From 9f1efde2f9fd9e9279bc3acf18de0b3c54acc981 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Tue, 17 Dec 2024 20:59:17 +0100 Subject: [PATCH] fix: [reversedns] add the `ip` attribute type --- misp_modules/modules/expansion/reversedns.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/misp_modules/modules/expansion/reversedns.py b/misp_modules/modules/expansion/reversedns.py index 5cb795c5..5a2adc4a 100644 --- a/misp_modules/modules/expansion/reversedns.py +++ b/misp_modules/modules/expansion/reversedns.py @@ -31,6 +31,8 @@ def handler(q=False): toquery = request['ip-dst'] elif request.get('ip-src'): toquery = request['ip-src'] + elif request.get('ip'): + toquery = request['ip'] elif request.get('domain|ip'): toquery = request['domain|ip'].split('|')[1] else: @@ -38,11 +40,9 @@ def handler(q=False): # reverse lookup for ip revname = reversename.from_address(toquery) - r = resolver.Resolver() r.timeout = 2 r.lifetime = 2 - if request.get('config'): if request['config'].get('nameserver'): nameservers = [] @@ -63,8 +63,7 @@ def handler(q=False): misperrors['error'] = "DNS resolving error" return misperrors - r = {'results': [{'types': mispattributes['output'], - 'values':[str(answer[0])]}]} + r = {'results': [{'types': mispattributes['output'],'values':[str(answer[0])]}]} return r