souleyez 2.8.0__tar.gz → 2.37.0__tar.gz

{souleyez-2.8.0 → souleyez-2.37.0}/BETA_README.md

@@ -1,5 +1,11 @@
 # SoulEyez Beta Program
 
+[![CI](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml/badge.svg)](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml)
+[![codecov](https://codecov.io/gh/cyber-soul-security/souleyez/branch/main/graph/badge.svg)](https://codecov.io/gh/cyber-soul-security/souleyez)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)
+[![Security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
+
 Welcome to the SoulEyez beta! Thank you for helping us test and improve this penetration testing management platform.
 
 ---
@@ -21,7 +27,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.8.0
+## Version: 2.37.0
 
 ### What's Included
 
@@ -59,6 +65,17 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 - **Python**: 3.8 or newer
 - **Storage**: ~500MB for SoulEyez + tools
 
+> **🐉 Kali Linux Recommended**
+>
+> SoulEyez performs significantly better on **Kali Linux** than other distributions:
+> - All pentesting tools pre-installed and optimized
+> - Metasploit database and RPC already configured
+> - Security-focused kernel and networking stack
+> - No dependency hunting or version conflicts
+> - Wordlists, databases, and tool configs ready to go
+>
+> While Ubuntu and other Debian-based distros are supported, you may experience slower setup times and occasional tool compatibility issues.
+
 ### Known Issues
 
 - Very large scan outputs (>10MB) may slow the interface
@@ -76,6 +93,8 @@ pipx ensurepath          # Add pipx apps to your PATH
 source ~/.bashrc         # Reload your shell (or close and reopen terminal)
 ```
 
+> **Kali Linux users:** Kali uses zsh by default. Use `source ~/.zshrc` instead of `source ~/.bashrc`
+
 > 💡 **What's pipx?** It's like `apt` but for Python command-line tools. It keeps each tool isolated so they don't conflict with each other.
 
 ### Step 2: Install SoulEyez
@@ -246,4 +265,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.8.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.37.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.8.0/souleyez.egg-info → souleyez-2.37.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: souleyez
-Version: 2.8.0
+Version: 2.37.0
 Summary: AI-Powered Penetration Testing Platform with 40+ integrated tools
 Author-email: CyberSoul Security <contact@cybersoulsecurity.com>
 Maintainer-email: CyberSoul Security <contact@cybersoulsecurity.com>
@@ -51,6 +51,12 @@ Dynamic: license-file
 
 # SoulEyez Beta Program
 
+[![CI](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml/badge.svg)](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml)
+[![codecov](https://codecov.io/gh/cyber-soul-security/souleyez/branch/main/graph/badge.svg)](https://codecov.io/gh/cyber-soul-security/souleyez)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)
+[![Security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
+
 Welcome to the SoulEyez beta! Thank you for helping us test and improve this penetration testing management platform.
 
 ---
@@ -72,7 +78,7 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 
 > ⚠️ **Important**: Only use SoulEyez on systems you have explicit authorization to test.
 
-## Version: 2.8.0
+## Version: 2.37.0
 
 ### What's Included
 
@@ -110,6 +116,17 @@ Welcome to the SoulEyez beta! Thank you for helping us test and improve this pen
 - **Python**: 3.8 or newer
 - **Storage**: ~500MB for SoulEyez + tools
 
+> **🐉 Kali Linux Recommended**
+>
+> SoulEyez performs significantly better on **Kali Linux** than other distributions:
+> - All pentesting tools pre-installed and optimized
+> - Metasploit database and RPC already configured
+> - Security-focused kernel and networking stack
+> - No dependency hunting or version conflicts
+> - Wordlists, databases, and tool configs ready to go
+>
+> While Ubuntu and other Debian-based distros are supported, you may experience slower setup times and occasional tool compatibility issues.
+
 ### Known Issues
 
 - Very large scan outputs (>10MB) may slow the interface
@@ -127,6 +144,8 @@ pipx ensurepath          # Add pipx apps to your PATH
 source ~/.bashrc         # Reload your shell (or close and reopen terminal)
 ```
 
+> **Kali Linux users:** Kali uses zsh by default. Use `source ~/.zshrc` instead of `source ~/.bashrc`
+
 > 💡 **What's pipx?** It's like `apt` but for Python command-line tools. It keeps each tool isolated so they don't conflict with each other.
 
 ### Step 2: Install SoulEyez
@@ -297,4 +316,4 @@ Happy hacking! 🛡️
 
 ---
 
-**Version**: 2.8.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security
+**Version**: 2.37.0 | **Release Date**: January 2026 | **Maintainer**: CyberSoul Security

{souleyez-2.8.0 → souleyez-2.37.0}/README.md

@@ -1,5 +1,11 @@
 # SoulEyez — AI-Powered Penetration Testing Platform
 
+[![CI](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml/badge.svg)](https://github.com/cyber-soul-security/souleyez/actions/workflows/python-ci.yml)
+[![codecov](https://codecov.io/gh/cyber-soul-security/souleyez/branch/main/graph/badge.svg)](https://codecov.io/gh/cyber-soul-security/souleyez)
+[![Python 3.9+](https://img.shields.io/badge/python-3.9+-blue.svg)](https://www.python.org/downloads/)
+[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)
+[![Security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
+
 **LEGAL NOTICE — Use Responsibly**
 Only use SoulEyez on systems you own or have explicit written permission to test.
 Unauthorized scanning or exploitation is illegal. The authors are not responsible for misuse.
@@ -133,7 +139,7 @@ See [docs/CONFIG.md](souleyez/docs/CONFIG.md) for complete configuration options
 # Install pipx if needed
 sudo apt install pipx
 pipx ensurepath
-source ~/.bashrc
+source ~/.bashrc    # Kali Linux: use 'source ~/.zshrc' instead
 
 # Install SoulEyez
 pipx install souleyez
@@ -142,6 +148,8 @@ pipx install souleyez
 souleyez setup
 ```
 
+> **Kali Linux users:** Kali uses zsh by default. Use `source ~/.zshrc` instead of `source ~/.bashrc`
+
 See [docs/user-guide/installation.md](souleyez/docs/user-guide/installation.md) for detailed instructions.
 
 ---

{souleyez-2.8.0 → souleyez-2.37.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "souleyez"
-version = "2.8.0"
+version = "2.37.0"
 description = "AI-Powered Penetration Testing Platform with 40+ integrated tools"
 readme = "BETA_README.md"
 license = {text = "MIT"}
@@ -71,7 +71,7 @@ include = ["souleyez*"]
 exclude = ["tests*", "scripts*", "reports*", "venv*", "debian*"]
 
 [tool.setuptools.package-data]
-souleyez = ["docs/**/*.md", "data/wordlists/*.txt", "data/wordlists/*.md", "data/templates/*.json", "data/templates/*.md"]
+souleyez = ["docs/**/*.md", "data/wordlists/*.txt", "data/wordlists/*.md", "data/templates/*.json", "data/templates/*.md", "assets/*.png"]
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

souleyez-2.37.0/souleyez/__init__.py

@@ -0,0 +1,2 @@
+__version__ = '2.37.0'
+

souleyez-2.37.0/souleyez/assets/__init__.py

@@ -0,0 +1 @@
+# SoulEyez assets package

{souleyez-2.8.0 → souleyez-2.37.0}/souleyez/core/msf_auto_mapper.py

@@ -49,8 +49,9 @@ class MSFAutoMapper:
                         risk_levels=['safe', 'noisy', 'moderate', 'dangerous']
                     )
 
-                    # Filter to top 10 recommendations
-                    service_map[service_id] = recommendations[:10]
+                    # Only store services with actual recommendations
+                    if recommendations:
+                        service_map[service_id] = recommendations[:10]
 
             return service_map
         except Exception as e:

{souleyez-2.8.0 → souleyez-2.37.0}/souleyez/core/msf_database.py

@@ -80,7 +80,8 @@ class MSFDatabase:
                 port=self.port,
                 database=self.database,
                 user=self.username,
-                password=self.password
+                password=self.password,
+                connect_timeout=10  # Prevent hanging on unreachable database
             )
 
             # Get workspace ID

{souleyez-2.8.0 → souleyez-2.37.0}/souleyez/core/msf_rpc_client.py

@@ -112,7 +112,7 @@ class MSFRPCClient:
                 data=request_data,
                 headers=self.headers,
                 verify=False,  # nosec B501 - Metasploit RPC uses self-signed certs
-                timeout=30  # Prevent hanging connections
+                timeout=(5, 30)  # (connect_timeout, read_timeout) - fast fail on SSL mismatch
             )
             response.raise_for_status()
 

{souleyez-2.8.0 → souleyez-2.37.0}/souleyez/core/msf_rpc_manager.py

@@ -11,6 +11,7 @@ This is a Pro-only feature. Free users fall back to msfconsole subprocess execut
 """
 
 import logging
+import os
 import time
 import subprocess
 import shutil
@@ -34,8 +35,81 @@ def is_pro_enabled() -> bool:
         return False
 
 
+# Session file for sharing decrypted msfrpc password with background worker
+# This file is written when vault is unlocked and cleared on logout
+_SESSION_FILE = os.path.join(os.path.expanduser('~'), '.souleyez', '.msfrpc_session')
+
+
+def write_msfrpc_session(password: str) -> bool:
+    """
+    Write decrypted msfrpc password to session file.
+
+    Called by the dashboard when vault is unlocked to allow
+    the background worker (separate process) to access RPC.
+
+    The file is created with restrictive permissions (600).
+    """
+    try:
+        import stat
+        session_dir = os.path.dirname(_SESSION_FILE)
+        os.makedirs(session_dir, exist_ok=True)
+
+        # Write with secure permissions
+        with open(_SESSION_FILE, 'w') as f:
+            f.write(password)
+        os.chmod(_SESSION_FILE, stat.S_IRUSR | stat.S_IWUSR)  # 600
+
+        logger.debug("MSF RPC session file written")
+        return True
+    except Exception as e:
+        logger.debug(f"Failed to write msfrpc session: {e}")
+        return False
+
+
+def clear_msfrpc_session() -> bool:
+    """
+    Clear the msfrpc session file.
+
+    Called on logout or dashboard exit to clean up credentials.
+    """
+    try:
+        if os.path.exists(_SESSION_FILE):
+            os.remove(_SESSION_FILE)
+            logger.debug("MSF RPC session file cleared")
+        return True
+    except Exception as e:
+        logger.debug(f"Failed to clear msfrpc session: {e}")
+        return False
+
+
+def _read_msfrpc_session() -> Optional[str]:
+    """Read password from session file if it exists."""
+    try:
+        if os.path.exists(_SESSION_FILE):
+            with open(_SESSION_FILE, 'r') as f:
+                password = f.read().strip()
+            if password:
+                return password
+    except Exception:
+        pass
+    return None
+
+
 def get_msfrpc_password() -> Optional[str]:
-    """Get decrypted msfrpc password from config."""
+    """
+    Get msfrpc password for authentication.
+
+    Priority order:
+    1. Session file (written by dashboard when vault is unlocked)
+    2. Decrypt from config (if vault is unlocked in current process)
+    3. Return None (vault locked, no session file)
+    """
+    # First check session file (allows background worker to authenticate)
+    session_password = _read_msfrpc_session()
+    if session_password:
+        return session_password
+
+    # Fall back to decryption (works if vault is unlocked in this process)
     try:
         from souleyez.storage.crypto import get_crypto_manager
         encrypted = config.get('msfrpc.password')
@@ -257,10 +331,8 @@ class MSFRPCManager:
         ssl = config.get('msfrpc.ssl', False)
 
         cmd = f"msfrpcd -U {username} -P {password} -a {host} -p {port}"
-        if ssl:
-            cmd += " -S"
-        else:
-            cmd += " -n"  # No SSL
+        if not ssl:
+            cmd += " -S"  # -S flag DISABLES SSL
 
         return cmd
 
@@ -322,10 +394,8 @@ class MSFRPCManager:
                 '-a', host,
                 '-p', str(port)
             ]
-            if ssl:
-                cmd.append('-S')
-            else:
-                cmd.append('-n')
+            if not ssl:
+                cmd.append('-S')  # -S flag DISABLES SSL
 
             # Start in background
             proc = subprocess.Popen(

{souleyez-2.8.0 → souleyez-2.37.0}/souleyez/core/msf_sync_manager.py

@@ -29,15 +29,25 @@ logger = logging.getLogger(__name__)
 
 def get_msf_database_config() -> Optional[Dict[str, Any]]:
     """
-    Get MSF database configuration from ~/.msf4/database.yml
+    Get MSF database configuration from ~/.msf4/database.yml or system-wide config.
+
+    Checks user config first, then falls back to system-wide config (Kali Linux).
 
     Returns:
         Dictionary with database config or None if not found/parseable
     """
-    db_yml_path = Path.home() / ".msf4" / "database.yml"
-
-    if not db_yml_path.exists():
-        logger.debug(f"MSF database.yml not found at {db_yml_path}")
+    # Check user config first, then system-wide config (Kali uses system-wide)
+    user_db_path = Path.home() / ".msf4" / "database.yml"
+    system_db_path = Path('/usr/share/metasploit-framework/config/database.yml')
+
+    db_yml_path = None
+    if user_db_path.exists():
+        db_yml_path = user_db_path
+    elif system_db_path.exists():
+        db_yml_path = system_db_path
+
+    if not db_yml_path:
+        logger.debug("MSF database.yml not found in user or system config")
         return None
 
     try: