souleyez 2.43.28__py3-none-any.whl → 2.43.32__py3-none-any.whl

souleyez/integrations/wazuh/sync.py

@@ -19,6 +19,7 @@ logger = get_logger(__name__)
 @dataclass
 class SyncResult:
     """Result of a vulnerability sync operation."""
+
     success: bool = True
     total_fetched: int = 0
     new_vulns: int = 0
@@ -50,19 +51,19 @@ class WazuhVulnSync:
             return self._client
 
         config = WazuhConfig.get_config(self.engagement_id)
-        if not config or not config.get('enabled'):
+        if not config or not config.get("enabled"):
             logger.warning(f"Wazuh not configured for engagement {self.engagement_id}")
             return None
 
         try:
             self._client = WazuhClient(
-                api_url=config['api_url'],
-                username=config['api_user'],
-                password=config['api_password'],
-                verify_ssl=config.get('verify_ssl', False),
-                indexer_url=config.get('indexer_url'),
-                indexer_user=config.get('indexer_user'),
-                indexer_password=config.get('indexer_password')
+                api_url=config["api_url"],
+                username=config["api_user"],
+                password=config["api_password"],
+                verify_ssl=config.get("verify_ssl", False),
+                indexer_url=config.get("indexer_url"),
+                indexer_user=config.get("indexer_user"),
+                indexer_password=config.get("indexer_password"),
             )
             return self._client
         except Exception as e:
@@ -88,9 +89,11 @@ class WazuhVulnSync:
         try:
             # Test vulnerability index access
             index_status = client.test_vulnerability_index()
-            if not index_status.get('accessible'):
+            if not index_status.get("accessible"):
                 result.success = False
-                result.errors.append(index_status.get('error', 'Vulnerability index not accessible'))
+                result.errors.append(
+                    index_status.get("error", "Vulnerability index not accessible")
+                )
                 return result
 
             # Build agent ID -> IP lookup table
@@ -99,25 +102,27 @@ class WazuhVulnSync:
             try:
                 agents = client.get_agents()
                 for agent in agents:
-                    agent_id = agent.get('id')
-                    agent_ip = agent.get('ip')
+                    agent_id = agent.get("id")
+                    agent_ip = agent.get("ip")
                     if agent_id and agent_ip:
                         agent_ip_lookup[agent_id] = agent_ip
-                logger.info(f"Built agent IP lookup with {len(agent_ip_lookup)} entries")
+                logger.info(
+                    f"Built agent IP lookup with {len(agent_ip_lookup)} entries"
+                )
             except Exception as e:
                 logger.warning(f"Could not fetch agent IPs: {e}")
 
             # Fetch all vulnerabilities
-            logger.info(f"Fetching vulnerabilities from Wazuh for engagement {self.engagement_id}")
+            logger.info(
+                f"Fetching vulnerabilities from Wazuh for engagement {self.engagement_id}"
+            )
             vulns = client.get_all_vulnerabilities()
             result.total_fetched = len(vulns)
 
             if not vulns:
                 logger.info("No vulnerabilities found in Wazuh")
                 self.vulns_manager.update_sync_status(
-                    self.engagement_id,
-                    count=0,
-                    status='success'
+                    self.engagement_id, count=0, status="success"
                 )
                 result.duration_seconds = (datetime.now() - start_time).total_seconds()
                 return result
@@ -129,28 +134,28 @@ class WazuhVulnSync:
             for vuln in vulns:
                 try:
                     # Get agent_ip from vuln, or look it up by agent_id
-                    agent_id = vuln.get('agent_id')
-                    agent_ip = vuln.get('agent_ip')
+                    agent_id = vuln.get("agent_id")
+                    agent_ip = vuln.get("agent_ip")
                     if not agent_ip and agent_id and agent_id in agent_ip_lookup:
                         agent_ip = agent_ip_lookup[agent_id]
 
                     vuln_id = self.vulns_manager.upsert_vulnerability(
                         engagement_id=self.engagement_id,
                         agent_id=agent_id,
-                        cve_id=vuln.get('cve_id'),
-                        package_name=vuln.get('package_name'),
-                        agent_name=vuln.get('agent_name'),
+                        cve_id=vuln.get("cve_id"),
+                        package_name=vuln.get("package_name"),
+                        agent_name=vuln.get("agent_name"),
                         agent_ip=agent_ip,
-                        name=vuln.get('name'),
-                        severity=vuln.get('severity'),
-                        cvss_score=vuln.get('cvss_score'),
-                        cvss_version=vuln.get('cvss_version'),
-                        package_version=vuln.get('package_version'),
-                        package_architecture=vuln.get('package_architecture'),
-                        detection_time=vuln.get('detection_time'),
-                        published_date=vuln.get('published_date'),
-                        reference_urls=vuln.get('reference_urls'),
-                        raw_data=vuln.get('raw_data')
+                        name=vuln.get("name"),
+                        severity=vuln.get("severity"),
+                        cvss_score=vuln.get("cvss_score"),
+                        cvss_version=vuln.get("cvss_version"),
+                        package_version=vuln.get("package_version"),
+                        package_architecture=vuln.get("package_architecture"),
+                        detection_time=vuln.get("detection_time"),
+                        published_date=vuln.get("published_date"),
+                        reference_urls=vuln.get("reference_urls"),
+                        raw_data=vuln.get("raw_data"),
                     )
 
                     if vuln_id:
@@ -159,7 +164,9 @@ class WazuhVulnSync:
                         updated_count += 1
 
                 except Exception as e:
-                    logger.error(f"Error processing vulnerability {vuln.get('cve_id')}: {e}")
+                    logger.error(
+                        f"Error processing vulnerability {vuln.get('cve_id')}: {e}"
+                    )
                     result.errors.append(f"CVE {vuln.get('cve_id')}: {str(e)}")
 
             result.new_vulns = new_count
@@ -174,14 +181,16 @@ class WazuhVulnSync:
 
             # Get unmapped agents
             unmapped = self.host_mapper.get_unmapped_agents(self.engagement_id)
-            result.unmapped_agents = [a.get('agent_ip') for a in unmapped if a.get('agent_ip')]
+            result.unmapped_agents = [
+                a.get("agent_ip") for a in unmapped if a.get("agent_ip")
+            ]
 
             # Update sync status
             self.vulns_manager.update_sync_status(
                 self.engagement_id,
                 count=result.total_fetched,
-                status='success' if not result.errors else 'partial',
-                errors=result.errors if result.errors else None
+                status="success" if not result.errors else "partial",
+                errors=result.errors if result.errors else None,
             )
 
             result.duration_seconds = (datetime.now() - start_time).total_seconds()
@@ -200,10 +209,7 @@ class WazuhVulnSync:
             result.errors.append(str(e))
 
             self.vulns_manager.update_sync_status(
-                self.engagement_id,
-                count=0,
-                status='error',
-                errors=[str(e)]
+                self.engagement_id, count=0, status="error", errors=[str(e)]
             )
 
             result.duration_seconds = (datetime.now() - start_time).total_seconds()
@@ -237,32 +243,36 @@ class WazuhVulnSync:
                 try:
                     self.vulns_manager.upsert_vulnerability(
                         engagement_id=self.engagement_id,
-                        agent_id=vuln.get('agent_id'),
-                        cve_id=vuln.get('cve_id'),
-                        package_name=vuln.get('package_name'),
-                        agent_name=vuln.get('agent_name'),
-                        agent_ip=vuln.get('agent_ip'),
-                        name=vuln.get('name'),
-                        severity=vuln.get('severity'),
-                        cvss_score=vuln.get('cvss_score'),
-                        cvss_version=vuln.get('cvss_version'),
-                        package_version=vuln.get('package_version'),
-                        package_architecture=vuln.get('package_architecture'),
-                        detection_time=vuln.get('detection_time'),
-                        published_date=vuln.get('published_date'),
-                        reference_urls=vuln.get('reference_urls'),
-                        raw_data=vuln.get('raw_data')
+                        agent_id=vuln.get("agent_id"),
+                        cve_id=vuln.get("cve_id"),
+                        package_name=vuln.get("package_name"),
+                        agent_name=vuln.get("agent_name"),
+                        agent_ip=vuln.get("agent_ip"),
+                        name=vuln.get("name"),
+                        severity=vuln.get("severity"),
+                        cvss_score=vuln.get("cvss_score"),
+                        cvss_version=vuln.get("cvss_version"),
+                        package_version=vuln.get("package_version"),
+                        package_architecture=vuln.get("package_architecture"),
+                        detection_time=vuln.get("detection_time"),
+                        published_date=vuln.get("published_date"),
+                        reference_urls=vuln.get("reference_urls"),
+                        raw_data=vuln.get("raw_data"),
                     )
                     result.new_vulns += 1
                 except Exception as e:
                     result.errors.append(f"CVE {vuln.get('cve_id')}: {str(e)}")
 
             # Auto-map this agent's IP
-            if vulns and vulns[0].get('agent_ip'):
-                agent_ip = vulns[0]['agent_ip']
-                host_id = self.host_mapper.map_agent_to_host(self.engagement_id, agent_ip)
+            if vulns and vulns[0].get("agent_ip"):
+                agent_ip = vulns[0]["agent_ip"]
+                host_id = self.host_mapper.map_agent_to_host(
+                    self.engagement_id, agent_ip
+                )
                 if host_id:
-                    self.host_mapper._update_vuln_host_mapping(self.engagement_id, agent_ip, host_id)
+                    self.host_mapper._update_vuln_host_mapping(
+                        self.engagement_id, agent_ip, host_id
+                    )
                     result.mapped_hosts = 1
                 else:
                     result.unmapped_agents = [agent_ip]
@@ -312,16 +322,16 @@ class WazuhVulnSync:
         status = self.vulns_manager.get_sync_status(self.engagement_id)
         if not status:
             return {
-                'synced': False,
-                'last_sync_at': None,
-                'last_sync_count': 0,
-                'is_stale': True
+                "synced": False,
+                "last_sync_at": None,
+                "last_sync_count": 0,
+                "is_stale": True,
             }
 
         return {
-            'synced': True,
-            'last_sync_at': status.get('last_sync_at'),
-            'last_sync_count': status.get('last_sync_count', 0),
-            'last_sync_status': status.get('last_sync_status'),
-            'is_stale': self.is_stale()
+            "synced": True,
+            "last_sync_at": status.get("last_sync_at"),
+            "last_sync_count": status.get("last_sync_count", 0),
+            "last_sync_status": status.get("last_sync_status"),
+            "is_stale": self.is_stale(),
         }

souleyez/intelligence/__init__.py

@@ -1,13 +1,12 @@
 """Intelligence and analysis modules for pentest automation."""
 
 __all__ = [
-    'ServiceVersionExtractor',
-    'ExploitKnowledgeBase',
-    'ExploitSuggestionEngine',
-    'AttackSurfaceAnalyzer'
+    "ServiceVersionExtractor",
+    "ExploitKnowledgeBase",
+    "ExploitSuggestionEngine",
+    "AttackSurfaceAnalyzer",
 ]
 
 from souleyez.intelligence.service_parser import ServiceVersionExtractor
 from souleyez.intelligence.exploit_knowledge import ExploitKnowledgeBase
 from souleyez.intelligence.exploit_suggestions import ExploitSuggestionEngine
-