String returns the canonical PEP 440 representation

UpdateFile replaces version specifiers for the given packages in a requirements.txt file, preserving all comments and formatting

Thread-safe append to results list.

Decode a base64 ASCII string back to raw bytes Raises VaultFormatError if `text` is not valid base64

Encode raw bytes to a base64 ASCII string suitable for JSON

Build a snippet with context around the redacted match

Create a vulnerable scan result Args: details: Vulnerability description evidence: Evidence dictionary

Create a vulnerable scan result Args: details: Vulnerability description evidence: Evidence dictionary

Create a vulnerable scan result Args: details: Vulnerability description evidence: Evidence dictionary

Decode a null-terminated filename field

Detect PowerPoint format from file extension. Returns: Normalized format string ('pptx', 'pptm', 'potx', or 'potm').

Create a task queue for a beacon if one does not exist

Execute a Lua script using EVALSHA

Extract potential IDs from API response Looks for numeric IDs, UUIDs, and other identifier patterns. Returns: l

Recursively extract all string values from a JSON-like structure

Get or create the event deque for a PID

Finish reading the old file, then reopen the target at position 0.

Convert an exfiltration indicator to a Finding

Return True iff every character in text is a hex digit and text is non-empty A hash like "5f4dcc..." passes; an empty string or anything wit

Log rate limit violation

Check if an event satisfies all key-value pairs in the filter

Shared scan execution logic

Append lines to the log file and force an OS-level flush so inotify fires immediately.

Create authenticated fingerprint

Perform DNS lookups for multiple domains concurrently

Check if circuit is allowing requests Returns True if requests should be allowed

Set up structlog with stdlib integration

Create the async Redis client from configured URL.

Async context manager for raw database connections

Create a brand-new empty vault at `path` and write it to disk Generates a fresh salt, derives the key, and saves an empty en

Create a signed JWT with user_id as subject

Create a FastAPI app using dependency injection for rate limiting

Factory function to create appropriate storage backend.

Create a new user with username uniqueness check

Remove and return the entry with the given name Returns the deleted entry so the caller can echo its details for confirmatio

Create a consumer group on a stream if it does not already exist

Extract Accept-Encoding header

Extract Accept-Language header

Extract relevant information from a Scapy packet

Format datetime for display

Return NONCE_LENGTH_BYTES of fresh, unpredictable random bytes A nonce ("number used once") is generated FRESH for every single encrypti

Generate n requests with SQL injection payloads

Generate n requests with path traversal payloads

Generate n requests with XSS payloads

Retrieve all beacon records from the database

Get scan by ID with test results loaded Args: db: Database session scan_id: Scan ID Returns:

Get all assets for a program

Read and return the current log file content

Get a specific flow by key

Calculate protocol distribution as percentages

Return remediation guidance for a rule

Get test DOCX directory path as string.

Get test PPTX directory path as string.

Get token bucket state if it exists

Return endpoints sorted by total bytes transferred

Retrieve user by ID with credentials relationship eager loaded

Return non-expired entries for a rule and group key

Hash a plaintext password with Argon2id

Validate an IBAN using the mod-97 algorithm