From 839c8de0ebb163ecf5f616b833269597533fbb7c Mon Sep 17 00:00:00 2001 From: chrisr3d Date: Fri, 16 Nov 2018 10:02:19 +0100 Subject: [PATCH] add: Update to support attribute hostname|port --- misp_modules/modules/expansion/dns.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/misp_modules/modules/expansion/dns.py b/misp_modules/modules/expansion/dns.py index 41da8b21..f7435274 100755 --- a/misp_modules/modules/expansion/dns.py +++ b/misp_modules/modules/expansion/dns.py @@ -2,8 +2,8 @@ import json import dns.resolver misperrors = {'error': 'Error'} -mispattributes = {'input': ['hostname', 'domain', 'domain|ip'], 'output': ['ip-src', - 'ip-dst']} +mispattributes = {'input': ['hostname', 'hostname|port', 'domain', 'domain|ip'], + 'output': ['ip-src', 'ip-dst']} moduleinfo = {'version': '0.2', 'author': 'Alexandre Dulaunoy', 'description': 'Simple DNS expansion service to resolve IP address from MISP attributes', 'module-type': ['expansion', 'hover']} @@ -21,6 +21,8 @@ def handler(q=False): toquery = request['domain'] elif request.get('domain|ip'): toquery = request['domain|ip'].split('|')[0] + elif request.get('hostname|port'): + toquery = request['hostname|port'].split('|')[0] else: return False r = dns.resolver.Resolver()