souleyez 2.43.29__py3-none-any.whl → 3.0.0__py3-none-any.whl

souleyez/reporting/metrics.py

@@ -9,108 +9,103 @@ from datetime import datetime
 
 class MetricsCalculator:
     """Calculate executive dashboard metrics and risk scores."""
-    
+
     def __init__(self):
         pass
-    
+
     def calculate_risk_score(self, findings_by_severity: Dict) -> int:
         """
         Calculate overall risk score (0-100).
-        
+
         Weighted scoring:
         - Critical: 25 points each
         - High: 10 points each
         - Medium: 3 points each
         - Low: 1 point each
         - Info: 0 points
-        
+
         Capped at 100.
         """
         score = 0
-        score += len(findings_by_severity.get('critical', [])) * 25
-        score += len(findings_by_severity.get('high', [])) * 10
-        score += len(findings_by_severity.get('medium', [])) * 3
-        score += len(findings_by_severity.get('low', [])) * 1
-        
+        score += len(findings_by_severity.get("critical", [])) * 25
+        score += len(findings_by_severity.get("high", [])) * 10
+        score += len(findings_by_severity.get("medium", [])) * 3
+        score += len(findings_by_severity.get("low", [])) * 1
+
         return min(score, 100)
-    
+
     def calculate_exploitation_rate(self, attack_surface: Dict) -> float:
         """Calculate percentage of services successfully exploited."""
-        overview = attack_surface.get('overview', {})
-        total_services = overview.get('total_services', 0)
-        exploited = overview.get('exploited_services', 0)
-        
+        overview = attack_surface.get("overview", {})
+        total_services = overview.get("total_services", 0)
+        exploited = overview.get("exploited_services", 0)
+
         if total_services == 0:
             return 0.0
-        
+
         return round((exploited / total_services) * 100, 1)
-    
+
     def estimate_remediation_timeline(self, findings_by_severity: Dict) -> Dict:
         """
         Estimate remediation timeline in days.
-        
+
         Estimates:
         - Critical: 1 day each
         - High: 0.5 days each
         - Medium: 0.25 days each
         - Low: 0.1 days each
         """
-        critical_days = len(findings_by_severity.get('critical', [])) * 1
-        high_days = len(findings_by_severity.get('high', [])) * 0.5
-        medium_days = len(findings_by_severity.get('medium', [])) * 0.25
-        low_days = len(findings_by_severity.get('low', [])) * 0.1
-        
+        critical_days = len(findings_by_severity.get("critical", [])) * 1
+        high_days = len(findings_by_severity.get("high", [])) * 0.5
+        medium_days = len(findings_by_severity.get("medium", [])) * 0.25
+        low_days = len(findings_by_severity.get("low", [])) * 0.1
+
         total_days = critical_days + high_days + medium_days + low_days
-        
+
         return {
-            'total_days': round(total_days, 1),
-            'weeks': round(total_days / 5, 1),  # Business days
-            'critical': round(critical_days, 1),
-            'high': round(high_days, 1),
-            'medium': round(medium_days, 1),
-            'low': round(low_days, 1)
+            "total_days": round(total_days, 1),
+            "weeks": round(total_days / 5, 1),  # Business days
+            "critical": round(critical_days, 1),
+            "high": round(high_days, 1),
+            "medium": round(medium_days, 1),
+            "low": round(low_days, 1),
         }
-    
+
     def calculate_host_risk_distribution(self, attack_surface: Dict) -> Dict:
         """Calculate risk distribution across hosts."""
-        hosts = attack_surface.get('hosts', [])
-        
-        distribution = {
-            'critical': 0,
-            'high': 0,
-            'medium': 0,
-            'low': 0
-        }
-        
+        hosts = attack_surface.get("hosts", [])
+
+        distribution = {"critical": 0, "high": 0, "medium": 0, "low": 0}
+
         for host in hosts:
-            critical_findings = host.get('critical_findings', 0)
-            total_findings = host.get('findings', 0)
-            
+            critical_findings = host.get("critical_findings", 0)
+            total_findings = host.get("findings", 0)
+
             if critical_findings > 0:
-                distribution['critical'] += 1
+                distribution["critical"] += 1
             elif total_findings >= 5:
-                distribution['high'] += 1
+                distribution["high"] += 1
             elif total_findings >= 2:
-                distribution['medium'] += 1
+                distribution["medium"] += 1
             else:
-                distribution['low'] += 1
-        
+                distribution["low"] += 1
+
         return distribution
-    
+
     def get_dashboard_metrics(self, data: Dict) -> Dict:
         """
         Generate all executive dashboard metrics.
-        
+
         Returns comprehensive metrics dict for dashboard rendering.
         """
-        findings_by_severity = data['findings_by_severity']
-        attack_surface = data['attack_surface']
-        
+        findings_by_severity = data["findings_by_severity"]
+        attack_surface = data["attack_surface"]
+
         risk_score = self.calculate_risk_score(findings_by_severity)
         exploitation_rate = self.calculate_exploitation_rate(attack_surface)
         remediation = self.estimate_remediation_timeline(findings_by_severity)
         host_distribution = self.calculate_host_risk_distribution(attack_surface)
-        
+
         # Determine risk level
         if risk_score >= 75:
             risk_level = "CRITICAL"
@@ -124,29 +119,31 @@ class MetricsCalculator:
         else:
             risk_level = "LOW"
             risk_color = "green"
-        
+
         # Total findings
-        total_findings = sum(len(findings) for findings in findings_by_severity.values())
-        
+        total_findings = sum(
+            len(findings) for findings in findings_by_severity.values()
+        )
+
         # Overview stats
-        overview = attack_surface.get('overview', {})
-        
+        overview = attack_surface.get("overview", {})
+
         return {
-            'risk_score': risk_score,
-            'risk_level': risk_level,
-            'risk_color': risk_color,
-            'total_findings': total_findings,
-            'critical_findings': len(findings_by_severity.get('critical', [])),
-            'high_findings': len(findings_by_severity.get('high', [])),
-            'medium_findings': len(findings_by_severity.get('medium', [])),
-            'low_findings': len(findings_by_severity.get('low', [])),
-            'info_findings': len(findings_by_severity.get('info', [])),
-            'total_hosts': overview.get('total_hosts', 0),
-            'vulnerable_hosts': overview.get('vulnerable_hosts', 0),
-            'total_services': overview.get('total_services', 0),
-            'exploited_services': overview.get('exploited_services', 0),
-            'exploitation_rate': exploitation_rate,
-            'remediation_timeline': remediation,
-            'host_risk_distribution': host_distribution,
-            'credentials_found': len(data.get('credentials', []))
+            "risk_score": risk_score,
+            "risk_level": risk_level,
+            "risk_color": risk_color,
+            "total_findings": total_findings,
+            "critical_findings": len(findings_by_severity.get("critical", [])),
+            "high_findings": len(findings_by_severity.get("high", [])),
+            "medium_findings": len(findings_by_severity.get("medium", [])),
+            "low_findings": len(findings_by_severity.get("low", [])),
+            "info_findings": len(findings_by_severity.get("info", [])),
+            "total_hosts": overview.get("total_hosts", 0),
+            "vulnerable_hosts": overview.get("vulnerable_hosts", 0),
+            "total_services": overview.get("total_services", 0),
+            "exploited_services": overview.get("exploited_services", 0),
+            "exploitation_rate": exploitation_rate,
+            "remediation_timeline": remediation,
+            "host_risk_distribution": host_distribution,
+            "credentials_found": len(data.get("credentials", [])),
         }

souleyez/scanner.py

@@ -11,10 +11,10 @@ logger = get_logger(__name__)
 
 
 def _make_paths(target, label):
-    safe_label = (label.replace(' ', '_') if label else 'scan')
+    safe_label = label.replace(" ", "_") if label else "scan"
     ts = timestamp_str()
     base = f'nmap_{ts}_{safe_label}_{target.replace("/", "_")}'
-    return SCANS_DIR / (base + '.log'), SCANS_DIR / (base + '.xml')
+    return SCANS_DIR / (base + ".log"), SCANS_DIR / (base + ".xml")
 
 
 def _parse_nmap_xml_summary(xmlpath: Path):
@@ -23,54 +23,60 @@ def _parse_nmap_xml_summary(xmlpath: Path):
         root = tree.getroot()
     except Exception:
         return None
-    hosts = root.findall('host')
+    hosts = root.findall("host")
     hosts_total = len(hosts)
     hosts_up = 0
     open_ports = 0
     per_host = []
     for h in hosts:
         addr = None
-        a = h.find('address')
+        a = h.find("address")
         if a is not None:
-            addr = a.get('addr')
-        st = h.find('status')
-        up = (st is not None and st.get('state') == 'up')
+            addr = a.get("addr")
+        st = h.find("status")
+        up = st is not None and st.get("state") == "up"
         if up:
             hosts_up += 1
-        ports = h.find('ports')
+        ports = h.find("ports")
         open_count = 0
         if ports is not None:
-            for p in ports.findall('port'):
-                state = p.find('state')
-                if state is not None and state.get('state') == 'open':
+            for p in ports.findall("port"):
+                state = p.find("state")
+                if state is not None and state.get("state") == "open":
                     open_count += 1
         open_ports += open_count
-        per_host.append({'addr': addr, 'up': up, 'open': open_count})
-    return {'hosts_total': hosts_total, 'hosts_up': hosts_up, 'open_ports': open_ports, 'per_host': per_host}
+        per_host.append({"addr": addr, "up": up, "open": open_count})
+    return {
+        "hosts_total": hosts_total,
+        "hosts_up": hosts_up,
+        "open_ports": open_ports,
+        "per_host": per_host,
+    }
 
 
 def run_nmap(target, nmap_args, label=None, save_xml=False):
     if not nmap_installed():
-        raise EnvironmentError('nmap is not installed or not on PATH.')
-    
+        raise EnvironmentError("nmap is not installed or not on PATH.")
+
     # Validate nmap args to prevent command injection
     try:
         validated_args = validate_nmap_args(nmap_args)
     except ValidationError as e:
-        logger.error("Invalid nmap arguments", extra={
-            "args": nmap_args,
-            "error": str(e)
-        })
+        logger.error(
+            "Invalid nmap arguments", extra={"args": nmap_args, "error": str(e)}
+        )
         raise
-    
-    logpath, xmlpath = _make_paths(target, label or 'scan')
-    cmd = ['nmap'] + list(validated_args)
+
+    logpath, xmlpath = _make_paths(target, label or "scan")
+    cmd = ["nmap"] + list(validated_args)
     if save_xml:
-        cmd += ['-oX', str(xmlpath)]
+        cmd += ["-oX", str(xmlpath)]
     cmd += [target]
-    with open(logpath, 'w', encoding='utf-8', errors='replace') as lf:
-        lf.write(f'$ {join_cmd(cmd)}\\n\\n')
-        proc = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, bufsize=1, text=True)
+    with open(logpath, "w", encoding="utf-8", errors="replace") as lf:
+        lf.write(f"$ {join_cmd(cmd)}\\n\\n")
+        proc = subprocess.Popen(
+            cmd, stdout=subprocess.PIPE, stderr=subprocess.STDOUT, bufsize=1, text=True
+        )
         try:
             for line in proc.stdout:
                 print(line.rstrip())
@@ -78,11 +84,11 @@ def run_nmap(target, nmap_args, label=None, save_xml=False):
         except KeyboardInterrupt:
             proc.terminate()
             proc.wait(timeout=5)
-            print('\\n[scan cancelled by user]')
-            lf.write('\\n[scan cancelled by user]\\n')
+            print("\\n[scan cancelled by user]")
+            lf.write("\\n[scan cancelled by user]\\n")
             return logpath, -1, (xmlpath if save_xml else None), None
         rc = proc.wait()
-        lf.write(f'\\n# exit_code: {rc}\\n')
+        lf.write(f"\\n# exit_code: {rc}\\n")
     summary = None
     if save_xml and xmlpath.exists():
         summary = _parse_nmap_xml_summary(xmlpath)

souleyez/security/__init__.py

@@ -1,4 +1,5 @@
 """Security validation, sanitization, and authentication utilities."""
+
 import click
 import sys
 import functools
@@ -16,6 +17,7 @@ def require_login(f):
         def my_command():
             ...
     """
+
     @functools.wraps(f)
     def wrapper(*args, **kwargs):
         from souleyez.auth import get_current_user, is_logged_in, init_auth
@@ -24,16 +26,18 @@ def require_login(f):
         # Initialize auth if needed
         try:
             from souleyez.auth import get_session_manager
+
             get_session_manager()
         except RuntimeError:
             init_auth(get_db().db_path)
 
         if not is_logged_in():
-            click.echo(click.style("\n⚠️  Authentication required.", fg='yellow'))
-            click.echo(click.style("   Run: souleyez login", fg='yellow'))
+            click.echo(click.style("\n⚠️  Authentication required.", fg="yellow"))
+            click.echo(click.style("   Run: souleyez login", fg="yellow"))
             sys.exit(1)
 
         return f(*args, **kwargs)
+
     return wrapper
 
 
@@ -49,16 +53,18 @@ def require_admin(f):
         def admin_only_command():
             ...
     """
+
     @functools.wraps(f)
     def wrapper(*args, **kwargs):
         from souleyez.auth import get_current_user, Role
 
         user = get_current_user()
         if user is None or user.role != Role.ADMIN:
-            click.echo(click.style("\n⚠️  Admin privileges required.", fg='red'))
+            click.echo(click.style("\n⚠️  Admin privileges required.", fg="red"))
             sys.exit(1)
 
         return f(*args, **kwargs)
+
     return wrapper
 
 
@@ -74,17 +80,21 @@ def require_pro(f):
         def pro_feature():
             ...
     """
+
     @functools.wraps(f)
     def wrapper(*args, **kwargs):
         from souleyez.auth import get_current_user, Tier
 
         user = get_current_user()
         if user is None or user.tier != Tier.PRO:
-            click.echo(click.style("\n💎 Pro license required.", fg='yellow'))
-            click.echo(click.style("   Upgrade at: cybersoulsecurity.com/upgrade", fg='cyan'))
+            click.echo(click.style("\n💎 Pro license required.", fg="yellow"))
+            click.echo(
+                click.style("   Upgrade at: cybersoulsecurity.com/upgrade", fg="cyan")
+            )
             sys.exit(1)
 
         return f(*args, **kwargs)
+
     return wrapper
 
 
@@ -106,21 +116,26 @@ def unlock_credentials_if_needed():
         return True
 
     # Need to unlock
-    click.echo(click.style("🔒 Credentials are encrypted.", fg='yellow'))
+    click.echo(click.style("🔒 Credentials are encrypted.", fg="yellow"))
 
     max_attempts = 3
     for attempt in range(max_attempts):
         try:
             password = getpass.getpass("Enter master password: ")
             if crypto.unlock(password):
-                click.echo(click.style("✅ Unlocked successfully!", fg='green'))
+                click.echo(click.style("✅ Unlocked successfully!", fg="green"))
                 return True
             else:
                 remaining = max_attempts - attempt - 1
                 if remaining > 0:
-                    click.echo(click.style(f"❌ Incorrect password. {remaining} attempts remaining.", fg='red'))
+                    click.echo(
+                        click.style(
+                            f"❌ Incorrect password. {remaining} attempts remaining.",
+                            fg="red",
+                        )
+                    )
                 else:
-                    click.echo(click.style("❌ Access denied.", fg='red'))
+                    click.echo(click.style("❌ Access denied.", fg="red"))
         except KeyboardInterrupt:
             click.echo("\n❌ Cancelled by user.")
             return False
@@ -153,11 +168,22 @@ def require_password(f):
     Returns:
         The wrapped function that requires authentication
     """
+
     @functools.wraps(f)
     def wrapper(*args, **kwargs):
         if not unlock_credentials_if_needed():
-            click.echo(click.style("\n⚠️  Authentication required to access this command.", fg='yellow'))
-            click.echo(click.style("   This command accesses sensitive data and requires master password.", fg='yellow'))
+            click.echo(
+                click.style(
+                    "\n⚠️  Authentication required to access this command.", fg="yellow"
+                )
+            )
+            click.echo(
+                click.style(
+                    "   This command accesses sensitive data and requires master password.",
+                    fg="yellow",
+                )
+            )
             sys.exit(1)
         return f(*args, **kwargs)
+
     return wrapper