souleyez 3.0.0__py3-none-any.whl → 3.0.7__py3-none-any.whl

souleyez/handlers/nikto_handler.py

@@ -4,6 +4,7 @@ Nikto handler.
 
 Consolidates parsing and display logic for nikto web scanner jobs.
 """
+
 import logging
 import os
 import re
@@ -45,8 +46,8 @@ class NiktoHandler(BaseToolHandler):
         Extracts web server issues and stores them as findings.
         """
         try:
-            from souleyez.parsers.nikto_parser import parse_nikto_output
             from souleyez.engine.result_handler import detect_tool_error
+            from souleyez.parsers.nikto_parser import parse_nikto_output
 
             # Import managers if not provided
             if host_manager is None:

souleyez/handlers/nmap_handler.py

@@ -4,6 +4,7 @@ Nmap handler.
 
 Consolidates parsing and display logic for nmap and ARD (which uses nmap) jobs.
 """
+
 import logging
 import os
 import re
@@ -70,9 +71,9 @@ class NmapHandler(BaseToolHandler):
         Imports hosts/services into database and creates findings for CVEs.
         """
         try:
-            from souleyez.parsers.nmap_parser import parse_nmap_log
             from souleyez.core.cve_matcher import CVEMatcher
             from souleyez.engine.result_handler import detect_tool_error
+            from souleyez.parsers.nmap_parser import parse_nmap_log
 
             # Import managers if not provided
             if host_manager is None:

souleyez/handlers/nuclei_handler.py

@@ -4,6 +4,7 @@ Nuclei handler.
 
 Consolidates parsing and display logic for nuclei vulnerability scanning jobs.
 """
+
 import logging
 import os
 import re
@@ -48,8 +49,8 @@ class NucleiHandler(BaseToolHandler):
         Extracts vulnerabilities and stores them as findings.
         """
         try:
-            from souleyez.parsers.nuclei_parser import parse_nuclei
             from souleyez.engine.result_handler import detect_tool_error
+            from souleyez.parsers.nuclei_parser import parse_nuclei
 
             # Import managers if not provided
             if host_manager is None:

souleyez/handlers/nxc_handler.py

@@ -3,6 +3,7 @@
 Handler for NetExec (nxc) - successor to CrackMapExec.
 Parses shares, credentials, and authentication results.
 """
+
 import logging
 import os
 import re
@@ -259,17 +260,8 @@ class NxcHandler(BaseToolHandler):
                         if "WRITE" in perms:
                             writable_shares.append(share)
 
-            # Determine status
-            # Check for transient errors first (should trigger retry)
-            transient_errors = [
-                "NetBIOSTimeout",
-                "connection timed out",
-                "Connection reset",
-            ]
-            has_transient_error = any(
-                err.lower() in log_content.lower() for err in transient_errors
-            )
-
+            # Determine status based on results found
+            # Retry logic is handled by background.py before parsing
             if credentials:
                 status = STATUS_DONE
             elif has_shell_access:
@@ -278,13 +270,6 @@ class NxcHandler(BaseToolHandler):
                 status = STATUS_WARNING  # Expired creds need attention
             elif shares:
                 status = STATUS_DONE
-            elif has_transient_error:
-                status = STATUS_WARNING  # Transient error - may be retried
-            elif (
-                "STATUS_LOGON_FAILURE" in log_content
-                or "STATUS_ACCESS_DENIED" in log_content
-            ):
-                status = STATUS_NO_RESULTS
             else:
                 status = STATUS_NO_RESULTS
 

souleyez/handlers/rdp_sec_check_handler.py

@@ -2,6 +2,7 @@
 """
 Handler for rdp-sec-check RDP security scanner.
 """
+
 import logging
 import os
 import re

souleyez/handlers/registry.py

@@ -7,6 +7,7 @@ Provides a central registry for tool handlers that:
 - Provides capability queries (has_warning_handler, etc.)
 - Returns None for unmigrated tools (fallback to legacy code)
 """
+
 import logging
 from typing import Dict, List, Optional
 

souleyez/handlers/responder_handler.py

@@ -4,6 +4,7 @@ Responder handler.
 
 Consolidates parsing and display logic for Responder credential capture jobs.
 """
+
 import logging
 import os
 from typing import Any, Dict, Optional

souleyez/handlers/service_explorer_handler.py

@@ -4,6 +4,7 @@ Service Explorer handler.
 
 Consolidates parsing and display logic for Service Explorer jobs.
 """
+
 import logging
 import os
 import re
@@ -45,8 +46,8 @@ class ServiceExplorerHandler(BaseToolHandler):
         """
         try:
             from souleyez.parsers.service_explorer_parser import (
-                parse_service_explorer_output,
                 extract_findings,
+                parse_service_explorer_output,
             )
 
             # Import managers if not provided

souleyez/handlers/smbclient_handler.py

@@ -2,6 +2,7 @@
 """
 Handler for smbclient share browsing and file listing.
 """
+
 import logging
 import os
 import re

souleyez/handlers/smbmap_handler.py

@@ -4,6 +4,7 @@ SMBMap handler.
 
 Consolidates parsing and display logic for SMBMap SMB share enumeration jobs.
 """
+
 import logging
 import os
 import re
@@ -44,12 +45,12 @@ class SMBMapHandler(BaseToolHandler):
         Extracts SMB shares and stores them along with findings.
         """
         try:
+            from souleyez.engine.result_handler import detect_tool_error
             from souleyez.parsers.smbmap_parser import (
-                parse_smbmap_output,
                 extract_findings,
+                parse_smbmap_output,
             )
             from souleyez.storage.smb_shares import SMBSharesManager
-            from souleyez.engine.result_handler import detect_tool_error
 
             # Import managers if not provided
             if host_manager is None:

souleyez/handlers/sqlmap_handler.py

@@ -4,6 +4,7 @@ SQLMap handler.
 
 Consolidates parsing and display logic for SQLMap SQL injection scanner jobs.
 """
+
 import logging
 import os
 import re
@@ -45,13 +46,14 @@ class SQLMapHandler(BaseToolHandler):
         Extracts SQL injection vulnerabilities, databases, tables, and dumped data.
         """
         try:
+            import socket
+
+            from souleyez.engine.result_handler import detect_tool_error
             from souleyez.parsers.sqlmap_parser import (
-                parse_sqlmap_output,
                 get_sqli_stats,
+                parse_sqlmap_output,
             )
             from souleyez.storage.sqlmap_data import SQLMapDataManager
-            from souleyez.engine.result_handler import detect_tool_error
-            import socket
 
             # Import managers if not provided
             if host_manager is None:
@@ -833,8 +835,8 @@ class SQLMapHandler(BaseToolHandler):
         """Display successful SQLMap results."""
         try:
             from souleyez.parsers.sqlmap_parser import (
-                parse_sqlmap_output,
                 get_sqli_stats,
+                parse_sqlmap_output,
             )
 
             if not log_path or not os.path.exists(log_path):

souleyez/handlers/theharvester_handler.py

@@ -4,6 +4,7 @@ TheHarvester handler.
 
 Consolidates parsing and display logic for theHarvester OSINT jobs.
 """
+
 import logging
 import os
 import re
@@ -194,8 +195,8 @@ class TheHarvesterHandler(BaseToolHandler):
         """
         try:
             from souleyez.parsers.theharvester_parser import (
-                parse_theharvester_output,
                 get_osint_stats,
+                parse_theharvester_output,
             )
 
             # Import managers if not provided

souleyez/handlers/web_login_test_handler.py

@@ -4,6 +4,7 @@ Web Login Test handler.
 
 Parses and displays results from web login credential tests.
 """
+
 import json
 import logging
 import os

souleyez/handlers/whois_handler.py

@@ -4,6 +4,7 @@ WHOIS handler.
 
 Consolidates parsing and display logic for WHOIS domain lookup jobs.
 """
+
 import logging
 import os
 from typing import Any, Dict, Optional
@@ -44,9 +45,9 @@ class WhoisHandler(BaseToolHandler):
         """
         try:
             from souleyez.parsers.whois_parser import (
-                parse_whois_output,
-                map_to_osint_data,
                 extract_emails,
+                map_to_osint_data,
+                parse_whois_output,
             )
             from souleyez.storage.osint import OsintManager
 

souleyez/handlers/wpscan_handler.py

@@ -4,6 +4,7 @@ WPScan handler.
 
 Consolidates parsing and display logic for WPScan WordPress security scanner jobs.
 """
+
 import logging
 import os
 import re
@@ -45,8 +46,8 @@ class WPScanHandler(BaseToolHandler):
         Extracts WordPress vulnerabilities for plugins, themes, and core.
         """
         try:
-            from souleyez.parsers.wpscan_parser import parse_wpscan_output
             from souleyez.engine.result_handler import detect_tool_error
+            from souleyez.parsers.wpscan_parser import parse_wpscan_output
 
             # Import managers if not provided
             if host_manager is None:

souleyez/history.py

@@ -1,8 +1,9 @@
 #!/usr/bin/env python3
-from pathlib import Path
-from .utils import HISTORY_FILE, ensure_dirs, read_json, write_json, timestamp_str
-import json
 import csv
+import json
+from pathlib import Path
+
+from .utils import HISTORY_FILE, ensure_dirs, read_json, timestamp_str, write_json
 
 # Export directory for JSON/CSV exports
 EXPORT_DIR = Path.home() / ".souleyez" / "exports"

souleyez/importers/msf_importer.py

@@ -2,10 +2,12 @@
 """
 souleyez.importers.msf_importer - Import data from Metasploit Framework exports
 """
-import defusedxml.ElementTree as ET
+
 from pathlib import Path
-from typing import Dict, List, Optional, TYPE_CHECKING
+from typing import TYPE_CHECKING, Dict, List, Optional
+
 import click
+import defusedxml.ElementTree as ET
 
 if TYPE_CHECKING:
     from xml.etree.ElementTree import Element
@@ -19,9 +21,9 @@ class MSFImporter:
     def __init__(self, engagement_id: int):
         """Initialize importer with engagement ID."""
         self.engagement_id = engagement_id
-        from souleyez.storage.hosts import HostManager
         from souleyez.storage.credentials import CredentialsManager
         from souleyez.storage.findings import FindingsManager
+        from souleyez.storage.hosts import HostManager
 
         self.hm = HostManager()
         self.cm = CredentialsManager()

souleyez/importers/smart_importer.py

@@ -2,10 +2,12 @@
 """
 souleyez.importers.smart_importer - Intelligent data import with type detection
 """
-import defusedxml.ElementTree as ET
-from typing import Dict, List, Any, Optional, Tuple
+
 import json
 import re
+from typing import Any, Dict, List, Optional, Tuple
+
+import defusedxml.ElementTree as ET
 
 
 class SmartImporter:
@@ -189,9 +191,9 @@ class SmartImporter:
         Returns:
             Dict with counts of imported items per type
         """
-        from souleyez.storage.hosts import HostManager
-        from souleyez.storage.findings import FindingsManager
         from souleyez.storage.credentials import CredentialsManager
+        from souleyez.storage.findings import FindingsManager
+        from souleyez.storage.hosts import HostManager
 
         results = {
             "hosts": 0,

souleyez/integrations/siem/__init__.py

@@ -21,17 +21,17 @@ Usage:
 """
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
-from souleyez.integrations.siem.wazuh import WazuhSIEMClient
-from souleyez.integrations.siem.splunk import SplunkSIEMClient
 from souleyez.integrations.siem.elastic import ElasticSIEMClient
-from souleyez.integrations.siem.sentinel import SentinelSIEMClient
-from souleyez.integrations.siem.googlesecops import GoogleSecOpsSIEMClient
 from souleyez.integrations.siem.factory import SIEMFactory
+from souleyez.integrations.siem.googlesecops import GoogleSecOpsSIEMClient
+from souleyez.integrations.siem.sentinel import SentinelSIEMClient
+from souleyez.integrations.siem.splunk import SplunkSIEMClient
+from souleyez.integrations.siem.wazuh import WazuhSIEMClient
 
 __all__ = [
     # Base classes

souleyez/integrations/siem/base.py

@@ -8,7 +8,7 @@ multi-SIEM support (Wazuh, Splunk, Elastic SIEM, Microsoft Sentinel).
 from abc import ABC, abstractmethod
 from dataclasses import dataclass, field
 from datetime import datetime
-from typing import Dict, List, Any, Optional
+from typing import Any, Dict, List, Optional
 
 
 @dataclass

souleyez/integrations/siem/elastic.py

@@ -6,15 +6,15 @@ Uses the Elasticsearch and Kibana APIs for querying alerts and rules.
 """
 
 from datetime import datetime
-from typing import Dict, List, Optional, Any
+from typing import Any, Dict, List, Optional
 
 import requests
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
 
 

souleyez/integrations/siem/factory.py

@@ -5,11 +5,10 @@ Creates SIEM clients based on configuration, providing a unified
 interface for working with multiple SIEM platforms.
 """
 
-from typing import Dict, Any, Optional, List
+from typing import Any, Dict, List, Optional
 
 from souleyez.integrations.siem.base import SIEMClient, SIEMConnectionStatus
 
-
 # Registry of available SIEM types
 # Ordered: Open Source first, then Commercial
 SIEM_TYPES = ["wazuh", "elastic", "splunk", "sentinel", "google_secops"]

souleyez/integrations/siem/googlesecops.py

@@ -9,15 +9,15 @@ import base64
 import json
 import time
 from datetime import datetime, timedelta
-from typing import Dict, List, Optional, Any
+from typing import Any, Dict, List, Optional
 
 import requests
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
 
 
@@ -104,9 +104,9 @@ class GoogleSecOpsSIEMClient(SIEMClient):
         Returns:
             Signed JWT string
         """
+        from cryptography.hazmat.backends import default_backend
         from cryptography.hazmat.primitives import hashes, serialization
         from cryptography.hazmat.primitives.asymmetric import padding
-        from cryptography.hazmat.backends import default_backend
 
         now = int(time.time())
         expiry = now + 3600  # 1 hour

souleyez/integrations/siem/rule_mappings/wazuh_rules.py

@@ -5,7 +5,7 @@ Maps attack types to Wazuh detection rule IDs and provides
 rule metadata for detection validation and recommendations.
 """
 
-from typing import Dict, List, Any
+from typing import Any, Dict, List
 
 # Wazuh rule mappings by attack type
 # These complement the attack_signatures.py definitions

souleyez/integrations/siem/sentinel.py

@@ -6,15 +6,15 @@ Uses Azure REST APIs for querying alerts and analytics rules.
 """
 
 from datetime import datetime, timedelta
-from typing import Dict, List, Optional, Any
+from typing import Any, Dict, List, Optional
 
 import requests
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
 
 

souleyez/integrations/siem/splunk.py

@@ -7,16 +7,16 @@ Uses the Splunk REST API for querying alerts and search results.
 
 import time
 from datetime import datetime
-from typing import Dict, List, Optional, Any
+from typing import Any, Dict, List, Optional
 
 import requests
 from requests.auth import HTTPBasicAuth
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
 
 

souleyez/integrations/siem/wazuh.py

@@ -6,17 +6,17 @@ for unified multi-SIEM detection validation.
 """
 
 from datetime import datetime
-from typing import Dict, List, Optional, Any
+from typing import Any, Dict, List, Optional
 
 from souleyez.integrations.siem.base import (
-    SIEMClient,
     SIEMAlert,
-    SIEMRule,
+    SIEMClient,
     SIEMConnectionStatus,
+    SIEMRule,
 )
 from souleyez.integrations.siem.rule_mappings.wazuh_rules import (
-    get_wazuh_rules_for_attack,
     WAZUH_ATTACK_RULES,
+    get_wazuh_rules_for_attack,
 )
 
 

souleyez/integrations/wazuh/__init__.py

@@ -2,7 +2,7 @@
 from .client import WazuhClient
 from .config import WazuhConfig
 from .host_mapper import WazuhHostMapper
-from .sync import WazuhVulnSync, SyncResult
+from .sync import SyncResult, WazuhVulnSync
 
 __all__ = [
     "WazuhClient",

souleyez/integrations/wazuh/client.py

@@ -5,9 +5,10 @@ Connects to Wazuh Manager API (port 55000) for management operations
 and Wazuh Indexer API (port 9200) for querying alerts.
 """
 
-import requests
 from datetime import datetime, timedelta
-from typing import List, Dict, Optional, Any
+from typing import Any, Dict, List, Optional
+
+import requests
 from urllib3.exceptions import InsecureRequestWarning
 
 # Suppress SSL warnings for self-signed certs (common in Wazuh)

souleyez/integrations/wazuh/config.py

@@ -6,10 +6,11 @@ Supports multiple SIEM platforms: Wazuh, Splunk, Elastic, Sentinel.
 """
 
 import json
-from typing import Optional, Dict, Any, List
 from pathlib import Path
-from souleyez.storage.database import get_db
+from typing import Any, Dict, List, Optional
+
 from souleyez.storage.crypto import get_crypto_manager
+from souleyez.storage.database import get_db
 
 # Supported SIEM types (Open Source first, then Commercial)
 SIEM_TYPES = ["wazuh", "elastic", "splunk", "sentinel", "google_secops"]

souleyez/integrations/wazuh/host_mapper.py

@@ -4,9 +4,11 @@ souleyez.integrations.wazuh.host_mapper - Map Wazuh agents to SoulEyez hosts
 
 Maps Wazuh agent IPs to SoulEyez hosts for vulnerability correlation.
 """
+
 from typing import Dict, List, Optional, Tuple
-from souleyez.storage.database import get_db
+
 from souleyez.log_config import get_logger
+from souleyez.storage.database import get_db
 
 logger = get_logger(__name__)
 

souleyez/integrations/wazuh/sync.py

@@ -4,14 +4,17 @@ souleyez.integrations.wazuh.sync - Wazuh vulnerability sync
 
 Syncs vulnerabilities from Wazuh to SoulEyez database.
 """
+
 from dataclasses import dataclass, field
 from datetime import datetime
 from typing import List, Optional
+
 from souleyez.log_config import get_logger
+from souleyez.storage.wazuh_vulns import WazuhVulnsManager
+
 from .client import WazuhClient
 from .config import WazuhConfig
 from .host_mapper import WazuhHostMapper
-from souleyez.storage.wazuh_vulns import WazuhVulnsManager
 
 logger = get_logger(__name__)
 

souleyez/intelligence/__init__.py

@@ -7,6 +7,6 @@ __all__ = [
     "AttackSurfaceAnalyzer",
 ]
 
-from souleyez.intelligence.service_parser import ServiceVersionExtractor
 from souleyez.intelligence.exploit_knowledge import ExploitKnowledgeBase
 from souleyez.intelligence.exploit_suggestions import ExploitSuggestionEngine
+from souleyez.intelligence.service_parser import ServiceVersionExtractor

souleyez/intelligence/correlation_analyzer.py

@@ -3,16 +3,17 @@
 Correlation analyzer for tracking exploitation status.
 Links services, findings, jobs, credentials, and evidence together.
 """
+
 import json
 from datetime import datetime, timedelta
-from typing import Dict, List, Optional
 from pathlib import Path
+from typing import Dict, List, Optional
 
-from souleyez.storage.hosts import HostManager
-from souleyez.storage.findings import FindingsManager
-from souleyez.storage.credentials import CredentialsManager
-from souleyez.engine.background import list_jobs, get_job
+from souleyez.engine.background import get_job, list_jobs
 from souleyez.intelligence.target_parser import TargetParser
+from souleyez.storage.credentials import CredentialsManager
+from souleyez.storage.findings import FindingsManager
+from souleyez.storage.hosts import HostManager
 
 
 class CorrelationAnalyzer:

souleyez/intelligence/exploit_knowledge.py

@@ -3,13 +3,13 @@
 Exploit knowledge base.
 Maps services and versions to known vulnerabilities and MSF modules.
 """
-from typing import List, Dict, Optional
+
+import json
+import os
 import re
 import subprocess
-import json
 import time
-import os
-
+from typing import Dict, List, Optional
 
 # Exploit database with known vulnerabilities
 EXPLOIT_DATABASE = {