secator 0.16.5__tar.gz → 0.18.0__tar.gz

{secator-0.16.5 → secator-0.18.0}/.docker/build_all.sh

@@ -2,16 +2,28 @@
 
 # Define an array of distributions
 DISTROS=("alpine" "arch" "debian" "kali" "osx" "ubuntu")
+BUILDER=$(which docker || which podman || which buildah)
+
+if [ -z "$BUILDER" ]; then
+  echo "Error: No container builder found (docker, podman, or buildah required)"
+  exit 1
+fi
+
+echo "Using builder: $BUILDER"
+
+mkdir -p .docker/logs/
 
 # Function to build an image
 build_image() {
     local DISTRO=$1
     local DOCKERFILE=".docker/Dockerfile.${DISTRO}"
+    local STDOUT_LOG=".docker/logs/${DISTRO}.stdout"
+    local STDERR_LOG=".docker/logs/${DISTRO}.stderr"
     local IMAGE_NAME="secator-${DISTRO}"
 
     if [ -f "$DOCKERFILE" ]; then
         echo "🚀 Building $IMAGE_NAME using $DOCKERFILE..."
-        docker build -t "$IMAGE_NAME" -f "$DOCKERFILE" . && \
+        $BUILDER build -t "$IMAGE_NAME" -f "$DOCKERFILE" . > $STDOUT_LOG 2> $STDERR_LOG && \
         echo "✅ Successfully built $IMAGE_NAME" || \
         echo "❌ Failed to build $IMAGE_NAME"
     else

secator-0.18.0/.dockerignore

@@ -0,0 +1,4 @@
+.docker/logs
+.git
+.github
+.gitignore

{secator-0.16.5 → secator-0.18.0}/.gitignore

@@ -1,3 +1,6 @@
+# Build logs
+.docker/logs
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]

{secator-0.16.5 → secator-0.18.0}/CHANGELOG.md

@@ -1,5 +1,36 @@
 # Changelog
 
+## [0.18.0](https://github.com/freelabz/secator/compare/v0.17.0...v0.18.0) (2025-10-22)
+
+
+### Features
+
+* **workflow:** update user hunt ([#688](https://github.com/freelabz/secator/issues/688)) ([e4f3e29](https://github.com/freelabz/secator/commit/e4f3e294c1668c66ed893305b0147df37cb4453a))
+
+
+### Bug Fixes
+
+* broken sudo prompt because of os.setsid ([#722](https://github.com/freelabz/secator/issues/722)) ([5c77957](https://github.com/freelabz/secator/commit/5c77957cb78533b7e819c01c19de6e46eae0d2af))
+* bugs and warnings in task data ([#714](https://github.com/freelabz/secator/issues/714)) ([845415b](https://github.com/freelabz/secator/commit/845415bb337f77867d49be66bbd23eaf307e5848))
+* bup file flag ([#725](https://github.com/freelabz/secator/issues/725)) ([0622ef5](https://github.com/freelabz/secator/commit/0622ef509b1dc33996dd5e89aea5cd802160744d))
+* context propagation for subtasks ([#720](https://github.com/freelabz/secator/issues/720)) ([d636aa6](https://github.com/freelabz/secator/commit/d636aa66562fd030299fce20f3abaeca283eaf74))
+* **fping:** remove bad options, add new ones ([#713](https://github.com/freelabz/secator/issues/713)) ([4356b4f](https://github.com/freelabz/secator/commit/4356b4f120043e2f94973a9c0061345a06efaeda))
+* maigret version pin ([#721](https://github.com/freelabz/secator/issues/721)) ([488b5a1](https://github.com/freelabz/secator/commit/488b5a1b994e6d3dfadc409d09aaaeb93ff60fb4))
+* subfinder integration tests ([#724](https://github.com/freelabz/secator/issues/724)) ([8163152](https://github.com/freelabz/secator/commit/8163152efb09f3854ec9fa7125b16084eda4c98f))
+* wpscan errors and wordpress workflow ([#723](https://github.com/freelabz/secator/issues/723)) ([8ee32aa](https://github.com/freelabz/secator/commit/8ee32aacb1310cfb833bdcf696477ae29eb271c7))
+
+## [0.17.0](https://github.com/freelabz/secator/compare/v0.16.5...v0.17.0) (2025-09-06)
+
+
+### Features
+
+* enforceable memory limits ([#710](https://github.com/freelabz/secator/issues/710)) ([eaefa1f](https://github.com/freelabz/secator/commit/eaefa1f5497af4d6a6020e09d5f954ae4639f20c))
+
+
+### Bug Fixes
+
+* prod optimizations ([#708](https://github.com/freelabz/secator/issues/708)) ([efb5d3c](https://github.com/freelabz/secator/commit/efb5d3ce637a5de6e23ed157fd85d2a39bef360d))
+
 ## [0.16.5](https://github.com/freelabz/secator/compare/v0.16.4...v0.16.5) (2025-06-25)
 
 

{secator-0.16.5 → secator-0.18.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: secator
-Version: 0.16.5
+Version: 0.18.0
 Summary: The pentester's swiss knife.
 Project-URL: Homepage, https://github.com/freelabz/secator
 Project-URL: Issues, https://github.com/freelabz/secator/issues

{secator-0.16.5 → secator-0.18.0}/helm/templates/redis-service.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ .Values.redis.name }}
-  namespace: {{ .Values.namespace }}
 spec:
   type: ClusterIP
   ports:

{secator-0.16.5 → secator-0.18.0}/helm/templates/redis.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: {{ .Values.redis.name }}
-  namespace: {{ .Values.namespace }}
 spec:
   selector:
     matchLabels:
@@ -13,10 +12,15 @@ spec:
     metadata:
       labels:
         app: redis
-    spec:
+    spec:      
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       containers:
       - name: {{ .Values.redis.name }}
         image: {{ .Values.redis.image }}
+        securityContext:
+{{- toYaml .Values.redis.securityContext | nindent 10 }}
+        resources:
+{{- toYaml .Values.redis.resources | nindent 10 }}
         ports:
         - containerPort: {{ .Values.redis.port }}
           name: client

secator-0.18.0/helm/templates/secator-manager.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: {{ .Values.secatorManager.name }}
+  labels:
+    name: secator-manager
+spec:
+  automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
+  containers:
+  - name: secator-manager
+    image: {{ .Values.secatorManager.image }}
+    securityContext:
+{{- toYaml .Values.secatorManager.securityContext | nindent 6 }}
+    resources: 
+{{- toYaml .Values.secatorManager.resources | nindent 6 }}
+    command: ["sleep"]
+    args: ["infinity"]
+    env:
+    - name: SECATOR_CELERY_BROKER_URL
+      value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"
+    - name: SECATOR_CELERY_RESULT_BACKEND
+      value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"

{secator-0.16.5 → secator-0.18.0}/helm/templates/secator-worker.yaml

@@ -2,8 +2,8 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ .Values.secatorWorker.name }}
-  namespace: {{ .Values.namespace }}
 spec:
+  replicas: {{ .Values.secatorWorker.replicas }}
   selector:
     matchLabels:
       app: secator-worker
@@ -12,13 +12,18 @@ spec:
       labels:
         app: secator-worker
     spec:
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       containers:
       - name: {{ .Values.secatorWorker.name }}
         image: {{ .Values.secatorWorker.image }}
+        securityContext:
+{{- toYaml .Values.secatorWorker.securityContext | nindent 10 }}
+        resources: 
+{{- toYaml .Values.secatorWorker.resources | nindent 10 }}
         command: ["secator"]
         args: ["worker"]
         env:
         - name: SECATOR_CELERY_BROKER_URL
-          value: "redis://{{ .Values.redis.name }}:6379/0"
+          value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"
         - name: SECATOR_CELERY_RESULT_BACKEND
-          value: "redis://{{ .Values.redis.name }}:6379/0"
+          value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"

secator-0.18.0/helm/values.yaml

@@ -0,0 +1,58 @@
+# Default values for Secator
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+# TODO: Create service accounts instead. Assess for RBAC. Add tooling for kubernetes to image, or side-car.
+# For instance, the secator Manager pod could have sufficient access to list/get/set worker replicas for scaling from
+# from the pod itself. Perhaps another add-on?
+automountServiceAccountToken: false
+
+secatorManager:
+  name: secator-manager
+  image: "freelabz/secator"
+  securityContext: {}
+
+  # resources: cpu/memory requests and limits for managers
+  resources: {}
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+
+secatorWorker:
+  name: secator-worker
+  image: "freelabz/secator"
+  securityContext: {}
+
+  # resources: cpu/memory requests and limits for workers
+  resources: {}
+  replicas: 1
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+
+redis:
+  name: redis
+  image: "redis:alpine"
+  # Run redis with least privilege.
+  securityContext:  
+    runAsUser: 999
+    runAsGroup: 1000
+    runAsNonRoot: true
+    allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
+  # resources: cpu/memory requests and limits for redis
+  resources: {}
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+  replicas: 1
+  port: 6379

{secator-0.16.5 → secator-0.18.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = 'hatchling.build'
 
 [project]
 name = 'secator'
-version = "0.16.5"
+version = "0.18.0"
 authors = [{ name = 'FreeLabz', email = 'sales@freelabz.com' }]
 readme = 'README.md'
 description = "The pentester's swiss knife."

{secator-0.16.5 → secator-0.18.0}/secator/celery.py

@@ -1,3 +1,4 @@
+import gc
 import json
 import logging
 import os
@@ -5,6 +6,7 @@ import os
 from time import time
 
 from celery import Celery, chord
+from celery.canvas import signature
 from celery.app import trace
 
 from rich.logging import RichHandler
@@ -61,9 +63,10 @@ app.conf.update({
 	'result_backend': CONFIG.celery.result_backend,
 	'result_expires': CONFIG.celery.result_expires,
 	'result_backend_transport_options': json.loads(CONFIG.celery.result_backend_transport_options) if CONFIG.celery.result_backend_transport_options else {},  # noqa: E501
-	'result_extended': True,
+	'result_extended': not CONFIG.addons.mongodb.enabled,
 	'result_backend_thread_safe': True,
 	'result_serializer': 'pickle',
+	'result_accept_content': ['application/x-python-serialize'],
 
 	# Task config
 	'task_acks_late': CONFIG.celery.task_acks_late,
@@ -81,6 +84,11 @@ app.conf.update({
 	'task_store_eager_result': True,
 	'task_send_sent_event': CONFIG.celery.task_send_sent_event,
 	'task_serializer': 'pickle',
+	'task_accept_content': ['application/x-python-serialize'],
+
+	# Event config
+	'event_serializer': 'pickle',
+	'event_accept_content': ['application/x-python-serialize'],
 
 	# Worker config
 	# 'worker_direct': True,  # TODO: consider enabling this to allow routing to specific workers
@@ -168,6 +176,12 @@ def run_scan(self, args=[], kwargs={}):
 
 @app.task(bind=True)
 def run_command(self, results, name, targets, opts={}):
+	# Set Celery request id in context
+	context = opts.get('context', {})
+	context['celery_id'] = self.request.id
+	context['worker_name'] = os.environ.get('WORKER_NAME', 'unknown')
+
+	# Set routing key in context
 	if IN_CELERY_WORKER_PROCESS:
 		quiet = not CONFIG.cli.worker_command_verbose
 		opts.update({
@@ -179,15 +193,13 @@ def run_command(self, results, name, targets, opts={}):
 			'quiet': quiet
 		})
 		routing_key = self.request.delivery_info['routing_key']
+		context['routing_key'] = routing_key
 		debug(f'Task "{name}" running with routing key "{routing_key}"', sub='celery.state')
 
 	# Flatten + dedupe + filter results
 	results = forward_results(results)
 
-	# Set Celery request id in context
-	context = opts.get('context', {})
-	context['celery_id'] = self.request.id
-	context['worker_name'] = os.environ.get('WORKER_NAME', 'unknown')
+	# Set task opts
 	opts['context'] = context
 	opts['results'] = results
 	opts['sync'] = True
@@ -204,10 +216,13 @@ def run_command(self, results, name, targets, opts={}):
 	# Chunk task if needed
 	if chunk_it:
 		if IN_CELERY_WORKER_PROCESS:
-			console.print(Info(message=f'Task {name} requires chunking, breaking into {len(targets)} tasks'))
-		tasks = break_task(task, opts, results=results)
+			console.print(Info(message=f'Task {name} requires chunking'))
+		workflow = break_task(task, opts, results=results)
+		if IN_CELERY_WORKER_PROCESS:
+			console.print(Info(message=f'Task {name} successfully broken into {len(workflow)} chunks'))
 		update_state(self, task, force=True)
-		return self.replace(tasks)
+		console.print(Info(message=f'Task {name} updated state, replacing task with Celery chord workflow'))
+		return replace(self, workflow)
 
 	# Update state live
 	for _ in task:
@@ -327,6 +342,52 @@ def is_celery_worker_alive():
 	return result
 
 
+def replace(task_instance, sig):
+	"""Replace this task, with a new task inheriting the task id.
+
+	Execution of the host task ends immediately and no subsequent statements
+	will be run.
+
+	.. versionadded:: 4.0
+
+	Arguments:
+		sig (Signature): signature to replace with.
+		visitor (StampingVisitor): Visitor API object.
+
+	Raises:
+		~@Ignore: This is always raised when called in asynchronous context.
+		It is best to always use ``return self.replace(...)`` to convey
+		to the reader that the task won't continue after being replaced.
+	"""
+	console.print('Replacing task')
+	chord = task_instance.request.chord
+	sig.freeze(task_instance.request.id)
+	replaced_task_nesting = task_instance.request.get('replaced_task_nesting', 0) + 1
+	sig.set(
+		chord=chord,
+		group_id=task_instance.request.group,
+		group_index=task_instance.request.group_index,
+		root_id=task_instance.request.root_id,
+		replaced_task_nesting=replaced_task_nesting
+	)
+	import psutil
+	import os
+	process = psutil.Process(os.getpid())
+	length = len(task_instance.request.chain) if task_instance.request.chain else 0
+	console.print(f'Adding {length} chain tasks from request chain')
+	for ix, t in enumerate(reversed(task_instance.request.chain or [])):
+		console.print(f'Adding chain task {t.name} from request chain ({ix + 1}/{length})')
+		chain_task = signature(t, app=task_instance.app)
+		chain_task.set(replaced_task_nesting=replaced_task_nesting)
+		sig |= chain_task
+		del chain_task
+		del t
+		memory_bytes = process.memory_info().rss
+		console.print(f'Memory usage: {memory_bytes / 1024 / 1024:.2f} MB (chain task {ix + 1}/{length})')
+	gc.collect()
+	return task_instance.on_replace(sig)
+
+
 def break_task(task, task_opts, results=[]):
 	"""Break a task into multiple of the same type."""
 	chunks = task.inputs
@@ -370,16 +431,21 @@ def break_task(task, task_opts, results=[]):
 		task_id = sig.freeze().task_id
 		full_name = f'{task.name}_{ix + 1}'
 		task.add_subtask(task_id, task.name, full_name)
-		info = Info(message=f'Celery chunked task created: {task_id}')
+		info = Info(message=f'Celery chunked task created ({ix + 1} / {len(chunks)}): {task_id}')
 		task.add_result(info)
 		sigs.append(sig)
 
 	# Mark main task as async since it's being chunked
 	task.sync = False
+	task.results = []
+	task.uuids = set()
+	console.print(Info(message=f'Task {task.unique_name} is now async, building chord with{len(sigs)} chunks'))
+	console.print(Info(message=f'Results: {results}'))
 
 	# Build Celery workflow
 	workflow = chord(
 		tuple(sigs),
 		mark_runner_completed.s(runner=task).set(queue='results')
 	)
+	console.print(Info(message=f'Task {task.unique_name} chord built with {len(sigs)} chunks, returning workflow'))
 	return workflow

{secator-0.16.5 → secator-0.18.0}/secator/celery_signals.py

@@ -92,8 +92,9 @@ def task_postrun_handler(**kwargs):
 
 	# Get sender name from kwargs
 	sender_name = kwargs['sender'].name
+	# console.print(Info(message=f'Task postrun handler --> Sender name: {sender_name}'))
 
-	if CONFIG.celery.worker_kill_after_task and sender_name.startswith('secator.'):
+	if CONFIG.celery.worker_kill_after_task and (sender_name.startswith('secator.') or sender_name.startswith('api.')):
 		worker_name = os.environ.get('WORKER_NAME', 'unknown')
 		console.print(Info(message=f'Shutdown worker {worker_name} since config celery.worker_kill_after_task is set.'))
 		kill_worker(parent=True)

{secator-0.16.5 → secator-0.18.0}/secator/cli.py

@@ -134,7 +134,10 @@ for config in SCANS:
 @click.option('--stop', is_flag=True, help='Stop a worker in dev mode (celery multi).')
 @click.option('--show', is_flag=True, help='Show command (celery multi).')
 @click.option('--use-command-runner', is_flag=True, default=False, help='Use command runner to run the command.')
-def worker(hostname, concurrency, reload, queue, pool, quiet, loglevel, check, dev, stop, show, use_command_runner):
+@click.option('--without-gossip', is_flag=True)
+@click.option('--without-mingle', is_flag=True)
+@click.option('--without-heartbeat', is_flag=True)
+def worker(hostname, concurrency, reload, queue, pool, quiet, loglevel, check, dev, stop, show, use_command_runner, without_gossip, without_mingle, without_heartbeat):  # noqa: E501
 	"""Run a worker."""
 
 	# Check Celery addon is installed
@@ -182,6 +185,9 @@ def worker(hostname, concurrency, reload, queue, pool, quiet, loglevel, check, d
 	cmd += f' -P {pool}' if pool else ''
 	cmd += f' -c {concurrency}' if concurrency else ''
 	cmd += f' -l {loglevel}' if loglevel else ''
+	cmd += ' --without-mingle' if without_mingle else ''
+	cmd += ' --without-gossip' if without_gossip else ''
+	cmd += ' --without-heartbeat' if without_heartbeat else ''
 
 	if reload:
 		patterns = "celery.py;tasks/*.py;runners/*.py;serializers/*.py;output_types/*.py;hooks/*.py;exporters/*.py"

{secator-0.16.5 → secator-0.18.0}/secator/config.py

@@ -100,6 +100,7 @@ class Security(StrictModel):
 	allow_local_file_access: bool = True
 	auto_install_commands: bool = True
 	force_source_install: bool = False
+	memory_limit_mb: int = -1
 
 
 class HTTP(StrictModel):
@@ -144,7 +145,7 @@ class Wordlists(StrictModel):
 	templates: Dict[str, str] = {
 		'bo0m_fuzz': 'https://raw.githubusercontent.com/Bo0oM/fuzz.txt/master/fuzz.txt',
 		'combined_subdomains': 'https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/DNS/combined_subdomains.txt',  # noqa: E501
-		'directory_list_small': 'https://raw.githubusercontent.com/danielmiessler/SecLists/refs/heads/master/Discovery/Web-Content/directory-list-2.3-small.txt',  # noqa: E501
+		'directory_list_small': 'https://gist.githubusercontent.com/sl4v/c087e36164e74233514b/raw/c51a811c70bbdd87f4725521420cc30e7232b36d/directory-list-2.3-small.txt',  # noqa: E501
 	}
 	lists: Dict[str, List[str]] = {}
 

secator-0.18.0/secator/configs/workflows/user_hunt.yaml

@@ -0,0 +1,24 @@
+type: workflow
+name: user_hunt
+alias: userhunt
+description: User account search
+tags: [user_account]
+input_types:
+  - slug
+  - string
+  - email
+
+tasks:
+  _group/hunt_users:
+    maigret:
+      description: Hunt user accounts
+      targets_:
+        - type: target
+          field: name
+          condition: target.type != 'email'
+    h8mail:
+      description: Find password leaks
+      targets_:
+        - type: target
+          field: name
+          condition: target.type == 'email'

{secator-0.16.5 → secator-0.18.0}/secator/configs/workflows/wordpress.yaml

@@ -5,15 +5,28 @@ description: Wordpress vulnerability scan
 tags: [http, wordpress, vulnerability]
 input_types:
   - url
+  - ip
+  - host
+  - host:port
 
 tasks:
+  httpx:
+    description: URL probe
+    tech_detect: True
+
   _group/hunt_wordpress:
     nuclei:
       description: Nuclei Wordpress scan
       tags: [wordpress]
+      targets_:
+      - url.url
 
     wpscan:
       description: WPScan
+      targets_:
+      - url.url
 
     wpprobe:
       description: WPProbe
+      targets_:
+      - url.url

{secator-0.16.5 → secator-0.18.0}/secator/hooks/gcs.py

@@ -14,6 +14,16 @@ ITEMS_TO_SEND = {
 	'url': ['screenshot_path', 'stored_response_path']
 }
 
+_gcs_client = None
+
+
+def get_gcs_client():
+	"""Get or create GCS client"""
+	global _gcs_client
+	if _gcs_client is None:
+		_gcs_client = storage.Client()
+	return _gcs_client
+
 
 def process_item(self, item):
 	if item._type not in ITEMS_TO_SEND.keys():
@@ -39,7 +49,7 @@ def process_item(self, item):
 def upload_blob(bucket_name, source_file_name, destination_blob_name):
 	"""Uploads a file to the bucket."""
 	start_time = time()
-	storage_client = storage.Client()
+	storage_client = get_gcs_client()
 	bucket = storage_client.bucket(bucket_name)
 	blob = bucket.blob(destination_blob_name)
 	with open(source_file_name, 'rb') as f: