souleyez 2.43.29__py3-none-any.whl → 3.0.0__py3-none-any.whl

souleyez/plugins/searchsploit.py

@@ -28,84 +28,92 @@ HELP = {
     ),
     "usage": "souleyez run searchsploit <search_term>",
     "examples": [
-        "souleyez run searchsploit \"Apache 2.4.49\"",
-        "souleyez run searchsploit \"CVE-2021-41773\"",
-        "souleyez run searchsploit \"Windows Server 2019\" -e",
-        "souleyez run searchsploit \"ProFTPD 1.3\"",
+        'souleyez run searchsploit "Apache 2.4.49"',
+        'souleyez run searchsploit "CVE-2021-41773"',
+        'souleyez run searchsploit "Windows Server 2019" -e',
+        'souleyez run searchsploit "ProFTPD 1.3"',
     ],
     "presets": [
         {
             "name": "Basic Search",
             "desc": "Simple search - finds all matches",
-            "args": []
-        },
-        {
-            "name": "Exact Match",
-            "desc": "Only exact matches",
-            "args": ["-e"]
-        },
-        {
-            "name": "Title Search",
-            "desc": "Search titles only (faster)",
-            "args": ["-t"]
-        },
-        {
-            "name": "With URLs",
-            "desc": "Include Exploit-DB URLs",
-            "args": ["--www"]
+            "args": [],
         },
+        {"name": "Exact Match", "desc": "Only exact matches", "args": ["-e"]},
+        {"name": "Title Search", "desc": "Search titles only (faster)", "args": ["-t"]},
+        {"name": "With URLs", "desc": "Include Exploit-DB URLs", "args": ["--www"]},
         {
             "name": "Exact + URLs",
             "desc": "Exact matches with URLs",
-            "args": ["-e", "--www"]
-        }
+            "args": ["-e", "--www"],
+        },
     ],
     "help_sections": [
         {
             "title": "What is SearchSploit?",
             "color": "cyan",
             "content": [
-                {"title": "Overview", "desc": "SearchSploit searches the offline Exploit-DB database for public exploits, shellcodes, and papers matching software versions or CVE IDs."},
-                {"title": "Use Cases", "desc": "Find exploits for discovered services and vulnerabilities", "tips": [
-                    "Search by software version (Apache 2.4.49)",
-                    "Search by CVE ID (CVE-2021-41773)",
-                    "Find platform-specific exploits",
-                    "Get direct Exploit-DB links"
-                ]}
-            ]
+                {
+                    "title": "Overview",
+                    "desc": "SearchSploit searches the offline Exploit-DB database for public exploits, shellcodes, and papers matching software versions or CVE IDs.",
+                },
+                {
+                    "title": "Use Cases",
+                    "desc": "Find exploits for discovered services and vulnerabilities",
+                    "tips": [
+                        "Search by software version (Apache 2.4.49)",
+                        "Search by CVE ID (CVE-2021-41773)",
+                        "Find platform-specific exploits",
+                        "Get direct Exploit-DB links",
+                    ],
+                },
+            ],
         },
         {
             "title": "How to Use",
             "color": "green",
             "content": [
-                {"title": "Basic Workflow", "desc": "1. Get service versions from Nmap or other scans\n     2. Search for exploits matching software/version\n     3. Use -e for exact matches to reduce noise\n     4. Review and test relevant exploits"},
-                {"title": "Search Tips", "desc": "Effective searching strategies", "tips": [
-                    "Include version numbers for better results",
-                    "Use CVE IDs from vulnerability scanners",
-                    "Try -e for exact matches if too many results",
-                    "Use --www to get Exploit-DB URLs"
-                ]}
-            ]
+                {
+                    "title": "Basic Workflow",
+                    "desc": "1. Get service versions from Nmap or other scans\n     2. Search for exploits matching software/version\n     3. Use -e for exact matches to reduce noise\n     4. Review and test relevant exploits",
+                },
+                {
+                    "title": "Search Tips",
+                    "desc": "Effective searching strategies",
+                    "tips": [
+                        "Include version numbers for better results",
+                        "Use CVE IDs from vulnerability scanners",
+                        "Try -e for exact matches if too many results",
+                        "Use --www to get Exploit-DB URLs",
+                    ],
+                },
+            ],
         },
         {
             "title": "Tips & Best Practices",
             "color": "yellow",
             "content": [
-                ("Best Practices:", [
-                    "Always verify exploits match your exact target version",
-                    "Read exploit code before running (safety check)",
-                    "Use Nuclei/WPScan CVE IDs as search terms",
-                    "Update Exploit-DB regularly (searchsploit -u)",
-                    "Test exploits in controlled environment first"
-                ]),
-                ("Common Issues:", [
-                    "Too many results: Use -e for exact matches or refine search",
-                    "No results: Try broader search terms or different keywords",
-                    "Outdated database: Run searchsploit -u to update",
-                    "Wrong platform: Filter by platform (Linux, Windows, etc.)"
-                ])
-            ]
-        }
+                (
+                    "Best Practices:",
+                    [
+                        "Always verify exploits match your exact target version",
+                        "Read exploit code before running (safety check)",
+                        "Use Nuclei/WPScan CVE IDs as search terms",
+                        "Update Exploit-DB regularly (searchsploit -u)",
+                        "Test exploits in controlled environment first",
+                    ],
+                ),
+                (
+                    "Common Issues:",
+                    [
+                        "Too many results: Use -e for exact matches or refine search",
+                        "No results: Try broader search terms or different keywords",
+                        "Outdated database: Run searchsploit -u to update",
+                        "Wrong platform: Filter by platform (Linux, Windows, etc.)",
+                    ],
+                ),
+            ],
+        },
     ],
     "flags": [
         ["--json", "JSON output (default for parsing)"],
@@ -113,7 +121,7 @@ HELP = {
         ["--cve <CVE-ID>", "Search by CVE ID"],
         ["-e", "Exact match only"],
         ["-t", "Search in exploit titles only"],
-    ]
+    ],
 }
 
 
@@ -123,8 +131,9 @@ class SearchSploitPlugin(PluginBase):
     category = "vulnerability_analysis"
     HELP = HELP
 
-
-    def build_command(self, target: str, args: List[str] = None, label: str = "", log_path: str = None):
+    def build_command(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ):
         """Build command for background execution with PID tracking."""
         args = args or []
 
@@ -136,32 +145,35 @@ class SearchSploitPlugin(PluginBase):
 
         # Determine search term: use args if they contain a non-flag search term,
         # otherwise use target (but skip if target is a URL - not a valid search term)
-        non_flag_args = [a for a in args if not a.startswith('-')]
+        non_flag_args = [a for a in args if not a.startswith("-")]
 
         if non_flag_args:
             # Args contain search term(s) - use those, ignore URL target
             cmd.extend(non_flag_args)
-        elif target and not target.startswith(('http://', 'https://')):
+        elif target and not target.startswith(("http://", "https://")):
             # Target is not a URL - use it as search term
             cmd.append(target)
         else:
-            raise ValueError("SearchSploit requires a search term. Usage: souleyez run searchsploit 'Apache 2.4.49'")
+            raise ValueError(
+                "SearchSploit requires a search term. Usage: souleyez run searchsploit 'Apache 2.4.49'"
+            )
 
         # Add remaining flag args (excluding --json which is already added)
-        flag_args = [a for a in args if a.startswith('-') and a != '--json']
+        flag_args = [a for a in args if a.startswith("-") and a != "--json"]
         cmd.extend(flag_args)
-        
-        return {
-            'cmd': cmd,
-            'timeout': 300
-        }
 
-    def run(self, target: str, args: List[str] = None, label: str = "", log_path: str = None) -> int:
+        return {"cmd": cmd, "timeout": 300}
+
+    def run(
+        self, target: str, args: List[str] = None, label: str = "", log_path: str = None
+    ) -> int:
         """Execute searchsploit and write JSON output to log_path."""
-        
+
         # Validate target
-        if not target or target.lower() == 'none':
-            raise ValueError("SearchSploit requires a search term. Usage: souleyez run searchsploit 'Apache 2.4.49'")
+        if not target or target.lower() == "none":
+            raise ValueError(
+                "SearchSploit requires a search term. Usage: souleyez run searchsploit 'Apache 2.4.49'"
+            )
 
         args = args or []
 
@@ -195,17 +207,17 @@ class SearchSploitPlugin(PluginBase):
                 fh.write(f"Target: {target}\n")
                 fh.write(f"Args: {args}\n")
                 fh.write(f"Label: {label}\n")
-                fh.write(f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"Command: {' '.join(cmd)}\n")
-                fh.write(f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n")
+                fh.write(
+                    f"Started: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n\n"
+                )
 
             # Run searchsploit
             proc = subprocess.run(
-                cmd,
-                capture_output=True,
-                timeout=60,
-                check=False,
-                text=True
+                cmd, capture_output=True, timeout=60, check=False, text=True
             )
 
             # Write output
@@ -216,7 +228,9 @@ class SearchSploitPlugin(PluginBase):
                 if proc.stderr:
                     fh.write(f"\n\n# Error output:\n{proc.stderr}\n")
 
-                fh.write(f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n")
+                fh.write(
+                    f"\nCompleted: {time.strftime('%Y-%m-%d %H:%M:%S UTC', time.gmtime())}\n"
+                )
                 fh.write(f"Exit Code: {proc.returncode}\n")
 
             return proc.returncode