update pp

Author: grisuno

core/payload_schema.py

@@ -44,7 +44,12 @@
 
 IPV4_REGEX = re.compile(r"\A((25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(25[0-5]|2[0-4]\d|[01]?\d\d?)\Z")
 INTERFACE_REGEX = re.compile(r"\A[A-Za-z0-9._@:-]{1,32}\Z")
-HOSTNAME_REGEX = re.compile(r"\A(?=.{1,253}\Z)([A-Za-z0-9]([A-Za-z0-9-]{0,61}[A-Za-z0-9])?\.?)+\Z")
+HOSTNAME_REGEX = re.compile(
+    r"\A(?=.{1,253}\Z)"
+    r"[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?"
+    r"(?:\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*"
+    r"\.?\Z"
+)
 URL_REGEX = re.compile(r"\Ahttps?://[\w\-.:/?#\[\]@!$&'()*+,;=%]+\Z")
 HEX_REGEX = re.compile(r"\A[0-9a-fA-F]+\Z")
 PORT_MIN = 1

lazyc2.py

@@ -2881,19 +2881,19 @@ def _resolve_secure_template_path(template_name):
     safe_stem = strict_match.group(1)
     safe_basename = f"{safe_stem}.html"
     template_folder = Path(app.template_folder).resolve()
+    matched_path = None
     try:
-        allowed_entries = {
-            entry.name
-            for entry in os.scandir(template_folder)
-            if entry.is_file()
-        }
+        for entry in os.scandir(template_folder):
+            if entry.is_file() and entry.name == safe_basename:
+                matched_path = entry.path
+                break
     except OSError as scan_error:
         logger.error(f"Template folder unreadable: {scan_error}")
         return None
-    if safe_basename not in allowed_entries:
+    if matched_path is None:
         logger.error("Template file not in allowlist of existing templates")
         return None
-    candidate = (template_folder / safe_basename).resolve()
+    candidate = Path(matched_path).resolve()
     contained, traversal_error = _validate_file_path_within_base(candidate, template_folder)
     if not contained:
         logger.error(f"Template path rejected: {traversal_error}")

lazyown.py

@@ -23327,7 +23327,7 @@ def do_pip_repo(self, line):
             self.cmd("pip3 install pip-tools")
 
         packages = [
-            "requests", "python-libnmap", "pwncat-cs", "pwn", "groq", "PyPDF2", "docx", "python-docx", "olefile",
+            "requests", "python-libnmap", "pwncat-cs", "pwn", "groq", "pypdf", "docx", "python-docx", "olefile",
             "exifread", "pycryptodome", "impacket", "pandas", "colorama", "tabulate", "pyarrow", "keyboard",
             "flask-unsign", "name-that-hash", "certipy-ad", "ast", "pykeepass", "cmd2", "Pillow", "netaddr", "stix2"
         ]

modules/lazyown_metaextract0r.py

@@ -19,7 +19,7 @@
 
 """
 import os
-import PyPDF2
+import pypdf
 import docx
 import olefile
 import exifread
@@ -48,7 +48,7 @@ def extract_pdf_metadata(file_path):
     metadata = {}
     try:
         with open(file_path, 'rb') as f:
-            reader = PyPDF2.PdfReader(f)
+            reader = pypdf.PdfReader(f)
             metadata = reader.metadata
     except Exception as e:
         metadata['error'] = str(e)

pyproject.toml

@@ -12,13 +12,13 @@ license = { text = "GPL-3.0-only" }
 readme = "README.md"
 requires-python = ">=3.8"
 dependencies = [
-    "requests",
+    "requests>=2.33.0",
     "cmd2",
     "python-libnmap",
     "pwncat-cs",
     "pwn",
     "groq",
-    "PyPDF2",
+    "pypdf>=6.1.1",
     "python-docx",
     "olefile",
     "exifread",

requirements.txt

@@ -49,7 +49,7 @@ commonmark==0.9.1
 construct==2.10.70
 contourpy==1.3.3
 coverage==7.13.5
-cryptography==44.0.2
+cryptography==46.0.6
 cssselect==1.4.0
 cssutils==2.15.0
 cycler==0.12.1
@@ -82,7 +82,7 @@ h11==0.16.0
 httpcore==1.0.9
 httpx==0.28.1
 identify==2.6.19
-idna==3.13
+idna==3.15
 impacket==0.13.0
 iniconfig==2.3.0
 intervaltree==3.2.1
@@ -175,10 +175,10 @@ Pygments==2.20.0
 pykeepass==4.1.1.post1
 PyMsgBox==2.0.1
 PyNaCl==1.6.2
-pyOpenSSL==25.1.0
+pyOpenSSL==26.0.0
 pyotp==2.9.0
 pyparsing==3.3.2
-PyPDF2==3.0.1
+pypdf==6.1.1
 pyperclip==1.11.0
 pypykatz==0.6.13
 PyRect==0.2.0
@@ -200,7 +200,7 @@ pytweening==1.2.0
 pytz==2026.1.post1
 pyvis==0.3.2
 PyYAML==6.0.3
-requests==2.32.5
+requests==2.33.0
 rich-argparse==1.8.0
 rich==15.0.0
 ROPGadget==7.7
@@ -237,7 +237,7 @@ unicorn==2.1.2
 unicrypto==0.0.12
 unidns==0.0.4
 unix-ar==0.2.1
-urllib3==2.6.3
+urllib3==2.7.0
 uro==1.0.2
 validators==0.35.0
 virtualenv==21.3.1

templates/surface_live.html

@@ -16,11 +16,13 @@ <h3 class="text-info mb-0">Live Attack Surface</h3>
 <link
   rel="stylesheet"
   href="https://cdnjs.cloudflare.com/ajax/libs/vis-network/9.1.2/dist/dist/vis-network.min.css"
+  integrity="sha512-WgxfT5LWjfszlPHXRmBWHkV2eceiWTOBvrKCNbdgDYTHrT2AeLCGbF4sZlZw3UMN3WtL0tGUoIAKsu8mllg/XA=="
   crossorigin="anonymous"
   referrerpolicy="no-referrer"
 />
 <script
   src="https://cdnjs.cloudflare.com/ajax/libs/vis-network/9.1.2/dist/vis-network.min.js"
+  integrity="sha512-LnvoEWDFrqGHlHmDD2101OrLcbsfkrzoSpvtSQtxK3RMnRV0eOkhhBN2dXHKRrUU8p2DGRTk35n4O8nWSVe1mQ=="
   crossorigin="anonymous"
   referrerpolicy="no-referrer"
 ></script>

tests/test_improvements_spec.py

@@ -717,23 +717,26 @@ def test_every_class_in_new_modules_has_docstring(self) -> None:
         self.assertEqual(offenders, [])
 
     def test_modules_avoid_emoji_in_source(self) -> None:
-        import re
-        emoji_pattern = re.compile(
-            "["
-            "\U0001F300-\U0001FAFF"
-            "\U0001F600-\U0001F64F"
-            "\U0001F680-\U0001F6FF"
-            "☀-➿"
-            "]"
+        emoji_ranges = (
+            (0x1F300, 0x1FAFF),
+            (0x2600, 0x27BF),
         )
+
+        def contains_emoji(text: str) -> bool:
+            return any(
+                low <= code_point <= high
+                for code_point in map(ord, text)
+                for low, high in emoji_ranges
+            )
+
         offenders: list[str] = []
         for relative in (
             "cli/status_bar.py",
             "skills/unified_orchestrator.py",
             "cli/commands/orchestration.py",
         ):
             text = (REPO_ROOT / relative).read_text(encoding="utf-8")
-            if emoji_pattern.search(text):
+            if contains_emoji(text):
                 offenders.append(relative)
         self.assertEqual(offenders, [])