MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge branch 'main' of github.com:MISP/misp-modules

pull/709/head
Christian Studer 2024-12-18 09:29:22 +01:00
parent 6d29742459 9f1efde2f9
commit 9c83fa17ea
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
misp_modules/modules/expansion/reversedns.py
View File

@ -31,6 +31,8 @@ def handler(q=False):
toquery = request['ip-dst'] toquery = request['ip-dst']
elif request.get('ip-src'): elif request.get('ip-src'):
toquery = request['ip-src'] toquery = request['ip-src']
elif request.get('ip'):
toquery = request['ip']
elif request.get('domain|ip'): elif request.get('domain|ip'):
toquery = request['domain|ip'].split('|')[1] toquery = request['domain|ip'].split('|')[1]
else: else:
@ -38,11 +40,9 @@ def handler(q=False):
# reverse lookup for ip # reverse lookup for ip
revname = reversename.from_address(toquery) revname = reversename.from_address(toquery)
r = resolver.Resolver() r = resolver.Resolver()
r.timeout = 2 r.timeout = 2
r.lifetime = 2 r.lifetime = 2
if request.get('config'): if request.get('config'):
if request['config'].get('nameserver'): if request['config'].get('nameserver'):
nameservers = [] nameservers = []
@ -63,8 +63,7 @@ def handler(q=False):
misperrors['error'] = "DNS resolving error" misperrors['error'] = "DNS resolving error"
return misperrors return misperrors
r = {'results': [{'types': mispattributes['output'], r = {'results': [{'types': mispattributes['output'],'values':[str(answer[0])]}]}
'values':[str(answer[0])]}]}
return r return r