souleyez 2.43.29__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/plugins/upnp.py

@@ -35,7 +35,7 @@ HELP = {
     "examples": [
         "souleyez jobs enqueue upnp 192.168.1.1",
         "souleyez jobs enqueue upnp 192.168.1.0/24",
-        "souleyez jobs enqueue upnp 10.0.0.1 --args \"--script upnp-info\"",
+        'souleyez jobs enqueue upnp 10.0.0.1 --args "--script upnp-info"',
     ],
     "flags": [
         ["--full", "Run all UPnP scripts (info + brute)"],
@@ -43,35 +43,50 @@ HELP = {
     ],
     "presets": [
         {"name": "Quick Discovery", "args": [], "desc": "Fast UPnP service discovery"},
-        {"name": "Full Enumeration", "args": ["--full"], "desc": "All UPnP scripts including brute force"},
+        {
+            "name": "Full Enumeration",
+            "args": ["--full"],
+            "desc": "All UPnP scripts including brute force",
+        },
     ],
     "help_sections": [
         {
             "title": "What is UPnP?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "UPnP allows devices to discover and communicate with each other automatically. Routers use it for NAT traversal (port forwarding)."},
-                {"title": "Security Issues", "desc": "Common UPnP vulnerabilities", "tips": [
-                    "Unauthenticated port forwarding (expose internal services)",
-                    "Device information disclosure (model, firmware)",
-                    "Known exploits for specific router firmware",
-                    "Can be abused for DDoS amplification"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "UPnP allows devices to discover and communicate with each other automatically. Routers use it for NAT traversal (port forwarding).",
+                },
+                {
+                    "title": "Security Issues",
+                    "desc": "Common UPnP vulnerabilities",
+                    "tips": [
+                        "Unauthenticated port forwarding (expose internal services)",
+                        "Device information disclosure (model, firmware)",
+                        "Known exploits for specific router firmware",
+                        "Can be abused for DDoS amplification",
+                    ],
+                },
+            ],
         },
         {
             "title": "What to Look For",
             "color": "green",
             "content": [
-                {"title": "Indicators", "desc": "Signs of vulnerable UPnP", "tips": [
-                    "UPnP enabled and externally accessible",
-                    "Old firmware versions with known CVEs",
-                    "Add port mapping action available",
-                    "Device info revealing make/model"
-                ]}
-            ]
-        }
-    ]
+                {
+                    "title": "Indicators",
+                    "desc": "Signs of vulnerable UPnP",
+                    "tips": [
+                        "UPnP enabled and externally accessible",
+                        "Old firmware versions with known CVEs",
+                        "Add port mapping action available",
+                        "Device info revealing make/model",
+                    ],
+                }
+            ],
+        },
+    ],
 }
 
 
@@ -84,9 +99,12 @@ class UPnPPlugin(PluginBase):
     def _is_root(self) -> bool:
         """Check if running as root."""
         import os
+
         return os.geteuid() == 0
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build nmap command for UPnP enumeration."""
         args = args or []
 
@@ -95,70 +113,70 @@ class UPnPPlugin(PluginBase):
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
 
         # Determine which scripts to run
-        if '--full' in args:
-            scripts = 'upnp-info,broadcast-upnp-info'
+        if "--full" in args:
+            scripts = "upnp-info,broadcast-upnp-info"
         else:
-            scripts = 'upnp-info'
+            scripts = "upnp-info"
 
         # Build nmap command for UPnP
         # UPnP uses UDP 1900 for discovery (SSDP) and TCP high ports for control
         cmd = [
-            'nmap',
-            '-sU', '-sS',  # UDP and TCP SYN scan
-            '-p', 'U:1900,T:49152-49156,5000,2869',  # Common UPnP ports
-            '--script', scripts,
-            '-oN', '-',  # Output to stdout
-            '--open',
-            '-T4',
-            target
+            "nmap",
+            "-sU",
+            "-sS",  # UDP and TCP SYN scan
+            "-p",
+            "U:1900,T:49152-49156,5000,2869",  # Common UPnP ports
+            "--script",
+            scripts,
+            "-oN",
+            "-",  # Output to stdout
+            "--open",
+            "-T4",
+            target,
         ]
 
         # UPnP scan requires root (uses -sU and -sS)
         if not self._is_root():
-            cmd = ['sudo', '-n'] + cmd
+            cmd = ["sudo", "-n"] + cmd
 
-        return {
-            'cmd': cmd,
-            'timeout': 600  # 10 minute timeout
-        }
+        return {"cmd": cmd, "timeout": 600}  # 10 minute timeout
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute UPnP enumeration."""
         cmd_spec = self.build_command(target, args, label, log_path)
         if cmd_spec is None:
             return 1
 
-        cmd = cmd_spec['cmd']
+        cmd = cmd_spec["cmd"]
 
         if log_path:
-            with open(log_path, 'w') as f:
+            with open(log_path, "w") as f:
                 f.write(f"# UPnP Enumeration on {target}\n")
                 f.write(f"# Command: {' '.join(cmd)}\n")
                 f.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S')}\n\n")
 
         try:
-            with open(log_path, 'a') as f:
+            with open(log_path, "a") as f:
                 result = subprocess.run(
-                    cmd,
-                    stdout=f,
-                    stderr=subprocess.STDOUT,
-                    timeout=cmd_spec['timeout']
+                    cmd, stdout=f, stderr=subprocess.STDOUT, timeout=cmd_spec["timeout"]
                 )
             return result.returncode
 
         except subprocess.TimeoutExpired:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: Scan timed out\n")
             return 124
         except Exception as e:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(f"\n\n# ERROR: {e}\n")
             return 1
 

souleyez/plugins/upnp_abuse.py

@@ -30,12 +30,12 @@ HELP = {
         "- Port forwards persist until router reboot (usually)\n"
         "- Clean up your test forwards when done\n"
     ),
-    "usage": "souleyez jobs enqueue upnp_abuse <router_ip> --args \"<action>\"",
+    "usage": 'souleyez jobs enqueue upnp_abuse <router_ip> --args "<action>"',
     "examples": [
-        "souleyez jobs enqueue upnp_abuse 192.168.1.1 --args \"list\"",
-        "souleyez jobs enqueue upnp_abuse 192.168.1.1 --args \"info\"",
-        "souleyez jobs enqueue upnp_abuse 192.168.1.1 --args \"add 8888 192.168.1.100 22 TCP\"",
-        "souleyez jobs enqueue upnp_abuse 192.168.1.1 --args \"delete 8888 TCP\"",
+        'souleyez jobs enqueue upnp_abuse 192.168.1.1 --args "list"',
+        'souleyez jobs enqueue upnp_abuse 192.168.1.1 --args "info"',
+        'souleyez jobs enqueue upnp_abuse 192.168.1.1 --args "add 8888 192.168.1.100 22 TCP"',
+        'souleyez jobs enqueue upnp_abuse 192.168.1.1 --args "delete 8888 TCP"',
     ],
     "flags": [
         ["list", "List existing port mappings"],
@@ -44,37 +44,57 @@ HELP = {
         ["delete EXT_PORT PROTO", "Remove port forward"],
     ],
     "presets": [
-        {"name": "List Mappings", "args": ["list"], "desc": "Show existing port forwards"},
-        {"name": "Get Info", "args": ["info"], "desc": "External IP and gateway details"},
-        {"name": "Expose SSH", "args": ["add", "2222", "TARGET_IP", "22", "TCP"], "desc": "Expose SSH on port 2222"},
+        {
+            "name": "List Mappings",
+            "args": ["list"],
+            "desc": "Show existing port forwards",
+        },
+        {
+            "name": "Get Info",
+            "args": ["info"],
+            "desc": "External IP and gateway details",
+        },
+        {
+            "name": "Expose SSH",
+            "args": ["add", "2222", "TARGET_IP", "22", "TCP"],
+            "desc": "Expose SSH on port 2222",
+        },
     ],
     "help_sections": [
         {
             "title": "What Can UPnP Abuse Do?",
             "color": "cyan",
             "content": [
-                {"title": "Capabilities", "desc": "What this plugin enables", "tips": [
-                    "View all active port forwards on the router",
-                    "Get the router's external (public) IP address",
-                    "Add new port forwards without authentication",
-                    "Remove port forwards you added",
-                    "Redirect external traffic to internal hosts"
-                ]}
-            ]
+                {
+                    "title": "Capabilities",
+                    "desc": "What this plugin enables",
+                    "tips": [
+                        "View all active port forwards on the router",
+                        "Get the router's external (public) IP address",
+                        "Add new port forwards without authentication",
+                        "Remove port forwards you added",
+                        "Redirect external traffic to internal hosts",
+                    ],
+                }
+            ],
         },
         {
             "title": "Attack Scenarios",
             "color": "red",
             "content": [
-                {"title": "Common Uses", "desc": "How attackers abuse UPnP", "tips": [
-                    "Expose internal services (SSH, RDP, web) to internet",
-                    "Create persistent access through router",
-                    "Pivot from compromised LAN device to WAN access",
-                    "Map network by listing existing forwards"
-                ]}
-            ]
-        }
-    ]
+                {
+                    "title": "Common Uses",
+                    "desc": "How attackers abuse UPnP",
+                    "tips": [
+                        "Expose internal services (SSH, RDP, web) to internet",
+                        "Create persistent access through router",
+                        "Pivot from compromised LAN device to WAN access",
+                        "Map network by listing existing forwards",
+                    ],
+                }
+            ],
+        },
+    ],
 }
 
 
@@ -86,40 +106,42 @@ class UPnPAbusePlugin(PluginBase):
 
     def check_tool_available(self) -> tuple:
         """Check if upnpc is available."""
-        if shutil.which('upnpc'):
+        if shutil.which("upnpc"):
             return True, None
         return False, "upnpc not found. Install with: sudo apt install miniupnpc"
 
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build upnpc command for UPnP manipulation."""
-        args = args or ['list']
+        args = args or ["list"]
 
         # Validate target
         try:
             target = validate_target(target)
         except ValidationError as e:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write(f"ERROR: Invalid target: {e}\n")
             return None
 
-        action = args[0] if args else 'list'
+        action = args[0] if args else "list"
 
-        if action == 'list':
-            cmd = ['upnpc', '-l']
-        elif action == 'info':
-            cmd = ['upnpc', '-s']
-        elif action == 'add' and len(args) >= 5:
+        if action == "list":
+            cmd = ["upnpc", "-l"]
+        elif action == "info":
+            cmd = ["upnpc", "-s"]
+        elif action == "add" and len(args) >= 5:
             # add EXT_PORT INT_IP INT_PORT PROTO
             ext_port, int_ip, int_port, proto = args[1], args[2], args[3], args[4]
-            cmd = ['upnpc', '-a', int_ip, int_port, ext_port, proto]
-        elif action == 'delete' and len(args) >= 3:
+            cmd = ["upnpc", "-a", int_ip, int_port, ext_port, proto]
+        elif action == "delete" and len(args) >= 3:
             # delete EXT_PORT PROTO
             ext_port, proto = args[1], args[2]
-            cmd = ['upnpc', '-d', ext_port, proto]
+            cmd = ["upnpc", "-d", ext_port, proto]
         else:
             if log_path:
-                with open(log_path, 'w') as f:
+                with open(log_path, "w") as f:
                     f.write("ERROR: Invalid action. Use: list, info, add, or delete\n")
                     f.write("  list - List port mappings\n")
                     f.write("  info - Get external IP and gateway info\n")
@@ -127,51 +149,47 @@ class UPnPAbusePlugin(PluginBase):
                     f.write("  delete EXT_PORT PROTO - Remove mapping\n")
             return None
 
-        return {
-            'cmd': cmd,
-            'timeout': 60  # Quick timeout for UPnP operations
-        }
+        return {"cmd": cmd, "timeout": 60}  # Quick timeout for UPnP operations
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute UPnP manipulation."""
         cmd_spec = self.build_command(target, args, label, log_path)
         if cmd_spec is None:
             return 1
 
-        cmd = cmd_spec['cmd']
-        action = args[0] if args else 'list'
+        cmd = cmd_spec["cmd"]
+        action = args[0] if args else "list"
 
         if log_path:
-            with open(log_path, 'w') as f:
+            with open(log_path, "w") as f:
                 f.write(f"# UPnP Abuse on {target}\n")
                 f.write(f"# Action: {action}\n")
                 f.write(f"# Command: {' '.join(cmd)}\n")
                 f.write(f"# Started: {time.strftime('%Y-%m-%d %H:%M:%S')}\n\n")
 
         try:
-            with open(log_path, 'a') as f:
+            with open(log_path, "a") as f:
                 result = subprocess.run(
-                    cmd,
-                    stdout=f,
-                    stderr=subprocess.STDOUT,
-                    timeout=cmd_spec['timeout']
+                    cmd, stdout=f, stderr=subprocess.STDOUT, timeout=cmd_spec["timeout"]
                 )
             return result.returncode
 
         except subprocess.TimeoutExpired:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: Operation timed out\n")
             return 124
         except FileNotFoundError:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write("\n\n# ERROR: upnpc not found\n")
                     f.write("Install with: sudo apt install miniupnpc\n")
             return 127
         except Exception as e:
             if log_path:
-                with open(log_path, 'a') as f:
+                with open(log_path, "a") as f:
                     f.write(f"\n\n# ERROR: {e}\n")
             return 1