souleyez 2.43.26__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/importers/msf_importer.py

@@ -28,11 +28,11 @@ class MSFImporter:
         self.fm = FindingsManager()
 
         self.stats = {
-            'hosts': 0,
-            'services': 0,
-            'credentials': 0,
-            'vulnerabilities': 0,
-            'skipped': 0
+            "hosts": 0,
+            "services": 0,
+            "credentials": 0,
+            "vulnerabilities": 0,
+            "skipped": 0,
         }
 
     def import_xml(self, xml_file: str, verbose: bool = False) -> Dict:
@@ -61,7 +61,7 @@ class MSFImporter:
             click.echo("XML parsed successfully")
 
         # Import hosts first
-        hosts = root.findall('.//host')
+        hosts = root.findall(".//host")
         if verbose:
             click.echo(f"\nFound {len(hosts)} hosts")
 
@@ -70,7 +70,11 @@ class MSFImporter:
         for host_elem in hosts:
             host_id = self._import_host(host_elem, verbose)
             if host_id:
-                address = host_elem.find('address').text if host_elem.find('address') is not None else None
+                address = (
+                    host_elem.find("address").text
+                    if host_elem.find("address") is not None
+                    else None
+                )
                 if address:
                     host_mapping[address] = host_id
 
@@ -79,14 +83,18 @@ class MSFImporter:
             click.echo("\nImporting services...")
 
         for host_elem in hosts:
-            address = host_elem.find('address').text if host_elem.find('address') is not None else None
+            address = (
+                host_elem.find("address").text
+                if host_elem.find("address") is not None
+                else None
+            )
             if address and address in host_mapping:
-                services = host_elem.findall('.//service')
+                services = host_elem.findall(".//service")
                 for svc_elem in services:
                     self._import_service(svc_elem, host_mapping[address], verbose)
 
         # Import credentials
-        creds = root.findall('.//cred')
+        creds = root.findall(".//cred")
         if verbose and creds:
             click.echo(f"\nFound {len(creds)} credentials")
 
@@ -94,8 +102,8 @@ class MSFImporter:
             self._import_credential(cred_elem, host_mapping, verbose)
 
         # Import vulnerabilities/notes as findings
-        vulns = root.findall('.//vuln')
-        notes = root.findall('.//note')
+        vulns = root.findall(".//vuln")
+        notes = root.findall(".//note")
 
         if verbose and (vulns or notes):
             click.echo(f"\nFound {len(vulns)} vulnerabilities and {len(notes)} notes")
@@ -105,20 +113,22 @@ class MSFImporter:
 
         return self.stats
 
-    def _import_host(self, host_elem: 'Element', verbose: bool = False) -> Optional[int]:
+    def _import_host(
+        self, host_elem: "Element", verbose: bool = False
+    ) -> Optional[int]:
         """Import a single host."""
-        address = host_elem.find('address')
+        address = host_elem.find("address")
         if address is None or not address.text:
-            self.stats['skipped'] += 1
+            self.stats["skipped"] += 1
             return None
 
         ip_address = address.text
         # mac = host_elem.find('mac')  # not used currently
 
         # Get OS info
-        os_name_elem = host_elem.find('os-name')
-        os_flavor_elem = host_elem.find('os-flavor')
-        os_sp_elem = host_elem.find('os-sp')
+        os_name_elem = host_elem.find("os-name")
+        os_flavor_elem = host_elem.find("os-flavor")
+        os_sp_elem = host_elem.find("os-sp")
 
         os_parts = []
         if os_name_elem is not None and os_name_elem.text:
@@ -128,35 +138,37 @@ class MSFImporter:
         if os_sp_elem is not None and os_sp_elem.text:
             os_parts.append(os_sp_elem.text)
 
-        os_name = ' '.join(os_parts) if os_parts else None
+        os_name = " ".join(os_parts) if os_parts else None
 
         # Get hostname
-        name_elem = host_elem.find('name')
+        name_elem = host_elem.find("name")
         hostname = name_elem.text if name_elem is not None and name_elem.text else None
 
         # Check host state
-        state_elem = host_elem.find('state')
-        state = state_elem.text if state_elem is not None else 'up'
+        state_elem = host_elem.find("state")
+        state = state_elem.text if state_elem is not None else "up"
 
         if verbose:
             click.echo(f"  Importing host: {ip_address} ({hostname or 'no hostname'})")
 
         # Add or update host
         host_data = {
-            'ip': ip_address,
-            'hostname': hostname,
-            'os': os_name,
-            'status': state
+            "ip": ip_address,
+            "hostname": hostname,
+            "os": os_name,
+            "status": state,
         }
 
         host_id = self.hm.add_or_update_host(self.engagement_id, host_data)
 
-        self.stats['hosts'] += 1
+        self.stats["hosts"] += 1
         return host_id
 
-    def _import_service(self, svc_elem: 'Element', host_id: int, verbose: bool = False) -> Optional[int]:
+    def _import_service(
+        self, svc_elem: "Element", host_id: int, verbose: bool = False
+    ) -> Optional[int]:
         """Import a single service."""
-        port_elem = svc_elem.find('port')
+        port_elem = svc_elem.find("port")
         if port_elem is None or not port_elem.text:
             return None
 
@@ -165,41 +177,49 @@ class MSFImporter:
         except ValueError:
             return None
 
-        proto_elem = svc_elem.find('proto')
-        protocol = proto_elem.text if proto_elem is not None and proto_elem.text else 'tcp'
+        proto_elem = svc_elem.find("proto")
+        protocol = (
+            proto_elem.text if proto_elem is not None and proto_elem.text else "tcp"
+        )
 
-        name_elem = svc_elem.find('name')
-        service_name = name_elem.text if name_elem is not None and name_elem.text else 'unknown'
+        name_elem = svc_elem.find("name")
+        service_name = (
+            name_elem.text if name_elem is not None and name_elem.text else "unknown"
+        )
 
         # Get service info/version
-        info_elem = svc_elem.find('info')
-        service_version = info_elem.text if info_elem is not None and info_elem.text else None
+        info_elem = svc_elem.find("info")
+        service_version = (
+            info_elem.text if info_elem is not None and info_elem.text else None
+        )
 
-        state_elem = svc_elem.find('state')
-        state = state_elem.text if state_elem is not None else 'open'
+        state_elem = svc_elem.find("state")
+        state = state_elem.text if state_elem is not None else "open"
 
         if verbose:
             click.echo(f"    Service: {port}/{protocol} ({service_name})")
 
         # Add service
         service_data = {
-            'port': port,
-            'protocol': protocol,
-            'state': state,
-            'service': service_name,
-            'version': service_version
+            "port": port,
+            "protocol": protocol,
+            "state": state,
+            "service": service_name,
+            "version": service_version,
         }
 
         self.hm.add_service(host_id, service_data)
 
-        self.stats['services'] += 1
+        self.stats["services"] += 1
         return port
 
-    def _import_credential(self, cred_elem: 'Element', host_mapping: Dict, verbose: bool = False):
+    def _import_credential(
+        self, cred_elem: "Element", host_mapping: Dict, verbose: bool = False
+    ):
         """Import a single credential."""
         # Get credential details
-        user_elem = cred_elem.find('.//username')
-        pass_elem = cred_elem.find('.//password')
+        user_elem = cred_elem.find(".//username")
+        pass_elem = cred_elem.find(".//password")
         # type_elem = cred_elem.find('.//type')  # not used currently
 
         username = user_elem.text if user_elem is not None and user_elem.text else None
@@ -210,21 +230,21 @@ class MSFImporter:
             return
 
         # Try to get associated service info
-        service_elem = cred_elem.find('.//service')
-        host_elem = cred_elem.find('.//host')
+        service_elem = cred_elem.find(".//service")
+        host_elem = cred_elem.find(".//host")
 
         ip_address = None
         service_name = None
         port = None
 
         if host_elem is not None:
-            address_elem = host_elem.find('address')
+            address_elem = host_elem.find("address")
             if address_elem is not None:
                 ip_address = address_elem.text
 
         if service_elem is not None:
-            name_elem = service_elem.find('name')
-            port_elem = service_elem.find('port')
+            name_elem = service_elem.find("name")
+            port_elem = service_elem.find("port")
 
             if name_elem is not None:
                 service_name = name_elem.text
@@ -235,7 +255,7 @@ class MSFImporter:
                     pass
 
         # Determine status - if we have a password, assume it's valid
-        status = 'valid' if password else 'discovered'
+        status = "valid" if password else "discovered"
 
         # Get host_id from IP
         host_id = None
@@ -263,26 +283,28 @@ class MSFImporter:
             service=service_name,
             port=port,
             status=status,
-            tool='msf_import'
+            tool="msf_import",
         )
 
-        self.stats['credentials'] += 1
+        self.stats["credentials"] += 1
 
-    def _import_vulnerability(self, vuln_elem: 'Element', host_mapping: Dict, verbose: bool = False):
+    def _import_vulnerability(
+        self, vuln_elem: "Element", host_mapping: Dict, verbose: bool = False
+    ):
         """Import a vulnerability as a finding."""
-        name_elem = vuln_elem.find('name')
+        name_elem = vuln_elem.find("name")
         if name_elem is None or not name_elem.text:
             return
 
         title = name_elem.text
 
         # Get host
-        host_elem = vuln_elem.find('host')
+        host_elem = vuln_elem.find("host")
         ip_address = None
         host_id = None
 
         if host_elem is not None:
-            address_elem = host_elem.find('address')
+            address_elem = host_elem.find("address")
             if address_elem is not None and address_elem.text:
                 ip_address = address_elem.text
                 host_id = host_mapping.get(ip_address)
@@ -291,7 +313,7 @@ class MSFImporter:
             return
 
         # Get port
-        port_elem = vuln_elem.find('port')
+        port_elem = vuln_elem.find("port")
         port = None
         if port_elem is not None and port_elem.text:
             try:
@@ -300,18 +322,22 @@ class MSFImporter:
                 pass
 
         # Get refs
-        refs_elem = vuln_elem.find('refs')
+        refs_elem = vuln_elem.find("refs")
         refs = []
         if refs_elem is not None:
-            for ref_elem in refs_elem.findall('ref'):
+            for ref_elem in refs_elem.findall("ref"):
                 if ref_elem.text:
                     refs.append(ref_elem.text)
 
-        refs_text = '\n'.join(refs) if refs else None
+        refs_text = "\n".join(refs) if refs else None
 
         # Get info/description
-        info_elem = vuln_elem.find('info')
-        description = info_elem.text if info_elem is not None and info_elem.text else f"Vulnerability: {title}"
+        info_elem = vuln_elem.find("info")
+        description = (
+            info_elem.text
+            if info_elem is not None and info_elem.text
+            else f"Vulnerability: {title}"
+        )
 
         # Try to determine severity from name/refs
         severity = self._determine_severity(title, refs_text)
@@ -323,38 +349,43 @@ class MSFImporter:
         self.fm.add_finding(
             engagement_id=self.engagement_id,
             title=title,
-            finding_type='vulnerability',
+            finding_type="vulnerability",
             severity=severity,
             description=description,
             host_id=host_id,
             port=port,
-            tool='msf_import',
-            refs=refs_text
+            tool="msf_import",
+            refs=refs_text,
         )
 
-        self.stats['vulnerabilities'] += 1
+        self.stats["vulnerabilities"] += 1
 
     def _determine_severity(self, title: str, refs: Optional[str]) -> str:
         """Try to determine severity from vulnerability title and references."""
         title_lower = title.lower()
-        refs_lower = refs.lower() if refs else ''
+        refs_lower = refs.lower() if refs else ""
 
         # Critical indicators
-        critical_keywords = ['rce', 'remote code execution', 'unauthenticated', 'critical']
+        critical_keywords = [
+            "rce",
+            "remote code execution",
+            "unauthenticated",
+            "critical",
+        ]
         for keyword in critical_keywords:
             if keyword in title_lower:
-                return 'critical'
+                return "critical"
 
         # High indicators
-        high_keywords = ['exploit', 'overflow', 'injection', 'authentication bypass']
+        high_keywords = ["exploit", "overflow", "injection", "authentication bypass"]
         for keyword in high_keywords:
             if keyword in title_lower:
-                return 'high'
+                return "high"
 
         # Check CVE scores (if available in refs)
-        if 'cvss' in refs_lower:
+        if "cvss" in refs_lower:
             # Could parse CVSS scores here
             pass
 
         # Default to medium for vulnerabilities
-        return 'medium'
+        return "medium"