MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge 49e44961aa into 1908b5cdca

pull/124/merge
To-om 2018-02-02 09:04:22 +00:00 committed by GitHub
parent 1908b5cdca 49e44961aa
commit a5ca505ddb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
misp_modules/modules/expansion/whois.py
View File

@ -2,9 +2,9 @@
import json
try:
from uwhois import Uwhois
from uwhoisd import UWhois
except ImportError:
print("uwhois module not installed.")
UWhois = None
misperrors = {'error': 'Error'}
mispattributes = {'input': ['domain', 'ip-src', 'ip-dst'], 'output': ['freetext']}
@ -18,6 +18,9 @@ moduleconfig = ['server', 'port']
def handler(q=False):
if q is False:
return False
if UWhois is None:
misperrors['error'] = "uwhoisd module not installed."
return misperrors
request = json.loads(q)
if request.get('domain'):
toquery = request['domain']
@ -33,7 +36,7 @@ def handler(q=False):
misperrors['error'] = 'EUPI authentication is missing'
return misperrors
uwhois = Uwhois(request['config']['server'], int(request['config']['port']))
uwhois = UWhois(request['config']['server'], int(request['config']['port']))
if 'event_id' in request:
return handle_expansion(uwhois, toquery)