Update app.py

app.py

@@ -470,117 +470,68 @@ class AttackChainPanel:
         self.chains = self._load_attack_chains()
         self.stages = ["Reconnaissance", "Scanning", "Exploitation", "Post-Exploitation", "Persistence", "Exfiltration"]
 
-    def _load_attack_chains(self) -> Dict[str, Dict]:
-        return {
-            "full_compromise": {
-                "name": "Full System Compromise",
-                "description": "Complete attack chain from recon to data exfiltration",
-                "stages": [
-                    {
-                        "stage": 1,
-                        "name": "Reconnaissance",
-                        "actions": ["DNS enumeration", "Subdomain discovery", "Technology fingerprinting"],
-                        "tools": ["passive_osint", "active_recon"],
-                        "duration": "5-10 min",
-                        "success_criteria": "Target mapped"
-                    },
-                    {
-                        "stage": 2,
-                        "name": "Vulnerability Scanning",
-                        "actions": ["Port scanning", "Service enumeration", "Vulnerability detection"],
-                        "tools": ["sql_injection", "xss_scanner", "path_traversal"],
-                        "duration": "10-15 min",
-                        "success_criteria": "Vulnerabilities identified"
-                    },
-                    {
-                        "stage": 3,
-                        "name": "Exploitation",
-                        "actions": ["SQL injection", "Web shell upload", "RCE execution"],
-                        "tools": ["zero_day_panel", "webshell_panel"],
-                        "duration": "5-10 min",
-                        "success_criteria": "Shell obtained"
-                    },
-                    {
-                        "stage": 4,
-                        "name": "Post-Exploitation",
-                        "actions": ["Privilege escalation", "System enumeration", "Credential harvesting"],
-                        "tools": ["privesc", "mimikatz", "linpeas"],
-                        "duration": "10-20 min",
-                        "success_criteria": "Root/Admin access"
-                    },
-                    {
-                        "stage": 5,
-                        "name": "Persistence",
-                        "actions": ["Backdoor installation", "Cron jobs", "SSH keys"],
-                        "tools": ["persistence_panel"],
-                        "duration": "5 min",
-                        "success_criteria": "Persistent access established"
-                    },
-                    {
-                        "stage": 6,
-                        "name": "Data Exfiltration",
-                        "actions": ["Database dump", "File collection", "Credential extraction"],
-                        "tools": ["mysqldump", "scp", "dns_tunnel"],
-                        "duration": "10-30 min",
-                        "success_criteria": "Data extracted"
-                    }
-                ]
-            },
-            "quick_shell": {
-                "name": "Quick Web Shell",
-                "description": "Fast web shell deployment",
-                "stages": [
-                    {"stage": 1, "name": "Recon", "actions": ["Identify upload points"], "duration": "2 min"},
-                    {"stage": 2, "name": "Exploit", "actions": ["Upload shell", "Verify execution"], "duration": "3 min"},
-                    {"stage": 3, "name": "Confirm", "actions": ["Test commands"], "duration": "1 min"}
-                ]
-            },
-            "data_theft": {
-                "name": "Data Exfiltration Focus",
-                "description": "Targeted data extraction",
-                "stages": [
-                    {"stage": 1, "name": "SQLi", "actions": ["Identify injection point"], "duration": "5 min"},
-                    {"stage": 2, "name": "Extract", "actions": ["Dump database", "Enumerate tables"], "duration": "15 min"},
-                    {"stage": 3, "name": "Exfiltrate", "actions": ["Compress data", "Transfer out"], "duration": "10 min"}
-                ]
-            }
-        }
-
-    async def execute_chain(self, target: str, chain_type: str = "full_compromise") -> Dict:
-        if chain_type not in self.chains:
-            return {"error": "Unknown chain type"}
-
-        chain = self.chains[chain_type]
-        results = {
-            "target": target,
-            "chain_name": chain["name"],
-            "start_time": datetime.now().isoformat(),
-            "stages_completed": [],
-            "current_stage": None,
-            "artifacts": [],
-            "status": "RUNNING"
+    def execute_stage(self, stage_num: int, target: str, dry_run: bool = True) -> Dict:
+        """
+        Gerçek stage çalıştırma - 2026 üst düzey red team teknikleri
+        """
+        chain = self.chains.get("full_compromise")
+        if not chain:
+            return {"error": "Zincir yok"}
+
+        stage = next((s for s in chain["stages"] if s["stage"] == stage_num), None)
+        if not stage:
+            return {"error": f"Stage {stage_num} bulunamadı"}
+
+        result = {"stage": stage_num, "name": stage["name"], "tools_executed": []}
+
+        tool_commands = {
+            "nmap": ["nmap", "-sV", "-T4", "-p-", "--script=vuln", target],
+            "subfinder": ["subfinder", "-d", target, "-silent", "-all"],
+            "nuclei": ["nuclei", "-u", f"http://{target}", "-t", "cves/", "-severity", "critical,high", "-silent"],
+            "ffuf": ["ffuf", "-u", f"http://{target}/FUZZ", "-w", "/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt", "-mc", "200,301,302,403"],
+            "sqlmap": ["sqlmap", "-u", f"http://{target}/?id=1", "--batch", "--risk=3", "--level=5", "--tamper=space2comment,randomcase,between,charencode,space2plus", "--threads=5"],
         }
 
-        for stage in chain["stages"]:
-            results["current_stage"] = stage["name"]
-            await asyncio.sleep(0.5)
-
-            stage_result = {
-                "stage_number": stage["stage"],
-                "name": stage["name"],
-                "status": "COMPLETED",
-                "actions_completed": stage["actions"],
-                "artifacts_found": self._generate_artifacts(stage["name"]),
-                "duration": stage["duration"],
-                "success": True
-            }
-
-            results["stages_completed"].append(stage_result)
+        for tool in stage.get("tools", []):
+            if tool in tool_commands:
+                cmd = tool_commands[tool]
+                print(f"[STAGE {stage_num}] {tool.upper()} çalıştırılıyor: {' '.join(cmd)}")
 
-        results["status"] = "COMPLETED"
-        results["end_time"] = datetime.now().isoformat()
-        results["summary"] = self._generate_summary(results["stages_completed"])
+                if dry_run:
+                    result["tools_executed"].append({"tool": tool, "status": "dry-run", "cmd": ' '.join(cmd)})
+                    continue
 
+                try:
+                    proc_result = subprocess.run(cmd, capture_output=True, text=True, timeout=300)
+                    output = proc_result.stdout.strip()[:1500] + "..." if len(proc_result.stdout) > 1500 else proc_result.stdout.strip()
+                    result["tools_executed"].append({
+                        "tool": tool,
+                        "status": "success" if proc_result.returncode == 0 else "failed",
+                        "output_snippet": output,
+                        "returncode": proc_result.returncode
+                    })
+                except Exception as e:
+                    result["tools_executed"].append({"tool": tool, "status": "error", "msg": str(e)})
+
+        return result
+
+    def run_full_chain(self, target: str, max_stage: int = 6, dry_run: bool = True) -> List[Dict]:
+        """
+        Tam zinciri çalıştır - en üst düzey otomatik saldırı zinciri
+        """
+        print(f"\n=== ULTIMATE CHAIN BAŞLIYOR - Hedef: {target} ===\n")
+        results = []
+
+        for stage_num in range(1, max_stage + 1):
+            stage_result = self.execute_stage(stage_num, target, dry_run=dry_run)
+            results.append(stage_result)
+            print(json.dumps(stage_result, indent=2, ensure_ascii=False))
+            print("=" * 80)
+            time.sleep(2)  # stage'ler arası kısa bekleme (gerçekçi olsun)
+
+        print("\n=== ZİNCİR TAMAMLANDI - SONUÇ ÖZETİ ===")
+        vulnerable = any("vulnerable" in str(r).lower() for r in results)
+        print(f"Genel Durum: {'VULNERABLE' if vulnerable else 'CLEAN'}")
         return results
 
     def _generate_artifacts(self, stage_name: str) -> List[str]: