souleyez 2.43.21__py3-none-any.whl → 2.43.23__py3-none-any.whl

souleyez/__init__.py

@@ -1,2 +1,2 @@
-__version__ = '2.43.21'
+__version__ = '2.43.23'
 

souleyez/docs/README.md

@@ -1,6 +1,6 @@
 # SoulEyez Documentation
 
-**Version:** 2.43.21
+**Version:** 2.43.23
 **Last Updated:** January 12, 2026
 **Organization:** CyberSoul Security
 

souleyez/engine/background.py

@@ -833,7 +833,18 @@ def _try_run_plugin(tool: str, target: str, args: List[str], label: str, log_pat
                 cmd_spec = build_command_method(target, args or [], label or "", log_path)
                 
                 if cmd_spec is None:
-                    # build_command returned None - check if plugin has run() method
+                    # build_command returned None - check if this is a deliberate abort
+                    # (e.g., gobuster detected host redirect and aborted to avoid wasted scan)
+                    if os.path.exists(log_path):
+                        with open(log_path, 'r', encoding='utf-8', errors='replace') as fh:
+                            log_content = fh.read()
+                            if 'HOST_REDIRECT_TARGET:' in log_content:
+                                # Plugin aborted due to host redirect - don't fall through to run()
+                                # Return success (0) so parser can set WARNING status and trigger retry
+                                _append_worker_log(f"job {jid}: gobuster aborted due to host redirect")
+                                return (True, 0)
+
+                    # Otherwise check if plugin has run() method
                     # This allows plugins to signal "use run() instead" by returning None
                     run_method = getattr(plugin, "run", None)
                     if callable(run_method):

souleyez/engine/result_handler.py

@@ -2522,10 +2522,17 @@ def parse_hydra_job(engagement_id: int, log_path: str, job: Dict[str, Any]) -> D
 
         # Check for hydra errors
         hydra_error = detect_tool_error(log_content, 'hydra')
+        summary = None
 
         # Determine status based on results
         if hydra_error:
-            status = STATUS_ERROR  # Tool failed to connect
+            # "Connection refused" means service not available - not a tool error
+            # This is a valid result: we successfully tested, service doesn't exist
+            if 'connection refused' in hydra_error.lower():
+                status = STATUS_NO_RESULTS  # Service not reachable
+                summary = f"Service not reachable (connection refused)"
+            else:
+                status = STATUS_ERROR  # Actual tool failure
         elif len(parsed.get('credentials', [])) > 0:
             status = STATUS_DONE  # Found valid credentials
         elif len(parsed.get('usernames', [])) > 0:
@@ -2533,7 +2540,7 @@ def parse_hydra_job(engagement_id: int, log_path: str, job: Dict[str, Any]) -> D
         else:
             status = STATUS_NO_RESULTS  # No valid credentials or usernames found
 
-        return {
+        result = {
             'tool': 'hydra',
             'status': status,
             'target': target,
@@ -2548,6 +2555,9 @@ def parse_hydra_job(engagement_id: int, log_path: str, job: Dict[str, Any]) -> D
             'findings_added': findings_added,
             'attempts': parsed.get('attempts', 0)
         }
+        if summary:
+            result['summary'] = summary
+        return result
     except Exception as e:
         return {'error': str(e)}
 
@@ -3316,8 +3326,10 @@ def parse_http_fingerprint_job(engagement_id: int, log_path: str, job: Dict[str,
         summary_parts = []
 
         if parsed.get('error'):
-            status = STATUS_ERROR
-            summary_parts.append(f"Error: {parsed.get('error')}")
+            # Network errors (connection refused, timeout, etc.) are findings about the target,
+            # not job failures. The job ran successfully - it just couldn't reach the target.
+            status = STATUS_WARNING
+            summary_parts.append(f"Unreachable: {parsed.get('error')}")
         elif parsed.get('managed_hosting') or parsed.get('waf') or parsed.get('cdn'):
             status = STATUS_DONE  # Found useful info
         elif parsed.get('server'):

souleyez/main.py

@@ -173,7 +173,7 @@ def _check_privileged_tools():
 
 
 @click.group()
-@click.version_option(version='2.43.21')
+@click.version_option(version='2.43.23')
 def cli():
     """SoulEyez - AI-Powered Pentesting Platform by CyberSoul Security"""
     from souleyez.log_config import init_logging

souleyez/plugins/gobuster.py

@@ -420,6 +420,18 @@ class GobusterPlugin(PluginBase):
 
             # Always run preflight - merge detected length with any existing exclusions
             preflight = self._preflight_check(base_url, timeout=5.0, log_path=log_path)
+
+            # If host redirect detected, abort scan immediately
+            # Don't waste time running on wrong target - result_handler will spawn retry
+            if preflight.get('redirect_host'):
+                if log_path:
+                    with open(log_path, 'a') as f:
+                        f.write("\n=== SCAN ABORTED ===\n")
+                        f.write("Host redirect detected. Aborting to avoid wasted scan time.\n")
+                        f.write("A retry job will be auto-queued with the correct target.\n")
+                        f.write(f"=== Completed: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())} ===\n")
+                return None  # Abort - background.py will check log for HOST_REDIRECT_TARGET
+
             if preflight['exclude_length']:
                 # Collect existing exclusions
                 existing_excludes = set()

souleyez/ui/interactive.py

@@ -5677,6 +5677,116 @@ def view_job_detail(job_id: int):
                         except Exception:
                             pass  # Non-critical, just display the paths
 
+                    # Security concern patterns - check for interesting/dangerous paths
+                    security_concerns = []
+                    concern_patterns = {
+                        # Database files
+                        'database_files': {
+                            'patterns': [r'\.sql$', r'\.db$', r'\.mdb$', r'\.sqlite', r'/db\.', r'/database\.', r'\.bak\.sql'],
+                            'label': 'Database file exposed',
+                            'severity': 'high',
+                        },
+                        # Backup files
+                        'backup_files': {
+                            'patterns': [r'\.bak$', r'\.old$', r'\.backup$', r'\.orig$', r'\.save$', r'\.swp$', r'~$', r'\.zip$', r'\.tar', r'\.gz$', r'\.rar$'],
+                            'label': 'Backup/archive file',
+                            'severity': 'high',
+                        },
+                        # Config files
+                        'config_files': {
+                            'patterns': [r'web\.config', r'\.htaccess', r'\.htpasswd', r'\.env$', r'config\.php', r'config\.inc', r'settings\.py', r'\.ini$', r'\.conf$', r'\.cfg$'],
+                            'label': 'Configuration file exposed',
+                            'severity': 'high',
+                        },
+                        # Source code / dev files
+                        'source_files': {
+                            'patterns': [r'\.git/', r'\.svn/', r'\.DS_Store', r'\.vscode/', r'\.idea/', r'Thumbs\.db', r'\.log$', r'debug\.', r'test\.php', r'phpinfo'],
+                            'label': 'Development/debug file',
+                            'severity': 'medium',
+                        },
+                        # Legacy/vulnerable directories
+                        'legacy_dirs': {
+                            'patterns': [r'_vti_', r'/cgi-bin', r'/cgi/', r'/fcgi/', r'/admin/', r'/administrator/', r'/phpmyadmin', r'/pma/', r'/myadmin'],
+                            'label': 'Legacy/admin directory',
+                            'severity': 'medium',
+                        },
+                        # Sensitive endpoints
+                        'sensitive_endpoints': {
+                            'patterns': [r'/upload', r'/uploads/', r'/file/', r'/files/', r'/tmp/', r'/temp/', r'/private/', r'/internal/', r'/api/'],
+                            'label': 'Potentially sensitive directory',
+                            'severity': 'low',
+                        },
+                    }
+
+                    import re
+                    for path_entry in paths:
+                        url = path_entry.get('url', '').lower()
+                        for concern_type, concern_info in concern_patterns.items():
+                            for pattern in concern_info['patterns']:
+                                if re.search(pattern, url, re.IGNORECASE):
+                                    security_concerns.append({
+                                        'url': path_entry.get('url', ''),
+                                        'type': concern_type,
+                                        'label': concern_info['label'],
+                                        'severity': concern_info['severity'],
+                                        'status_code': path_entry.get('status_code', 'unknown'),
+                                    })
+                                    break  # Only match once per path per type
+
+                    # Display security concerns if found
+                    if security_concerns:
+                        click.echo(click.style("=" * 70, fg='red'))
+                        click.echo(click.style("⚠️  SECURITY CONCERNS", bold=True, fg='red'))
+                        click.echo(click.style("=" * 70, fg='red'))
+                        click.echo()
+
+                        # Group by severity
+                        high_concerns = [c for c in security_concerns if c['severity'] == 'high']
+                        medium_concerns = [c for c in security_concerns if c['severity'] == 'medium']
+                        low_concerns = [c for c in security_concerns if c['severity'] == 'low']
+
+                        if high_concerns:
+                            click.echo(click.style("[HIGH] Critical findings:", fg='red', bold=True))
+                            # Group by label
+                            by_label = {}
+                            for c in high_concerns:
+                                if c['label'] not in by_label:
+                                    by_label[c['label']] = []
+                                by_label[c['label']].append(c['url'])
+                            for label, urls in by_label.items():
+                                click.echo(click.style(f"  • {label}:", fg='red'))
+                                for url in urls[:5]:  # Limit to 5 per type
+                                    click.echo(f"    → {url}")
+                                if len(urls) > 5:
+                                    click.echo(f"    ... and {len(urls) - 5} more")
+                            click.echo()
+
+                        if medium_concerns:
+                            click.echo(click.style("[MEDIUM] Notable findings:", fg='yellow', bold=True))
+                            by_label = {}
+                            for c in medium_concerns:
+                                if c['label'] not in by_label:
+                                    by_label[c['label']] = []
+                                by_label[c['label']].append(c['url'])
+                            for label, urls in by_label.items():
+                                click.echo(click.style(f"  • {label}:", fg='yellow'))
+                                for url in urls[:5]:
+                                    click.echo(f"    → {url}")
+                                if len(urls) > 5:
+                                    click.echo(f"    ... and {len(urls) - 5} more")
+                            click.echo()
+
+                        if low_concerns:
+                            click.echo(click.style("[LOW] Worth investigating:", fg='cyan', bold=True))
+                            by_label = {}
+                            for c in low_concerns:
+                                if c['label'] not in by_label:
+                                    by_label[c['label']] = []
+                                by_label[c['label']].append(c['url'])
+                            for label, urls in by_label.items():
+                                click.echo(f"  • {label}: {len(urls)} path(s)")
+                            click.echo()
+
                     click.echo(click.style("=" * 70, fg='cyan'))
                     click.echo(click.style("DISCOVERED WEB PATHS", bold=True, fg='cyan'))
                     click.echo(click.style("=" * 70, fg='cyan'))

{souleyez-2.43.21.dist-info → souleyez-2.43.23.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: souleyez
-Version: 2.43.21
+Version: 2.43.23
 Summary: AI-Powered Penetration Testing Platform with 40+ integrated tools
 Author-email: CyberSoul Security <contact@cybersoulsecurity.com>
 Maintainer-email: CyberSoul Security <contact@cybersoulsecurity.com>

{souleyez-2.43.21.dist-info → souleyez-2.43.23.dist-info}/RECORD

@@ -1,10 +1,10 @@
-souleyez/__init__.py,sha256=nHX2xDLjvmca2VRMLJEdBe9TLirZpnAEpzpedOJqGVA,25
+souleyez/__init__.py,sha256=_O0zQDjjfN2p0SJ7vxTMimFsacmNRt7DRcREfGCtzsA,25
 souleyez/config.py,sha256=av357I3GYRWAklv8Dto-9-5Db699Wq5znez7zo7241Q,11595
 souleyez/devtools.py,sha256=rptmUY4a5eVvYjdEc6273MSagL-D9xibPOFgohVqUno,3508
 souleyez/feature_flags.py,sha256=mo6YAq07lc6sR3lEFKmIwTKxXZ2JPxwa5X97uR_mu50,4642
 souleyez/history.py,sha256=gzs5I_j-3OigIP6yfmBChdqxaFmyUIxvTpzWUPe_Q6c,2853
 souleyez/log_config.py,sha256=MMhPAJOqgXDfuE-xm5g0RxAfWndcmbhFHvIEMm1a_Wo,5830
-souleyez/main.py,sha256=gE3iGvtoke6wSaQyXOpRq-g_yLyxuEcE3Dd0kGtDaeo,129101
+souleyez/main.py,sha256=BISz7PzhK03R7UTB-0Cnozk3kVOx0ctBxtZdg4bCo78,129101
 souleyez/scanner.py,sha256=U3IWHRrJ5aQ32dSHiVAHB60w1R_z0E0QxfM99msYNlw,3124
 souleyez/security.py,sha256=S84m1QmnKz_6NgH2I6IBIAorMHxRPNYVFSnks5xjihQ,2479
 souleyez/ui.py,sha256=15pfsqoDPnojAqr5S0TZHJE2ZkSHzkHpNVfVvsRj66A,34301
@@ -104,7 +104,7 @@ souleyez/detection/__init__.py,sha256=QIhvXjFdjrquQ6A0VQ7GZQkK_EXB59t8Dv9PKXhEUe
 souleyez/detection/attack_signatures.py,sha256=akgWwiIkh6WYnghCuLhRV0y6FS0SQ0caGF8tZUc49oA,6965
 souleyez/detection/mitre_mappings.py,sha256=xejE80YK-g8kKaeQoo-vBl8P3t8RTTItbfN0NaVZw6s,20558
 souleyez/detection/validator.py,sha256=-AJ7QSJ3-6jFKLnPG_Rc34IXyF4JPyI82BFUgTA9zw0,15641
-souleyez/docs/README.md,sha256=_ErqwMJP-wkJSIidWRgYCQ-e4iCB5uDv_wytkcrfyvY,7188
+souleyez/docs/README.md,sha256=1IbE4JAOBBHmIvSu9AiYaiXllUTR4kYFYexCGDEQy84,7188
 souleyez/docs/api-reference/cli-commands.md,sha256=lTLFnILN3YRVdqCaag7WgsYXfDGglb1TuPexkxDsVdE,12917
 souleyez/docs/api-reference/engagement-api.md,sha256=nd-EvQMtiJrobg2bzFEADp853HP1Uhb9dmgok0_-neE,11672
 souleyez/docs/api-reference/integration-guide.md,sha256=c96uX79ukHyYotLa54wZ20Kx-EUZnrKegTeGkfLD-pw,16285
@@ -146,13 +146,13 @@ souleyez/docs/user-guide/uninstall.md,sha256=gDknetFhjZ0tnYk4JqhLa369NT4bIRb50rm
 souleyez/docs/user-guide/worker-management.md,sha256=hNu6eSTVb6XM4Zbb0I9Y5aL4AA2EiWOSFI6iGjn17kU,12035
 souleyez/docs/user-guide/workflows.md,sha256=4EyZKWRyuWf9wrENJwtidWKN25PGis1Pk33HIHk5UHM,22261
 souleyez/engine/__init__.py,sha256=THI_89hQfAPJDsfzDcur6H9sEGhGAnTxSNim7UOExYc,110
-souleyez/engine/background.py,sha256=55-DOhq9s3oud5POuutV-NmUQARg3i9kvSl_pLy7oBY,85252
+souleyez/engine/background.py,sha256=C1hbkcY5CJme8HVchMcWs7wwfgQphc-x8eEtMWaRB9s,86037
 souleyez/engine/base.py,sha256=G35U1d-fygUvzmHH8zxLXw-vyQ9JzcfhGaSYOsHJtzQ,728
 souleyez/engine/job_status.py,sha256=OAEf2rAzapm55m4tc3PSilotdA5ONX15JavUMLre0is,2685
 souleyez/engine/loader.py,sha256=ke6QQVVWozDnqGNBotajC3RBYOa2_DZmv5DAnDZVgIc,2769
 souleyez/engine/log_sanitizer.py,sha256=QHF6zSms-wHo6SbL6fHXIh1GG-8G34lE7kl45nbPn70,7130
 souleyez/engine/manager.py,sha256=aBQMoib-VWNXtIp5Qn34tRj1P1jiLpwAIoo1fexAaLU,3629
-souleyez/engine/result_handler.py,sha256=jioWzfRrSdRP7vfrcGIujrhh6-H1POkyiBGDnwjoW9I,143455
+souleyez/engine/result_handler.py,sha256=o59PY0tcuEY1T06P0hGmGKRnTZacvyT0H6b3iwOf_y8,144145
 souleyez/engine/worker_manager.py,sha256=B7b8RbkKTNofmiIyHTNgdikoZCLXpB-iIl1S4-U3q9o,6127
 souleyez/export/__init__.py,sha256=2kFHftSqqrRUG6PhtfhCyhnkpkjc-8Zb4utGo-Nb6B4,61
 souleyez/export/evidence_bundle.py,sha256=hqPn_h2CidhL-1VAT0qraZ8r1yfnUTnLZ3RfPPCK5Ds,9966
@@ -227,7 +227,7 @@ souleyez/plugins/dnsrecon.py,sha256=nxeVgwACUyw5VYEyD-5U277d1U72EkWBX9nR9_DMZrI,
 souleyez/plugins/enum4linux.py,sha256=VHkKPs8PWX90RLsGdYt5Ieuc3Sz52fbeWvKCL1KquIY,10876
 souleyez/plugins/ffuf.py,sha256=7c1-Q7xXTMmH_2wHXikjmZnSgZL13Hj5E_asBxZ6Y5U,11652
 souleyez/plugins/firmware_extract.py,sha256=_hZXx6cHb9noM6uVgi3hwrJLw8hE9mDUelTEHwoIdCU,6460
-souleyez/plugins/gobuster.py,sha256=y8QeEjMR5_2tf-T63nxFRUtWmlCzrPez2I4nLqPNOfY,32114
+souleyez/plugins/gobuster.py,sha256=VIW84fB7WIlHm5-0TQXIRlMEkKT9fdB_eelwYCUGCAY,32853
 souleyez/plugins/hashcat.py,sha256=aigfwBu9IorXKgbyEIWx0qOCEdr1wnZaPqdYwh0PITc,10381
 souleyez/plugins/http_fingerprint.py,sha256=4ukU-TgcPjpccf929BpJbjfcijxsfWxhUPe0MrEoWf8,21424
 souleyez/plugins/hydra.py,sha256=kfVJwgh3x1DC0wEtA-lkoY7qhQH1qKViYexUECZSPY4,29520
@@ -347,7 +347,7 @@ souleyez/ui/export_view.py,sha256=0nQvVsKk7FU4uRzSfJ_qBZh_Lfn8hgGA2rbJ5bNg5-Y,65
 souleyez/ui/gap_analysis_view.py,sha256=AytAOEBq010wwo9hne1TE-uJpY_xicjLrFANbvN3r3w,30727
 souleyez/ui/help_system.py,sha256=nKGxLaMi-TKYs6xudTyw_tZqBb1cGFEuYYh6N-MAsJE,16648
 souleyez/ui/intelligence_view.py,sha256=VeAQ-3mANRnLIVpRqocL3JV0HUmJtADdxDeC5lzQhE0,32168
-souleyez/ui/interactive.py,sha256=fz3HksIGbKlL-mvjPoerrRKwvedSM-PjMLub0xH4PQE,1416776
+souleyez/ui/interactive.py,sha256=x2THKw7npsTYEhK6qy7r-yor_uP2NtMdXjuGXTu0ANU,1423390
 souleyez/ui/interactive_selector.py,sha256=6A51fgmFRnemBY0aCPHIhK2Rpba16NjSGKLzC0Q5vI8,16407
 souleyez/ui/log_formatter.py,sha256=akhIkYoO_cCaKxS1V5N3iPmIrHzgsU7pmsedx70s9TI,3845
 souleyez/ui/menu_components.py,sha256=N8zq2QXGmfaLJ08l53MMYt1y-5LRWgpZH6r8nXHonj8,3519
@@ -371,9 +371,9 @@ souleyez/ui/wazuh_vulns_view.py,sha256=3vJJEmrjgS2wD6EDB7ZV7WxgytBHTm-1WqNDjp7lV
 souleyez/ui/wordlist_browser.py,sha256=iQ2YYxrVo8FGCfM-Bc0teVBijSAbd2rjbSQ2hOE7eiY,16110
 souleyez/utils/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 souleyez/utils/tool_checker.py,sha256=YzNajZpFyKJA5fp0Kq_gQ0YnKb7J1BaKJSZ8vP-IWj8,30868
-souleyez-2.43.21.dist-info/licenses/LICENSE,sha256=J7vDD5QMF4w2oSDm35eBgosATE70ah1M40u9W4EpTZs,1090
-souleyez-2.43.21.dist-info/METADATA,sha256=46UCChcyRvVsxY0X53Wkas-Io_LXOXGx92HSI80xrCE,10427
-souleyez-2.43.21.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-souleyez-2.43.21.dist-info/entry_points.txt,sha256=bN5W1dhjDZJl3TKclMjRpfQvGPmyrJLwwDuCj_X39HE,48
-souleyez-2.43.21.dist-info/top_level.txt,sha256=afAMzS9p4lcdBNxhGo6jl3ipQE9HUvvNIPOdjtPjr_Q,9
-souleyez-2.43.21.dist-info/RECORD,,
+souleyez-2.43.23.dist-info/licenses/LICENSE,sha256=J7vDD5QMF4w2oSDm35eBgosATE70ah1M40u9W4EpTZs,1090
+souleyez-2.43.23.dist-info/METADATA,sha256=KU_fLA17aF-ze8k-cCoWGoyKBlLrRT6WlE6_SOBfXdE,10427
+souleyez-2.43.23.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+souleyez-2.43.23.dist-info/entry_points.txt,sha256=bN5W1dhjDZJl3TKclMjRpfQvGPmyrJLwwDuCj_X39HE,48
+souleyez-2.43.23.dist-info/top_level.txt,sha256=afAMzS9p4lcdBNxhGo6jl3ipQE9HUvvNIPOdjtPjr_Q,9
+souleyez-2.43.23.dist-info/RECORD,,