souleyez 2.43.29__py3-none-any.whl → 2.43.32__py3-none-any.whl

souleyez/storage/findings.py

@@ -17,14 +17,14 @@ class FindingsManager:
         engagement_id: int,
         title: str,
         finding_type: str,
-        severity: str = 'info',
+        severity: str = "info",
         description: str = None,
         host_id: int = None,
         tool: str = None,
         refs: str = None,
         port: int = None,
         path: str = None,
-        evidence: str = None
+        evidence: str = None,
     ) -> int:
         """
         Add a finding to the database.
@@ -57,42 +57,35 @@ class FindingsManager:
         """
         duplicate = self.db.execute_one(
             duplicate_query,
-            (
-                engagement_id,
-                title,
-                tool or '',
-                host_id or 0,
-                port or 0,
-                path or ''
-            )
+            (engagement_id, title, tool or "", host_id or 0, port or 0, path or ""),
         )
-        
+
         if duplicate:
-            return duplicate['id']
-        
+            return duplicate["id"]
+
         data = {
-            'engagement_id': engagement_id,
-            'title': title,
-            'finding_type': finding_type,
-            'severity': severity
+            "engagement_id": engagement_id,
+            "title": title,
+            "finding_type": finding_type,
+            "severity": severity,
         }
 
         if description:
-            data['description'] = description
+            data["description"] = description
         if host_id:
-            data['host_id'] = host_id
+            data["host_id"] = host_id
         if tool:
-            data['tool'] = tool
+            data["tool"] = tool
         if refs:
-            data['refs'] = refs
+            data["refs"] = refs
         if port:
-            data['port'] = port
+            data["port"] = port
         if path:
-            data['path'] = path
+            data["path"] = path
         if evidence:
-            data['evidence'] = evidence
+            data["evidence"] = evidence
 
-        return self.db.insert('findings', data)
+        return self.db.insert("findings", data)
 
     def get_finding(self, finding_id: int) -> Optional[Dict[str, Any]]:
         """Get a finding by ID."""
@@ -108,7 +101,7 @@ class FindingsManager:
         finding_type: str = None,
         search: str = None,
         ip_address: str = None,
-        limit: int = None
+        limit: int = None,
     ) -> List[Dict[str, Any]]:
         """
         List findings with optional filters.
@@ -130,7 +123,8 @@ class FindingsManager:
             SELECT
                 f.*,
                 h.ip_address,
-                h.hostname
+                h.hostname,
+                COALESCE(h.hostname, h.ip_address) as affected_target
             FROM findings f
             LEFT JOIN hosts h ON f.host_id = h.id
             WHERE f.engagement_id = ?
@@ -164,7 +158,7 @@ class FindingsManager:
             params.append(f"%{ip_address}%")
 
         query += " ORDER BY f.created_at DESC"
-        
+
         if limit:
             query += " LIMIT ?"
             params.append(limit)
@@ -185,7 +179,7 @@ class FindingsManager:
         if not kwargs:
             return False
 
-        set_clause = ', '.join([f"{k} = ?" for k in kwargs.keys()])
+        set_clause = ", ".join([f"{k} = ?" for k in kwargs.keys()])
         query = f"UPDATE findings SET {set_clause} WHERE id = ?"
         params = list(kwargs.values()) + [finding_id]
 
@@ -205,6 +199,7 @@ class FindingsManager:
         # Check permission
         from souleyez.auth import get_current_user
         from souleyez.auth.permissions import Permission, PermissionChecker
+
         user = get_current_user()
         if user:
             checker = PermissionChecker(user.role, user.tier)
@@ -232,17 +227,11 @@ class FindingsManager:
         """
         results = self.db.execute(query, (engagement_id,))
 
-        summary = {
-            'critical': 0,
-            'high': 0,
-            'medium': 0,
-            'low': 0,
-            'info': 0
-        }
+        summary = {"critical": 0, "high": 0, "medium": 0, "low": 0, "info": 0}
 
         for row in results:
-            severity = row.get('severity', 'info')
-            count = row.get('count', 0)
+            severity = row.get("severity", "info")
+            count = row.get("count", 0)
             if severity in summary:
                 summary[severity] = count
 
@@ -257,7 +246,7 @@ class FindingsManager:
             ORDER BY finding_type
         """
         results = self.db.execute(query, (engagement_id,))
-        return [row['finding_type'] for row in results if row.get('finding_type')]
+        return [row["finding_type"] for row in results if row.get("finding_type")]
 
     def get_unique_tools(self, engagement_id: int) -> List[str]:
         """Get list of unique tools that generated findings in engagement."""
@@ -268,14 +257,14 @@ class FindingsManager:
             ORDER BY tool
         """
         results = self.db.execute(query, (engagement_id,))
-        return [row['tool'] for row in results if row.get('tool')]
+        return [row["tool"] for row in results if row.get("tool")]
 
     def calculate_risk_score(
         self,
         severity: str,
         cvss_score: float = None,
         has_exploit: bool = False,
-        is_authenticated: bool = False
+        is_authenticated: bool = False,
     ) -> int:
         """
         Calculate risk score (0-100) based on severity, CVSS, and context.
@@ -291,11 +280,11 @@ class FindingsManager:
         """
         # Base score from severity
         severity_scores = {
-            'critical': 90,
-            'high': 70,
-            'medium': 50,
-            'low': 30,
-            'info': 10
+            "critical": 90,
+            "high": 70,
+            "medium": 50,
+            "low": 30,
+            "info": 10,
         }
         base = severity_scores.get(severity.lower(), 50)
 
@@ -316,7 +305,7 @@ class FindingsManager:
         cve_id: str = None,
         cvss_score: float = None,
         service: str = None,
-        port: int = None
+        port: int = None,
     ) -> str:
         """
         Automatically classify severity based on available info.
@@ -333,23 +322,23 @@ class FindingsManager:
         # Use CVSS score if available
         if cvss_score is not None:
             if cvss_score >= 9.0:
-                return 'critical'
+                return "critical"
             elif cvss_score >= 7.0:
-                return 'high'
+                return "high"
             elif cvss_score >= 4.0:
-                return 'medium'
+                return "medium"
             elif cvss_score >= 0.1:
-                return 'low'
+                return "low"
             else:
-                return 'info'
+                return "info"
 
         # Check for critical services/ports
         critical_ports = [22, 23, 3389, 445, 139]  # SSH, Telnet, RDP, SMB
         if port and port in critical_ports:
-            return 'high'
+            return "high"
 
         # Default
-        return 'medium'
+        return "medium"
 
     def add_cve_finding(
         self,
@@ -359,7 +348,7 @@ class FindingsManager:
         service: str,
         port: int,
         cvss_score: float = None,
-        tool: str = None
+        tool: str = None,
     ) -> int:
         """
         Add a CVE-based finding with auto-classification.
@@ -377,9 +366,7 @@ class FindingsManager:
             Finding ID
         """
         severity = self.auto_classify_severity(
-            cve_id=cve_id,
-            cvss_score=cvss_score,
-            port=port
+            cve_id=cve_id, cvss_score=cvss_score, port=port
         )
 
         title = f"{cve_id} - Vulnerable {service}"
@@ -391,7 +378,7 @@ class FindingsManager:
         return self.add_finding(
             engagement_id=engagement_id,
             title=title,
-            finding_type='vulnerability',
+            finding_type="vulnerability",
             severity=severity,
             description=description,
             host_id=host_id,
@@ -399,6 +386,6 @@ class FindingsManager:
             cve_id=cve_id,
             cvss_score=cvss_score,
             tool=tool,
-            category='cve',
-            refs=f"https://nvd.nist.gov/vuln/detail/{cve_id}"
+            category="cve",
+            refs=f"https://nvd.nist.gov/vuln/detail/{cve_id}",
         )