CIRCL
/
lookyloo
mirror of https://github.com/CIRCL/lookyloo
2
0
Fork 0
Code Issues Releases Wiki Activity

fix: MISP lookup from Lookyloo.

pull/683/head
Raphaël Vinot 2023-05-04 10:20:54 +02:00
parent e39d2a590c
commit 14d4e0f2db
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
lookyloo/modules/misp.py
View File

@ -134,7 +134,11 @@ class MISP():
if self.available and self.enable_lookup: if self.available and self.enable_lookup:
tld = self.psl.publicsuffix(hostnode.name) tld = self.psl.publicsuffix(hostnode.name)
domain = re.sub(f'.{tld}$', '', hostnode.name).split('.')[-1] domain = re.sub(f'.{tld}$', '', hostnode.name).split('.')[-1]
to_lookup = [node.name, hostnode.name, f'{domain}.{tld}'] + hostnode.resolved_ips to_lookup = [node.name, hostnode.name, f'{domain}.{tld}']
if 'v4' in hostnode.resolved_ips:
to_lookup += hostnode.resolved_ips['v4']
if 'v6' in hostnode.resolved_ips:
to_lookup += hostnode.resolved_ips['v6']
if hasattr(hostnode, 'cnames'): if hasattr(hostnode, 'cnames'):
to_lookup += hostnode.cnames to_lookup += hostnode.cnames
if not node.empty_response: if not node.empty_response: