v3n0m-Scanner / V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
GNU General Public License v3.0
1.46k stars 407 forks source link

Minor deps update in lock file & Poetry is now the system for deps #219

Closed vittring closed 2 years ago

vittring commented 2 years ago

Our Dockerfile now uses Poetry for dependencies.

Poetry is a very versatile tool that I've been hoping to finalize the merge into the repo. It contains an effective versioning system for installing compatible libraries and modules. It attempts to keep everything working automatically across all operating systems. You should no longer have any issues with your copy of venom as long as you do NOT manually install any packages, which is only recommended for Arch at this point. Everyone else, especially Ubuntu, can simply install poetry once and poetry update as needed. If you update Python in the future, make sure to update the packages, it will attempt to sanely update packages that won't result in conflicts and will keep version that will from updating unless forced. Ex:

Creating virtualenv venom-KXcR3YgS-py3.8 in /home/user/.cache/pypoetry/virtualenvs
Installing dependencies from lock file

Package operations: 25 installs, 0 updates, 0 removals

  • Installing frozenlist (1.2.0)
  • Installing idna (3.3)
  • Installing multidict (5.2.0)
  • Installing soupsieve (2.3.1)
  • Installing aiosignal (1.2.0)
  • Installing async-timeout (4.0.2)
  • Installing attrs (21.4.0)
  • Installing beautifulsoup4 (4.10.0)
  • Installing certifi (2021.10.8)
  • Installing charset-normalizer (2.0.10)
  • Installing pyparsing (3.0.7)
  • Installing pytz (2021.3)
  • Installing urllib3 (1.26.8)
  • Installing yarl (1.7.2)
  • Installing zope.interface (5.4.0)
  • Installing aiohttp (3.8.1)
  • Installing asyncio (3.4.3)
  • Installing bs4 (0.0.1)
  • Installing datetime (4.3)
  • Installing dnspython (2.2.0)
  • Installing httplib2 (0.20.2)
  • Installing requests (2.27.1)
  • Installing socksipy-branch (1.01)
  • Installing termcolor (1.1.0)
  • Installing tqdm (4.62.3)

You can install Poetry with the same settings in the Dockerfile:

curl -sSL https://raw.githubusercontent.com/sdispater/poetry/master/get-poetry.py | python

This isn't an advertisement for Poetry but seriously, you won't find a better system for sane updates of dependencies in your Python projects.

vittring commented 2 years ago

Had to make a few minor adjustments because for some reason you can't install some of the dependencies using Poetry, because the sort of thing that would make things easier for developing are the sort of thing the Python gods fucking hate to see us use.

vittring commented 2 years ago

Should be ready for merge now, @kattstof!

kattstof commented 2 years ago

sorry had some irl issues to attend to so was AFK