fix: resolve 3 issues found during first test run

- port_scanner: make OS detection (-O) conditional on root privileges
- engine: guard against error-dict responses when iterating services
- analyzer: same guard in _format_results and _fallback_analysis
- requirements: downgrade weasyprint 62.3 -> 60.2 (transform attr bug)
- analyzer: update Groq model to llama-3.3-70b-versatile (3.1-70b decommissioned)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: Kim-San04

core/engine.py

@@ -166,7 +166,11 @@ def _step_web_enum(self):
         ws = WebScanner(str(wordlist))
         results = {}
         for host, svc_info in services.items():
+            if not isinstance(svc_info, dict) or "error" in svc_info:
+                continue
             for port, info in svc_info.items():
+                if not isinstance(info, dict):
+                    continue
                 if port in ("80", "443", "8080", "8443") or info.get("name") in ("http", "https", "ssl/http"):
                     scheme = "https" if port in ("443", "8443") else "http"
                     url = f"{scheme}://{host}:{port}"
@@ -179,6 +183,8 @@ def _step_smb_enum(self):
         ss = ServiceScanner()
         results = {}
         for host, svc_info in services.items():
+            if not isinstance(svc_info, dict) or "error" in svc_info:
+                continue
             if "445" in svc_info or "139" in svc_info:
                 results[host] = ss.smb_enum(host)
         self.session.update_results("active_recon", "smb", results)
@@ -189,6 +195,8 @@ def _step_ldap_enum(self):
         ss = ServiceScanner()
         results = {}
         for host, svc_info in services.items():
+            if not isinstance(svc_info, dict) or "error" in svc_info:
+                continue
             if "389" in svc_info or "636" in svc_info:
                 results[host] = ss.ldap_enum(host)
         self.session.update_results("active_recon", "ldap", results)

modules/ai/analyzer.py

@@ -42,7 +42,7 @@
 class AIAnalyzer:
     def __init__(self):
         self.api_key = os.getenv("GROQ_API_KEY", "")
-        self.model = "llama-3.1-70b-versatile"
+        self.model = "llama-3.3-70b-versatile"
         self.max_tokens = 4096
 
     def analyze(self, target: str, recon_results: Dict[str, Any]) -> Dict[str, Any]:
@@ -116,12 +116,15 @@ def _format_results(self, results: Dict[str, Any]) -> str:
         # Nmap services
         services = active.get("services", {})
         for host, svc_map in services.items():
+            if not isinstance(svc_map, dict) or "error" in svc_map:
+                continue
             for port, svc in svc_map.items():
-                if svc.get("state") == "open":
-                    lines.append(
-                        f"Host {host} port {port}/{svc.get('protocol','tcp')}: "
-                        f"{svc.get('name','')} {svc.get('product','')} {svc.get('version','')}"
-                    )
+                if not isinstance(svc, dict) or svc.get("state") != "open":
+                    continue
+                lines.append(
+                    f"Host {host} port {port}/{svc.get('protocol','tcp')}: "
+                    f"{svc.get('name','')} {svc.get('product','')} {svc.get('version','')}"
+                )
 
         # Web enum findings
         web = active.get("web_enum", {})
@@ -183,6 +186,8 @@ def _fallback_analysis(self, results: Dict[str, Any]) -> Dict[str, Any]:
 
         services = active.get("services", {})
         for host, svc_map in services.items():
+            if not isinstance(svc_map, dict) or "error" in svc_map:
+                continue
             for port, svc in svc_map.items():
                 if not isinstance(svc, dict):
                     continue

modules/scanner/port_scanner.py

@@ -83,10 +83,11 @@ def service_detection(self, host: str, open_ports: List[str]) -> Dict[str, Dict[
         try:
             import nmap
             nm = nmap.PortScanner()
+            os_flag = "-O" if os.geteuid() == 0 else ""
             nm.scan(
                 hosts=host,
                 ports=ports_str,
-                arguments="-sV -sC -O --version-intensity 5 -T4 -n",
+                arguments=f"-sV -sC {os_flag} --version-intensity 5 -T4 -n".strip(),
                 timeout=self.nmap_timeout,
             )
 

requirements.txt

@@ -7,7 +7,7 @@ impacket==0.12.0
 groq==0.9.0
 python-whois==0.9.4
 rich==13.7.1
-weasyprint==62.3
+weasyprint==60.2
 python-dotenv==1.0.1
 pytest==8.2.2
 jinja2==3.1.4