fushin 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2886480988a7953bf20c22ffd1ab3590926c5121700b2aaf007bebe3c93438fd
-  data.tar.gz: abbf709568fc79ff6d57aee267d0cf4b3875a783410b2594a40430126c734db1
+  metadata.gz: f402cb7c3070e77bb107ced253fd8e45523cc3b3b9959513f7f433bc09b509f4
+  data.tar.gz: ec513abb9b13997529979700eb708512265d5c5453ea5fe66f95dee6588f18f6
 SHA512:
-  metadata.gz: '098de7ee37619d0403ed2f94bebad99e740bbbeb358fd364247a3f9990cebab816d16974188f70d35500d4c0d09ab1b128b492278c162a5306c030e5c6d4840e'
-  data.tar.gz: 9bb31068ef6d71371ae3fb6507f18fc8f49bb4de02c4703f8691e60fdbdcc412d9f3d8fa1b33ea6b22b4e71cb0a3e7e6ef2294f7dd15feed457634fdfd13588f
+  metadata.gz: a7fdd518f8563d0ad64fc10d26040ba9d28148592d3aa76163d0bd7007bc3b54c9f3271b8e6b29029f2220503cdd6973da622edccf9c95bdf3419b3cc71d7efc
+  data.tar.gz: 5d66cc5cedd1cbc2d8e940a90f1bda5405a1bccaac070a9fd27690d4f9b9b2e4ce0a112688f29c61f3a191976c957c5ea429b3a96d0edb3926da3e335a3b555f

data/README.md

@@ -12,7 +12,7 @@ A malicious blog posts monitoring tool.
 - [x] Extract IoCs(BTC, URL) from a blog post
 - [x] Post extracted IoCs to Slack (or STDOUT) with enrichment
 - [x] Attachment handling
-  - Scan a URL via Hybrid Analysis
+  - Scan a URL on Hybrid Analysis
 
 ## Supported blog types
 
@@ -28,6 +28,14 @@ A malicious blog posts monitoring tool.
 gem install fushin
 ```
 
+## Configuration
+
+Please set the following environment variables:
+
+- `SLACK_WEBHOOK_URL`: Slack Webhook URL
+- `SLACK_CHANNEL`: Slack channel name
+- `HA_API_KEY`: Hybrid Analysis API key
+
 ## Usage
 
 ```shell

data/fushin.gemspec

@@ -33,6 +33,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "webmock", "~> 3.5"
 
   spec.add_dependency "charlock_holmes", '~> 0.7'
+  spec.add_dependency "embiggen", "~> 1.5"
   spec.add_dependency "http", "~> 4.0"
   spec.add_dependency "lightly", "~> 0.3"
   spec.add_dependency "oga", "~> 2.15"

data/lib/fushin/models/btc.rb

@@ -12,18 +12,18 @@ module Fushin
         "BTC: #{address}"
       end
 
-      def blockchain_link
-        "https://www.blockchain.com/btc/address/#{address}"
+      def bitcoin_abuse_link
+        "https://www.bitcoinabuse.com/reports/#{address}"
       end
 
       def to_attachements
         [
           {
-            fallback: "blockchain.com link",
+            fallback: "bitcoinabuse.com link",
             title: title,
-            title_link: blockchain_link,
-            footer: "blockchain.com",
-            footer_icon: "http://www.google.com/s2/favicons?domain=blockchain.com"
+            title_link: bitcoin_abuse_link,
+            footer: "bitcoinabuse.com",
+            footer_icon: "http://www.google.com/s2/favicons?domain=bitcoinabuse.com"
           }
         ]
       end

data/lib/fushin/models/website.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "embiggen"
 require "digest/sha2"
 require "uri"
 
@@ -8,7 +9,8 @@ module Fushin
     class Website < Model
       attr_reader :url
       def initialize(url)
-        @url = url
+        uri = Embiggen::URI(url)
+        @url = uri.expand.to_s
       end
 
       def uri

data/lib/fushin/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Fushin
-  VERSION = "0.2.0"
+  VERSION = "0.3.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: fushin
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Manabu Niseki
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-02-02 00:00:00.000000000 Z
+date: 2019-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -122,6 +122,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.7'
+- !ruby/object:Gem::Dependency
+  name: embiggen
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
 - !ruby/object:Gem::Dependency
   name: http
   requirement: !ruby/object:Gem::Requirement
@@ -229,7 +243,6 @@ files:
 - lib/fushin/cache.rb
 - lib/fushin/config/whitelisted_domains.yml
 - lib/fushin/erros.rb
-- lib/fushin/http/headers.rb
 - lib/fushin/hybrid_analysis.rb
 - lib/fushin/item.rb
 - lib/fushin/models/attachment.rb