souleyez 2.43.29__py3-none-any.whl → 3.0.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of souleyez might be problematic. Click here for more details.
- souleyez/__init__.py +1 -2
- souleyez/ai/__init__.py +21 -15
- souleyez/ai/action_mapper.py +249 -150
- souleyez/ai/chain_advisor.py +116 -100
- souleyez/ai/claude_provider.py +29 -28
- souleyez/ai/context_builder.py +80 -62
- souleyez/ai/executor.py +158 -117
- souleyez/ai/feedback_handler.py +136 -121
- souleyez/ai/llm_factory.py +27 -20
- souleyez/ai/llm_provider.py +4 -2
- souleyez/ai/ollama_provider.py +6 -9
- souleyez/ai/ollama_service.py +44 -37
- souleyez/ai/path_scorer.py +91 -76
- souleyez/ai/recommender.py +176 -144
- souleyez/ai/report_context.py +74 -73
- souleyez/ai/report_service.py +84 -66
- souleyez/ai/result_parser.py +222 -229
- souleyez/ai/safety.py +67 -44
- souleyez/auth/__init__.py +23 -22
- souleyez/auth/audit.py +36 -26
- souleyez/auth/engagement_access.py +65 -48
- souleyez/auth/permissions.py +14 -3
- souleyez/auth/session_manager.py +54 -37
- souleyez/auth/user_manager.py +109 -64
- souleyez/commands/audit.py +40 -43
- souleyez/commands/auth.py +35 -15
- souleyez/commands/deliverables.py +55 -50
- souleyez/commands/engagement.py +47 -28
- souleyez/commands/license.py +32 -23
- souleyez/commands/screenshots.py +36 -32
- souleyez/commands/user.py +82 -36
- souleyez/config.py +52 -44
- souleyez/core/credential_tester.py +87 -81
- souleyez/core/cve_mappings.py +179 -192
- souleyez/core/cve_matcher.py +162 -148
- souleyez/core/msf_auto_mapper.py +100 -83
- souleyez/core/msf_chain_engine.py +294 -256
- souleyez/core/msf_database.py +153 -70
- souleyez/core/msf_integration.py +679 -673
- souleyez/core/msf_rpc_client.py +40 -42
- souleyez/core/msf_rpc_manager.py +77 -79
- souleyez/core/msf_sync_manager.py +241 -181
- souleyez/core/network_utils.py +22 -15
- souleyez/core/parser_handler.py +34 -25
- souleyez/core/pending_chains.py +114 -63
- souleyez/core/templates.py +158 -107
- souleyez/core/tool_chaining.py +9564 -2881
- souleyez/core/version_utils.py +79 -94
- souleyez/core/vuln_correlation.py +136 -89
- souleyez/core/web_utils.py +33 -32
- souleyez/data/wordlists/ad_users.txt +378 -0
- souleyez/data/wordlists/api_endpoints_large.txt +769 -0
- souleyez/data/wordlists/home_dir_sensitive.txt +39 -0
- souleyez/data/wordlists/lfi_payloads.txt +82 -0
- souleyez/data/wordlists/passwords_brute.txt +1548 -0
- souleyez/data/wordlists/passwords_crack.txt +2479 -0
- souleyez/data/wordlists/passwords_spray.txt +386 -0
- souleyez/data/wordlists/subdomains_large.txt +5057 -0
- souleyez/data/wordlists/usernames_common.txt +694 -0
- souleyez/data/wordlists/web_dirs_large.txt +4769 -0
- souleyez/detection/__init__.py +1 -1
- souleyez/detection/attack_signatures.py +12 -17
- souleyez/detection/mitre_mappings.py +61 -55
- souleyez/detection/validator.py +97 -86
- souleyez/devtools.py +23 -10
- souleyez/docs/README.md +4 -4
- souleyez/docs/api-reference/cli-commands.md +2 -2
- souleyez/docs/developer-guide/adding-new-tools.md +562 -0
- souleyez/docs/user-guide/auto-chaining.md +30 -8
- souleyez/docs/user-guide/getting-started.md +1 -1
- souleyez/docs/user-guide/installation.md +26 -3
- souleyez/docs/user-guide/metasploit-integration.md +2 -2
- souleyez/docs/user-guide/rbac.md +1 -1
- souleyez/docs/user-guide/scope-management.md +1 -1
- souleyez/docs/user-guide/siem-integration.md +1 -1
- souleyez/docs/user-guide/tools-reference.md +1 -8
- souleyez/docs/user-guide/worker-management.md +1 -1
- souleyez/engine/background.py +1239 -535
- souleyez/engine/base.py +4 -1
- souleyez/engine/job_status.py +17 -49
- souleyez/engine/log_sanitizer.py +103 -77
- souleyez/engine/manager.py +38 -7
- souleyez/engine/result_handler.py +2200 -1550
- souleyez/engine/worker_manager.py +50 -41
- souleyez/export/evidence_bundle.py +72 -62
- souleyez/feature_flags/features.py +16 -20
- souleyez/feature_flags.py +5 -9
- souleyez/handlers/__init__.py +11 -0
- souleyez/handlers/base.py +188 -0
- souleyez/handlers/bash_handler.py +277 -0
- souleyez/handlers/bloodhound_handler.py +243 -0
- souleyez/handlers/certipy_handler.py +311 -0
- souleyez/handlers/crackmapexec_handler.py +486 -0
- souleyez/handlers/dnsrecon_handler.py +344 -0
- souleyez/handlers/enum4linux_handler.py +400 -0
- souleyez/handlers/evil_winrm_handler.py +493 -0
- souleyez/handlers/ffuf_handler.py +815 -0
- souleyez/handlers/gobuster_handler.py +1114 -0
- souleyez/handlers/gpp_extract_handler.py +334 -0
- souleyez/handlers/hashcat_handler.py +444 -0
- souleyez/handlers/hydra_handler.py +564 -0
- souleyez/handlers/impacket_getuserspns_handler.py +343 -0
- souleyez/handlers/impacket_psexec_handler.py +222 -0
- souleyez/handlers/impacket_secretsdump_handler.py +426 -0
- souleyez/handlers/john_handler.py +286 -0
- souleyez/handlers/katana_handler.py +425 -0
- souleyez/handlers/kerbrute_handler.py +298 -0
- souleyez/handlers/ldapsearch_handler.py +636 -0
- souleyez/handlers/lfi_extract_handler.py +464 -0
- souleyez/handlers/msf_auxiliary_handler.py +409 -0
- souleyez/handlers/msf_exploit_handler.py +380 -0
- souleyez/handlers/nikto_handler.py +413 -0
- souleyez/handlers/nmap_handler.py +821 -0
- souleyez/handlers/nuclei_handler.py +359 -0
- souleyez/handlers/nxc_handler.py +417 -0
- souleyez/handlers/rdp_sec_check_handler.py +353 -0
- souleyez/handlers/registry.py +292 -0
- souleyez/handlers/responder_handler.py +232 -0
- souleyez/handlers/service_explorer_handler.py +434 -0
- souleyez/handlers/smbclient_handler.py +344 -0
- souleyez/handlers/smbmap_handler.py +510 -0
- souleyez/handlers/smbpasswd_handler.py +296 -0
- souleyez/handlers/sqlmap_handler.py +1116 -0
- souleyez/handlers/theharvester_handler.py +601 -0
- souleyez/handlers/web_login_test_handler.py +327 -0
- souleyez/handlers/whois_handler.py +277 -0
- souleyez/handlers/wpscan_handler.py +554 -0
- souleyez/history.py +32 -16
- souleyez/importers/msf_importer.py +106 -75
- souleyez/importers/smart_importer.py +208 -147
- souleyez/integrations/siem/__init__.py +10 -10
- souleyez/integrations/siem/base.py +17 -18
- souleyez/integrations/siem/elastic.py +108 -122
- souleyez/integrations/siem/factory.py +207 -80
- souleyez/integrations/siem/googlesecops.py +146 -154
- souleyez/integrations/siem/rule_mappings/__init__.py +1 -1
- souleyez/integrations/siem/rule_mappings/wazuh_rules.py +8 -5
- souleyez/integrations/siem/sentinel.py +107 -109
- souleyez/integrations/siem/splunk.py +246 -212
- souleyez/integrations/siem/wazuh.py +65 -71
- souleyez/integrations/wazuh/__init__.py +5 -5
- souleyez/integrations/wazuh/client.py +70 -93
- souleyez/integrations/wazuh/config.py +85 -57
- souleyez/integrations/wazuh/host_mapper.py +28 -36
- souleyez/integrations/wazuh/sync.py +78 -68
- souleyez/intelligence/__init__.py +4 -5
- souleyez/intelligence/correlation_analyzer.py +309 -295
- souleyez/intelligence/exploit_knowledge.py +661 -623
- souleyez/intelligence/exploit_suggestions.py +159 -139
- souleyez/intelligence/gap_analyzer.py +132 -97
- souleyez/intelligence/gap_detector.py +251 -214
- souleyez/intelligence/sensitive_tables.py +266 -129
- souleyez/intelligence/service_parser.py +137 -123
- souleyez/intelligence/surface_analyzer.py +407 -268
- souleyez/intelligence/target_parser.py +159 -162
- souleyez/licensing/__init__.py +6 -6
- souleyez/licensing/validator.py +17 -19
- souleyez/log_config.py +79 -54
- souleyez/main.py +1505 -687
- souleyez/migrations/fix_job_counter.py +16 -14
- souleyez/parsers/bloodhound_parser.py +41 -39
- souleyez/parsers/crackmapexec_parser.py +178 -111
- souleyez/parsers/dalfox_parser.py +72 -77
- souleyez/parsers/dnsrecon_parser.py +103 -91
- souleyez/parsers/enum4linux_parser.py +183 -153
- souleyez/parsers/ffuf_parser.py +29 -25
- souleyez/parsers/gobuster_parser.py +301 -41
- souleyez/parsers/hashcat_parser.py +324 -79
- souleyez/parsers/http_fingerprint_parser.py +350 -103
- souleyez/parsers/hydra_parser.py +131 -111
- souleyez/parsers/impacket_parser.py +231 -178
- souleyez/parsers/john_parser.py +98 -86
- souleyez/parsers/katana_parser.py +316 -0
- souleyez/parsers/msf_parser.py +943 -498
- souleyez/parsers/nikto_parser.py +346 -65
- souleyez/parsers/nmap_parser.py +262 -174
- souleyez/parsers/nuclei_parser.py +40 -44
- souleyez/parsers/responder_parser.py +26 -26
- souleyez/parsers/searchsploit_parser.py +74 -74
- souleyez/parsers/service_explorer_parser.py +279 -0
- souleyez/parsers/smbmap_parser.py +180 -124
- souleyez/parsers/sqlmap_parser.py +434 -308
- souleyez/parsers/theharvester_parser.py +75 -57
- souleyez/parsers/whois_parser.py +135 -94
- souleyez/parsers/wpscan_parser.py +278 -190
- souleyez/plugins/afp.py +44 -36
- souleyez/plugins/afp_brute.py +114 -46
- souleyez/plugins/ard.py +48 -37
- souleyez/plugins/bloodhound.py +95 -61
- souleyez/plugins/certipy.py +303 -0
- souleyez/plugins/crackmapexec.py +186 -85
- souleyez/plugins/dalfox.py +120 -59
- souleyez/plugins/dns_hijack.py +146 -41
- souleyez/plugins/dnsrecon.py +97 -61
- souleyez/plugins/enum4linux.py +91 -66
- souleyez/plugins/evil_winrm.py +291 -0
- souleyez/plugins/ffuf.py +166 -90
- souleyez/plugins/firmware_extract.py +133 -29
- souleyez/plugins/gobuster.py +387 -190
- souleyez/plugins/gpp_extract.py +393 -0
- souleyez/plugins/hashcat.py +100 -73
- souleyez/plugins/http_fingerprint.py +913 -267
- souleyez/plugins/hydra.py +566 -200
- souleyez/plugins/impacket_getnpusers.py +117 -69
- souleyez/plugins/impacket_psexec.py +84 -64
- souleyez/plugins/impacket_secretsdump.py +103 -69
- souleyez/plugins/impacket_smbclient.py +89 -75
- souleyez/plugins/john.py +86 -69
- souleyez/plugins/katana.py +313 -0
- souleyez/plugins/kerbrute.py +237 -0
- souleyez/plugins/lfi_extract.py +541 -0
- souleyez/plugins/macos_ssh.py +117 -48
- souleyez/plugins/mdns.py +35 -30
- souleyez/plugins/msf_auxiliary.py +253 -130
- souleyez/plugins/msf_exploit.py +239 -161
- souleyez/plugins/nikto.py +134 -78
- souleyez/plugins/nmap.py +275 -91
- souleyez/plugins/nuclei.py +180 -89
- souleyez/plugins/nxc.py +285 -0
- souleyez/plugins/plugin_base.py +35 -36
- souleyez/plugins/plugin_template.py +13 -5
- souleyez/plugins/rdp_sec_check.py +130 -0
- souleyez/plugins/responder.py +112 -71
- souleyez/plugins/router_http_brute.py +76 -65
- souleyez/plugins/router_ssh_brute.py +118 -41
- souleyez/plugins/router_telnet_brute.py +124 -42
- souleyez/plugins/routersploit.py +91 -59
- souleyez/plugins/routersploit_exploit.py +77 -55
- souleyez/plugins/searchsploit.py +91 -77
- souleyez/plugins/service_explorer.py +1160 -0
- souleyez/plugins/smbmap.py +122 -72
- souleyez/plugins/smbpasswd.py +215 -0
- souleyez/plugins/sqlmap.py +301 -113
- souleyez/plugins/theharvester.py +127 -75
- souleyez/plugins/tr069.py +79 -57
- souleyez/plugins/upnp.py +65 -47
- souleyez/plugins/upnp_abuse.py +73 -55
- souleyez/plugins/vnc_access.py +129 -42
- souleyez/plugins/vnc_brute.py +109 -38
- souleyez/plugins/web_login_test.py +417 -0
- souleyez/plugins/whois.py +77 -58
- souleyez/plugins/wpscan.py +219 -69
- souleyez/reporting/__init__.py +2 -1
- souleyez/reporting/attack_chain.py +411 -346
- souleyez/reporting/charts.py +436 -501
- souleyez/reporting/compliance_mappings.py +334 -201
- souleyez/reporting/detection_report.py +126 -125
- souleyez/reporting/formatters.py +828 -591
- souleyez/reporting/generator.py +386 -302
- souleyez/reporting/metrics.py +72 -75
- souleyez/scanner.py +35 -29
- souleyez/security/__init__.py +37 -11
- souleyez/security/scope_validator.py +175 -106
- souleyez/security/validation.py +237 -149
- souleyez/security.py +22 -6
- souleyez/storage/credentials.py +247 -186
- souleyez/storage/crypto.py +296 -129
- souleyez/storage/database.py +73 -50
- souleyez/storage/db.py +58 -36
- souleyez/storage/deliverable_evidence.py +177 -128
- souleyez/storage/deliverable_exporter.py +282 -246
- souleyez/storage/deliverable_templates.py +134 -116
- souleyez/storage/deliverables.py +135 -130
- souleyez/storage/engagements.py +109 -56
- souleyez/storage/evidence.py +181 -152
- souleyez/storage/execution_log.py +31 -17
- souleyez/storage/exploit_attempts.py +93 -57
- souleyez/storage/exploits.py +67 -36
- souleyez/storage/findings.py +48 -61
- souleyez/storage/hosts.py +176 -144
- souleyez/storage/migrate_to_engagements.py +43 -19
- souleyez/storage/migrations/_001_add_credential_enhancements.py +22 -12
- souleyez/storage/migrations/_002_add_status_tracking.py +10 -7
- souleyez/storage/migrations/_003_add_execution_log.py +14 -8
- souleyez/storage/migrations/_005_screenshots.py +13 -5
- souleyez/storage/migrations/_006_deliverables.py +13 -5
- souleyez/storage/migrations/_007_deliverable_templates.py +12 -7
- souleyez/storage/migrations/_008_add_nuclei_table.py +10 -4
- souleyez/storage/migrations/_010_evidence_linking.py +17 -10
- souleyez/storage/migrations/_011_timeline_tracking.py +20 -13
- souleyez/storage/migrations/_012_team_collaboration.py +34 -21
- souleyez/storage/migrations/_013_add_host_tags.py +12 -6
- souleyez/storage/migrations/_014_exploit_attempts.py +22 -10
- souleyez/storage/migrations/_015_add_mac_os_fields.py +15 -7
- souleyez/storage/migrations/_016_add_domain_field.py +10 -4
- souleyez/storage/migrations/_017_msf_sessions.py +16 -8
- souleyez/storage/migrations/_018_add_osint_target.py +10 -6
- souleyez/storage/migrations/_019_add_engagement_type.py +10 -6
- souleyez/storage/migrations/_020_add_rbac.py +36 -15
- souleyez/storage/migrations/_021_wazuh_integration.py +20 -8
- souleyez/storage/migrations/_022_wazuh_indexer_columns.py +6 -4
- souleyez/storage/migrations/_023_fix_detection_results_fk.py +16 -6
- souleyez/storage/migrations/_024_wazuh_vulnerabilities.py +26 -10
- souleyez/storage/migrations/_025_multi_siem_support.py +3 -5
- souleyez/storage/migrations/_026_add_engagement_scope.py +31 -12
- souleyez/storage/migrations/_027_multi_siem_persistence.py +32 -15
- souleyez/storage/migrations/__init__.py +26 -26
- souleyez/storage/migrations/migration_manager.py +19 -19
- souleyez/storage/msf_sessions.py +100 -65
- souleyez/storage/osint.py +17 -24
- souleyez/storage/recommendation_engine.py +269 -235
- souleyez/storage/screenshots.py +33 -32
- souleyez/storage/smb_shares.py +136 -92
- souleyez/storage/sqlmap_data.py +183 -128
- souleyez/storage/team_collaboration.py +135 -141
- souleyez/storage/timeline_tracker.py +122 -94
- souleyez/storage/wazuh_vulns.py +64 -66
- souleyez/storage/web_paths.py +33 -37
- souleyez/testing/credential_tester.py +221 -205
- souleyez/ui/__init__.py +1 -1
- souleyez/ui/ai_quotes.py +12 -12
- souleyez/ui/attack_surface.py +2439 -1516
- souleyez/ui/chain_rules_view.py +914 -382
- souleyez/ui/correlation_view.py +312 -230
- souleyez/ui/dashboard.py +2382 -1130
- souleyez/ui/deliverables_view.py +148 -62
- souleyez/ui/design_system.py +13 -13
- souleyez/ui/errors.py +49 -49
- souleyez/ui/evidence_linking_view.py +284 -179
- souleyez/ui/evidence_vault.py +393 -285
- souleyez/ui/exploit_suggestions_view.py +555 -349
- souleyez/ui/export_view.py +100 -66
- souleyez/ui/gap_analysis_view.py +315 -171
- souleyez/ui/help_system.py +105 -97
- souleyez/ui/intelligence_view.py +436 -293
- souleyez/ui/interactive.py +23034 -10679
- souleyez/ui/interactive_selector.py +75 -68
- souleyez/ui/log_formatter.py +47 -39
- souleyez/ui/menu_components.py +22 -13
- souleyez/ui/msf_auxiliary_menu.py +184 -133
- souleyez/ui/pending_chains_view.py +336 -172
- souleyez/ui/progress_indicators.py +5 -3
- souleyez/ui/recommendations_view.py +195 -137
- souleyez/ui/rule_builder.py +343 -225
- souleyez/ui/setup_wizard.py +678 -284
- souleyez/ui/shortcuts.py +217 -165
- souleyez/ui/splunk_gap_analysis_view.py +452 -270
- souleyez/ui/splunk_vulns_view.py +139 -86
- souleyez/ui/team_dashboard.py +498 -335
- souleyez/ui/template_selector.py +196 -105
- souleyez/ui/terminal.py +6 -6
- souleyez/ui/timeline_view.py +198 -127
- souleyez/ui/tool_setup.py +264 -164
- souleyez/ui/tutorial.py +202 -72
- souleyez/ui/tutorial_state.py +40 -40
- souleyez/ui/wazuh_vulns_view.py +235 -141
- souleyez/ui/wordlist_browser.py +260 -107
- souleyez/ui.py +464 -312
- souleyez/utils/tool_checker.py +427 -367
- souleyez/utils.py +33 -29
- souleyez/wordlists.py +134 -167
- {souleyez-2.43.29.dist-info → souleyez-3.0.0.dist-info}/METADATA +2 -2
- souleyez-3.0.0.dist-info/RECORD +443 -0
- {souleyez-2.43.29.dist-info → souleyez-3.0.0.dist-info}/WHEEL +1 -1
- souleyez-2.43.29.dist-info/RECORD +0 -379
- {souleyez-2.43.29.dist-info → souleyez-3.0.0.dist-info}/entry_points.txt +0 -0
- {souleyez-2.43.29.dist-info → souleyez-3.0.0.dist-info}/licenses/LICENSE +0 -0
- {souleyez-2.43.29.dist-info → souleyez-3.0.0.dist-info}/top_level.txt +0 -0
souleyez/ai/executor.py
CHANGED
|
@@ -19,11 +19,16 @@ logger = logging.getLogger(__name__)
|
|
|
19
19
|
class InteractiveExecutor:
|
|
20
20
|
"""
|
|
21
21
|
Interactive executor for AI-driven penetration testing.
|
|
22
|
-
|
|
22
|
+
|
|
23
23
|
Loop: Recommend → Map → Approve → Execute → Parse → Feedback → Repeat
|
|
24
24
|
"""
|
|
25
25
|
|
|
26
|
-
def __init__(
|
|
26
|
+
def __init__(
|
|
27
|
+
self,
|
|
28
|
+
approval_mode: ApprovalMode = ApprovalMode.MANUAL,
|
|
29
|
+
target_host_ids: Optional[list] = None,
|
|
30
|
+
provider=None,
|
|
31
|
+
):
|
|
27
32
|
"""
|
|
28
33
|
Initialize executor.
|
|
29
34
|
|
|
@@ -45,189 +50,225 @@ class InteractiveExecutor:
|
|
|
45
50
|
self,
|
|
46
51
|
engagement_id: int,
|
|
47
52
|
max_iterations: Optional[int] = None,
|
|
48
|
-
once: bool = False
|
|
53
|
+
once: bool = False,
|
|
49
54
|
) -> Dict[str, Any]:
|
|
50
55
|
"""
|
|
51
56
|
Run interactive execution loop.
|
|
52
|
-
|
|
57
|
+
|
|
53
58
|
Args:
|
|
54
59
|
engagement_id: Engagement to work on
|
|
55
60
|
max_iterations: Max number of iterations (None = infinite)
|
|
56
61
|
once: Run only one iteration then stop
|
|
57
|
-
|
|
62
|
+
|
|
58
63
|
Returns:
|
|
59
64
|
Dict with execution summary
|
|
60
65
|
"""
|
|
61
66
|
summary = {
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
67
|
+
"iterations": 0,
|
|
68
|
+
"commands_executed": 0,
|
|
69
|
+
"commands_skipped": 0,
|
|
70
|
+
"successes": 0,
|
|
71
|
+
"failures": 0,
|
|
72
|
+
"aborted": False,
|
|
68
73
|
}
|
|
69
|
-
|
|
74
|
+
|
|
70
75
|
click.echo("\n" + "=" * 70)
|
|
71
|
-
click.echo(click.style("AI INTERACTIVE EXECUTOR", fg=
|
|
76
|
+
click.echo(click.style("AI INTERACTIVE EXECUTOR", fg="cyan", bold=True))
|
|
72
77
|
click.echo("=" * 70)
|
|
73
|
-
|
|
78
|
+
|
|
74
79
|
if self.approval_mode == ApprovalMode.DRY_RUN:
|
|
75
|
-
click.echo(
|
|
80
|
+
click.echo(
|
|
81
|
+
click.style("🔍 DRY-RUN MODE", fg="yellow", bold=True)
|
|
82
|
+
+ " - Commands will not be executed"
|
|
83
|
+
)
|
|
76
84
|
elif self.approval_mode == ApprovalMode.AUTO_LOW:
|
|
77
|
-
click.echo(
|
|
85
|
+
click.echo(
|
|
86
|
+
click.style("⚡ AUTO-LOW MODE", fg="green")
|
|
87
|
+
+ " - LOW risk commands auto-approved"
|
|
88
|
+
)
|
|
78
89
|
elif self.approval_mode == ApprovalMode.AUTO_MEDIUM:
|
|
79
|
-
click.echo(
|
|
90
|
+
click.echo(
|
|
91
|
+
click.style("⚡ AUTO-MEDIUM MODE", fg="yellow")
|
|
92
|
+
+ " - LOW/MEDIUM risk commands auto-approved"
|
|
93
|
+
)
|
|
80
94
|
else:
|
|
81
|
-
click.echo(
|
|
82
|
-
|
|
95
|
+
click.echo(
|
|
96
|
+
click.style("👤 MANUAL MODE", fg="blue")
|
|
97
|
+
+ " - All commands require approval"
|
|
98
|
+
)
|
|
99
|
+
|
|
83
100
|
click.echo("=" * 70 + "\n")
|
|
84
|
-
|
|
101
|
+
|
|
85
102
|
iteration = 0
|
|
86
103
|
while True:
|
|
87
104
|
iteration += 1
|
|
88
|
-
summary[
|
|
89
|
-
|
|
105
|
+
summary["iterations"] = iteration
|
|
106
|
+
|
|
90
107
|
# Check iteration limit
|
|
91
108
|
if max_iterations and iteration > max_iterations:
|
|
92
109
|
click.echo(f"\n✓ Reached iteration limit ({max_iterations})")
|
|
93
110
|
break
|
|
94
|
-
|
|
111
|
+
|
|
95
112
|
click.echo(f"\n{'─' * 70}")
|
|
96
|
-
click.echo(click.style(f"ITERATION {iteration}", fg=
|
|
113
|
+
click.echo(click.style(f"ITERATION {iteration}", fg="cyan", bold=True))
|
|
97
114
|
click.echo(f"{'─' * 70}\n")
|
|
98
|
-
|
|
115
|
+
|
|
99
116
|
try:
|
|
100
117
|
# Step 1: Get AI recommendation
|
|
101
118
|
click.echo("🤖 Getting AI recommendation...")
|
|
102
|
-
recommendation = self.recommender.suggest_next_step(
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
119
|
+
recommendation = self.recommender.suggest_next_step(
|
|
120
|
+
engagement_id, target_host_ids=self.target_host_ids
|
|
121
|
+
)
|
|
122
|
+
|
|
123
|
+
if recommendation.get("error"):
|
|
124
|
+
click.echo(
|
|
125
|
+
click.style(f"✗ Error: {recommendation['error']}", fg="red")
|
|
126
|
+
)
|
|
106
127
|
break
|
|
107
|
-
|
|
128
|
+
|
|
108
129
|
# Display recommendation
|
|
109
130
|
self._display_recommendation(recommendation)
|
|
110
|
-
|
|
131
|
+
|
|
111
132
|
# Step 2: Map to command
|
|
112
133
|
click.echo("\n🔧 Mapping to command...")
|
|
113
134
|
command = self.mapper.map_to_command(recommendation, engagement_id)
|
|
114
|
-
|
|
135
|
+
|
|
115
136
|
if not command:
|
|
116
|
-
click.echo(
|
|
117
|
-
|
|
118
|
-
|
|
137
|
+
click.echo(
|
|
138
|
+
click.style(
|
|
139
|
+
"⚠ Could not map recommendation to command - skipping",
|
|
140
|
+
fg="yellow",
|
|
141
|
+
)
|
|
142
|
+
)
|
|
143
|
+
summary["commands_skipped"] += 1
|
|
144
|
+
|
|
119
145
|
if once:
|
|
120
146
|
break
|
|
121
147
|
continue
|
|
122
|
-
|
|
123
|
-
click.echo(click.style(f"Command: {command}", fg=
|
|
124
|
-
|
|
148
|
+
|
|
149
|
+
click.echo(click.style(f"Command: {command}", fg="cyan"))
|
|
150
|
+
|
|
125
151
|
# Step 3: Risk assessment
|
|
126
|
-
action = recommendation.get(
|
|
152
|
+
action = recommendation.get("action", "")
|
|
127
153
|
risk_level = self.safety.assess_risk(action, command)
|
|
128
|
-
|
|
154
|
+
|
|
129
155
|
# Step 4: Get approval
|
|
130
156
|
try:
|
|
131
157
|
approved = self.safety.require_approval(
|
|
132
158
|
action=action,
|
|
133
|
-
target=recommendation.get(
|
|
159
|
+
target=recommendation.get("target", ""),
|
|
134
160
|
command=command,
|
|
135
|
-
risk_level=risk_level
|
|
161
|
+
risk_level=risk_level,
|
|
136
162
|
)
|
|
137
163
|
except KeyboardInterrupt:
|
|
138
|
-
summary[
|
|
139
|
-
click.echo(
|
|
164
|
+
summary["aborted"] = True
|
|
165
|
+
click.echo(
|
|
166
|
+
click.style("\n\n🛑 Execution aborted by user", fg="red")
|
|
167
|
+
)
|
|
140
168
|
break
|
|
141
|
-
|
|
169
|
+
|
|
142
170
|
if not approved:
|
|
143
|
-
summary[
|
|
171
|
+
summary["commands_skipped"] += 1
|
|
144
172
|
if once:
|
|
145
173
|
break
|
|
146
174
|
continue
|
|
147
|
-
|
|
175
|
+
|
|
148
176
|
# Step 5: Execute (if not dry-run)
|
|
149
177
|
if self.approval_mode == ApprovalMode.DRY_RUN:
|
|
150
|
-
click.echo(
|
|
151
|
-
|
|
178
|
+
click.echo(
|
|
179
|
+
click.style(
|
|
180
|
+
"\n[DRY-RUN] Skipping actual execution\n", fg="yellow"
|
|
181
|
+
)
|
|
182
|
+
)
|
|
183
|
+
summary["commands_skipped"] += 1
|
|
152
184
|
if once:
|
|
153
185
|
break
|
|
154
186
|
continue
|
|
155
|
-
|
|
187
|
+
|
|
156
188
|
# Log execution start
|
|
157
189
|
exec_id = self.exec_log.log_execution(
|
|
158
190
|
engagement_id=engagement_id,
|
|
159
191
|
action=action,
|
|
160
192
|
command=command,
|
|
161
193
|
risk_level=risk_level.value,
|
|
162
|
-
auto_approved=(
|
|
163
|
-
|
|
194
|
+
auto_approved=(
|
|
195
|
+
risk_level == RiskLevel.LOW
|
|
196
|
+
and self.approval_mode
|
|
197
|
+
in [ApprovalMode.AUTO_LOW, ApprovalMode.AUTO_MEDIUM]
|
|
198
|
+
),
|
|
164
199
|
)
|
|
165
|
-
|
|
166
|
-
click.echo(click.style("\n⚡ Executing...", fg=
|
|
167
|
-
|
|
200
|
+
|
|
201
|
+
click.echo(click.style("\n⚡ Executing...", fg="green", bold=True))
|
|
202
|
+
|
|
168
203
|
# Execute command
|
|
169
204
|
result = self._execute_command(command)
|
|
170
|
-
summary[
|
|
171
|
-
|
|
205
|
+
summary["commands_executed"] += 1
|
|
206
|
+
|
|
172
207
|
# Step 6: Parse result
|
|
173
208
|
click.echo("\n📊 Parsing result...")
|
|
174
209
|
parsed = self.parser.parse_result(
|
|
175
210
|
command=command,
|
|
176
|
-
stdout=result[
|
|
177
|
-
stderr=result[
|
|
178
|
-
exit_code=result[
|
|
211
|
+
stdout=result["stdout"],
|
|
212
|
+
stderr=result["stderr"],
|
|
213
|
+
exit_code=result["exit_code"],
|
|
179
214
|
)
|
|
180
|
-
|
|
181
|
-
success = parsed.get(
|
|
215
|
+
|
|
216
|
+
success = parsed.get("success", False)
|
|
182
217
|
if success:
|
|
183
|
-
summary[
|
|
184
|
-
click.echo(
|
|
218
|
+
summary["successes"] += 1
|
|
219
|
+
click.echo(
|
|
220
|
+
click.style(f"✓ {parsed.get('details', 'Success')}", fg="green")
|
|
221
|
+
)
|
|
185
222
|
else:
|
|
186
|
-
summary[
|
|
187
|
-
click.echo(
|
|
188
|
-
|
|
223
|
+
summary["failures"] += 1
|
|
224
|
+
click.echo(
|
|
225
|
+
click.style(f"✗ {parsed.get('details', 'Failed')}", fg="red")
|
|
226
|
+
)
|
|
227
|
+
|
|
189
228
|
# Step 7: Apply feedback
|
|
190
229
|
click.echo("\n🔄 Applying feedback to database...")
|
|
191
230
|
feedback_applied = self.feedback.apply_feedback(
|
|
192
231
|
engagement_id=engagement_id,
|
|
193
232
|
parsed_result=parsed,
|
|
194
233
|
recommendation=recommendation,
|
|
195
|
-
command=command
|
|
234
|
+
command=command,
|
|
196
235
|
)
|
|
197
|
-
|
|
236
|
+
|
|
198
237
|
# Display feedback
|
|
199
238
|
self._display_feedback(feedback_applied)
|
|
200
|
-
|
|
239
|
+
|
|
201
240
|
# Update execution log
|
|
202
241
|
self.exec_log.update_result(
|
|
203
242
|
execution_id=exec_id,
|
|
204
|
-
exit_code=result[
|
|
205
|
-
stdout=result[
|
|
206
|
-
stderr=result[
|
|
243
|
+
exit_code=result["exit_code"],
|
|
244
|
+
stdout=result["stdout"],
|
|
245
|
+
stderr=result["stderr"],
|
|
207
246
|
success=success,
|
|
208
|
-
feedback_applied=feedback_applied
|
|
247
|
+
feedback_applied=feedback_applied,
|
|
209
248
|
)
|
|
210
|
-
|
|
249
|
+
|
|
211
250
|
# Stop if once flag is set
|
|
212
251
|
if once:
|
|
213
|
-
click.echo(click.style("\n✓ Single iteration complete", fg=
|
|
252
|
+
click.echo(click.style("\n✓ Single iteration complete", fg="green"))
|
|
214
253
|
break
|
|
215
|
-
|
|
254
|
+
|
|
216
255
|
except KeyboardInterrupt:
|
|
217
|
-
summary[
|
|
218
|
-
click.echo(
|
|
256
|
+
summary["aborted"] = True
|
|
257
|
+
click.echo(
|
|
258
|
+
click.style("\n\n🛑 Execution interrupted by user", fg="red")
|
|
259
|
+
)
|
|
219
260
|
break
|
|
220
261
|
except Exception as e:
|
|
221
262
|
logger.exception("Error during execution loop")
|
|
222
|
-
click.echo(click.style(f"\n✗ Error: {e}", fg=
|
|
223
|
-
summary[
|
|
224
|
-
|
|
263
|
+
click.echo(click.style(f"\n✗ Error: {e}", fg="red"))
|
|
264
|
+
summary["failures"] += 1
|
|
265
|
+
|
|
225
266
|
if once:
|
|
226
267
|
break
|
|
227
|
-
|
|
268
|
+
|
|
228
269
|
# Display summary
|
|
229
270
|
self._display_summary(summary)
|
|
230
|
-
|
|
271
|
+
|
|
231
272
|
return summary
|
|
232
273
|
|
|
233
274
|
def _execute_command(self, command: str) -> Dict[str, Any]:
|
|
@@ -238,53 +279,49 @@ class InteractiveExecutor:
|
|
|
238
279
|
shell=True, # nosec B602 - intentional for security tool command execution
|
|
239
280
|
capture_output=True,
|
|
240
281
|
text=True,
|
|
241
|
-
timeout=60
|
|
282
|
+
timeout=60,
|
|
242
283
|
)
|
|
243
|
-
|
|
284
|
+
|
|
244
285
|
return {
|
|
245
|
-
|
|
246
|
-
|
|
247
|
-
|
|
286
|
+
"exit_code": result.returncode,
|
|
287
|
+
"stdout": result.stdout,
|
|
288
|
+
"stderr": result.stderr,
|
|
248
289
|
}
|
|
249
290
|
except subprocess.TimeoutExpired:
|
|
250
291
|
return {
|
|
251
|
-
|
|
252
|
-
|
|
253
|
-
|
|
292
|
+
"exit_code": -1,
|
|
293
|
+
"stdout": "",
|
|
294
|
+
"stderr": "Command timed out after 60 seconds",
|
|
254
295
|
}
|
|
255
296
|
except Exception as e:
|
|
256
|
-
return {
|
|
257
|
-
'exit_code': -1,
|
|
258
|
-
'stdout': '',
|
|
259
|
-
'stderr': str(e)
|
|
260
|
-
}
|
|
297
|
+
return {"exit_code": -1, "stdout": "", "stderr": str(e)}
|
|
261
298
|
|
|
262
299
|
def _display_recommendation(self, rec: Dict[str, Any]):
|
|
263
300
|
"""Display AI recommendation."""
|
|
264
|
-
click.echo(click.style("\n📋 AI RECOMMENDATION:", fg=
|
|
301
|
+
click.echo(click.style("\n📋 AI RECOMMENDATION:", fg="cyan", bold=True))
|
|
265
302
|
click.echo(f" Action: {rec.get('action', 'N/A')}")
|
|
266
303
|
click.echo(f" Target: {rec.get('target', 'N/A')}")
|
|
267
304
|
click.echo(f" Rationale: {rec.get('rationale', 'N/A')}")
|
|
268
|
-
|
|
269
|
-
risk = rec.get(
|
|
270
|
-
risk_colors = {
|
|
305
|
+
|
|
306
|
+
risk = rec.get("risk_level", "unknown").upper()
|
|
307
|
+
risk_colors = {"LOW": "green", "MEDIUM": "yellow", "HIGH": "red"}
|
|
271
308
|
click.echo(f" Risk: {click.style(risk, fg=risk_colors.get(risk, 'white'))}")
|
|
272
309
|
|
|
273
310
|
def _display_feedback(self, feedback: Dict[str, Any]):
|
|
274
311
|
"""Display feedback results."""
|
|
275
312
|
updates = []
|
|
276
|
-
|
|
277
|
-
if feedback.get(
|
|
313
|
+
|
|
314
|
+
if feedback.get("hosts_updated", 0) > 0:
|
|
278
315
|
updates.append(f"{feedback['hosts_updated']} host(s)")
|
|
279
|
-
if feedback.get(
|
|
316
|
+
if feedback.get("credentials_updated", 0) > 0:
|
|
280
317
|
updates.append(f"{feedback['credentials_updated']} credential(s)")
|
|
281
|
-
if feedback.get(
|
|
318
|
+
if feedback.get("services_added", 0) > 0:
|
|
282
319
|
updates.append(f"{feedback['services_added']} service(s)")
|
|
283
|
-
|
|
320
|
+
|
|
284
321
|
if updates:
|
|
285
|
-
click.echo(click.style(f" Updated: {', '.join(updates)}", fg=
|
|
286
|
-
|
|
287
|
-
for note in feedback.get(
|
|
322
|
+
click.echo(click.style(f" Updated: {', '.join(updates)}", fg="green"))
|
|
323
|
+
|
|
324
|
+
for note in feedback.get("notes_added", []):
|
|
288
325
|
click.echo(f" • {note}")
|
|
289
326
|
else:
|
|
290
327
|
click.echo(" No database updates")
|
|
@@ -292,17 +329,21 @@ class InteractiveExecutor:
|
|
|
292
329
|
def _display_summary(self, summary: Dict[str, Any]):
|
|
293
330
|
"""Display execution summary."""
|
|
294
331
|
click.echo("\n" + "=" * 70)
|
|
295
|
-
click.echo(click.style("EXECUTION SUMMARY", fg=
|
|
332
|
+
click.echo(click.style("EXECUTION SUMMARY", fg="cyan", bold=True))
|
|
296
333
|
click.echo("=" * 70)
|
|
297
334
|
click.echo(f"Iterations: {summary['iterations']}")
|
|
298
335
|
click.echo(f"Commands executed: {summary['commands_executed']}")
|
|
299
336
|
click.echo(f"Commands skipped: {summary['commands_skipped']}")
|
|
300
|
-
click.echo(
|
|
301
|
-
|
|
302
|
-
|
|
303
|
-
|
|
304
|
-
click.
|
|
337
|
+
click.echo(
|
|
338
|
+
f"Successes: {click.style(str(summary['successes']), fg='green')}"
|
|
339
|
+
)
|
|
340
|
+
click.echo(
|
|
341
|
+
f"Failures: {click.style(str(summary['failures']), fg='red')}"
|
|
342
|
+
)
|
|
343
|
+
|
|
344
|
+
if summary["aborted"]:
|
|
345
|
+
click.echo(click.style("\nStatus: Aborted by user", fg="yellow"))
|
|
305
346
|
else:
|
|
306
|
-
click.echo(click.style("\nStatus: Complete", fg=
|
|
307
|
-
|
|
347
|
+
click.echo(click.style("\nStatus: Complete", fg="green"))
|
|
348
|
+
|
|
308
349
|
click.echo("=" * 70 + "\n")
|