MISP
/
misp-modules
mirror of https://github.com/MISP/misp-modules
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: Modified output format

pull/150/head
chrisr3d 2018-01-16 19:46:52 +01:00
parent dcab9aa150
commit d045cf7d5f
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 10 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
misp_modules/modules/expansion/rbl.py
View File

@ -87,26 +87,21 @@ def handler(q=False):
else: else:
misperrors['error'] = "Unsupported attributes type" misperrors['error'] = "Unsupported attributes type"
return misperrors return misperrors
results = {} listed = []
results['query'] = ip info = []
results['date'] = datetime.datetime.utcnow().replace(tzinfo=datetime.timezone.utc).isoformat()
results['listed'] = []
results['info'] = []
results['not_listed'] = []
for rbl in rbls: for rbl in rbls:
ipRev = '.'.join(ip.split('.')[::-1]) ipRev = '.'.join(ip.split('.')[::-1])
query = '{}.{}'.format(ipRev, rbl) query = '{}.{}'.format(ipRev, rbl)
try:
resolver.query(query,'A')
try: try:
txt = resolver.query(query,'TXT') txt = resolver.query(query,'TXT')
listed.append(query)
info.append(str(txt[0]))
except: except:
results['listed'].append(query) continue
results['listed'].append(query) result = {}
results['info'].append(str(txt[0])) for l, i in zip(listed, info):
except: result[l] = i
results['not_listed'].append(query) r = {'results': [{'types': mispattributes.get('output'), 'values': json.dumps(result)}]}
r = {'results': [{'types': mispattributes.get('output'), 'values': json.dumps(results)}]}
return r return r
def introspection(): def introspection():