v: dict) -> str:
+    """Formata um CVE enriquecido p/ célula de tabela: ID (CVSS, EPSS%, KEV)."""
+    parts = []
+    if v.get("cvss") is not None:
+        parts.append(f"CVSS {v['cvss']}")
+    if v.get("epss") is not None:
+        parts.append(f"EPSS {round(v['epss'] * 100, 1)}%")
+    if v.get("kev"):
+        parts.append("KEV")
+    suffix = f" ({', '.join(parts)})" if parts else ""
+    return f"{v['id']}{suffix}"
+
+
+def _mailsec_detail(name: str, c: dict) -> str:
+    """Resumo curto de uma checagem de email security p/ a tabela."""
+    if name == "spf":
+        d = c.get("record") or "—"
+        if c.get("notes"):
+            d += " · " + "; ".join(c["notes"])
+        return d[:70]
+    if name == "dmarc":
+        return f"p={c.get('policy') or '—'}"
+    if name == "dkim":
+        return ", ".join(c.get("selectors_found") or []) or "no selector matched"
+    if name == "dnssec":
+        return f"DNSKEY={c.get('dnskey')} DS={c.get('ds')}"
+    if name == "caa":
+        return f"{len(c.get('records') or [])} record(s)"
+    return ""
+
+
 def _offer_export(data, basename: str, title: str) -> None:
     """Oferece salvar ``data`` em JSON/HTML conforme config. No-op se vazio."""
     if not data:
@@ -98,6 +131,7 @@ async def main_flow():
             i18n.t("menu.main.brute"),
             i18n.t("menu.main.scan"),
             i18n.t("menu.main.utils"),
+            i18n.t("menu.main.audit"),
         ])
 
         if choice == 0:
@@ -120,6 +154,7 @@ async def main_flow():
                 i18n.t("menu.info.axfr"),
                 i18n.t("menu.info.webscan"),
                 i18n.t("menu.info.shodan"),
+                i18n.t("menu.info.mailsec"),
             ])
 
             if sub_choice == 1:
@@ -317,6 +352,18 @@ async def main_flow():
                     ui.print_kv(i18n.t("label.shodan", t=target), info)
                     _offer_export(info, f"shodan-{target}", f"Shodan {target}")
 
+            elif sub_choice == 15:
+                domain = sanitize_input(input(_cyan("prompt.root_domain")), r"[A-Za-z0-9.-]")
+                with ui.status(i18n.t("status.mailsec", d=domain)):
+                    r = mailsec_report(domain)
+                rows = [
+                    (name.upper(), i18n.t(f"mailsec.verdict_{c['verdict']}"), _mailsec_detail(name, c))
+                    for name, c in r["checks"].items()
+                ]
+                ui.print_table(i18n.t("label.mailsec", d=domain),
+                               i18n.t("table.mailsec").split("|"), rows)
+                _offer_export(r, f"mailsec-{domain}", f"Email Security {domain}")
+
         elif choice == 2:  # Brute Force
             b = CONFIG["brute"]
             sub_choice = show_menu(i18n.t("menu.brute.title"), [
@@ -456,10 +503,13 @@ async def main_flow():
                 rows = [
                     (port, _scan_service_label(data["service"]), _scan_risk_label(data["risco"]),
                      (data["banner"] or "")[:60],
-                     ", ".join(data["vulnerabilidades"]) or "—")
+                     ", ".join(_fmt_cve(v) for v in data["vulnerabilidades"]) or "—")
                     for port, data in results.items()
                 ]
-                row_styles = ["red" if data["risco"] == "high" else "green" for data in results.values()]
+                row_styles = [
+                    "red" if data["risco"] in ("critical", "high") else "green"
+                    for data in results.values()
+                ]
                 if rows:
                     ui.print_table(i18n.t("label.scan_results", h=host),
                                    i18n.t("table.scan").split("|"),
@@ -511,6 +561,16 @@ async def main_flow():
                     print(f" {Fore.YELLOW}payload:{Style.RESET_ALL} {json.dumps(r['payload'], indent=2)}")
                     print(f" {Fore.YELLOW}signature:{Style.RESET_ALL} {r['signature']}")
 
+        elif choice == 5:  # Audit (perfil consolidado — passivo no menu)
+            target = sanitize_input(input(_cyan("prompt.target")))
+            ui.notice(i18n.t("msg.audit_passive_note"))
+            with ui.status(i18n.t("status.audit", t=target)):
+                report = await run_audit(target)  # menu = passivo; scan ativo via CLI
+            ran = ", ".join(report["stages"].keys())
+            ui.print_kv(i18n.t("label.audit", t=target),
+                        {**report["summary"], i18n.t("audit.stages_run"): ran})
+            _offer_export(report, f"audit-{target}", f"Audit {target}")
+
         _pause()
 
 

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/gyntoolkit/commands.py

@@ -58,6 +58,12 @@ def _h_recon(args: argparse.Namespace) -> tuple[Any, str, str]:
     if a == "axfr":
         r = recon.zone_transfer(args.target)
         return (r, f"axfr-{args.target}", f"Zone Transfer {args.target}")
+    if a == "mailsec":
+        from .mailsec import mailsec_report
+
+        sels = [s for s in (args.selectors or "").split(",") if s.strip()] or None
+        r = mailsec_report(args.target, selectors=sels)
+        return (r, f"mailsec-{args.target}", f"Email Security {args.target}")
     if a == "webscan":
         from pathlib import Path as _P
 
@@ -107,7 +113,10 @@ def _h_scan(args: argparse.Namespace) -> tuple[Any, str, str]:
                 f"Host discovery {args.target}")
     concurrency = args.concurrency or CONFIG["scan"].get("concurrency", 100)
     nvd_key = CONFIG.get("api_keys", {}).get("nvd", "")
-    results = asyncio.run(perform_scan(args.target, args.type, concurrency=concurrency, nvd_api_key=nvd_key))
+    results = asyncio.run(perform_scan(
+        args.target, args.type, concurrency=concurrency, nvd_api_key=nvd_key,
+        min_cvss=args.min_cvss, kev_only=args.kev_only,
+    ))
     # chaves int → str p/ JSON estável
     report = {str(port): data for port, data in results.items()}
     return ({args.target: report}, f"scan-{args.target}", f"Scan {args.target}")
@@ -190,7 +199,24 @@ def _run_wordlist(args: argparse.Namespace) -> int:
     return 0
 
 
-_DISPATCH = {"recon": _h_recon, "scan": _h_scan, "utils": _h_utils, "brute": _h_brute}
+def _h_audit(args: argparse.Namespace) -> tuple[Any, str, str]:
+    from .audit import run_audit
+
+    only = [s for s in (args.only or "").split(",") if s.strip()] or None
+    skip = [s for s in (args.skip or "").split(",") if s.strip()] or None
+    concurrency = CONFIG["scan"].get("concurrency", 100)
+    nvd_key = CONFIG.get("api_keys", {}).get("nvd", "")
+    report = asyncio.run(run_audit(
+        args.target, active=args.active, authorized=args.authorize,
+        only=only, skip=skip, concurrency=concurrency, nvd_key=nvd_key, scan_type=args.type,
+    ))
+    if report.get("active_requested_without_auth"):
+        print("[!] --active ignored without --authorize (scan skipped).", file=sys.stderr)
+    return (report, f"audit-{args.target}", f"Audit {args.target}")
+
+
+_DISPATCH = {"recon": _h_recon, "scan": _h_scan, "utils": _h_utils,
+             "brute": _h_brute, "audit": _h_audit}
 
 
 def build_parser() -> argparse.ArgumentParser:
@@ -229,6 +255,9 @@ def build_parser() -> argparse.ArgumentParser:
     web_p = recon_sub.add_parser("webscan", parents=[io])
     web_p.add_argument("target", help="Base URL to enumerate.")
     web_p.add_argument("--wordlist", default=None, help="Path to a custom paths wordlist.")
+    mail_p = recon_sub.add_parser("mailsec", parents=[io])
+    mail_p.add_argument("target", help="Domain to analyze (SPF/DKIM/DMARC/DNSSEC/CAA).")
+    mail_p.add_argument("--selectors", default="", help="Comma-separated DKIM selectors to test.")
     tr_p = recon_sub.add_parser("traceroute", parents=[io])
     tr_p.add_argument("target")
     tr_p.add_argument("--max-hops", dest="max_hops", type=int,
@@ -241,6 +270,10 @@ def build_parser() -> argparse.ArgumentParser:
     scan_p.add_argument("target", help="IP/host, or CIDR (e.g. 192.168.0.0/24) for discovery.")
     scan_p.add_argument("--type", choices=("fast", "full"), default=CONFIG["scan"]["default_type"])
     scan_p.add_argument("--concurrency", type=int, default=0, help="Simultaneous probes (0 = config default).")
+    scan_p.add_argument("--min-cvss", dest="min_cvss", type=float, default=0.0,
+                        help="Only show CVEs with CVSS base score >= this value.")
+    scan_p.add_argument("--kev-only", dest="kev_only", action="store_true",
+                        help="Only show CVEs in the CISA KEV catalog.")
 
     # utils
     utils_p = sub.add_parser("utils", help="Crypto helpers.")
@@ -274,6 +307,19 @@ def build_parser() -> argparse.ArgumentParser:
     http_p.add_argument("--workers", type=int, default=0)
     http_p.add_argument("--authorize", action="store_true", help="Confirm you have written authorization.")
 
+    # audit (orquestrador: 1 alvo → perfil consolidado)
+    audit_p = sub.add_parser("audit", parents=[io],
+                             help="Full target profile: passive recon (+ active scan with --active).")
+    audit_p.add_argument("target", help="Domain or IP to profile.")
+    audit_p.add_argument("--active", action="store_true",
+                         help="Include the active port scan (requires --authorize).")
+    audit_p.add_argument("--authorize", action="store_true",
+                         help="Confirm written authorization for the active scan.")
+    audit_p.add_argument("--type", choices=("fast", "full"), default="fast",
+                         help="Scan type for the active stage.")
+    audit_p.add_argument("--only", default="", help="Comma-separated stages to run exclusively.")
+    audit_p.add_argument("--skip", default="", help="Comma-separated stages to skip.")
+
     # wordlist (gerador nativo; saída em linhas, não JSON)
     wl_p = sub.add_parser("wordlist", help="Generate a custom wordlist (CUPP-style, offline).")
     wl_p.add_argument("--terms", required=True, help="Comma-separated base words (name, pet, company, ...).")

{gyntoolkit-2.2.0 → gyntoolkit-2.3.0}/gyntoolkit/core.py

@@ -39,7 +39,7 @@ LOGO = f"""{Fore.GREEN}
  ██████╗██╗   ██╗███╗   ██╗    ████████╗ ██████╗  ██████╗ ██╗     ██╗  ██╗██╗████████╗
 ██╔════╝╚██╗ ██╔╝████╗  ██║    ╚══██╔══╝██╔═══██╗██╔═══██╗██║     ██║ ██╔╝██║╚══██╔══╝
 ██║  ███╗╚████╔╝ ██╔██╗ ██║       ██║   ██║   ██║██║   ██║██║     █████╔╝ ██║   ██║
-██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.2
+██║   ██║ ╚██╔╝  ██║╚██╗██║       ██║   ██║   ██║██║   ██║██║     ██╔═██╗ ██║   ██║   v2.3
 ╚██████╔╝  ██║   ██║ ╚████║       ██║   ╚██████╔╝╚██████╔╝███████╗██║  ██╗██║   ██║ by: PH,Fl4vs
  ╚═════╝   ╚═╝   ╚═╝  ╚═══╝       ╚═╝    ╚═════╝  ╚═════╝ ╚══════╝╚═╝  ╚═╝╚═╝   ╚═╝
 {Style.RESET_ALL}"""