souleyez 2.43.26__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/plugins/dnsrecon.py

@@ -34,7 +34,10 @@ HELP = {
     ],
     "flags": [
         ["-d <domain>", "Target domain"],
-        ["-t <type>", "Enumeration type: std, axfr, brt, srv, rvl, snoop, tld, zonewalk"],
+        [
+            "-t <type>",
+            "Enumeration type: std, axfr, brt, srv, rvl, snoop, tld, zonewalk",
+        ],
         ["-D <file>", "Dictionary file for subdomain brute force"],
         ["-n <ns>", "Use specific nameserver"],
         ["-a", "Perform AXFR with standard enumeration"],
@@ -44,59 +47,95 @@ HELP = {
         ["--threads <num>", "Number of threads (default: 10)"],
     ],
     "presets": [
-        {"name": "Standard Enum", "args": ["-t", "std"], "desc": "Standard DNS enumeration (A, MX, NS, TXT records)"},
-        {"name": "Zone Transfer", "args": ["-a"], "desc": "Attempt AXFR zone transfer with standard enum"},
-        {"name": "Subdomain Brute", "args": ["-t", "brt", "-D", "data/wordlists/subdomains_common.txt"], "desc": "Brute force subdomains with wordlist"},
-        {"name": "Full Enum", "args": ["-a", "-s", "-k"], "desc": "Comprehensive enumeration with all techniques"},
+        {
+            "name": "Standard Enum",
+            "args": ["-t", "std"],
+            "desc": "Standard DNS enumeration (A, MX, NS, TXT records)",
+        },
+        {
+            "name": "Zone Transfer",
+            "args": ["-a"],
+            "desc": "Attempt AXFR zone transfer with standard enum",
+        },
+        {
+            "name": "Subdomain Brute",
+            "args": ["-t", "brt", "-D", "data/wordlists/subdomains_common.txt"],
+            "desc": "Brute force subdomains with wordlist",
+        },
+        {
+            "name": "Full Enum",
+            "args": ["-a", "-s", "-k"],
+            "desc": "Comprehensive enumeration with all techniques",
+        },
     ],
     "help_sections": [
         {
             "title": "What is DNSRecon?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "DNSRecon performs comprehensive DNS enumeration including standard record queries, zone transfers, subdomain brute-forcing, and reverse lookups."},
-                {"title": "Use Cases", "desc": "Essential for mapping DNS infrastructure and discovering hidden subdomains.", "tips": [
-                    "Discover all DNS records (A, MX, NS, TXT, etc.)",
-                    "Attempt zone transfers (AXFR) for full DNS data",
-                    "Brute-force subdomains with wordlists",
-                    "Find mail servers and SPF records",
-                    "Identify nameserver configuration"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "DNSRecon performs comprehensive DNS enumeration including standard record queries, zone transfers, subdomain brute-forcing, and reverse lookups.",
+                },
+                {
+                    "title": "Use Cases",
+                    "desc": "Essential for mapping DNS infrastructure and discovering hidden subdomains.",
+                    "tips": [
+                        "Discover all DNS records (A, MX, NS, TXT, etc.)",
+                        "Attempt zone transfers (AXFR) for full DNS data",
+                        "Brute-force subdomains with wordlists",
+                        "Find mail servers and SPF records",
+                        "Identify nameserver configuration",
+                    ],
+                },
+            ],
         },
         {
             "title": "How to Use",
             "color": "green",
             "content": [
-                {"title": "Basic Workflow", "desc": "1. Select target domain\n     2. Choose enumeration type (standard, zone transfer, brute force, full)\n     3. Review discovered subdomains and records\n     4. Feed results into next phase (port scanning)"},
-                {"title": "Enumeration Types", "desc": "Different scan modes for different goals", "tips": [
-                    "Standard Enum: Quick record lookup (A, MX, NS, TXT)",
-                    "Zone Transfer: Attempt AXFR for complete zone data",
-                    "Subdomain Brute: Dictionary-based subdomain discovery",
-                    "Full Enum: All techniques combined (zone transfer + SPF + crt.sh)"
-                ]}
-            ]
+                {
+                    "title": "Basic Workflow",
+                    "desc": "1. Select target domain\n     2. Choose enumeration type (standard, zone transfer, brute force, full)\n     3. Review discovered subdomains and records\n     4. Feed results into next phase (port scanning)",
+                },
+                {
+                    "title": "Enumeration Types",
+                    "desc": "Different scan modes for different goals",
+                    "tips": [
+                        "Standard Enum: Quick record lookup (A, MX, NS, TXT)",
+                        "Zone Transfer: Attempt AXFR for complete zone data",
+                        "Subdomain Brute: Dictionary-based subdomain discovery",
+                        "Full Enum: All techniques combined (zone transfer + SPF + crt.sh)",
+                    ],
+                },
+            ],
         },
         {
             "title": "Tips & Best Practices",
             "color": "yellow",
             "content": [
-                ("Best Practices:", [
-                    "Start with standard enum to get baseline records",
-                    "Always try zone transfer (often misconfigured)",
-                    "Use comprehensive wordlists for brute forcing",
-                    "Combine with crt.sh for certificate transparency data",
-                    "Export results and import into host database"
-                ]),
-                ("Common Issues:", [
-                    "Zone transfer denied: Expected, try brute force instead",
-                    "Slow brute force: Reduce wordlist size or increase threads",
-                    "No results: Verify domain is valid and DNS is reachable",
-                    "Timeout: Large zones may take time, increase timeout"
-                ])
-            ]
-        }
-    ]
+                (
+                    "Best Practices:",
+                    [
+                        "Start with standard enum to get baseline records",
+                        "Always try zone transfer (often misconfigured)",
+                        "Use comprehensive wordlists for brute forcing",
+                        "Combine with crt.sh for certificate transparency data",
+                        "Export results and import into host database",
+                    ],
+                ),
+                (
+                    "Common Issues:",
+                    [
+                        "Zone transfer denied: Expected, try brute force instead",
+                        "Slow brute force: Reduce wordlist size or increase threads",
+                        "No results: Verify domain is valid and DNS is reachable",
+                        "Timeout: Large zones may take time, increase timeout",
+                    ],
+                ),
+            ],
+        },
+    ],
 }
 
 
@@ -106,40 +145,40 @@ class DnsreconPlugin(PluginBase):
     category = "reconnaissance"
     HELP = HELP
 
-
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build command for background execution with PID tracking."""
         if not target:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write("ERROR: Target domain is required\n")
             return None
-        
+
         # Validate target
         try:
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
-        
+
         args = args or ["-t", "std"]
-        
+
         # Check if -d flag is already in args (from auto-chaining)
-        if '-d' in args:
+        if "-d" in args:
             # Args already contain -d domain, just use them as-is
             cmd = ["dnsrecon"] + args
         else:
             # Add -d flag with target
             cmd = ["dnsrecon", "-d", target] + args
-        
-        return {
-            'cmd': cmd,
-            'timeout': 1800
-        }
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+        return {"cmd": cmd, "timeout": 1800}
+
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """
         Execute DNSRecon and write output to log_path.
         """
@@ -151,7 +190,7 @@ class DnsreconPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
                 return 1
             raise ValueError(f"Invalid target: {e}")
@@ -163,21 +202,18 @@ class DnsreconPlugin(PluginBase):
         cmd = ["dnsrecon", "-d", target] + args
 
         if log_path:
-            with open(log_path, 'w') as f:
+            with open(log_path, "w") as f:
                 f.write(f"# DNSRecon enumeration for {target}\n")
                 f.write(f"# Command: {' '.join(cmd)}\n")
                 f.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S')}\n\n")
 
         try:
             result = subprocess.run(
-                cmd,
-                capture_output=True,
-                text=True,
-                timeout=600  # 10 minutes max
+                cmd, capture_output=True, text=True, timeout=600  # 10 minutes max
             )
 
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(result.stdout)
                     if result.stderr:
                         f.write(f"\n\n# Errors:\n{result.stderr}\n")
@@ -186,12 +222,12 @@ class DnsreconPlugin(PluginBase):
 
         except subprocess.TimeoutExpired:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: Command timed out after 600 seconds\n")
             return 124
         except Exception as e:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(f"\n\n# ERROR: {str(e)}\n")
             return 1
 

souleyez/plugins/enum4linux.py

@@ -29,10 +29,10 @@ HELP = {
         "- Be cautious with noisy probes (userenum / RID cycling); run them only with explicit permission.\n"
         "- Correlate Enum4linux output with other SMB checks (smbclient, smbmap, bloodhound, etc.) for a fuller risk picture.\n"
     ),
-    "usage": "souleyez jobs enqueue enum4linux <target> --args \"-a\"",
+    "usage": 'souleyez jobs enqueue enum4linux <target> --args "-a"',
     "examples": [
-        "souleyez jobs enqueue enum4linux 10.0.0.5 --args \"-a\"",
-        "souleyez jobs enqueue enum4linux 10.0.0.5 --args \"-U -S\"",
+        'souleyez jobs enqueue enum4linux 10.0.0.5 --args "-a"',
+        'souleyez jobs enqueue enum4linux 10.0.0.5 --args "-U -S"',
     ],
     "flags": [
         ["-U", "Get userlist"],
@@ -45,17 +45,13 @@ HELP = {
         {
             "name": "Full Enum",
             "args": ["-a"],
-            "desc": "All enumeration (users, shares, groups, etc.)"
-        },
-        {
-            "name": "Shares Only",
-            "args": ["-S"],
-            "desc": "Enumerate shares only"
+            "desc": "All enumeration (users, shares, groups, etc.)",
         },
+        {"name": "Shares Only", "args": ["-S"], "desc": "Enumerate shares only"},
         {
             "name": "Users & Shares",
             "args": ["-U", "-S"],
-            "desc": "Enumerate users and shares"
+            "desc": "Enumerate users and shares",
         },
     ],
     "help_sections": [
@@ -63,49 +59,69 @@ HELP = {
             "title": "What is enum4linux?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "enum4linux is a comprehensive SMB/CIFS enumeration tool for Windows and Samba systems, automating common reconnaissance tasks."},
-                {"title": "Use Cases", "desc": "Best for legacy Samba and Windows SMB enumeration", "tips": [
-                    "List shares and permissions",
-                    "Enumerate users and groups via RID cycling",
-                    "Pull OS and domain information",
-                    "Check for null/anonymous access"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "enum4linux is a comprehensive SMB/CIFS enumeration tool for Windows and Samba systems, automating common reconnaissance tasks.",
+                },
+                {
+                    "title": "Use Cases",
+                    "desc": "Best for legacy Samba and Windows SMB enumeration",
+                    "tips": [
+                        "List shares and permissions",
+                        "Enumerate users and groups via RID cycling",
+                        "Pull OS and domain information",
+                        "Check for null/anonymous access",
+                    ],
+                },
+            ],
         },
         {
             "title": "How to Use",
             "color": "green",
             "content": [
-                {"title": "Basic Workflow", "desc": "1. Run full enumeration (-a) for complete picture\n     2. Review shares for anonymous access\n     3. Check user/group lists for attack targets\n     4. Document findings in job log"},
-                {"title": "Key Options", "desc": "Common enumeration tasks", "tips": [
-                    "-a: All enumeration (recommended start)",
-                    "-U: User enumeration",
-                    "-S: Share enumeration",
-                    "-G: Group and member enumeration",
-                    "-P: Password policy information"
-                ]}
-            ]
+                {
+                    "title": "Basic Workflow",
+                    "desc": "1. Run full enumeration (-a) for complete picture\n     2. Review shares for anonymous access\n     3. Check user/group lists for attack targets\n     4. Document findings in job log",
+                },
+                {
+                    "title": "Key Options",
+                    "desc": "Common enumeration tasks",
+                    "tips": [
+                        "-a: All enumeration (recommended start)",
+                        "-U: User enumeration",
+                        "-S: Share enumeration",
+                        "-G: Group and member enumeration",
+                        "-P: Password policy information",
+                    ],
+                },
+            ],
         },
         {
             "title": "Tips & Best Practices",
             "color": "yellow",
             "content": [
-                ("Best Practices:", [
-                    "Start with -a for comprehensive baseline",
-                    "Flag anonymous shares as security findings",
-                    "Correlate with smbmap and CrackMapExec results",
-                    "Save output for later analysis and reporting",
-                    "Document weak permissions and exposed data"
-                ]),
-                ("Common Issues:", [
-                    "RID cycling fails: Try with credentials or different host",
-                    "Timeout errors: Some checks can be slow on large domains",
-                    "Access denied: Check if guest/anonymous access is disabled",
-                    "No users found: Requires SMB enumeration to be enabled"
-                ])
-            ]
-        }
-    ]
+                (
+                    "Best Practices:",
+                    [
+                        "Start with -a for comprehensive baseline",
+                        "Flag anonymous shares as security findings",
+                        "Correlate with smbmap and CrackMapExec results",
+                        "Save output for later analysis and reporting",
+                        "Document weak permissions and exposed data",
+                    ],
+                ),
+                (
+                    "Common Issues:",
+                    [
+                        "RID cycling fails: Try with credentials or different host",
+                        "Timeout errors: Some checks can be slow on large domains",
+                        "Access denied: Check if guest/anonymous access is disabled",
+                        "No users found: Requires SMB enumeration to be enabled",
+                    ],
+                ),
+            ],
+        },
+    ],
 }
 
 
@@ -119,11 +135,12 @@ class Enum4linuxPlugin(PluginBase):
     def _get_tool_command(self) -> str:
         """Get the actual tool command available on the system."""
         import shutil
+
         # Check primary command first
         if shutil.which(self.tool):
             return self.tool
         # Check alternative commands (e.g., enum4linux-ng on Ubuntu)
-        for alt in getattr(self, 'alt_tools', []):
+        for alt in getattr(self, "alt_tools", []):
             if shutil.which(alt):
                 return alt
         return self.tool  # Return default, will fail with clear error
@@ -135,12 +152,12 @@ class Enum4linuxPlugin(PluginBase):
         - -a (all) becomes -A
         - Most other flags (-U, -S, -G, -P) are the same
         """
-        if 'enum4linux-ng' not in tool_cmd:
+        if "enum4linux-ng" not in tool_cmd:
             return args
 
         # Argument mapping: enum4linux -> enum4linux-ng
         arg_map = {
-            '-a': '-A',  # All enumeration
+            "-a": "-A",  # All enumeration
         }
 
         translated = []
@@ -148,7 +165,9 @@ class Enum4linuxPlugin(PluginBase):
             translated.append(arg_map.get(arg, arg))
         return translated
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build command for background execution with PID tracking."""
         args = args or []
 
@@ -157,13 +176,18 @@ class Enum4linuxPlugin(PluginBase):
 
         # Check if tool exists
         import shutil
+
         if not shutil.which(tool_cmd):
             if log_path:
-                with open(log_path, 'w') as f:
-                    f.write(f"ERROR: Neither enum4linux nor enum4linux-ng found in PATH\n")
+                with open(log_path, "w") as f:
+                    f.write(
+                        f"ERROR: Neither enum4linux nor enum4linux-ng found in PATH\n"
+                    )
                     f.write("Install with:\n")
                     f.write("  Kali/Parrot: sudo apt install enum4linux\n")
-                    f.write("  Ubuntu: pipx install git+https://github.com/cddmp/enum4linux-ng\n")
+                    f.write(
+                        "  Ubuntu: pipx install git+https://github.com/cddmp/enum4linux-ng\n"
+                    )
             return None
 
         # Validate target
@@ -171,7 +195,7 @@ class Enum4linuxPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
 
@@ -185,12 +209,11 @@ class Enum4linuxPlugin(PluginBase):
         if target not in args:
             cmd.append(target)
 
-        return {
-            'cmd': cmd,
-            'timeout': 1800  # 30 minutes
-        }
+        return {"cmd": cmd, "timeout": 1800}  # 30 minutes
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """
         Execute enum4linux scan and write output to log_path.
 
@@ -208,11 +231,11 @@ class Enum4linuxPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
                 return 1
             raise ValueError(f"Invalid target: {e}")
-        
+
         args = args or []
 
         # Replace <target> placeholder if present
@@ -232,7 +255,9 @@ class Enum4linuxPlugin(PluginBase):
         if not log_path:
             # Fallback for direct calls
             try:
-                proc = subprocess.run(cmd, capture_output=True, timeout=300, check=False)
+                proc = subprocess.run(
+                    cmd, capture_output=True, timeout=300, check=False
+                )
                 return proc.returncode
             except Exception:
                 return 1
@@ -241,18 +266,18 @@ class Enum4linuxPlugin(PluginBase):
         try:
             with open(log_path, "a", encoding="utf-8", errors="replace") as fh:
                 fh.write(f"Command: {' '.join(cmd)}\n")
-                fh.write(f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n")
+                fh.write(
+                    f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n"
+                )
                 fh.flush()
 
                 proc = subprocess.run(
-                    cmd,
-                    stdout=fh,
-                    stderr=subprocess.STDOUT,
-                    timeout=300,
-                    check=False
+                    cmd, stdout=fh, stderr=subprocess.STDOUT, timeout=300, check=False
                 )
 
-                fh.write(f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"Exit Code: {proc.returncode}\n")
 
                 return proc.returncode