wafaHell 0.1.1__py3-none-any.whl

wafaHell/__init__.py

@@ -0,0 +1,3 @@
+from .middleware import WafaHell
+
+# agora a classe está disponível diretamente ao importar o pacote

wafaHell/middleware.py

@@ -0,0 +1,65 @@
+import re
+from flask import request, abort
+from urllib.parse import unquote
+
+class WafaHell:
+    def __init__(self, app=None, block_code=403, log_func=None, monitor_mode=False):
+        self.app = app
+        self.block_code = block_code
+        self.log_func = log_func or (lambda msg: print(f"[WAF] {msg}"))
+        self.monitor_mode = monitor_mode
+        # Regras básicas
+        self.rules = [
+            r"(\bUNION\b|\bSELECT\b|\bINSERT\b|\bDROP\b)",  
+            r"' OR '1'='1",                                
+            r"<script.*?>.*?</script>",                    
+            r"javascript:",                                
+        ]
+
+        if app is not None:
+            self.init_app(app)
+
+    def init_app(self, app):
+        @app.before_request
+        def waf_check():
+            if self.is_malicious(request):
+                self.log_attack(request)
+                if not self.monitor_mode:
+                    abort(self.block_code)
+
+    def detect_attack(self, data: str) -> bool:
+        for pattern in self.rules:
+            if re.search(pattern, data, re.IGNORECASE):
+                return True
+        return False
+
+    def is_malicious(self, req) -> bool:
+        # URL + Query Params
+        if self.detect_attack(req.url) or any(self.detect_attack(v) for v in req.args.values()):
+            return True
+
+        # Headers
+        for _, value in req.headers.items():
+            if self.detect_attack(value):
+                return True
+
+        # Body
+        if req.data and self.detect_attack(req.data.decode(errors="ignore")):
+            return True
+
+        return False
+
+    def log_attack(self, req):
+        ip = req.remote_addr
+        user_agent = req.headers.get("User-Agent", "unknown")
+        path = req.path
+        query = req.query_string.decode(errors="ignore") if req.query_string else ""
+        
+        msg = (
+            f"Ataque detectado\n",
+            f"IP: {ip}\n"
+            f"User-Agent: {user_agent}\n"
+            f"Rota: {path}\n"
+            f"Query: {unquote(query)}\n"
+        )
+        self.log_func(msg)

wafahell-0.1.1.dist-info/METADATA

@@ -0,0 +1,55 @@
+Metadata-Version: 2.4
+Name: wafaHell
+Version: 0.1.1
+Summary: Middleware WAF to Flask
+Author-email: Yago Martins <yagomartins30@gmail.com>
+License: MIT License
+        
+        Copyright (c) 2025 Seu Nome
+        
+        Permission is hereby granted, free of charge, to any person obtaining a copy
+        of this software and associated documentation files (the "Software"), to deal
+        in the Software without restriction, including without limitation the rights
+        to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+        copies of the Software, and to permit persons to whom the Software is
+        furnished to do so, subject to the following conditions:
+        
+        The above copyright notice and this permission notice shall be included in all
+        copies or substantial portions of the Software.
+        
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+        IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+        FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+        AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+        LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+        OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+        SOFTWARE.
+        
+Classifier: Programming Language :: Python :: 3
+Classifier: Framework :: Flask
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: Flask>=2.0
+Dynamic: license-file
+
+# WafHell
+
+Middleware WAF for Flask, to detect SQLi and XSS.
+
+## Instalation
+
+```bash
+pip install wafaHell
+```
+
+## Usage
+```python
+from flask import Flask
+from flask_waf import FlaskWAF
+
+app = Flask(__name__)
+waf = FlaskWAF(app)
+```

wafahell-0.1.1.dist-info/RECORD

@@ -0,0 +1,7 @@
+wafaHell/__init__.py,sha256=enTIAbStl7o_cDo93-s8nq86BsN3OEGYu9AbtESQVXQ,105
+wafaHell/middleware.py,sha256=UQ5TPcuz6UDyy5FjyUNXSAZqv2IjnOoc3ze2M8He7Tw,2151
+wafahell-0.1.1.dist-info/licenses/LICENSE,sha256=6bv9v4HamenV3rqm3mhaGOecwGFrgxtVTW7JPfFDmeY,1086
+wafahell-0.1.1.dist-info/METADATA,sha256=DKx0AS6ZJ82ATAkBJetN_AG8doVO00xxMI7PwBdcBzQ,1980
+wafahell-0.1.1.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+wafahell-0.1.1.dist-info/top_level.txt,sha256=VGBo2g3pOeTH2qIXfZDJCSblJgijemMHUHmI0bBgrls,9
+wafahell-0.1.1.dist-info/RECORD,,

wafahell-0.1.1.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (80.9.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

wafahell-0.1.1.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Seu Nome
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

wafahell-0.1.1.dist-info/top_level.txt

@@ -0,0 +1 @@
+wafaHell