From 8d240e354142def43e2b3e2e556d6234880f284f Mon Sep 17 00:00:00 2001 From: Andreas Muehlemann Date: Thu, 20 Oct 2022 12:51:35 +0200 Subject: [PATCH] added ip-dst|port and ip-src|port to request --- misp_modules/modules/expansion/reversedns.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/misp_modules/modules/expansion/reversedns.py b/misp_modules/modules/expansion/reversedns.py index 3b945a7..d99108b 100644 --- a/misp_modules/modules/expansion/reversedns.py +++ b/misp_modules/modules/expansion/reversedns.py @@ -5,7 +5,7 @@ misperrors = {'error': 'Error'} mispattributes = {'input': ['ip-src', 'ip-dst', 'domain|ip'], 'output': ['hostname']} # possible module-types: 'expansion', 'hover' or both -moduleinfo = {'version': '0.1', 'author': 'Andreas Muehlemann', +moduleinfo = {'version': '0.2', 'author': 'Andreas Muehlemann', 'description': 'Simple Reverse DNS expansion service to resolve reverse DNS from MISP attributes', 'module-type': ['expansion', 'hover']} @@ -23,6 +23,10 @@ def handler(q=False): toquery = request['ip-src'] elif request.get('domain|ip'): toquery = request['domain|ip'].split('|')[1] + elif request.get('ip-src|port'): + toquery = request['ip-src|port'].split('|')[0] + elif request.get('ip-dst|port'): + toquery = request['ip-dst|port'].split('|')[0] else: return False