misp-modules/documentation/website/expansion/circl_passivessl.json

14 lines
732 B
JSON
Raw Normal View History

{
"description": "Modules to access CIRCL Passive SSL.",
"logo": "passivessl.png",
"requirements": [
"pypssl: Passive SSL python library",
"A CIRCL passive SSL account with username & password"
],
"input": "IP address attribute.",
"output": "x509 certificate objects seen by the IP address(es).",
"features": "This module takes an ip-address (ip-src or ip-dst) attribute as input, and queries the CIRCL Passive SSL REST API to gather the related certificates and return the corresponding MISP objects.\n\nTo make it work a username and a password are required to authenticate to the CIRCL Passive SSL API.",
"references": [
"https://www.circl.lu/services/passive-ssl/"
]
}