souleyez 2.43.26__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/plugins/routersploit.py

@@ -33,8 +33,8 @@ HELP = {
     "usage": "souleyez jobs enqueue routersploit <target>",
     "examples": [
         "souleyez jobs enqueue routersploit 192.168.1.1",
-        "souleyez jobs enqueue routersploit 192.168.1.1 --args \"--port 8080\"",
-        "souleyez jobs enqueue routersploit 192.168.1.1 --args \"--threads 4\"",
+        'souleyez jobs enqueue routersploit 192.168.1.1 --args "--port 8080"',
+        'souleyez jobs enqueue routersploit 192.168.1.1 --args "--threads 4"',
     ],
     "flags": [
         ["--port PORT", "Target HTTP port (default: 80)"],
@@ -45,42 +45,72 @@ HELP = {
         # Scanning
         {"name": "Quick Scan", "args": [], "desc": "Standard vulnerability scan"},
         {"name": "HTTPS Scan", "args": ["--ssl"], "desc": "Scan over HTTPS (port 443)"},
-        {"name": "Alt Port", "args": ["--port", "8080"], "desc": "Scan non-standard web port"},
+        {
+            "name": "Alt Port",
+            "args": ["--port", "8080"],
+            "desc": "Scan non-standard web port",
+        },
         # Exploitation (specify module with --exploit)
-        {"name": "Default Creds", "args": ["--exploit", "creds/generic/http_default_creds"], "desc": "Test default HTTP credentials"},
-        {"name": "Netgear RCE", "args": ["--exploit", "exploits/routers/netgear/dgn1000_dgn2200_rce"], "desc": "Netgear DGN1000/2200 RCE"},
-        {"name": "D-Link RCE", "args": ["--exploit", "exploits/routers/dlink/dir_815_850l_rce"], "desc": "D-Link DIR-815/850L RCE"},
+        {
+            "name": "Default Creds",
+            "args": ["--exploit", "creds/generic/http_default_creds"],
+            "desc": "Test default HTTP credentials",
+        },
+        {
+            "name": "Netgear RCE",
+            "args": ["--exploit", "exploits/routers/netgear/dgn1000_dgn2200_rce"],
+            "desc": "Netgear DGN1000/2200 RCE",
+        },
+        {
+            "name": "D-Link RCE",
+            "args": ["--exploit", "exploits/routers/dlink/dir_815_850l_rce"],
+            "desc": "D-Link DIR-815/850L RCE",
+        },
     ],
     "help_sections": [
         {
             "title": "What is RouterSploit?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "RouterSploit is like Metasploit for routers. It has 200+ exploits for embedded devices from major vendors."},
-                {"title": "Vendors Covered", "desc": "Supported device manufacturers", "tips": [
-                    "Netgear, Linksys, TP-Link, D-Link, ASUS",
-                    "Cisco, Juniper, MikroTik",
-                    "Huawei, ZTE, ZyXEL",
-                    "IP cameras: Hikvision, Dahua, Foscam",
-                    "Many more embedded Linux devices"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "RouterSploit is like Metasploit for routers. It has 200+ exploits for embedded devices from major vendors.",
+                },
+                {
+                    "title": "Vendors Covered",
+                    "desc": "Supported device manufacturers",
+                    "tips": [
+                        "Netgear, Linksys, TP-Link, D-Link, ASUS",
+                        "Cisco, Juniper, MikroTik",
+                        "Huawei, ZTE, ZyXEL",
+                        "IP cameras: Hikvision, Dahua, Foscam",
+                        "Many more embedded Linux devices",
+                    ],
+                },
+            ],
         },
         {
             "title": "Attack Workflow",
             "color": "green",
             "content": [
-                {"title": "Typical Flow", "desc": "1. Identify device (nmap, UPnP)\n2. Run RouterSploit scanner\n3. Exploit vulnerable services\n4. Extract credentials or get shell"},
-                {"title": "What Gets Tested", "desc": "Types of vulnerabilities checked", "tips": [
-                    "Default/hardcoded credentials",
-                    "Authentication bypasses",
-                    "Remote code execution (RCE)",
-                    "Information disclosure",
-                    "Backdoor accounts"
-                ]}
-            ]
-        }
-    ]
+                {
+                    "title": "Typical Flow",
+                    "desc": "1. Identify device (nmap, UPnP)\n2. Run RouterSploit scanner\n3. Exploit vulnerable services\n4. Extract credentials or get shell",
+                },
+                {
+                    "title": "What Gets Tested",
+                    "desc": "Types of vulnerabilities checked",
+                    "tips": [
+                        "Default/hardcoded credentials",
+                        "Authentication bypasses",
+                        "Remote code execution (RCE)",
+                        "Information disclosure",
+                        "Backdoor accounts",
+                    ],
+                },
+            ],
+        },
+    ],
 }
 
 
@@ -93,13 +123,14 @@ class RouterSploitPlugin(PluginBase):
     def check_tool_available(self) -> tuple:
         """Check if RouterSploit is available."""
         # RouterSploit can be installed as 'rsf', 'rsf.py' (pipx), or run via python
-        rsf_path = shutil.which('rsf') or shutil.which('rsf.py')
+        rsf_path = shutil.which("rsf") or shutil.which("rsf.py")
         if rsf_path:
             return True, None
 
         # Check for routersploit Python module
         try:
             import routersploit
+
             return True, None
         except ImportError:
             pass
@@ -112,7 +143,9 @@ class RouterSploitPlugin(PluginBase):
             "  cd routersploit && pip install -r requirements.txt"
         )
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build RouterSploit scan command."""
         args = args or []
 
@@ -121,29 +154,29 @@ class RouterSploitPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
 
         # Parse arguments
-        port = '80'
+        port = "80"
         ssl = False
-        threads = '8'
+        threads = "8"
         exploit_module = None
 
         i = 0
         while i < len(args):
-            if args[i] == '--port' and i + 1 < len(args):
+            if args[i] == "--port" and i + 1 < len(args):
                 port = args[i + 1]
                 i += 2
-            elif args[i] == '--ssl':
+            elif args[i] == "--ssl":
                 ssl = True
-                port = '443' if port == '80' else port
+                port = "443" if port == "80" else port
                 i += 1
-            elif args[i] == '--threads' and i + 1 < len(args):
+            elif args[i] == "--threads" and i + 1 < len(args):
                 threads = args[i + 1]
                 i += 2
-            elif args[i] == '--exploit' and i + 1 < len(args):
+            elif args[i] == "--exploit" and i + 1 < len(args):
                 exploit_module = args[i + 1]
                 i += 2
             else:
@@ -151,7 +184,7 @@ class RouterSploitPlugin(PluginBase):
 
         # Build RSF command script
         # RouterSploit uses an interactive shell, so we create a script file
-        protocol = 'https' if ssl else 'http'
+        protocol = "https" if ssl else "http"
 
         # Create RouterSploit resource script
         # Use exploit module if specified, otherwise use scanner
@@ -175,32 +208,34 @@ exit
         import tempfile
         import os
 
-        fd, rc_file = tempfile.mkstemp(suffix='.rsf', prefix='routersploit_')
+        fd, rc_file = tempfile.mkstemp(suffix=".rsf", prefix="routersploit_")
         try:
-            with os.fdopen(fd, 'w') as f:
+            with os.fdopen(fd, "w") as f:
                 f.write(rsf_commands)
         except Exception as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Failed to create RSF script: {e}\n")
             return None
 
         # Check which RSF binary is available (rsf or rsf.py from pipx)
-        rsf_bin = shutil.which('rsf') or shutil.which('rsf.py')
+        rsf_bin = shutil.which("rsf") or shutil.which("rsf.py")
         if rsf_bin:
-            cmd = [rsf_bin, '-m', rc_file]
+            cmd = [rsf_bin, "-m", rc_file]
         else:
             # Try running as Python module
-            cmd = ['python3', '-m', 'routersploit', '-m', rc_file]
+            cmd = ["python3", "-m", "routersploit", "-m", rc_file]
 
         return {
-            'cmd': cmd,
-            'timeout': 1800,  # 30 minute timeout
-            'env': {'RSF_RC_FILE': rc_file},
-            '_rc_file': rc_file  # Track for cleanup
+            "cmd": cmd,
+            "timeout": 1800,  # 30 minute timeout
+            "env": {"RSF_RC_FILE": rc_file},
+            "_rc_file": rc_file,  # Track for cleanup
         }
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute RouterSploit scan."""
         import os
 
@@ -208,39 +243,36 @@ exit
         if cmd_spec is None:
             return 1
 
-        cmd = cmd_spec['cmd']
-        rc_file = cmd_spec.get('_rc_file')
+        cmd = cmd_spec["cmd"]
+        rc_file = cmd_spec.get("_rc_file")
 
         if log_path:
-            with open(log_path, 'w') as f:
+            with open(log_path, "w") as f:
                 f.write(f"# RouterSploit Vulnerability Scan on {target}\n")
                 f.write(f"# Command: {' '.join(cmd)}\n")
                 f.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S')}\n\n")
 
         try:
-            with open(log_path, 'a') as f:
+            with open(log_path, "a") as f:
                 result = subprocess.run(
-                    cmd,
-                    stdout=f,
-                    stderr=subprocess.STDOUT,
-                    timeout=cmd_spec['timeout']
+                    cmd, stdout=f, stderr=subprocess.STDOUT, timeout=cmd_spec["timeout"]
                 )
             return result.returncode
 
         except subprocess.TimeoutExpired:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: Scan timed out\n")
             return 124
         except FileNotFoundError:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: RouterSploit not found\n")
                     f.write("Install with: pipx install routersploit\n")
             return 127
         except Exception as e:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(f"\n\n# ERROR: {e}\n")
             return 1
         finally:

souleyez/plugins/routersploit_exploit.py

@@ -29,43 +29,67 @@ HELP = {
         "- Most exploits need target IP and port\n"
         "- Some exploits give you a shell, others extract creds\n"
     ),
-    "usage": "souleyez jobs enqueue routersploit_exploit <target> --args \"<module>\"",
+    "usage": 'souleyez jobs enqueue routersploit_exploit <target> --args "<module>"',
     "examples": [
-        "souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args \"exploits/routers/netgear/dgn1000_dgn2200_rce\"",
-        "souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args \"creds/routers/dlink/dcs_default_creds\"",
-        "souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args \"exploits/routers/dlink/dir_815_850l_rce\"",
+        'souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args "exploits/routers/netgear/dgn1000_dgn2200_rce"',
+        'souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args "creds/routers/dlink/dcs_default_creds"',
+        'souleyez jobs enqueue routersploit_exploit 192.168.1.1 --args "exploits/routers/dlink/dir_815_850l_rce"',
     ],
     "flags": [
         ["--port PORT", "Target port (default: 80)"],
         ["--ssl", "Use HTTPS"],
     ],
     "presets": [
-        {"name": "Netgear RCE", "args": ["exploits/routers/netgear/dgn1000_dgn2200_rce"], "desc": "Netgear DGN1000/2200 RCE"},
-        {"name": "D-Link RCE", "args": ["exploits/routers/dlink/dir_815_850l_rce"], "desc": "D-Link DIR-815/850L RCE"},
-        {"name": "Default Creds", "args": ["creds/generic/http_default_creds"], "desc": "Test default HTTP credentials"},
+        {
+            "name": "Netgear RCE",
+            "args": ["exploits/routers/netgear/dgn1000_dgn2200_rce"],
+            "desc": "Netgear DGN1000/2200 RCE",
+        },
+        {
+            "name": "D-Link RCE",
+            "args": ["exploits/routers/dlink/dir_815_850l_rce"],
+            "desc": "D-Link DIR-815/850L RCE",
+        },
+        {
+            "name": "Default Creds",
+            "args": ["creds/generic/http_default_creds"],
+            "desc": "Test default HTTP credentials",
+        },
     ],
     "help_sections": [
         {
             "title": "Popular Exploits",
             "color": "cyan",
             "content": [
-                {"title": "Netgear", "desc": "Common Netgear exploits", "tips": [
-                    "dgn1000_dgn2200_rce - RCE via web interface",
-                    "wnr2000_rce - WNR2000 router RCE",
-                    "r7000_r6400_rce - R7000/R6400 command injection"
-                ]},
-                {"title": "D-Link", "desc": "Common D-Link exploits", "tips": [
-                    "dir_815_850l_rce - DIR-815/850L RCE",
-                    "dcs_default_creds - IP camera default creds",
-                    "dir_300_600_rce - DIR-300/600 RCE"
-                ]},
-                {"title": "TP-Link", "desc": "Common TP-Link exploits", "tips": [
-                    "archer_c2_c20i_rce - Archer C2/C20i RCE",
-                    "wr740nd_rce - WR740ND command injection"
-                ]}
-            ]
+                {
+                    "title": "Netgear",
+                    "desc": "Common Netgear exploits",
+                    "tips": [
+                        "dgn1000_dgn2200_rce - RCE via web interface",
+                        "wnr2000_rce - WNR2000 router RCE",
+                        "r7000_r6400_rce - R7000/R6400 command injection",
+                    ],
+                },
+                {
+                    "title": "D-Link",
+                    "desc": "Common D-Link exploits",
+                    "tips": [
+                        "dir_815_850l_rce - DIR-815/850L RCE",
+                        "dcs_default_creds - IP camera default creds",
+                        "dir_300_600_rce - DIR-300/600 RCE",
+                    ],
+                },
+                {
+                    "title": "TP-Link",
+                    "desc": "Common TP-Link exploits",
+                    "tips": [
+                        "archer_c2_c20i_rce - Archer C2/C20i RCE",
+                        "wr740nd_rce - WR740ND command injection",
+                    ],
+                },
+            ],
         }
-    ]
+    ],
 }
 
 
@@ -77,12 +101,13 @@ class RouterSploitExploitPlugin(PluginBase):
 
     def check_tool_available(self) -> tuple:
         """Check if RouterSploit is available."""
-        rsf_path = shutil.which('rsf')
+        rsf_path = shutil.which("rsf")
         if rsf_path:
             return True, None
 
         try:
             import routersploit
+
             return True, None
         except ImportError:
             pass
@@ -94,13 +119,15 @@ class RouterSploitExploitPlugin(PluginBase):
             "  git clone https://github.com/threat9/routersploit"
         )
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build RouterSploit exploit command."""
         args = args or []
 
         if not args:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write("ERROR: Module path required\n")
                     f.write("Example: exploits/routers/netgear/dgn1000_dgn2200_rce\n")
             return None
@@ -110,23 +137,23 @@ class RouterSploitExploitPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
 
         # Parse module and options
         module = args[0]
-        port = '80'
+        port = "80"
         ssl = False
 
         i = 1
         while i < len(args):
-            if args[i] == '--port' and i + 1 < len(args):
+            if args[i] == "--port" and i + 1 < len(args):
                 port = args[i + 1]
                 i += 2
-            elif args[i] == '--ssl':
+            elif args[i] == "--ssl":
                 ssl = True
-                port = '443' if port == '80' else port
+                port = "443" if port == "80" else port
                 i += 1
             else:
                 i += 1
@@ -142,29 +169,27 @@ exit
         import tempfile
         import os
 
-        fd, rc_file = tempfile.mkstemp(suffix='.rsf', prefix='rsf_exploit_')
+        fd, rc_file = tempfile.mkstemp(suffix=".rsf", prefix="rsf_exploit_")
         try:
-            with os.fdopen(fd, 'w') as f:
+            with os.fdopen(fd, "w") as f:
                 f.write(rsf_commands)
         except Exception as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Failed to create RSF script: {e}\n")
             return None
 
-        rsf_bin = shutil.which('rsf')
+        rsf_bin = shutil.which("rsf")
         if rsf_bin:
-            cmd = [rsf_bin, '-m', rc_file]
+            cmd = [rsf_bin, "-m", rc_file]
         else:
-            cmd = ['python3', '-m', 'routersploit', '-m', rc_file]
+            cmd = ["python3", "-m", "routersploit", "-m", rc_file]
 
-        return {
-            'cmd': cmd,
-            'timeout': 600,  # 10 minute timeout
-            '_rc_file': rc_file
-        }
+        return {"cmd": cmd, "timeout": 600, "_rc_file": rc_file}  # 10 minute timeout
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute RouterSploit exploit."""
         import os
 
@@ -172,40 +197,37 @@ exit
         if cmd_spec is None:
             return 1
 
-        cmd = cmd_spec['cmd']
-        rc_file = cmd_spec.get('_rc_file')
-        module = args[0] if args else 'unknown'
+        cmd = cmd_spec["cmd"]
+        rc_file = cmd_spec.get("_rc_file")
+        module = args[0] if args else "unknown"
 
         if log_path:
-            with open(log_path, 'w') as f:
+            with open(log_path, "w") as f:
                 f.write(f"# RouterSploit Exploit on {target}\n")
                 f.write(f"# Module: {module}\n")
                 f.write(f"# Command: {' '.join(cmd)}\n")
                 f.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S')}\n\n")
 
         try:
-            with open(log_path, 'a') as f:
+            with open(log_path, "a") as f:
                 result = subprocess.run(
-                    cmd,
-                    stdout=f,
-                    stderr=subprocess.STDOUT,
-                    timeout=cmd_spec['timeout']
+                    cmd, stdout=f, stderr=subprocess.STDOUT, timeout=cmd_spec["timeout"]
                 )
             return result.returncode
 
         except subprocess.TimeoutExpired:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: Exploit timed out\n")
             return 124
         except FileNotFoundError:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: RouterSploit not found\n")
             return 127
         except Exception as e:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(f"\n\n# ERROR: {e}\n")
             return 1
         finally: