secator 0.17.0__tar.gz → 0.18.0__tar.gz

{secator-0.17.0 → secator-0.18.0}/.docker/build_all.sh

@@ -2,16 +2,28 @@
 
 # Define an array of distributions
 DISTROS=("alpine" "arch" "debian" "kali" "osx" "ubuntu")
+BUILDER=$(which docker || which podman || which buildah)
+
+if [ -z "$BUILDER" ]; then
+  echo "Error: No container builder found (docker, podman, or buildah required)"
+  exit 1
+fi
+
+echo "Using builder: $BUILDER"
+
+mkdir -p .docker/logs/
 
 # Function to build an image
 build_image() {
     local DISTRO=$1
     local DOCKERFILE=".docker/Dockerfile.${DISTRO}"
+    local STDOUT_LOG=".docker/logs/${DISTRO}.stdout"
+    local STDERR_LOG=".docker/logs/${DISTRO}.stderr"
     local IMAGE_NAME="secator-${DISTRO}"
 
     if [ -f "$DOCKERFILE" ]; then
         echo "🚀 Building $IMAGE_NAME using $DOCKERFILE..."
-        docker build -t "$IMAGE_NAME" -f "$DOCKERFILE" . && \
+        $BUILDER build -t "$IMAGE_NAME" -f "$DOCKERFILE" . > $STDOUT_LOG 2> $STDERR_LOG && \
         echo "✅ Successfully built $IMAGE_NAME" || \
         echo "❌ Failed to build $IMAGE_NAME"
     else

secator-0.18.0/.dockerignore

@@ -0,0 +1,4 @@
+.docker/logs
+.git
+.github
+.gitignore

{secator-0.17.0 → secator-0.18.0}/.gitignore

@@ -1,3 +1,6 @@
+# Build logs
+.docker/logs
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]

{secator-0.17.0 → secator-0.18.0}/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.18.0](https://github.com/freelabz/secator/compare/v0.17.0...v0.18.0) (2025-10-22)
+
+
+### Features
+
+* **workflow:** update user hunt ([#688](https://github.com/freelabz/secator/issues/688)) ([e4f3e29](https://github.com/freelabz/secator/commit/e4f3e294c1668c66ed893305b0147df37cb4453a))
+
+
+### Bug Fixes
+
+* broken sudo prompt because of os.setsid ([#722](https://github.com/freelabz/secator/issues/722)) ([5c77957](https://github.com/freelabz/secator/commit/5c77957cb78533b7e819c01c19de6e46eae0d2af))
+* bugs and warnings in task data ([#714](https://github.com/freelabz/secator/issues/714)) ([845415b](https://github.com/freelabz/secator/commit/845415bb337f77867d49be66bbd23eaf307e5848))
+* bup file flag ([#725](https://github.com/freelabz/secator/issues/725)) ([0622ef5](https://github.com/freelabz/secator/commit/0622ef509b1dc33996dd5e89aea5cd802160744d))
+* context propagation for subtasks ([#720](https://github.com/freelabz/secator/issues/720)) ([d636aa6](https://github.com/freelabz/secator/commit/d636aa66562fd030299fce20f3abaeca283eaf74))
+* **fping:** remove bad options, add new ones ([#713](https://github.com/freelabz/secator/issues/713)) ([4356b4f](https://github.com/freelabz/secator/commit/4356b4f120043e2f94973a9c0061345a06efaeda))
+* maigret version pin ([#721](https://github.com/freelabz/secator/issues/721)) ([488b5a1](https://github.com/freelabz/secator/commit/488b5a1b994e6d3dfadc409d09aaaeb93ff60fb4))
+* subfinder integration tests ([#724](https://github.com/freelabz/secator/issues/724)) ([8163152](https://github.com/freelabz/secator/commit/8163152efb09f3854ec9fa7125b16084eda4c98f))
+* wpscan errors and wordpress workflow ([#723](https://github.com/freelabz/secator/issues/723)) ([8ee32aa](https://github.com/freelabz/secator/commit/8ee32aacb1310cfb833bdcf696477ae29eb271c7))
+
 ## [0.17.0](https://github.com/freelabz/secator/compare/v0.16.5...v0.17.0) (2025-09-06)
 
 

{secator-0.17.0 → secator-0.18.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: secator
-Version: 0.17.0
+Version: 0.18.0
 Summary: The pentester's swiss knife.
 Project-URL: Homepage, https://github.com/freelabz/secator
 Project-URL: Issues, https://github.com/freelabz/secator/issues

{secator-0.17.0 → secator-0.18.0}/helm/templates/redis-service.yaml

@@ -2,7 +2,6 @@ apiVersion: v1
 kind: Service
 metadata:
   name: {{ .Values.redis.name }}
-  namespace: {{ .Values.namespace }}
 spec:
   type: ClusterIP
   ports:

{secator-0.17.0 → secator-0.18.0}/helm/templates/redis.yaml

@@ -2,7 +2,6 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: {{ .Values.redis.name }}
-  namespace: {{ .Values.namespace }}
 spec:
   selector:
     matchLabels:
@@ -13,10 +12,15 @@ spec:
     metadata:
       labels:
         app: redis
-    spec:
+    spec:      
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       containers:
       - name: {{ .Values.redis.name }}
         image: {{ .Values.redis.image }}
+        securityContext:
+{{- toYaml .Values.redis.securityContext | nindent 10 }}
+        resources:
+{{- toYaml .Values.redis.resources | nindent 10 }}
         ports:
         - containerPort: {{ .Values.redis.port }}
           name: client

secator-0.18.0/helm/templates/secator-manager.yaml

@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: {{ .Values.secatorManager.name }}
+  labels:
+    name: secator-manager
+spec:
+  automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
+  containers:
+  - name: secator-manager
+    image: {{ .Values.secatorManager.image }}
+    securityContext:
+{{- toYaml .Values.secatorManager.securityContext | nindent 6 }}
+    resources: 
+{{- toYaml .Values.secatorManager.resources | nindent 6 }}
+    command: ["sleep"]
+    args: ["infinity"]
+    env:
+    - name: SECATOR_CELERY_BROKER_URL
+      value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"
+    - name: SECATOR_CELERY_RESULT_BACKEND
+      value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"

{secator-0.17.0 → secator-0.18.0}/helm/templates/secator-worker.yaml

@@ -2,8 +2,8 @@ apiVersion: apps/v1
 kind: Deployment
 metadata:
   name: {{ .Values.secatorWorker.name }}
-  namespace: {{ .Values.namespace }}
 spec:
+  replicas: {{ .Values.secatorWorker.replicas }}
   selector:
     matchLabels:
       app: secator-worker
@@ -12,13 +12,18 @@ spec:
       labels:
         app: secator-worker
     spec:
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
       containers:
       - name: {{ .Values.secatorWorker.name }}
         image: {{ .Values.secatorWorker.image }}
+        securityContext:
+{{- toYaml .Values.secatorWorker.securityContext | nindent 10 }}
+        resources: 
+{{- toYaml .Values.secatorWorker.resources | nindent 10 }}
         command: ["secator"]
         args: ["worker"]
         env:
         - name: SECATOR_CELERY_BROKER_URL
-          value: "redis://{{ .Values.redis.name }}:6379/0"
+          value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"
         - name: SECATOR_CELERY_RESULT_BACKEND
-          value: "redis://{{ .Values.redis.name }}:6379/0"
+          value: "redis://{{ .Values.redis.name }}:{{ .Values.redis.port }}/0"

secator-0.18.0/helm/values.yaml

@@ -0,0 +1,58 @@
+# Default values for Secator
+# This is a YAML-formatted file.
+# Declare variables to be passed into your templates.
+
+# TODO: Create service accounts instead. Assess for RBAC. Add tooling for kubernetes to image, or side-car.
+# For instance, the secator Manager pod could have sufficient access to list/get/set worker replicas for scaling from
+# from the pod itself. Perhaps another add-on?
+automountServiceAccountToken: false
+
+secatorManager:
+  name: secator-manager
+  image: "freelabz/secator"
+  securityContext: {}
+
+  # resources: cpu/memory requests and limits for managers
+  resources: {}
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+
+secatorWorker:
+  name: secator-worker
+  image: "freelabz/secator"
+  securityContext: {}
+
+  # resources: cpu/memory requests and limits for workers
+  resources: {}
+  replicas: 1
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+
+redis:
+  name: redis
+  image: "redis:alpine"
+  # Run redis with least privilege.
+  securityContext:  
+    runAsUser: 999
+    runAsGroup: 1000
+    runAsNonRoot: true
+    allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - ALL
+  # resources: cpu/memory requests and limits for redis
+  resources: {}
+
+  # Empty if using default repository
+  repository:
+  # Empty if using tag "latest"
+  tag:
+  replicas: 1
+  port: 6379

{secator-0.17.0 → secator-0.18.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = 'hatchling.build'
 
 [project]
 name = 'secator'
-version = "0.17.0"
+version = "0.18.0"
 authors = [{ name = 'FreeLabz', email = 'sales@freelabz.com' }]
 readme = 'README.md'
 description = "The pentester's swiss knife."

{secator-0.17.0 → secator-0.18.0}/secator/config.py

@@ -145,7 +145,7 @@ class Wordlists(StrictModel):
 	templates: Dict[str, str] = {
 		'bo0m_fuzz': 'https://raw.githubusercontent.com/Bo0oM/fuzz.txt/master/fuzz.txt',
 		'combined_subdomains': 'https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/DNS/combined_subdomains.txt',  # noqa: E501
-		'directory_list_small': 'https://raw.githubusercontent.com/danielmiessler/SecLists/refs/heads/master/Discovery/Web-Content/directory-list-2.3-small.txt',  # noqa: E501
+		'directory_list_small': 'https://gist.githubusercontent.com/sl4v/c087e36164e74233514b/raw/c51a811c70bbdd87f4725521420cc30e7232b36d/directory-list-2.3-small.txt',  # noqa: E501
 	}
 	lists: Dict[str, List[str]] = {}
 

secator-0.18.0/secator/configs/workflows/user_hunt.yaml

@@ -0,0 +1,24 @@
+type: workflow
+name: user_hunt
+alias: userhunt
+description: User account search
+tags: [user_account]
+input_types:
+  - slug
+  - string
+  - email
+
+tasks:
+  _group/hunt_users:
+    maigret:
+      description: Hunt user accounts
+      targets_:
+        - type: target
+          field: name
+          condition: target.type != 'email'
+    h8mail:
+      description: Find password leaks
+      targets_:
+        - type: target
+          field: name
+          condition: target.type == 'email'

{secator-0.17.0 → secator-0.18.0}/secator/configs/workflows/wordpress.yaml

@@ -5,15 +5,28 @@ description: Wordpress vulnerability scan
 tags: [http, wordpress, vulnerability]
 input_types:
   - url
+  - ip
+  - host
+  - host:port
 
 tasks:
+  httpx:
+    description: URL probe
+    tech_detect: True
+
   _group/hunt_wordpress:
     nuclei:
       description: Nuclei Wordpress scan
       tags: [wordpress]
+      targets_:
+      - url.url
 
     wpscan:
       description: WPScan
+      targets_:
+      - url.url
 
     wpprobe:
       description: WPProbe
+      targets_:
+      - url.url

{secator-0.17.0 → secator-0.18.0}/secator/runners/_base.py

@@ -179,14 +179,14 @@ class Runner:
 		# Add prior results to runner results
 		self.debug(f'adding {len(results)} prior results to runner', sub='init')
 		if CONFIG.addons.mongodb.enabled:
-			self.debug('adding prior results from MongoDB', sub='init')
+			self.debug(f'loading {len(results)} results from MongoDB', sub='init')
 			from secator.hooks.mongodb import get_results
 			results = get_results(results)
 		for result in results:
 			self.add_result(result, print=False, output=False, hooks=False, queue=not self.has_parent)
 
 		# Determine inputs
-		self.debug(f'resolving inputs with dynamic opts ({len(self.dynamic_opts)})', obj=self.dynamic_opts, sub='init')
+		self.debug(f'resolving inputs with {len(self.dynamic_opts)} dynamic opts', obj=self.dynamic_opts, sub='init')
 		self.inputs = [inputs] if not isinstance(inputs, list) else inputs
 		self.inputs = list(set(self.inputs))
 		targets = [Target(name=target) for target in self.inputs]
@@ -463,12 +463,11 @@ class Runner:
 		if item._uuid and item._uuid in self.uuids:
 			return
 
-		# Keep existing ancestor id in context
-		ancestor_id = item._context.get('ancestor_id', None)
-
-		# Set context
-		item._context.update(self.context)
-		item._context['ancestor_id'] = ancestor_id or self.ancestor_id
+		# Update context with runner info
+		ctx = item._context.copy()
+		item._context = self.context.copy()
+		item._context.update(ctx)
+		item._context['ancestor_id'] = ctx.get('ancestor_id') or self.ancestor_id
 
 		# Set uuid
 		if not item._uuid:
@@ -756,6 +755,7 @@ class Runner:
 			'last_updated_db': self.last_updated_db,
 			'context': self.context,
 			'errors': [e.toDict() for e in self.errors],
+			'warnings': [w.toDict() for w in self.warnings],
 		})
 		return data
 

{secator-0.17.0 → secator-0.18.0}/secator/runners/command.py

@@ -419,10 +419,13 @@ class Command(Runner):
 			self.print_command()
 
 			# Check for sudo requirements and prepare the password if needed
-			sudo_password, error = self._prompt_sudo(self.cmd)
-			if error:
-				yield Error(message=error)
-				return
+			sudo_required = re.search(r'\bsudo\b', self.cmd)
+			sudo_password = None
+			if sudo_required:
+				sudo_password, error = self._prompt_sudo(self.cmd)
+				if error:
+					yield Error(message=error)
+					return
 
 			# Prepare cmds
 			command = self.cmd if self.shell else shlex.split(self.cmd)
@@ -450,7 +453,7 @@ class Command(Runner):
 				stdout=subprocess.PIPE,
 				stderr=subprocess.STDOUT,
 				universal_newlines=True,
-				preexec_fn=os.setsid,
+				preexec_fn=os.setsid if not sudo_required else None,
 				shell=self.shell,
 				env=env,
 				cwd=self.cwd)
@@ -688,7 +691,7 @@ class Command(Runner):
 				['sudo', '-S', '-p', '', 'true'],
 				input=sudo_password + "\n",
 				text=True,
-				capture_output=True
+				capture_output=True,
 			)
 			if result.returncode == 0:
 				return sudo_password, None  # Password is correct

{secator-0.17.0 → secator-0.18.0}/secator/tasks/bup.py

@@ -20,7 +20,7 @@ class bup(Http):
 	output_types = [Url, Progress]
 	tags = ['url', 'bypass']
 	input_flag = '-u'
-	file_flag = '-R'
+	file_flag = '-u'
 	json_flag = '--jsonl'
 	opt_prefix = '--'
 	opts = {

{secator-0.17.0 → secator-0.18.0}/secator/tasks/fping.py

@@ -17,7 +17,10 @@ class fping(ReconIp):
 	file_flag = '-f'
 	input_flag = None
 	opts = {
-		'reverse_dns': {'is_flag': True, 'default': False, 'short': 'r', 'help': 'Reverse DNS lookup (slower)'}
+		'count': {'type': int, 'default': None, 'help': 'Number of request packets to send to each target'},
+		'show_name': {'is_flag': True, 'default': False, 'help': 'Show network addresses as well as hostnames'},
+		'use_dns': {'is_flag': True, 'default': False, 'help': 'Use DNS to lookup address of return packet (same as -n but will force reverse-DNS lookup for hostnames)'},  # noqa: E501
+		'summary': {'is_flag': True, 'default': False, 'help': 'Print cumulative statistics upon exit'},
 	}
 	opt_prefix = '--'
 	opt_key_map = {
@@ -27,11 +30,14 @@ class fping(ReconIp):
 		RETRIES: 'retry',
 		TIMEOUT: 'timeout',
 		THREADS: OPT_NOT_SUPPORTED,
-		'reverse_dns': 'r'
+		'count': '-c',
+		'show_name': '-n',
+		'use_dns': '-d',
+		'summary': '-s',
 	}
 	opt_value_map = {
-		DELAY: lambda x: x * 1000,  # convert s to ms
-		TIMEOUT: lambda x: x * 1000  # convert s to ms
+		DELAY: lambda x: int(x) * 1000,  # convert s to ms
+		TIMEOUT: lambda x: int(x) * 1000  # convert s to ms
 	}
 	install_github_handle = 'schweikert/fping'
 	install_version = 'v5.1'
@@ -41,9 +47,20 @@ class fping(ReconIp):
 	@staticmethod
 	def item_loader(self, line):
 		if '(' in line:
-			host, ip = tuple(t.strip() for t in line.rstrip(')').split('('))
-			if (validators.ipv4(host) or validators.ipv6(host)):
-				host = ''
+
+			line_part = line.split(' : ')[0] if ' : ' in line else line    # Removing the stat parts that appears when using -c
+
+			start_paren = line_part.find('(')
+			end_paren = line_part.find(')', start_paren)
+
+			if start_paren != -1 and end_paren != -1:
+				host = line_part[:start_paren].strip()
+				ip = line_part[start_paren+1:end_paren].strip()
+
+				if (validators.ipv4(host) or validators.ipv6(host)):
+					host = ''
+			else:
+				return
 		else:
 			ip = line.strip()
 			host = ''

{secator-0.17.0 → secator-0.18.0}/secator/tasks/maigret.py

@@ -42,8 +42,13 @@ class maigret(ReconUser):
 			EXTRA_DATA: lambda x: x['status'].get('ids', {})
 		}
 	}
-	install_version = '0.5.0a'
-	install_cmd = 'pipx install git+https://github.com/soxoj/maigret --force'
+	install_version = '0.5.0'
+	# install_pre = {
+	# 	'apt': ['libcairo2-dev'],
+	# 	'yum|zypper': ['cairo-devel'],
+	# 	'*': ['cairo']
+	# }
+	install_cmd = 'pipx install maigret==[install_version] --force'
 	socks5_proxy = True
 	profile = 'io'
 

{secator-0.17.0 → secator-0.18.0}/secator/tasks/wpscan.py

@@ -11,6 +11,7 @@ from secator.definitions import (CONFIDENCE, CVSS_SCORE, DELAY, DESCRIPTION,
 							   URL, USER_AGENT)
 from secator.output_types import Tag, Vulnerability, Info, Error
 from secator.tasks._categories import VulnHttp
+from secator.installer import parse_version
 
 
 @task()
@@ -110,6 +111,12 @@ class wpscan(VulnHttp):
 		# Get URL
 		target = data.get('target_url', self.inputs[0])
 
+		# Get errors
+		scan_aborted = data.get('scan_aborted', False)
+		if scan_aborted:
+			yield Error(message=scan_aborted, traceback='\n'.join(data.get('trace', [])))
+			return
+
 		# Wordpress version
 		version = data.get('version', {})
 		if version:
@@ -133,7 +140,7 @@ class wpscan(VulnHttp):
 			location = main_theme['location']
 			if version:
 				number = version['number']
-				latest_version = main_theme.get('latest_version')
+				latest_version = main_theme.get('latest_version') or 'unknown'
 				yield Tag(
 					name=f'Wordpress theme - {slug} {number}',
 					match=target,
@@ -142,10 +149,12 @@ class wpscan(VulnHttp):
 						'latest_version': latest_version
 					}
 				)
-				if (latest_version and number < latest_version):
+				outdated = latest_version and parse_version(number) < parse_version(latest_version)
+				if outdated:
 					yield Vulnerability(
 						matched_at=target,
 						name=f'Wordpress theme - {slug} {number} outdated',
+						description=f'The wordpress theme {slug} is outdated, consider updating to the latest version {latest_version}',
 						confidence='high',
 						severity='info'
 					)
@@ -163,7 +172,7 @@ class wpscan(VulnHttp):
 			location = data['location']
 			if version:
 				number = version['number']
-				latest_version = data.get('latest_version')
+				latest_version = data.get('latest_version') or 'unknown'
 				yield Tag(
 					name=f'Wordpress plugin - {slug} {number}',
 					match=target,
@@ -172,10 +181,12 @@ class wpscan(VulnHttp):
 						'latest_version': latest_version
 					}
 				)
-				if (latest_version and number < latest_version):
+				outdated = latest_version and parse_version(number) < parse_version(latest_version)
+				if outdated:
 					yield Vulnerability(
 						matched_at=target,
 						name=f'Wordpress plugin - {slug} {number} outdated',
+						description=f'The wordpress plugin {slug} is outdated, consider updating to the latest version {latest_version}.',
 						confidence='high',
 						severity='info'
 					)

{secator-0.17.0 → secator-0.18.0}/tests/integration/inputs.py

@@ -21,7 +21,7 @@ INPUTS_TASKS = {
 	'h8mail': 'test@test.com',
 	'nuclei': 'http://localhost:3000/',
 	'searchsploit': 'apache 2.4.5',
-	'subfinder': 'api.github.com',
+	'subfinder': 'github.com',
 	'testssl': 'free.fr',
 	'trivy': 'https://github.com/blacklanternsecurity/bbot',
 	'wpscan': 'http://localhost:8000/',

{secator-0.17.0 → secator-0.18.0}/tests/integration/outputs.py

@@ -264,7 +264,7 @@ OUTPUTS_TASKS = {
             _source='nuclei')
     ],
     'subfinder': [
-        Subdomain(host='virusscan.api.github.com', domain='api.github.com', _source='subfinder')
+        Subdomain(host='support.github.com', domain='github.com', _source='subfinder')
     ],
     'trivy': [
         Vulnerability(

secator-0.17.0/.dockerignore

@@ -1 +0,0 @@
-.gitignore

secator-0.17.0/helm/templates/secator-manager.yaml

@@ -1,18 +0,0 @@
-apiVersion: v1
-kind: Pod
-metadata:
-  name: {{ .Values.secatorManager.name }}
-  namespace: {{ .Values.namespace }}
-  labels:
-    name: secator-manager
-spec:
-  containers:
-  - name: secator-manager
-    image: {{ .Values.secatorManager.image }}
-    command: ["tail"]
-    args: ["-F", "anything"]
-    env:
-    - name: SECATOR_CELERY_BROKER_URL
-      value: "redis://{{ .Values.redis.name }}:6379/0"
-    - name: SECATOR_CELERY_RESULT_BACKEND
-      value: "redis://{{ .Values.redis.name }}:6379/0"

secator-0.17.0/helm/values.yaml

@@ -1,34 +0,0 @@
-# Default values for Secator
-# This is a YAML-formatted file.
-# Declare variables to be passed into your templates.
-
-namespace: secator
-
-secatorManager:
-  name: secator-manager
-  image: "freelabz/secator"
-
-  # Empty if using default repository
-  repository:
-  # Empty if using tag "latest"
-  tag:
-
-secatorWorker:
-  name: secator-worker
-  image: "freelabz/secator"
-
-  # Empty if using default repository
-  repository:
-  # Empty if using tag "latest"
-  tag:
-
-redis:
-  name: redis
-  image: "redis"
-
-  # Empty if using default repository
-  repository:
-  # Empty if using tag "latest"
-  tag:
-  replicas: 1
-  port: 6379

secator-0.17.0/secator/configs/workflows/user_hunt.yaml

@@ -1,12 +0,0 @@
-type: workflow
-name: user_hunt
-alias: userhunt
-description: User account search
-tags: [user_account]
-input_types:
-  - slug
-  - string
-
-tasks:
-  maigret:
-    description: Hunt user accounts