Method _parse_sqlmap_output

advanced_vuln_scanner.py:1711–1740

Parse SQLMap output directory

(self, output_dir: str, scan_id: str, target: str)

        so this can be False even with systemd — in which case we don't wrap
        (the flag would be silently ignored anyway).
        """
        if not shutil.which('systemd-run'):
            return False
        try:
            with open('/sys/fs/cgroup/cgroup.controllers') as f:
                return 'memory' in f.read().split()
        except Exception:
            return False

    def _nuclei_memory_precheck(self, nuclei_env: Dict[str, str]) -> Optional[str]:
        """Return an error string if there isn't enough free RAM to run nuclei
        safely under this tier, else None.

        Only guards constrained tiers (those that set a GOMEMLIMIT). GOMEMLIMIT
        is a soft cap, so on a small board that's already low on free memory,
        starting nuclei can push it into swap thrash and lock the whole board
        up — a clean refusal with the numbers is the right call.
        """
        m = re.match(r'(\d+)MiB', nuclei_env.get('GOMEMLIMIT', ''))
        if not m:
            return None  # unconstrained board — plenty of headroom
        need_mib = int(int(m.group(1)) * 1.6)  # heap cap + parsing/runtime overhead
        free_mib = self._available_mib()
        if free_mib is None or free_mib >= need_mib:
            return None
        return (f"Not enough free memory to run Nuclei safely: {free_mib}MB free, "
                f"need ~{need_mib}MB. Nuclei is memory-hungry and a 512MB board is "
                f"borderline — stop other Ragnar features to free RAM, or run Nuclei "
                f"from a larger unit. Refusing rather than risk locking up the board.")

    def _hard_kill(self, process: subprocess.Popen) -> None:
        """Kill a scan process — the whole group if we started it in its own
        session, so children (and a systemd-run scope) go too."""