socx 2.1__tar.gz → 2.3__tar.gz

{socx-2.1 → socx-2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socx
-Version: 2.1
+Version: 2.3
 Summary: A set of useful tools for a security operations center
 Author-email: Enlace <enlace.aman@gmail.com>
 Classifier: Programming Language :: Python :: 3
@@ -8,12 +8,15 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 
-# socx
+# SOCX
 A collection of helpful tools for a SOC analyst. Easily search for IPs, domains, and find files on the system.
 
 ## Installing
 python -m pip install socx
 
+### Installing from QA
+python -m pip install --index-url https://test.pypi.org/simple/ socx
+
 ## Usage
 A tool to assist with day to day activites in a security operations center (pronounced "socks")      
 
@@ -27,21 +30,26 @@ or
     python socx.py [universal options] [function] [arguments]
 
 Examples:
+
     socx --help
 
     socx info -h
-
+    
     socx info -ip 1.2.3.4
-
+    
     socx -v 3 info -d google.com
-
+    
     socx find -f filename.txt -i
-
+    
     socx find -f fold.*name -r
-
+    
     socx unwrap --url "https://urldefense.com/v3/__https:/..."
-
+    
     socx combine --csvs 5
+    
+    socx awake --minutes 90
+    
+    socx awake --restart
 
 ## Other Information
 

{socx-2.1 → socx-2.3}/README.md

@@ -1,9 +1,12 @@
-# socx
+# SOCX
 A collection of helpful tools for a SOC analyst. Easily search for IPs, domains, and find files on the system.
 
 ## Installing
 python -m pip install socx
 
+### Installing from QA
+python -m pip install --index-url https://test.pypi.org/simple/ socx
+
 ## Usage
 A tool to assist with day to day activites in a security operations center (pronounced "socks")      
 
@@ -17,21 +20,26 @@ or
     python socx.py [universal options] [function] [arguments]
 
 Examples:
+
     socx --help
 
     socx info -h
-
+    
     socx info -ip 1.2.3.4
-
+    
     socx -v 3 info -d google.com
-
+    
     socx find -f filename.txt -i
-
+    
     socx find -f fold.*name -r
-
+    
     socx unwrap --url "https://urldefense.com/v3/__https:/..."
-
+    
     socx combine --csvs 5
+    
+    socx awake --minutes 90
+    
+    socx awake --restart
 
 ## Other Information
 

{socx-2.1 → socx-2.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "socx"
-version = "2.1"
+version = "2.3"
 authors = [
   { name="Enlace", email="enlace.aman@gmail.com" },
 ]

{socx-2.1 → socx-2.3}/src/socx/socx.py

@@ -1,7 +1,9 @@
 #!/usr/bin/env python3
 
 from contextlib import suppress
+import subprocess
 from unittest import skipUnless
+from urllib.parse import unquote
 
 try:
     import argparse
@@ -48,6 +50,8 @@ ABOUT = f"""
 
 Version: {VERSION}
 A tool to assist with day to day activites in a security operations center (pronounced "socks")
+
+Visit https://enlace.one/ for more information.
 """
 USAGE = f"""Usage:
     {PROGRAM_NAME} [universal options] [function] [arguments]
@@ -62,6 +66,8 @@ Examples:
     {PROGRAM_NAME} find -f fold.*name -r
     {PROGRAM_NAME} unwrap --url "https://urldefense.com/v3/__https:/..."
     {PROGRAM_NAME} combine --csvs 5
+    {PROGRAM_NAME} awake --minutes 90
+    {PROGRAM_NAME} awake --restart
 """
 verbosity = 1
 environmental_variables = {
@@ -82,9 +88,8 @@ def p(*args_, v=1, end="\n", sep=" ", file=None):
 
 def unwrap_url(url):
     pp_decoder = util.URLDefenseDecoder()
-    url = pp_decoder.decode(url)
     if "safelinks" in url:
-        url = url.split("url=")[1]
+        url = unquote(url.split("url=")[1])
     url = pp_decoder.decode(url)
     return url
 
@@ -487,6 +492,33 @@ def do_command_history(user="~"):
     p("Command history gathered", v=3)
 
 
+def awake(minutes=60, restart=False):
+    interval = 10  # seconds
+    iterations = (minutes * 60) / interval
+
+    p(f"Keeping the device awake for {minutes} minutes...")
+    cmd = [
+        "powershell",
+        "-Command",
+        "$WShell = New-Object -ComObject 'WScript.Shell'; "
+        f"for ($i = 0; $i -lt {iterations}; $i++) {{ "
+        f"$WShell.SendKeys('%'); Start-Sleep -Seconds {interval}; $temp = [Math]::Round(($i*{interval})/60, 1); Write-Output \"$temp of {minutes}. CTRL+C to End\"}}",
+    ]
+
+    with subprocess.Popen(
+        cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True
+    ) as proc:
+        for line in proc.stdout:
+            print(line, end="")
+
+    if restart:
+        p("Restarting device...")
+        cmd = ["shutdown", "/r", "/t", "0"]
+        proc = subprocess.Popen(
+            cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, close_fds=True
+        )
+
+
 #############
 # Arguments #
 #############.
@@ -506,6 +538,34 @@ FUNCTIONS = [
         "function": lambda: interactive_mode(),
         "arguments": [],
     },
+    {
+        "name": "Stay Awake",
+        "command": "awake",
+        "help": "",
+        "function": awake,
+        "arguments": [
+            {
+                "name": "minutes",
+                "flag": "--minutes",
+                "short_flag": "-m",
+                "prompt": "Enter number of minutes to run for: ",
+                "type": int,
+                "default": 60,
+                "required": False,
+                "help": "Keeps device awake for this many minutes",
+            },
+            {
+                "name": "restart",
+                "flag": "--restart",
+                "short_flag": "-r",
+                "type": bool,
+                "action": "store_true",
+                "default": False,
+                "required": False,
+                "help": "Restart computer once done keeping device awake",
+            },
+        ],
+    },
     {
         "name": "Combine CSVs",
         "command": "combine",
@@ -535,6 +595,7 @@ FUNCTIONS = [
                 "name": "skip_og_filename_column",
                 "flag": "--skip_og_filename_column",
                 "short_flag": "-sname",
+                "action": "store_true",
                 "type": bool,
                 "default": False,
                 "required": False,
@@ -660,6 +721,7 @@ FUNCTIONS = [
                 "short_flag": "-ss",
                 "type": bool,
                 "default": False,
+                "action": "store_true",
                 "required": False,
                 "help": "Do smart search (try directory then user folder then C: then D:)",
             },

{socx-2.1 → socx-2.3}/src/socx.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: socx
-Version: 2.1
+Version: 2.3
 Summary: A set of useful tools for a security operations center
 Author-email: Enlace <enlace.aman@gmail.com>
 Classifier: Programming Language :: Python :: 3
@@ -8,12 +8,15 @@ Classifier: Operating System :: OS Independent
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 
-# socx
+# SOCX
 A collection of helpful tools for a SOC analyst. Easily search for IPs, domains, and find files on the system.
 
 ## Installing
 python -m pip install socx
 
+### Installing from QA
+python -m pip install --index-url https://test.pypi.org/simple/ socx
+
 ## Usage
 A tool to assist with day to day activites in a security operations center (pronounced "socks")      
 
@@ -27,21 +30,26 @@ or
     python socx.py [universal options] [function] [arguments]
 
 Examples:
+
     socx --help
 
     socx info -h
-
+    
     socx info -ip 1.2.3.4
-
+    
     socx -v 3 info -d google.com
-
+    
     socx find -f filename.txt -i
-
+    
     socx find -f fold.*name -r
-
+    
     socx unwrap --url "https://urldefense.com/v3/__https:/..."
-
+    
     socx combine --csvs 5
+    
+    socx awake --minutes 90
+    
+    socx awake --restart
 
 ## Other Information
 

{socx-2.1 → socx-2.3}/tests/tests.py

@@ -37,22 +37,34 @@ def test_find_file():
 ## Getting hung up
 # def test_find_file_with_regex():
 #     output = run(
-#         "-v 5 find --regex -f 'Phineas.*Ferb.txt' -d 'C:\\Users\\colli\\OneDrive\\Documents\\Python\\socX\\tests\\test_files'"
+#         "-v 5 find --regex -f 'Phineas.*Ferb.txt' -d ''"
 #     )
 #     assert output.stderr == ""
 #     assert "\\PhineasAndFerb.txt" in str(output.stdout)
 
 
-def test_unwrap_url():
-    test_url = "https://urldefense.com/v3/__https:/conferences.stjude.org/g87vv8?i=2NejfAgCkki403xbcRpHuw&locale=en-US__;!!NfcMrC8AwgI!cq3afLDXviFyix2KeJ62VsQBrrZOgfyZu1fks7uQorRGX6VOgcDaUgTpxFdJRmXMdtU5zsmZB9PUw-TmquYgbIGIYUDPsQ$"
-    output = run(
-        f"unwrap --url '{test_url}' ",
-    )
-    assert output.stderr == ""
-    assert (
-        "https://conferences.stjude.org/g87vv8?i=2NejfAgCkki403xbcRpHuw&locale=en-US"
-        in str(output.stdout)
-    )
+# def test_unwrap_url():
+#     test_url = "https://urldefense.com/v3/__https:/conferences.stjude.org/g87vv8?i=2NejfAgCkki403xbcRpHuw&locale=en-US__;!!NfcMrC8AwgI!cq3afLDXviFyix2KeJ62VsQBrrZOgfyZu1fks7uQorRGX6VOgcDaUgTpxFdJRmXMdtU5zsmZB9PUw-TmquYgbIGIYUDPsQ$"
+#     output = run(
+#         f"unwrap --url '{test_url}' ",
+#     )
+#     assert output.stderr == ""
+#     assert (
+#         "https://conferences.stjude.org/g87vv8?i=2NejfAgCkki403xbcRpHuw&locale=en-US"
+#         in str(output.stdout)
+#     )
+
+
+# def test_unwrap_safelink_url():
+#     test_url = "https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Foutlook.office365.com%2Fowa%2F%3FItemID%3DAAkALgAAAAAAHYQDEapmEc2byACqAC%252FEWg0AEtOij2Wdn0uk%252Bvzsc82xogACnMa3jwAA%26exvsurl%3D1%26viewmodel%3DReadMessageItem%26nativeOutlookCommand%3DopenMessage&data=05%7C02%7CCollin.Peel%40alsac.stjude.org%7C870e10f064af483039e608ddc580ff4a%7C62a96f9aa5614bfba97870a73a08dc02%7C0%7C0%7C638883880016710627%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=JiZTfR8E3%2FPCVauhcSsanHVYDR0ETfRKP1Gzjrd2ppc%3D&reserved=0"
+#     output = run(
+#         f"unwrap --url '{test_url}' ",
+#     )
+#     assert output.stderr == ""
+#     assert (
+#         "https://outlook.office365.com/owa/?ItemID=AAkALgAAAAAAHYQDEapmEc2byACqAC%2FEWg0AEtOij2Wdn0uk%2Bvzsc82xogACnMa3jwAA&exvsurl=1&viewmodel=ReadMessageItem&nativeOutlookCommand=openMessage"
+#         in str(output.stdout)
+#     )
 
 
 ## This one has issues with testing but does seem to work