souleyez 2.43.29__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/plugins/nuclei.py

@@ -26,11 +26,11 @@ HELP = {
         "- Results include CVE IDs that link to SearchSploit for exploit discovery\n"
         "- Fast and concurrent - use -rate-limit to avoid overwhelming targets\n"
     ),
-    "usage": "souleyez jobs enqueue nuclei <target> --args \"-severity critical,high\"",
+    "usage": 'souleyez jobs enqueue nuclei <target> --args "-severity critical,high"',
     "examples": [
-        "souleyez jobs enqueue nuclei http://example.com --args \"-severity critical,high\"",
-        "souleyez jobs enqueue nuclei http://example.com --args \"-tags cve,exposure\"",
-        "souleyez jobs enqueue nuclei http://example.com --args \"-tags default-login\"",
+        'souleyez jobs enqueue nuclei http://example.com --args "-severity critical,high"',
+        'souleyez jobs enqueue nuclei http://example.com --args "-tags cve,exposure"',
+        'souleyez jobs enqueue nuclei http://example.com --args "-tags default-login"',
     ],
     "flags": [
         ["-severity <level>", "Filter by severity (critical,high,medium,low,info)"],
@@ -44,143 +44,219 @@ HELP = {
             {
                 "name": "Critical Only",
                 "args": ["-severity", "critical"],
-                "desc": "Critical severity vulnerabilities only"
+                "desc": "Critical severity vulnerabilities only",
             },
             {
                 "name": "High + Critical",
                 "args": ["-severity", "critical,high"],
-                "desc": "High and critical vulnerabilities (recommended)"
+                "desc": "High and critical vulnerabilities (recommended)",
             },
             {
                 "name": "Full Scan",
                 "args": ["-severity", "critical,high,medium"],
-                "desc": "Comprehensive scan (critical, high, medium)"
-            }
+                "desc": "Comprehensive scan (critical, high, medium)",
+            },
         ],
         "by_category": [
             {
                 "name": "CVE Detection",
                 "args": ["-tags", "cve"],
-                "desc": "Scan for known CVEs"
+                "desc": "Scan for known CVEs",
             },
             {
                 "name": "Exposure Detection",
                 "args": ["-tags", "exposure"],
-                "desc": "Detect sensitive file exposures"
+                "desc": "Detect sensitive file exposures",
             },
             {
                 "name": "Default Credentials",
                 "args": ["-tags", "default-login"],
-                "desc": "Check for default login panels"
+                "desc": "Check for default login panels",
             },
             {
                 "name": "Misconfigurations",
                 "args": ["-tags", "misconfiguration"],
-                "desc": "Detect common misconfigurations"
-            }
+                "desc": "Detect common misconfigurations",
+            },
         ],
         "owasp_injection": [
             {
                 "name": "XSS Scan",
                 "args": ["-tags", "xss,rxss"],
-                "desc": "Reflected/Stored XSS detection"
+                "desc": "Reflected/Stored XSS detection",
             },
             {
                 "name": "SSTI Scan",
                 "args": ["-tags", "ssti"],
-                "desc": "Server-Side Template Injection"
+                "desc": "Server-Side Template Injection",
             },
             {
                 "name": "SSRF Scan",
                 "args": ["-tags", "ssrf"],
-                "desc": "Server-Side Request Forgery"
+                "desc": "Server-Side Request Forgery",
             },
             {
                 "name": "Command Injection",
                 "args": ["-tags", "rce,cmdi"],
-                "desc": "Remote Code/Command Execution"
+                "desc": "Remote Code/Command Execution",
             },
             {
                 "name": "LFI/RFI Scan",
                 "args": ["-tags", "lfi,rfi"],
-                "desc": "Local/Remote File Inclusion"
+                "desc": "Local/Remote File Inclusion",
             },
             {
                 "name": "Open Redirect",
                 "args": ["-tags", "redirect"],
-                "desc": "Open redirect vulnerabilities"
+                "desc": "Open redirect vulnerabilities",
             },
             {
                 "name": "Full OWASP",
                 "args": ["-severity", "critical,high", "-tags", "owasp"],
-                "desc": "All OWASP-tagged templates"
-            }
-        ]
+                "desc": "All OWASP-tagged templates",
+            },
+        ],
     },
     "presets": [
-        {"name": "Critical Only", "args": ["-severity", "critical"], "desc": "Critical severity vulnerabilities only"},
-        {"name": "High + Critical", "args": ["-severity", "critical,high"], "desc": "High and critical vulnerabilities (recommended)"},
-        {"name": "Full Scan", "args": ["-severity", "critical,high,medium"], "desc": "Comprehensive scan (critical, high, medium)"},
-        {"name": "CVE Detection", "args": ["-tags", "cve"], "desc": "Scan for known CVEs"},
-        {"name": "Exposure Detection", "args": ["-tags", "exposure"], "desc": "Detect sensitive file exposures"},
-        {"name": "Default Credentials", "args": ["-tags", "default-login"], "desc": "Check for default login panels"},
-        {"name": "Misconfigurations", "args": ["-tags", "misconfiguration"], "desc": "Detect common misconfigurations"},
+        {
+            "name": "Critical Only",
+            "args": ["-severity", "critical"],
+            "desc": "Critical severity vulnerabilities only",
+        },
+        {
+            "name": "High + Critical",
+            "args": ["-severity", "critical,high"],
+            "desc": "High and critical vulnerabilities (recommended)",
+        },
+        {
+            "name": "Full Scan",
+            "args": ["-severity", "critical,high,medium"],
+            "desc": "Comprehensive scan (critical, high, medium)",
+        },
+        {
+            "name": "CVE Detection",
+            "args": ["-tags", "cve"],
+            "desc": "Scan for known CVEs",
+        },
+        {
+            "name": "Exposure Detection",
+            "args": ["-tags", "exposure"],
+            "desc": "Detect sensitive file exposures",
+        },
+        {
+            "name": "Default Credentials",
+            "args": ["-tags", "default-login"],
+            "desc": "Check for default login panels",
+        },
+        {
+            "name": "Misconfigurations",
+            "args": ["-tags", "misconfiguration"],
+            "desc": "Detect common misconfigurations",
+        },
         # OWASP Injection presets
-        {"name": "XSS Scan", "args": ["-tags", "xss,rxss"], "desc": "Reflected/Stored XSS detection"},
-        {"name": "SSTI Scan", "args": ["-tags", "ssti"], "desc": "Server-Side Template Injection"},
-        {"name": "SSRF Scan", "args": ["-tags", "ssrf"], "desc": "Server-Side Request Forgery"},
-        {"name": "Command Injection", "args": ["-tags", "rce,cmdi"], "desc": "Remote Code/Command Execution"},
-        {"name": "LFI/RFI Scan", "args": ["-tags", "lfi,rfi"], "desc": "Local/Remote File Inclusion"},
-        {"name": "Open Redirect", "args": ["-tags", "redirect"], "desc": "Open redirect vulnerabilities"},
-        {"name": "Full OWASP", "args": ["-severity", "critical,high", "-tags", "owasp"], "desc": "All OWASP-tagged templates"}
+        {
+            "name": "XSS Scan",
+            "args": ["-tags", "xss,rxss"],
+            "desc": "Reflected/Stored XSS detection",
+        },
+        {
+            "name": "SSTI Scan",
+            "args": ["-tags", "ssti"],
+            "desc": "Server-Side Template Injection",
+        },
+        {
+            "name": "SSRF Scan",
+            "args": ["-tags", "ssrf"],
+            "desc": "Server-Side Request Forgery",
+        },
+        {
+            "name": "Command Injection",
+            "args": ["-tags", "rce,cmdi"],
+            "desc": "Remote Code/Command Execution",
+        },
+        {
+            "name": "LFI/RFI Scan",
+            "args": ["-tags", "lfi,rfi"],
+            "desc": "Local/Remote File Inclusion",
+        },
+        {
+            "name": "Open Redirect",
+            "args": ["-tags", "redirect"],
+            "desc": "Open redirect vulnerabilities",
+        },
+        {
+            "name": "Full OWASP",
+            "args": ["-severity", "critical,high", "-tags", "owasp"],
+            "desc": "All OWASP-tagged templates",
+        },
     ],
     "help_sections": [
         {
             "title": "What is Nuclei?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "Nuclei is the modern, industry-standard vulnerability scanner with 5000+ community-maintained templates updated daily, providing high accuracy and low false positives."},
-                {"title": "Use Cases", "desc": "Essential for web vulnerability detection", "tips": [
-                    "Detect CVEs with daily-updated templates",
-                    "Find exposed sensitive files and configurations",
-                    "Check for default credentials and logins",
-                    "Identify misconfigurations and security issues"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "Nuclei is the modern, industry-standard vulnerability scanner with 5000+ community-maintained templates updated daily, providing high accuracy and low false positives.",
+                },
+                {
+                    "title": "Use Cases",
+                    "desc": "Essential for web vulnerability detection",
+                    "tips": [
+                        "Detect CVEs with daily-updated templates",
+                        "Find exposed sensitive files and configurations",
+                        "Check for default credentials and logins",
+                        "Identify misconfigurations and security issues",
+                    ],
+                },
+            ],
         },
         {
             "title": "How to Use",
             "color": "green",
             "content": [
-                {"title": "Basic Workflow", "desc": "1. Update templates (nuclei -update-templates)\n     2. Filter by severity (-severity critical,high)\n     3. Use tags for specific categories (-tags cve,exposure)\n     4. Review findings and verify manually"},
-                {"title": "Key Features", "desc": "Powerful template-based scanning", "tips": [
-                    "Severity filtering: -severity critical,high",
-                    "Tag filtering: -tags cve,exposure,misconfiguration",
-                    "Fast and concurrent with customizable rate limits",
-                    "Results include CVE IDs and CVSS scores"
-                ]}
-            ]
+                {
+                    "title": "Basic Workflow",
+                    "desc": "1. Update templates (nuclei -update-templates)\n     2. Filter by severity (-severity critical,high)\n     3. Use tags for specific categories (-tags cve,exposure)\n     4. Review findings and verify manually",
+                },
+                {
+                    "title": "Key Features",
+                    "desc": "Powerful template-based scanning",
+                    "tips": [
+                        "Severity filtering: -severity critical,high",
+                        "Tag filtering: -tags cve,exposure,misconfiguration",
+                        "Fast and concurrent with customizable rate limits",
+                        "Results include CVE IDs and CVSS scores",
+                    ],
+                },
+            ],
         },
         {
             "title": "Tips & Best Practices",
             "color": "yellow",
             "content": [
-                ("Best Practices:", [
-                    "Update templates regularly for latest CVEs",
-                    "Start with critical/high severity only",
-                    "Use -rate-limit to avoid overwhelming targets",
-                    "Verify findings manually before reporting",
-                    "Link CVE IDs to SearchSploit for exploits"
-                ]),
-                ("Common Issues:", [
-                    "Too many results: Filter by severity or tags",
-                    "Rate limiting: Add -rate-limit or reduce concurrency",
-                    "False positives: Always verify critical findings",
-                    "Outdated templates: Run -update-templates regularly"
-                ])
-            ]
-        }
-    ]
+                (
+                    "Best Practices:",
+                    [
+                        "Update templates regularly for latest CVEs",
+                        "Start with critical/high severity only",
+                        "Use -rate-limit to avoid overwhelming targets",
+                        "Verify findings manually before reporting",
+                        "Link CVE IDs to SearchSploit for exploits",
+                    ],
+                ),
+                (
+                    "Common Issues:",
+                    [
+                        "Too many results: Filter by severity or tags",
+                        "Rate limiting: Add -rate-limit or reduce concurrency",
+                        "False positives: Always verify critical findings",
+                        "Outdated templates: Run -update-templates regularly",
+                    ],
+                ),
+            ],
+        },
+    ],
 }
 
 
@@ -208,7 +284,9 @@ class NucleiPlugin(PluginBase):
                 return True
         return False
 
-    def _normalize_target(self, target: str, args: List[str] = None, log_path: str = None) -> str:
+    def _normalize_target(
+        self, target: str, args: List[str] = None, log_path: str = None
+    ) -> str:
         """
         Normalize target for Nuclei scanning.
 
@@ -221,31 +299,35 @@ class NucleiPlugin(PluginBase):
         import re
 
         # Already a URL - validate and return
-        if target.startswith(('http://', 'https://')):
+        if target.startswith(("http://", "https://")):
             try:
                 return validate_url(target)
             except ValidationError as e:
                 if log_path:
-                    with open(log_path, 'w') as f:
+                    with open(log_path, "w") as f:
                         f.write(f"ERROR: Invalid URL: {e}\n")
                 return None
 
         # Bare IP or domain - prepend http:// for web scanning
         # This is needed because Nuclei web templates require a URL
-        ip_pattern = r'^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(:\d+)?$'
-        domain_pattern = r'^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$'
+        ip_pattern = r"^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}(:\d+)?$"
+        domain_pattern = r"^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$"
 
         if re.match(ip_pattern, target) or re.match(domain_pattern, target):
             # Log the conversion
             if log_path:
-                with open(log_path, 'a') as f:
-                    f.write(f"NOTE: Converting bare target '{target}' to 'http://{target}' for web scanning\n")
+                with open(log_path, "a") as f:
+                    f.write(
+                        f"NOTE: Converting bare target '{target}' to 'http://{target}' for web scanning\n"
+                    )
             return f"http://{target}"
 
         # Unknown format - return as-is
         return target
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build nuclei command for background execution with PID tracking."""
         args = args or []
 
@@ -260,8 +342,10 @@ class NucleiPlugin(PluginBase):
         # Check if templates exist - if not, add -update-templates flag
         if not self._check_templates_exist():
             if log_path:
-                with open(log_path, 'a') as f:
-                    f.write("NOTE: Nuclei templates not found. Will attempt to download...\n\n")
+                with open(log_path, "a") as f:
+                    f.write(
+                        "NOTE: Nuclei templates not found. Will attempt to download...\n\n"
+                    )
             cmd.append("-update-templates")
 
         if "-json" not in args and "-jsonl" not in args:
@@ -278,12 +362,11 @@ class NucleiPlugin(PluginBase):
         if "-timeout" not in args:
             cmd.extend(["-timeout", "10"])
 
-        return {
-            'cmd': cmd,
-            'timeout': 3600  # 1 hour
-        }
+        return {"cmd": cmd, "timeout": 3600}  # 1 hour
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute nuclei scan and write JSON output to log_path."""
         args = args or []
 
@@ -301,8 +384,10 @@ class NucleiPlugin(PluginBase):
         # Check if templates exist - if not, add -update-templates flag
         if not self._check_templates_exist():
             if log_path:
-                with open(log_path, 'a') as f:
-                    f.write("NOTE: Nuclei templates not found. Will attempt to download...\n\n")
+                with open(log_path, "a") as f:
+                    f.write(
+                        "NOTE: Nuclei templates not found. Will attempt to download...\n\n"
+                    )
             cmd.append("-update-templates")
 
         # Force JSON output for parsing
@@ -325,7 +410,9 @@ class NucleiPlugin(PluginBase):
 
         if not log_path:
             try:
-                proc = subprocess.run(cmd, capture_output=True, timeout=3600, check=False)
+                proc = subprocess.run(
+                    cmd, capture_output=True, timeout=3600, check=False
+                )
                 return proc.returncode
             except Exception:
                 return 1
@@ -335,7 +422,9 @@ class NucleiPlugin(PluginBase):
             with open(log_path, "w", encoding="utf-8", errors="replace") as fh:
                 fh.write(f"# Nuclei Scan\n")
                 fh.write(f"# Command: {' '.join(cmd)}\n")
-                fh.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"# Target: {target}\n\n")
 
             # Run nuclei (it will append JSONL to the file)
@@ -345,12 +434,14 @@ class NucleiPlugin(PluginBase):
                 stderr=subprocess.STDOUT,
                 timeout=3600,  # 1 hour timeout
                 check=False,
-                text=True
+                text=True,
             )
 
             # Append completion metadata
             with open(log_path, "a", encoding="utf-8", errors="replace") as fh:
-                fh.write(f"\n\n# Completed: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"\n\n# Completed: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"# Exit Code: {proc.returncode}\n")
 
                 # Also capture stderr for errors