Merge pull request #444 from kimocoder/claude/scan-repo-analysis-o0Xmt

fix: resolve two medium-severity issues

Author: kimocoder

wifite/tools/airodump.py

@@ -224,11 +224,14 @@ def get_targets(self, old_targets=None, apply_filter=True, target_archives=None)
     def get_targets_from_csv(csv_filename):
         """Returns list of Target objects parsed from CSV file."""
         targets2 = []
-        import chardet
         import csv
 
-        with open(csv_filename, "rb") as rawdata:
-            encoding = chardet.detect(rawdata.read())['encoding'] or 'utf-8'
+        try:
+            import chardet
+            with open(csv_filename, "rb") as rawdata:
+                encoding = chardet.detect(rawdata.read())['encoding'] or 'utf-8'
+        except ImportError:
+            encoding = 'utf-8'
 
         with open(csv_filename, 'r', encoding=encoding, errors='ignore') as csvopen:
             lines = []

wifite/util/logger.py

@@ -78,8 +78,10 @@ def initialize(cls, log_file: Optional[str] = None, verbose: int = 0, enabled: b
                 if log_dir and not os.path.exists(log_dir):
                     os.makedirs(log_dir, mode=0o700)
 
-                # Write header
-                with open(log_file, 'a') as f:
+                # Write header — open with explicit 0o600 so the log file
+                # is owner-readable only, regardless of the process umask.
+                fd = os.open(log_file, os.O_WRONLY | os.O_CREAT | os.O_APPEND, 0o600)
+                with os.fdopen(fd, 'a') as f:
                     f.write(f"\n{'='*80}\n")
                     f.write(f"Wifite2 Log - {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}\n")
                     f.write(f"{'='*80}\n")