souleyez 2.28.0__tar.gz → 2.31.0__tar.gz

{souleyez-2.28.0 → souleyez-2.31.0}/BETA_README.md

@@ -27,7 +27,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.28.0
+## Version: 2.31.0
 
 ### What's Included
 
@@ -265,4 +265,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.28.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.31.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.28.0/souleyez.egg-info → souleyez-2.31.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: souleyez
-Version: 2.28.0
+Version: 2.31.0
 Summary: AI-Powered Penetration Testing Platform with 40+ integrated tools
 Author-email: CyberSoul Security <contact@cybersoulsecurity.com>
 Maintainer-email: CyberSoul Security <contact@cybersoulsecurity.com>
@@ -78,7 +78,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.28.0
+## Version: 2.31.0
 
 ### What's Included
 
@@ -316,4 +316,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.28.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.31.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.28.0 → souleyez-2.31.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "souleyez"
-version = "2.28.0"
+version = "2.31.0"
 description = "AI-Powered Penetration Testing Platform with 40+ integrated tools"
 readme = "BETA_README.md"
 license = {text = "MIT"}

souleyez-2.31.0/souleyez/__init__.py

@@ -0,0 +1 @@
+__version__ = '2.31.0'

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/core/tool_chaining.py

@@ -1759,6 +1759,20 @@ class ToolChaining:
             )
         )
 
+        # Database Admin → SQLMap (gentler settings for phpMyAdmin/Adminer)
+        # These panels are slow and easily overwhelmed - use single thread and basic tests
+        self.rules.append(
+            ChainRule(
+                trigger_tool='gobuster',
+                trigger_condition='category:database_admin',
+                target_tool='sqlmap',
+                priority=6,  # Lower priority than CVE/exploit scans
+                args_template=['-u', '{target}', '--batch', '--forms', '--threads=1', '--time-sec=10',
+                              '--level=1', '--risk=1', '--technique=BEU', '--timeout=30'],
+                description='Database admin panel detected, testing login form for SQL injection (low intensity)'
+            )
+        )
+
         # WordPress → WPScan enumeration
         self.rules.append(
             ChainRule(
@@ -5017,6 +5031,7 @@ class ToolChaining:
                     label=f"Auto-retry: gobuster (wildcard {exclude_length}b)",
                     engagement_id=engagement_id,
                     parent_id=job.get('id'),
+                    reason=f"Auto-triggered by gobuster: Wildcard response detected, retrying with --exclude-length {exclude_length}",
                     metadata={'retry_attempt': 1, 'retry_parent_job_id': job.get('id')}
                 )
 
@@ -5116,7 +5131,8 @@ class ToolChaining:
                                 args=sqlmap_args,
                                 label=f"Auto-chain: SQLMap testing {endpoint_url}",
                                 engagement_id=engagement_id,
-                                parent_id=job.get('id')
+                                parent_id=job.get('id'),
+                                reason=f"Auto-triggered by ffuf: Database/dynamic endpoint detected ({status_code} response)"
                             )
 
                             job_ids.append(sqlmap_job_id)
@@ -5144,6 +5160,7 @@ class ToolChaining:
                                 label=f"Auto-chain: ffuf recursive {endpoint_url}",
                                 engagement_id=engagement_id,
                                 parent_id=job.get('id'),
+                                reason=f"Auto-triggered by ffuf: {status_code} response suggests deeper path, fuzzing recursively",
                                 metadata={'ffuf_depth': current_depth + 1}
                             )
 
@@ -5367,7 +5384,8 @@ class ToolChaining:
                         args=['-m', '18200', '-a', '0', 'data/wordlists/top100.txt'],
                         label='CRACK_ASREP',
                         engagement_id=engagement_id,
-                        parent_id=job.get('id')
+                        parent_id=job.get('id'),
+                        reason="Auto-triggered by impacket-getnpusers: AS-REP hash extracted, attempting to crack"
                     )
 
                     job_ids.append(job_id)
@@ -5412,7 +5430,8 @@ class ToolChaining:
                         args=['-m', '1000', '-a', '0', 'data/wordlists/top100.txt'],
                         label='CRACK_NTLM',
                         engagement_id=engagement_id,
-                        parent_id=job.get('id')
+                        parent_id=job.get('id'),
+                        reason="Auto-triggered by impacket-secretsdump: NTLM hash extracted, attempting to crack"
                     )
 
                     job_ids.append(job_id)
@@ -5452,7 +5471,8 @@ class ToolChaining:
                             args=[cred_str],
                             label='EXTRACT_CREDS',
                             engagement_id=engagement_id,
-                            parent_id=job.get('id')
+                            parent_id=job.get('id'),
+                            reason="Auto-triggered by hydra: Valid credentials found, attempting to extract domain secrets"
                         )
 
                         job_ids.append(job_id)

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/docs/README.md

@@ -1,6 +1,6 @@
 # SoulEyez Documentation
 
-**Version:** 2.28.0
+**Version:** 2.31.0
 **Last Updated:** January 9, 2026
 **Organization:** CyberSoul Security
 

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/main.py

@@ -173,7 +173,7 @@ def _check_privileged_tools():
 
 
 @click.group()
-@click.version_option(version='2.28.0')
+@click.version_option(version='2.31.0')
 def cli():
     """SoulEyez - AI-Powered Pentesting Platform by CyberSoul Security"""
     from souleyez.log_config import init_logging

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/storage/database.py

@@ -31,7 +31,7 @@ class Database:
                 os.makedirs(db_dir, exist_ok=True)
 
             conn = sqlite3.connect(self.db_path, timeout=30.0)
-            
+
             # Set secure permissions (owner read/write only)
             os.chmod(self.db_path, 0o600)
             conn.row_factory = sqlite3.Row
@@ -46,7 +46,44 @@ class Database:
                 "foreign_keys": True
             })
 
+            # Check if this is an existing database (has tables)
+            cursor = conn.execute(
+                "SELECT name FROM sqlite_master WHERE type='table' AND name='engagements'"
+            )
+            is_existing_db = cursor.fetchone() is not None
+            conn.close()
+
+            # For EXISTING databases: Run migrations FIRST
+            # This ensures new columns exist before schema.sql tries to create indexes on them
+            if is_existing_db:
+                try:
+                    from .migrations.migration_manager import MigrationManager
+                    manager = MigrationManager(self.db_path)
+                    pending = manager.get_pending_migrations()
+                    if pending:
+                        logger.info("Running pending migrations for existing database", extra={
+                            "pending_count": len(pending)
+                        })
+                        manager.migrate()
+                        logger.info("Migrations completed successfully", extra={
+                            "count": len(pending)
+                        })
+                except Exception as migration_error:
+                    logger.error("Failed to run migrations on existing database", extra={
+                        "error": str(migration_error),
+                        "error_type": type(migration_error).__name__,
+                        "traceback": traceback.format_exc()
+                    })
+                    raise  # Don't continue if migrations fail for existing DB
+
+            # Reconnect for schema loading
+            conn = sqlite3.connect(self.db_path, timeout=30.0)
+            conn.row_factory = sqlite3.Row
+            conn.execute("PRAGMA foreign_keys = ON")
+
             # Load and execute schema from the same directory as this file
+            # For fresh DBs: Creates all tables with current schema
+            # For existing DBs: CREATE TABLE IF NOT EXISTS is no-op, but ensures new tables/indexes
             schema_path = Path(__file__).parent / "schema.sql"
 
             if schema_path.exists():
@@ -228,26 +265,28 @@ class Database:
 
             conn.commit()
             conn.close()
-            
-            # Run pending migrations after schema.sql loads
-            try:
-                from .migrations.migration_manager import MigrationManager
-                manager = MigrationManager(self.db_path)
-                pending = manager.get_pending_migrations()
-                if pending:
-                    logger.info("Running pending migrations for fresh database", extra={
-                        "pending_count": len(pending)
-                    })
-                    manager.migrate()
-                    logger.info("Migrations completed successfully", extra={
-                        "count": len(pending)
+
+            # For FRESH databases: Run migrations after schema.sql loads
+            # (Existing DBs already had migrations run before schema.sql)
+            if not is_existing_db:
+                try:
+                    from .migrations.migration_manager import MigrationManager
+                    manager = MigrationManager(self.db_path)
+                    pending = manager.get_pending_migrations()
+                    if pending:
+                        logger.info("Running pending migrations for fresh database", extra={
+                            "pending_count": len(pending)
+                        })
+                        manager.migrate()
+                        logger.info("Migrations completed successfully", extra={
+                            "count": len(pending)
+                        })
+                except Exception as migration_error:
+                    logger.error("Failed to run migrations", extra={
+                        "error": str(migration_error),
+                        "error_type": type(migration_error).__name__,
+                        "traceback": traceback.format_exc()
                     })
-            except Exception as migration_error:
-                logger.error("Failed to run migrations", extra={
-                    "error": str(migration_error),
-                    "error_type": type(migration_error).__name__,
-                    "traceback": traceback.format_exc()
-                })
 
         except Exception as e:
             logger.error("Database initialization failed", extra={

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/storage/migrations/__init__.py

@@ -29,6 +29,8 @@ from . import (
     _022_wazuh_indexer_columns,
     _023_fix_detection_results_fk,
     _024_wazuh_vulnerabilities,
+    _025_multi_siem_support,
+    _026_add_engagement_scope,
 )
 
 # Migration registry - maps version to module
@@ -56,6 +58,8 @@ MIGRATIONS_REGISTRY = {
     '022': _022_wazuh_indexer_columns,
     '023': _023_fix_detection_results_fk,
     '024': _024_wazuh_vulnerabilities,
+    '025': _025_multi_siem_support,
+    '026': _026_add_engagement_scope,
 }
 
 

{souleyez-2.28.0 → souleyez-2.31.0}/souleyez/storage/schema.sql

@@ -6,6 +6,7 @@ CREATE TABLE IF NOT EXISTS engagements (
     owner_id INTEGER,
     estimated_hours FLOAT DEFAULT 0,
     actual_hours FLOAT DEFAULT 0,
+    scope_enforcement TEXT DEFAULT 'off',
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
     updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
 );
@@ -21,6 +22,7 @@ CREATE TABLE IF NOT EXISTS hosts (
     mac_address TEXT,
     status TEXT DEFAULT 'up',
     access_level TEXT DEFAULT 'none',
+    scope_status TEXT DEFAULT 'unknown',
     notes TEXT,
     tags TEXT,
     created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
@@ -540,3 +542,37 @@ CREATE INDEX IF NOT EXISTS idx_wazuh_config_engagement ON wazuh_config(engagemen
 CREATE INDEX IF NOT EXISTS idx_detection_results_job ON detection_results(job_id);
 CREATE INDEX IF NOT EXISTS idx_detection_results_engagement ON detection_results(engagement_id);
 CREATE INDEX IF NOT EXISTS idx_detection_results_status ON detection_results(detection_status);
+
+-- Engagement Scope Validation (from migration 026)
+CREATE TABLE IF NOT EXISTS engagement_scope (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    engagement_id INTEGER NOT NULL,
+    scope_type TEXT NOT NULL,
+    value TEXT NOT NULL,
+    is_excluded BOOLEAN DEFAULT 0,
+    description TEXT,
+    added_by TEXT,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (engagement_id) REFERENCES engagements(id) ON DELETE CASCADE,
+    UNIQUE(engagement_id, scope_type, value)
+);
+
+CREATE TABLE IF NOT EXISTS scope_validation_log (
+    id INTEGER PRIMARY KEY AUTOINCREMENT,
+    engagement_id INTEGER NOT NULL,
+    job_id INTEGER,
+    target TEXT NOT NULL,
+    validation_result TEXT NOT NULL,
+    action_taken TEXT NOT NULL,
+    matched_scope_id INTEGER,
+    user_id TEXT,
+    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+    FOREIGN KEY (engagement_id) REFERENCES engagements(id) ON DELETE CASCADE
+);
+
+CREATE INDEX IF NOT EXISTS idx_scope_engagement ON engagement_scope(engagement_id);
+CREATE INDEX IF NOT EXISTS idx_scope_type ON engagement_scope(scope_type);
+CREATE INDEX IF NOT EXISTS idx_scope_log_engagement ON scope_validation_log(engagement_id);
+CREATE INDEX IF NOT EXISTS idx_scope_log_result ON scope_validation_log(validation_result);
+CREATE INDEX IF NOT EXISTS idx_scope_log_timestamp ON scope_validation_log(created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_hosts_scope_status ON hosts(scope_status);