CIRCL
/
AIL-framework
mirror of https://github.com/CIRCL/AIL-framework
2
1
Fork 0
Code Issues Releases Wiki Activity

chg: [misp_modules] add enrichment request

pull/422/head
Terrtia 2019-07-23 17:09:29 +02:00
parent 8cbfec51f6
commit 6295560216
No known key found for this signature in database
GPG Key ID: 1E1B1F50D84613D0
1 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
bin/packages/MispModules.py
View File

@ -31,10 +31,16 @@ def init_module_config(module_json, config, config_path=default_config_path):
print(module_json['name']) print(module_json['name'])
return config return config
def misp_module_enrichement(misp_module_url, misp_module_port, request_content): def build_enrichment_request_json(module_name, var_name, var_value):
request_dict = {'module': module_name, var_name: var_value}
# # TODO: add error handler
return json.dumps(request_dict)
def misp_module_enrichement_request(misp_module_url, misp_module_port, request_content):
endpoint_url = '{}:{}/query'.format(misp_module_url, misp_module_port) endpoint_url = '{}:{}/query'.format(misp_module_url, misp_module_port)
req = requests.post(endpoint_url, headers={'Content-Type': 'application/json'}, data=request_content) req = requests.post(endpoint_url, headers={'Content-Type': 'application/json'}, data=request_content)
print(req.json()) if req.status_code == 200:
print(req.json())
if __name__ == "__main__": if __name__ == "__main__":
req = requests.get('{}/modules'.format(misp_module_url)) req = requests.get('{}/modules'.format(misp_module_url))
@ -60,8 +66,8 @@ if __name__ == "__main__":
misp_module_url = 'http://localhost' misp_module_url = 'http://localhost'
misp_module_port = 6666 misp_module_port = 6666
test_content = json.dumps({'module': 'btc_steroids', 'btc': '1hmZdUYHyqH3DmWyduRRW3HT8Vm6PHsD1'}) test_content = build_enrichment_request_json('btc_steroids', 'btc', 'btc address')
misp_module_enrichement(misp_module_url, misp_module_port, test_content) misp_module_enrichement_request(misp_module_url, misp_module_port, test_content)
else: else: