secator 0.11.1__tar.gz → 0.13.0__tar.gz

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.alpine

@@ -21,6 +21,7 @@ RUN pipx install --pip-args="--no-cache-dir" . && \
 
 FROM python:3.12-alpine
 ARG flavor=full
+ARG build_from_source=false
 ENV TERM="xterm-256color"
 ENV PATH="${PATH}:/root/.local/bin"
 ENV GOBIN="/root/.local/bin"
@@ -29,5 +30,6 @@ RUN apk add --no-cache \
 	flock \
 	pipx \
 	sudo
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
 RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.arch

@@ -31,6 +31,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.debian

@@ -33,6 +33,6 @@ RUN pipx install . && \
 	secator install addons redis && \
 	secator install addons dev
 RUN secator install langs go
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.kali

@@ -32,6 +32,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.osx

@@ -35,6 +35,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/.docker/Dockerfile.ubuntu

@@ -32,6 +32,6 @@ RUN pipx install . && \
 	secator install addons mongodb && \
 	secator install addons redis && \
 	secator install addons dev
-RUN secator config set security.force_source_install true
-RUN secator install tools --cleanup --fail-fast
+RUN if [ "$build_from_source" = "true" ]; then secator config set security.force_source_install 1; fi
+RUN if [ "$flavor" != "lite" ]; then secator install tools --cleanup --fail-fast; fi
 ENTRYPOINT ["secator"]

{secator-0.11.1 → secator-0.13.0}/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## [0.13.0](https://github.com/freelabz/secator/compare/v0.12.0...v0.13.0) (2025-04-29)
+
+
+### Features
+
+* **core:** restore default task opts, improve workflows ([#560](https://github.com/freelabz/secator/issues/560)) ([4849d44](https://github.com/freelabz/secator/commit/4849d44448f52529380a6d9163a1b4db54114958))
+
+
+### Bug Fixes
+
+* use distro.like() instead of distro.id() ([#604](https://github.com/freelabz/secator/issues/604)) ([15157d4](https://github.com/freelabz/secator/commit/15157d433a0c60292ed91bb26f513a10f15924c2))
+
+## [0.12.0](https://github.com/freelabz/secator/compare/v0.11.1...v0.12.0) (2025-04-24)
+
+
+### Features
+
+* add --show option to display yaml ([#601](https://github.com/freelabz/secator/issues/601)) ([8edffe9](https://github.com/freelabz/secator/commit/8edffe9f879bb7a99a7e5fead1a18dbf6da5d140))
+* **arjun:** add --disable-redirects opts ([#598](https://github.com/freelabz/secator/issues/598)) ([17618c7](https://github.com/freelabz/secator/commit/17618c7ca647536207a96ce2c235ec5227db2cef))
+* **workflows:** improve url params fuzz workflow ([#597](https://github.com/freelabz/secator/issues/597)) ([38fa1bc](https://github.com/freelabz/secator/commit/38fa1bcd76c9c6dbe0bc85c9c8c707ae642b9830))
+
+
+### Bug Fixes
+
+* better options overrides for CLI ([#596](https://github.com/freelabz/secator/issues/596)) ([74e256b](https://github.com/freelabz/secator/commit/74e256b434d36f1e16390f8d06571e726517f5ce))
+* worker quiet option ([#602](https://github.com/freelabz/secator/issues/602)) ([9b2c084](https://github.com/freelabz/secator/commit/9b2c08458e3412a89ec39547a728a26885fe1162))
+
 ## [0.11.1](https://github.com/freelabz/secator/compare/v0.11.0...v0.11.1) (2025-04-23)
 
 

{secator-0.11.1 → secator-0.13.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: secator
-Version: 0.11.1
+Version: 0.13.0
 Summary: The pentester's swiss knife.
 Project-URL: Homepage, https://github.com/freelabz/secator
 Project-URL: Issues, https://github.com/freelabz/secator/issues

{secator-0.11.1 → secator-0.13.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = 'hatchling.build'
 
 [project]
 name = 'secator'
-version = "0.11.1"
+version = "0.13.0"
 authors = [{ name = 'FreeLabz', email = 'sales@freelabz.com' }]
 readme = 'README.md'
 description = "The pentester's swiss knife."

{secator-0.11.1 → secator-0.13.0}/secator/cli.py

@@ -37,7 +37,7 @@ ALL_TASKS = discover_tasks()
 ALL_WORKFLOWS = [t for t in TEMPLATES if t.type == 'workflow']
 ALL_SCANS = [t for t in TEMPLATES if t.type == 'scan']
 FINDING_TYPES_LOWER = [c.__name__.lower() for c in FINDING_TYPES]
-CONTEXT_SETTINGS = dict(help_option_names=['-h', '--help'])
+CONTEXT_SETTINGS = dict(help_option_names=['-h', '-help', '--help'])
 
 
 #-----#
@@ -46,15 +46,16 @@ CONTEXT_SETTINGS = dict(help_option_names=['-h', '--help'])
 
 
 @click.group(cls=OrderedGroup, invoke_without_command=True, context_settings=CONTEXT_SETTINGS)
-@click.option('--version', '-version', is_flag=True, default=False)
+@click.option('--version', '-version', '-v', is_flag=True, default=False)
+@click.option('--quiet', '-quiet', '-q', is_flag=True, default=False)
 @click.pass_context
-def cli(ctx, version):
+def cli(ctx, version, quiet):
 	"""Secator CLI."""
 	ctx.obj = {
 		'piped_input': S_ISFIFO(os.fstat(0).st_mode),
 		'piped_output': not sys.stdout.isatty()
 	}
-	if not ctx.obj['piped_output']:
+	if not ctx.obj['piped_output'] and not quiet:
 		console.print(ASCII, highlight=False)
 	if ctx.invoked_subcommand is None:
 		if version:
@@ -67,11 +68,16 @@ def cli(ctx, version):
 # TASK #
 #------#
 
-@cli.group(aliases=['x', 't'])
+@cli.group(aliases=['x', 't'], invoke_without_command=True)
+@click.option('--list', '-list', is_flag=True, default=False)
 @click.pass_context
-def task(ctx):
+def task(ctx, list=False):
 	"""Run a task."""
-	pass
+	if list:
+		print("\n".join(sorted([t.__name__ for t in ALL_TASKS])))
+		return
+	if ctx.invoked_subcommand is None:
+		ctx.get_help()
 
 
 for cls in ALL_TASKS:
@@ -83,11 +89,16 @@ for cls in ALL_TASKS:
 #----------#
 
 
-@cli.group(cls=OrderedGroup, aliases=['w'])
+@cli.group(cls=OrderedGroup, aliases=['w'], invoke_without_command=True)
+@click.option('--list', '-list', is_flag=True, default=False)
 @click.pass_context
-def workflow(ctx):
+def workflow(ctx, list=False):
 	"""Run a workflow."""
-	pass
+	if list:
+		print("\n".join(sorted([t.name for t in ALL_WORKFLOWS])))
+		return
+	if ctx.invoked_subcommand is None:
+		ctx.get_help()
 
 
 for config in sorted(ALL_WORKFLOWS, key=lambda x: x['name']):
@@ -98,11 +109,16 @@ for config in sorted(ALL_WORKFLOWS, key=lambda x: x['name']):
 # SCAN #
 #------#
 
-@cli.group(cls=OrderedGroup, aliases=['s'])
+@cli.group(cls=OrderedGroup, aliases=['s'], invoke_without_command=True)
+@click.option('--list', '-list', is_flag=True, default=False)
 @click.pass_context
-def scan(ctx):
+def scan(ctx, list=False):
 	"""Run a scan."""
-	pass
+	if list:
+		print("\n".join(sorted([t.name for t in ALL_SCANS])))
+		return
+	if ctx.invoked_subcommand is None:
+		ctx.get_help()
 
 
 for config in sorted(ALL_SCANS, key=lambda x: x['name']):
@@ -119,7 +135,7 @@ for config in sorted(ALL_SCANS, key=lambda x: x['name']):
 @click.option('-r', '--reload', is_flag=True, help='Autoreload Celery on code changes.')
 @click.option('-Q', '--queue', type=str, default='', help='Listen to a specific queue.')
 @click.option('-P', '--pool', type=str, default='eventlet', help='Pool implementation.')
-@click.option('--quiet', is_flag=True, help='Quiet mode.')
+@click.option('--quiet', is_flag=True, default=False, help='Quiet mode.')
 @click.option('--loglevel', type=str, default='INFO', help='Log level.')
 @click.option('--check', is_flag=True, help='Check if Celery worker is alive.')
 @click.option('--dev', is_flag=True, help='Start a worker in dev mode (celery multi).')
@@ -860,13 +876,21 @@ def health(json, debug, strict):
 		import json as _json
 		print(_json.dumps(status))
 
+	# Print errors and warnings
+	error = False
+	for tool, info in status['tools'].items():
+		if not info['installed']:
+			console.print(Warning(message=f'{tool} is not installed.'))
+			error = True
+		elif info['outdated']:
+			message = (
+				f'{tool} is outdated (current:{info["version"]}, latest:{info["latest_version"]}).'
+				f' Run `secator install tools {tool}` to update it.'
+			)
+			console.print(Warning(message=message))
+
 	# Strict mode
 	if strict:
-		error = False
-		for tool, info in status['tools'].items():
-			if not info['installed']:
-				console.print(Error(message=f'{tool} is not installed.'))
-				error = True
 		if error:
 			sys.exit(1)
 		console.print(Info(message='Strict healthcheck passed !'))
@@ -1061,16 +1085,27 @@ def install_tools(cmds, cleanup, fail_fast):
 	if CONFIG.offline_mode:
 		console.print(Error(message='Cannot run this command in offline mode.'))
 		return
+	tools = []
 	if cmds is not None:
 		cmds = cmds.split(',')
-		tools = [cls for cls in ALL_TASKS if cls.__name__ in cmds]
+		for cmd in cmds:
+			if '==' in cmd:
+				cmd, version = tuple(cmd.split('=='))
+			else:
+				cmd, version = cmd, None
+			cls = next((cls for cls in ALL_TASKS if cls.__name__ == cmd), None)
+			if cls:
+				if version:
+					cls.install_version = version
+				tools.append(cls)
+			else:
+				console.print(Warning(message=f'Tool {cmd} is not supported or inexistent.'))
 	else:
 		tools = ALL_TASKS
 	tools.sort(key=lambda x: x.__name__)
 	return_code = 0
 	if not tools:
-		cmd_str = ' '.join(cmds)
-		console.print(Error(message=f'No tools found for {cmd_str}.'))
+		console.print(Error(message='No tools found for installing.'))
 		return
 	for ix, cls in enumerate(tools):
 		# with console.status(f'[bold yellow][{ix + 1}/{len(tools)}] Installing {cls.__name__} ...'):
@@ -1140,7 +1175,7 @@ def update(all):
 			cmd = cls.cmd.split(' ')[0]
 			version_flag = cls.get_version_flag()
 			info = get_version_info(cmd, version_flag, cls.install_github_handle)
-			if not info['installed'] or info['status'] == 'outdated' or not info['latest_version']:
+			if not info['installed'] or info['outdated'] or not info['latest_version']:
 				# with console.status(f'[bold yellow]Installing {cls.__name__} ...'):
 				status = ToolInstaller.install(cls)
 				if not status.is_ok():
@@ -1375,73 +1410,147 @@ def performance(tasks, workflows, scans, test):
 @test.command()
 @click.argument('name', type=str)
 @click.option('--verbose', '-v', is_flag=True, default=False, help='Print verbose output')
-def task(name, verbose):
-	"""Test task."""
+@click.option('--check', '-c', is_flag=True, default=False, help='Check task semantics only (no unit + integration tests)')  # noqa: E501
+def task(name, verbose, check):
+	"""Test a single task for semantics errors, and run unit + integration tests."""
+	console.print(f'[bold gold3]:wrench: Testing task {name} ...[/]')
 	task = [task for task in ALL_TASKS if task.__name__ == name]
 	warnings = []
+	errors = []
 	exit_code = 0
 
 	# Check if task is correctly registered
-	check_error(task, 'Check task is registered', 'Task is not registered. Make sure there is no syntax errors in the task class definition.', warnings)  # noqa: E501
 	task = task[0]
 	task_name = task.__name__
 
 	# Run install
-	console.print(f'\n[bold gold3]:wrench: Running install tests for task {name} ...[/]') if verbose else None
 	cmd = f'secator install tools {task_name}'
 	ret_code = Command.execute(cmd, name='install', quiet=not verbose, cwd=ROOT_FOLDER)
 	version_info = task.get_version_info()
-	check_error(version_info['installed'], 'Check task is installed', 'Failed to install command. Fix your installation command.', warnings)  # noqa: E501
-	check_error(any(cmd for cmd in [task.install_cmd, task.install_github_handle]), 'Check task installation command is defined', 'Task has no installation command. Please define a `install_cmd` or `install_github_handle` class attribute.', warnings)  # noqa: E501
-	check_error(version_info['version'], 'Check task version can be fetched', 'Failed to detect version info. Fix your `version_flag` class attribute.', warnings)  # noqa: E501
+	if verbose:
+		console.print(f'Version info:\n{version_info}')
+	status = version_info['status']
+	check_test(
+		version_info['installed'],
+		'Check task is installed',
+		'Failed to install command. Fix your installation command.',
+		errors
+	)
+	check_test(
+		any(cmd for cmd in [task.install_cmd, task.install_github_handle]),
+		'Check task installation command is defined',
+		'Task has no installation command. Please define one or more of the following class attributes: `install_pre`, `install_cmd`, `install_post`, `install_github_handle`.',  # noqa: E501
+		errors
+	)
+	check_test(
+		version_info['version'],
+		'Check task version can be fetched',
+		'Failed to detect current version. Consider updating your `version_flag` class attribute.',
+		warnings,
+		warn=True
+	)
+	check_test(
+		status != 'latest unknown',
+		'Check latest version',
+		'Failed to detect latest version.',
+		warnings,
+		warn=True
+	)
+	check_test(
+		not version_info['outdated'],
+		'Check task version is up to date',
+		f'Task is not up to date (current version: {version_info["version"]}, latest: {version_info["latest_version"]}). Consider updating your `install_version` class attribute.',  # noqa: E501
+		warnings,
+		warn=True
+	)
 
 	# Run task-specific tests
-	console.print(f'\n[bold gold3]:wrench: Running task-specific tests for {name} ...[/]') if verbose else None
-	check_error(task.__doc__, 'Check task description is set (cls.__doc__)', 'Task has no description (class docstring).', warnings)  # noqa: E501
-	check_error(task.cmd, 'Check task command is set (cls.cmd)', 'Task has no cmd attribute.', warnings)
-	check_error(task.input_type, 'Check task input type is set (cls.input_type)', 'Task has no input_type attribute.', warnings)  # noqa: E501
-	check_error(task.output_types, 'Check task output types is set (cls.output_types)', 'Task has no output_types attribute.', warnings)  # noqa: E501
-
-	# Print all warnings
-	exit_code = 1 if len(warnings) > 0 else 0
-	if exit_code == 1:
-		console.print()
-		console.print("[bold red]Issues:[/]")
-		for warning in warnings:
-			console.print(warning)
-		console.print()
-		console.print(Info(message=f'Skipping unit and integration tests for {name} due to previous errors.'))
-		console.print(Error(message=f'Task {name} tests failed. Please fix the issues above before making a PR.'))
-		sys.exit(exit_code)
-
-	# Run unit tests
-	console.print(f'\n[bold gold3]:wrench: Running unit tests for {name} ...[/]') if verbose else None
-	cmd = f'secator test unit --tasks {name}'
-	ret_code = run_test(cmd, exit=False, verbose=verbose)
-	check_error(ret_code == 0, 'Check unit tests pass', 'Unit tests failed.', warnings)
-
-	# Run integration tests
-	console.print(f'\n[bold gold3]:wrench: Running integration tests for {name} ...[/]') if verbose else None
-	cmd = f'secator test integration --tasks {name}'
-	ret_code = run_test(cmd, exit=False, verbose=verbose)
-	check_error(ret_code == 0, 'Check integration tests pass', 'Integration tests failed.', warnings)
+	check_test(
+		task.__doc__,
+		'Check task description is set (cls.__doc__)',
+		'Task has no description (class docstring).',
+		errors
+	)
+	check_test(
+		task.cmd,
+		'Check task command is set (cls.cmd)',
+		'Task has no cmd attribute.',
+		errors
+	)
+	check_test(
+		task.input_type,
+		'Check task input type is set (cls.input_type)',
+		'Task has no input_type attribute.',
+		warnings,
+		warn=True
+	)
+	check_test(
+		task.output_types,
+		'Check task output types is set (cls.output_types)',
+		'Task has no output_types attribute. Consider setting some so that secator can load your task outputs.',
+		warnings,
+		warn=True
+	)
+	check_test(
+		task.install_version,
+		'Check task install_version is set (cls.install_version)',
+		'Task has no install_version attribute. Consider setting it to pin the tool version and ensure it does not break in the future.',  # noqa: E501
+		warnings,
+		warn=True
+	)
+
+	if not check:
+
+		# Run unit tests
+		cmd = f'secator test unit --tasks {name}'
+		ret_code = run_test(cmd, exit=False, verbose=verbose)
+		check_test(
+			ret_code == 0,
+			'Check unit tests pass',
+			'Unit tests failed.',
+			errors
+		)
+
+		# Run integration tests
+		cmd = f'secator test integration --tasks {name}'
+		ret_code = run_test(cmd, exit=False, verbose=verbose)
+		check_test(
+			ret_code == 0,
+			'Check integration tests pass',
+			'Integration tests failed.',
+			errors
+		)
 
 	# Exit with exit code
-	exit_code = 1 if len(warnings) > 0 else 0
+	exit_code = 1 if len(errors) > 0 else 0
 	if exit_code == 0:
-		console.print(f':tada: Task {name} tests passed ! You are free to make a PR.', style='bold green')
+		console.print(f':tada: Task {name} tests passed !', style='bold green')
 	else:
-		console.print(Error(message=f'Task {name} tests failed. Please fix the issues above before making a PR.'))
+		console.print('\n[bold gold3]Errors:[/]')
+		for error in errors:
+			console.print(error)
+		console.print(Error(message=f'Task {name} tests failed. Please fix the issues above.'))
 
+	if warnings:
+		console.print('\n[bold gold3]Warnings:[/]')
+		for warning in warnings:
+			console.print(warning)
+
+	console.print("\n")
 	sys.exit(exit_code)
 
 
-def check_error(condition, message, error, warnings=[]):
+def check_test(condition, message, fail_message, results=[], warn=False):
 	console.print(f'[bold magenta]:zap: {message} ...[/]', end='')
 	if not condition:
-		warning = Warning(message=error)
-		warnings.append(warning)
-		console.print(' [bold red]FAILED[/]', style='dim')
+		if not warn:
+			error = Error(message=fail_message)
+			console.print(' [bold red]FAILED[/]', style='dim')
+			results.append(error)
+		else:
+			warning = Warning(message=fail_message)
+			console.print(' [bold yellow]WARNING[/]', style='dim')
+			results.append(warning)
 	else:
 		console.print(' [bold green]OK[/]', style='dim')
 	return True

{secator-0.11.1 → secator-0.13.0}/secator/config.py

@@ -94,6 +94,7 @@ class Runners(StrictModel):
 	skip_cve_low_confidence: bool = False
 	remove_duplicates: bool = False
 	show_chunk_progress: bool = False
+	show_command_output: bool = False
 
 
 class Security(StrictModel):

{secator-0.11.1 → secator-0.13.0}/secator/configs/workflows/host_recon.yaml

@@ -7,10 +7,19 @@ input_types:
   - host
   - cidr_range
 tasks:
+  naabu:
+    description: Find open ports
+    ports: "-"  # scan all ports
   nmap:
     description: Search for vulnerabilities on open ports
-    skip_host_discovery: True
-    ports: "-"  # scan all ports
+    version_detection: True
+    script: vulners
+    targets_:
+    - port.host
+    - target.name
+    ports_:
+    - port.port
+    ports: "-"  # default if no port found by naabu
   _group/1:
     httpx:
       description: Probe HTTP services on open ports

secator-0.13.0/secator/configs/workflows/port_scan.yaml

@@ -0,0 +1,39 @@
+type: workflow
+name: port_scan
+alias: pscan
+description: Port scan
+tags: [recon, network, http, vuln]
+input_types:
+  - host
+  - cidr_range
+tasks:
+  naabu:
+    description: Find open ports
+    skip_host_discovery: True
+    ports: "-"  # scan all ports
+  nmap:
+    description: Search for vulnerabilities on open ports
+    skip_host_discovery: True
+    version_detection: True
+    targets_: port.host
+    ports_: port.port
+  _group:
+    searchsploit:
+      description: Search for related exploits
+      targets_:
+      - type: port
+        field: '{host}~{service_name}'
+        condition: item._source.startswith('nmap') and len(item.service_name.split('/')) > 1
+    httpx:
+      description: Probe HTTP services on open ports
+      targets_:
+        - type: port
+          field: '{host}:{port}'
+          condition: item._source.startswith('nmap')
+results:
+  - type: port
+
+  - type: url
+    condition: item.status_code != 0
+
+  - type: vulnerability

{secator-0.11.1 → secator-0.13.0}/secator/configs/workflows/url_dirsearch.yaml

@@ -14,6 +14,11 @@ tasks:
         field: '{name}/FUZZ'
   cariddi:
     description: Crawl HTTP directories for content
+    info: True
+    secrets: True
+    errors: True
+    juicy_extensions: 1
+    juicy_endpoints: True
     targets_:
       - target.name
       - url.url

{secator-0.11.1 → secator-0.13.0}/secator/configs/workflows/url_params_fuzz.yaml

@@ -11,6 +11,8 @@ tasks:
   ffuf:
     description: Fuzz URL params
     wordlist: https://raw.githubusercontent.com/danielmiessler/SecLists/refs/heads/master/Discovery/Web-Content/burp-parameter-names.txt
+    auto_calibration: true
+    follow_redirect: true
     targets_:
       - type: url
         field: url