fix: MISP lookup from Lookyloo.

pull/683/head
Raphaël Vinot 2023-05-04 10:20:54 +02:00
parent e39d2a590c
commit 14d4e0f2db
1 changed files with 5 additions and 1 deletions

View File

@ -134,7 +134,11 @@ class MISP():
if self.available and self.enable_lookup:
tld = self.psl.publicsuffix(hostnode.name)
domain = re.sub(f'.{tld}$', '', hostnode.name).split('.')[-1]
to_lookup = [node.name, hostnode.name, f'{domain}.{tld}'] + hostnode.resolved_ips
to_lookup = [node.name, hostnode.name, f'{domain}.{tld}']
if 'v4' in hostnode.resolved_ips:
to_lookup += hostnode.resolved_ips['v4']
if 'v6' in hostnode.resolved_ips:
to_lookup += hostnode.resolved_ips['v6']
if hasattr(hostnode, 'cnames'):
to_lookup += hostnode.cnames
if not node.empty_response: