Skip to content

community_5_lazyc2_security

Jump to bottom
grisun0 edited this page Oct 31, 2026 · 1 revision

lazyc2/security

Community 5 | 55 files | cohesion 0.45

Definition

This community groups 55 file(s) rooted at tests with dominant language py (cohesion 0.45). Central symbols: AESKeyManager, ApiAuthzConfig, ApiKey, ApiKeyStore, C2Server, CSRFPolicy, CommandAllowlist, CommandDecision. Core file: lazyc2.py (313 symbols). Documented purpose: Tenant-bound API authorization for the LazyOwn C2 dashboard. Provides API-key generation, storage, validation, and route-decorator enforcement that requires bo.

Files

tests (20 files)

File Language Layer Symbols Doc
tests/test_addon_creator.py py testing 86 yes
tests/test_api_authz.py py testing 48 yes
tests/test_c2_credential_bootstrap.py py testing 21 yes

lazyc2/security (11 files)

File Language Layer Symbols Doc
lazyc2/security/__init__.py py utility 0 no
lazyc2/security/cli_credentials.py py utility 3 yes
lazyc2/security/command_allowlist.py py utility 8 yes

lazyc2/blueprints (6 files)

File Language Layer Symbols Doc
lazyc2/blueprints/__init__.py py utility 0 yes
lazyc2/blueprints/addons.py py presentation 14 yes

modules (5 files)

File Language Layer Symbols Doc
modules/c2_agent.py py utility 20 yes
modules/dashboard_bp.py py presentation 13 yes

lazyc2/extensions (4 files)

File Language Layer Symbols Doc
lazyc2/extensions/__init__.py py infrastructure 0 yes
lazyc2/extensions/decoy.py py presentation 1 yes

lazyc2 (3 files)

File Language Layer Symbols Doc
lazyc2/__init__.py py utility 0 no
lazyc2/app_factory.py py presentation 12 yes

core (2 files)

File Language Layer Symbols Doc
core/api_authz.py py presentation 31 yes
core/session_secrets.py py utility 4 yes

static/js (2 files)

File Language Layer Symbols Doc
static/js/socket.io-4.0.0.min.js js utility 32 yes
static/js/socket.io-4.3.2.min.js js utility 15 yes

. (1 files)

File Language Layer Symbols Doc
lazyc2.py py presentation 313 no

skills (1 files)

File Language Layer Symbols Doc
skills/daemon_health.py py utility 16 yes

... and 35 more files in this community.

Key Symbols

  • ApiAuthzConfig (class, core/api_authz.py:54) class ApiAuthzConfig - Configuration contract for the API authorization module.
  • ApiKey (class, core/api_authz.py:75) class ApiKey - Immutable record of a hashed API key bound to a tenant.
  • to_dict (method, core/api_authz.py:94) def to_dict(self)
  • from_dict (method, core/api_authz.py:107) def from_dict(cls, data)
  • is_expired (method, core/api_authz.py:119) def is_expired(self)
  • is_retired (method, core/api_authz.py:124) def is_retired(self)
  • has_permission (method, core/api_authz.py:127) def has_permission(self, permission)
  • has_all_permissions (method, core/api_authz.py:130) def has_all_permissions(self, permissions)
  • _hash_secret (function, core/api_authz.py:137) def _hash_secret(secret) - Return the SHA-256 hex digest of secret.
  • _verify_secret (function, core/api_authz.py:142) def _verify_secret(secret, stored_hash) - Constant-time comparison of secret against stored_hash.
  • _generate_token_bytes (function, core/api_authz.py:147) def _generate_token_bytes(nbytes) - Return a URL-safe random token string of nbytes random bytes.
  • ApiKeyStore (class, core/api_authz.py:161) class ApiKeyStore - Persistent store for tenant-scoped API keys.
  • __init__ (method, core/api_authz.py:170) def __init__(self, config)
  • config (method, core/api_authz.py:176) def config(self) - The configuration this store was built with.
  • _read (method, core/api_authz.py:180) def _read(self)
  • _write (method, core/api_authz.py:191) def _write(self, data)
  • _grace_deadline (method, core/api_authz.py:197) def _grace_deadline(self, retired_at) - Return the timestamp after which a retired key stops validating.
  • _prune_retired (method, core/api_authz.py:201) def _prune_retired(self, records) - Drop retired keys whose grace window has closed.
  • list_keys (method, core/api_authz.py:217) def list_keys(self, tenant_id) - List all active keys, optionally filtered by tenant_id.
  • find_by_hash (method, core/api_authz.py:229) def find_by_hash(self, key_hash) - Look up a key record by its SHA-256 hash.
  • create_key (method, core/api_authz.py:238) def create_key(self, tenant_id, label, permissions, expires_in_days) - Create a new API key and return (ApiKey, plaintext_secret).
  • revoke_key (method, core/api_authz.py:273) def revoke_key(self, label, tenant_id) - Revoke every key with label within tenant_id.
  • validate_key (method, core/api_authz.py:287) def validate_key(self, plaintext) - Validate a plaintext API key and return the ApiKey record.
  • rotate_key (method, core/api_authz.py:309) def rotate_key(self, label, tenant_id) - Rotate an existing key by label. Returns the new plaintext.
  • _prune_record (method, core/api_authz.py:343) def _prune_record(self, key_hash) - Remove the retired record identified by key_hash.
  • _touch_last_used (method, core/api_authz.py:351) def _touch_last_used(self, key_hash) - Update last_used_at on the key record identified by key_hash.
  • require_api_auth (function, core/api_authz.py:365) def require_api_auth(store, permissions, require_tenant) - Flask-route decorator that enforces API-key + tenant authorization.
  • _extract_key (function, core/api_authz.py:393) def _extract_key(request_obj)
  • decorator (function, core/api_authz.py:405) def decorator(f)
  • decorated (function, core/api_authz.py:407) def decorated()

Internal vs External Edges

  • Internal resolved imports (EXTRACTED): 126
  • Cross-boundary resolved imports (EXTRACTED): 146

Connections

  • [EXTRACTED] depends_on community 1 <-> 5 (strength 0.9): Extracted import edge crosses communities: cli/commands/c2_session.py imports modules/c2_agent.py.

Risks

Open Questions

  • Why do 4 file(s) lack file-level docs (e.g. lazyc2.py)? What purpose do they serve?
  • What would break if the most connected file in lazyc2/security changed?
  • Should lazyc2/security be split, given cohesion 0.45?

Sources

Generated offline by readmenator from commit 58d2c970e22d. Edits here are overwritten by readmenator . --rebuild.

Start

Wiki

Agent Docs

Recipes

Clone this wiki locally