souleyez 2.27.0__py3-none-any.whl → 2.32.0__py3-none-any.whl

souleyez/__init__.py

@@ -1 +1 @@
-__version__ = '2.27.0'
+__version__ = '2.32.0'

souleyez/core/tool_chaining.py

@@ -591,6 +591,23 @@ class ChainRule:
                     if svc_port in group.get('ports', []):
                         port = str(svc_port)
                         break
+        elif 'has:services' in self.trigger_condition:
+            # For has:services condition, extract port from the services array
+            # Prioritize HTTP services for web tools (gobuster, nuclei, etc.)
+            services = context.get('services', [])
+            http_ports = {80, 443, 8080, 8443, 8000, 8888, 3000, 5000}
+
+            # First pass: look for HTTP service by name or common HTTP ports
+            for svc in services:
+                svc_name = svc.get('service_name', '').lower()
+                svc_port = svc.get('port')
+                if svc_name == 'http' or svc_name == 'https' or svc_port in http_ports:
+                    port = str(svc_port)
+                    break
+
+            # Second pass: if no HTTP service, use the first service's port
+            if not port and services:
+                port = str(services[0].get('port', ''))
 
         # Calculate subnet for {subnet} placeholder (e.g., 10.0.0.88 → 10.0.0.0/24)
         subnet = ''
@@ -1742,6 +1759,20 @@ class ToolChaining:
             )
         )
 
+        # Database Admin → SQLMap (gentler settings for phpMyAdmin/Adminer)
+        # These panels are slow and easily overwhelmed - use single thread and basic tests
+        self.rules.append(
+            ChainRule(
+                trigger_tool='gobuster',
+                trigger_condition='category:database_admin',
+                target_tool='sqlmap',
+                priority=6,  # Lower priority than CVE/exploit scans
+                args_template=['-u', '{target}', '--batch', '--forms', '--threads=1', '--time-sec=10',
+                              '--level=1', '--risk=1', '--technique=BEU', '--timeout=30'],
+                description='Database admin panel detected, testing login form for SQL injection (low intensity)'
+            )
+        )
+
         # WordPress → WPScan enumeration
         self.rules.append(
             ChainRule(
@@ -5000,6 +5031,7 @@ class ToolChaining:
                     label=f"Auto-retry: gobuster (wildcard {exclude_length}b)",
                     engagement_id=engagement_id,
                     parent_id=job.get('id'),
+                    reason=f"Auto-triggered by gobuster: Wildcard response detected, retrying with --exclude-length {exclude_length}",
                     metadata={'retry_attempt': 1, 'retry_parent_job_id': job.get('id')}
                 )
 
@@ -5099,7 +5131,8 @@ class ToolChaining:
                                 args=sqlmap_args,
                                 label=f"Auto-chain: SQLMap testing {endpoint_url}",
                                 engagement_id=engagement_id,
-                                parent_id=job.get('id')
+                                parent_id=job.get('id'),
+                                reason=f"Auto-triggered by ffuf: Database/dynamic endpoint detected ({status_code} response)"
                             )
 
                             job_ids.append(sqlmap_job_id)
@@ -5127,6 +5160,7 @@ class ToolChaining:
                                 label=f"Auto-chain: ffuf recursive {endpoint_url}",
                                 engagement_id=engagement_id,
                                 parent_id=job.get('id'),
+                                reason=f"Auto-triggered by ffuf: {status_code} response suggests deeper path, fuzzing recursively",
                                 metadata={'ffuf_depth': current_depth + 1}
                             )
 
@@ -5350,7 +5384,8 @@ class ToolChaining:
                         args=['-m', '18200', '-a', '0', 'data/wordlists/top100.txt'],
                         label='CRACK_ASREP',
                         engagement_id=engagement_id,
-                        parent_id=job.get('id')
+                        parent_id=job.get('id'),
+                        reason="Auto-triggered by impacket-getnpusers: AS-REP hash extracted, attempting to crack"
                     )
 
                     job_ids.append(job_id)
@@ -5395,7 +5430,8 @@ class ToolChaining:
                         args=['-m', '1000', '-a', '0', 'data/wordlists/top100.txt'],
                         label='CRACK_NTLM',
                         engagement_id=engagement_id,
-                        parent_id=job.get('id')
+                        parent_id=job.get('id'),
+                        reason="Auto-triggered by impacket-secretsdump: NTLM hash extracted, attempting to crack"
                     )
 
                     job_ids.append(job_id)
@@ -5435,7 +5471,8 @@ class ToolChaining:
                             args=[cred_str],
                             label='EXTRACT_CREDS',
                             engagement_id=engagement_id,
-                            parent_id=job.get('id')
+                            parent_id=job.get('id'),
+                            reason="Auto-triggered by hydra: Valid credentials found, attempting to extract domain secrets"
                         )
 
                         job_ids.append(job_id)
@@ -5827,18 +5864,25 @@ class ToolChaining:
                             # Auto mode: enqueue immediately
                             print(f"  🔗 Chaining {cmd['tool']} for {cmd_target}: {cmd['reason']}")
                             # enqueue_job will acquire _lock again (nested lock is safe - same thread)
-                            job_id = enqueue_job(
-                                tool=cmd['tool'],
-                                target=cmd_target,
-                                args=resolved_args,
-                                label=source_tool,
-                                engagement_id=engagement_id,
-                                parent_id=parent_job_id,
-                                reason=cmd.get('reason', f"Auto-chain from {source_tool}"),
-                                metadata=cmd.get('metadata'),  # Pass through deduplication metadata
-                                rule_id=cmd.get('rule_id')  # Pass rule ID for tracking
-                            )
-                            job_ids.append(job_id)
+                            try:
+                                job_id = enqueue_job(
+                                    tool=cmd['tool'],
+                                    target=cmd_target,
+                                    args=resolved_args,
+                                    label=source_tool,
+                                    engagement_id=engagement_id,
+                                    parent_id=parent_job_id,
+                                    reason=cmd.get('reason', f"Auto-chain from {source_tool}"),
+                                    metadata=cmd.get('metadata'),  # Pass through deduplication metadata
+                                    rule_id=cmd.get('rule_id')  # Pass rule ID for tracking
+                                )
+                                job_ids.append(job_id)
+                            except Exception as scope_err:
+                                # Handle scope violations gracefully - skip out-of-scope targets
+                                if 'ScopeViolationError' in type(scope_err).__name__ or 'out of scope' in str(scope_err).lower():
+                                    print(f"  ⚠️  Skipped (out of scope): {cmd_target}")
+                                else:
+                                    raise  # Re-raise unexpected errors
 
                 # Lock released here - next iteration gets fresh lock
 

souleyez/docs/README.md

@@ -1,7 +1,7 @@
 # SoulEyez Documentation
 
-**Version:** 2.27.0
-**Last Updated:** January 8, 2026
+**Version:** 2.32.0
+**Last Updated:** January 9, 2026
 **Organization:** CyberSoul Security
 
 Welcome to the SoulEyez documentation! This documentation covers architecture, development, user guides, and operational information for the SoulEyez penetration testing platform.

souleyez/docs/user-guide/configuration.md

@@ -748,4 +748,4 @@ rm ~/.souleyez/config.json && souleyez --version
 
 ---
 
-**Last Updated:** 2026-01-09 | **Version:** 2.27.0
+**Last Updated:** 2026-01-09 | **Version:** 2.27.1