mihari 2.3.1 → 3.1.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (108) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +7 -0
  3. data/.overcommit.yml +12 -0
  4. data/README.md +1 -9
  5. data/docker/Dockerfile +1 -1
  6. data/exe/mihari +1 -1
  7. data/lib/mihari.rb +89 -15
  8. data/lib/mihari/analyzers/base.rb +49 -8
  9. data/lib/mihari/analyzers/basic.rb +1 -2
  10. data/lib/mihari/analyzers/binaryedge.rb +7 -13
  11. data/lib/mihari/analyzers/censys.rb +26 -63
  12. data/lib/mihari/analyzers/circl.rb +20 -17
  13. data/lib/mihari/analyzers/crtsh.rb +6 -13
  14. data/lib/mihari/analyzers/dnpedia.rb +6 -12
  15. data/lib/mihari/analyzers/dnstwister.rb +13 -10
  16. data/lib/mihari/analyzers/onyphe.rb +6 -12
  17. data/lib/mihari/analyzers/otx.rb +22 -19
  18. data/lib/mihari/analyzers/passivetotal.rb +22 -21
  19. data/lib/mihari/analyzers/pulsedive.rb +16 -13
  20. data/lib/mihari/analyzers/rule.rb +97 -0
  21. data/lib/mihari/analyzers/securitytrails.rb +22 -19
  22. data/lib/mihari/analyzers/shodan.rb +7 -13
  23. data/lib/mihari/analyzers/spyse.rb +12 -19
  24. data/lib/mihari/analyzers/urlscan.rb +22 -27
  25. data/lib/mihari/analyzers/virustotal.rb +25 -22
  26. data/lib/mihari/analyzers/zoomeye.rb +14 -20
  27. data/lib/mihari/cli/analyzer.rb +44 -0
  28. data/lib/mihari/cli/base.rb +27 -0
  29. data/lib/mihari/cli/init.rb +13 -0
  30. data/lib/mihari/cli/main.rb +30 -0
  31. data/lib/mihari/cli/mixins/utils.rb +88 -0
  32. data/lib/mihari/cli/validator.rb +11 -0
  33. data/lib/mihari/commands/binaryedge.rb +1 -1
  34. data/lib/mihari/commands/censys.rb +1 -1
  35. data/lib/mihari/commands/circl.rb +2 -2
  36. data/lib/mihari/commands/crtsh.rb +1 -1
  37. data/lib/mihari/commands/dnpedia.rb +1 -1
  38. data/lib/mihari/commands/dnstwister.rb +2 -2
  39. data/lib/mihari/commands/init.rb +46 -0
  40. data/lib/mihari/commands/json.rb +1 -1
  41. data/lib/mihari/commands/onyphe.rb +1 -1
  42. data/lib/mihari/commands/otx.rb +2 -2
  43. data/lib/mihari/commands/passivetotal.rb +2 -2
  44. data/lib/mihari/commands/pulsedive.rb +2 -2
  45. data/lib/mihari/commands/search.rb +77 -0
  46. data/lib/mihari/commands/securitytrails.rb +2 -2
  47. data/lib/mihari/commands/shodan.rb +1 -1
  48. data/lib/mihari/commands/spyse.rb +1 -1
  49. data/lib/mihari/commands/urlscan.rb +2 -2
  50. data/lib/mihari/commands/validator.rb +38 -0
  51. data/lib/mihari/commands/virustotal.rb +2 -2
  52. data/lib/mihari/commands/zoomeye.rb +1 -1
  53. data/lib/mihari/constraints.rb +5 -0
  54. data/lib/mihari/database.rb +13 -2
  55. data/lib/mihari/emitters/base.rb +2 -2
  56. data/lib/mihari/emitters/database.rb +1 -1
  57. data/lib/mihari/emitters/misp.rb +3 -1
  58. data/lib/mihari/emitters/slack.rb +6 -10
  59. data/lib/mihari/emitters/the_hive.rb +1 -1
  60. data/lib/mihari/emitters/webhook.rb +53 -0
  61. data/lib/mihari/mixins/configurable.rb +38 -0
  62. data/lib/mihari/mixins/configuration.rb +90 -0
  63. data/lib/mihari/mixins/hash.rb +20 -0
  64. data/lib/mihari/mixins/refang.rb +21 -0
  65. data/lib/mihari/mixins/retriable.rb +27 -0
  66. data/lib/mihari/mixins/rule.rb +79 -0
  67. data/lib/mihari/models/alert.rb +28 -1
  68. data/lib/mihari/models/artifact.rb +11 -1
  69. data/lib/mihari/notifiers/base.rb +9 -1
  70. data/lib/mihari/notifiers/exception_notifier.rb +50 -0
  71. data/lib/mihari/notifiers/slack.rb +29 -1
  72. data/lib/mihari/schemas/configuration.rb +42 -0
  73. data/lib/mihari/schemas/macros.rb +17 -0
  74. data/lib/mihari/schemas/rule.rb +72 -0
  75. data/lib/mihari/serializers/artifact.rb +1 -1
  76. data/lib/mihari/status.rb +14 -0
  77. data/lib/mihari/templates/rule.yml.erb +19 -0
  78. data/lib/mihari/type_checker.rb +8 -3
  79. data/lib/mihari/version.rb +1 -1
  80. data/lib/mihari/web/controllers/base_controller.rb +1 -1
  81. data/lib/mihari/web/public/index.html +1 -21
  82. data/lib/mihari/web/public/redoc-static.html +2 -2
  83. data/lib/mihari/web/public/static/js/app.ab213f7c.js +12 -0
  84. data/lib/mihari/web/public/static/js/app.ab213f7c.js.map +1 -0
  85. data/mihari.gemspec +19 -12
  86. metadata +138 -65
  87. data/.rubocop.yml +0 -161
  88. data/lib/mihari/analyzers/free_text.rb +0 -48
  89. data/lib/mihari/analyzers/http_hash.rb +0 -100
  90. data/lib/mihari/analyzers/passive_dns.rb +0 -59
  91. data/lib/mihari/analyzers/passive_ssl.rb +0 -55
  92. data/lib/mihari/analyzers/reverse_whois.rb +0 -55
  93. data/lib/mihari/analyzers/securitytrails_domain_feed.rb +0 -59
  94. data/lib/mihari/analyzers/ssh_fingerprint.rb +0 -58
  95. data/lib/mihari/cli.rb +0 -126
  96. data/lib/mihari/commands/config.rb +0 -27
  97. data/lib/mihari/commands/free_text.rb +0 -21
  98. data/lib/mihari/commands/http_hash.rb +0 -25
  99. data/lib/mihari/commands/passive_dns.rb +0 -21
  100. data/lib/mihari/commands/passive_ssl.rb +0 -21
  101. data/lib/mihari/commands/reverse_whois.rb +0 -21
  102. data/lib/mihari/commands/securitytrails_domain_feed.rb +0 -23
  103. data/lib/mihari/commands/ssh_fingerprint.rb +0 -21
  104. data/lib/mihari/config.rb +0 -83
  105. data/lib/mihari/configurable.rb +0 -21
  106. data/lib/mihari/html.rb +0 -43
  107. data/lib/mihari/retriable.rb +0 -17
  108. data/lib/mihari/slack_monkeypatch.rb +0 -16
data/lib/mihari/configurable.rb DELETED
@@ -1,21 +0,0 @@
1
- # frozen_string_literal: true
2
-
3
- module Mihari
4
- module Configurable
5
- def configured?
6
- config_keys.all? { |key| Mihari.config.send(key) }
7
- end
8
-
9
- def configuration_values
10
- return nil if config_keys.empty?
11
-
12
- config_keys.map do |key|
13
- { key: key.upcase, value: Mihari.config.send(key) }
14
- end
15
- end
16
-
17
- def config_keys
18
- []
19
- end
20
- end
21
- end
data/lib/mihari/html.rb DELETED
@@ -1,43 +0,0 @@
1
- # frozen_string_literal: true
2
-
3
- require "digest/sha2"
4
- require "murmurhash3"
5
-
6
- module Mihari
7
- class HTML
8
- attr_reader :path
9
-
10
- def initialize(path)
11
- @path = path
12
- end
13
-
14
- def exists?
15
- return false unless path
16
-
17
- File.exist? path
18
- end
19
-
20
- def sha256
21
- Digest::SHA256.hexdigest data
22
- end
23
-
24
- def md5
25
- Digest::MD5.hexdigest data
26
- end
27
-
28
- def mmh3
29
- hash = MurmurHash3::V32.str_hash(data)
30
- if (hash & 0x80000000).zero?
31
- hash
32
- else
33
- -((hash ^ 0xFFFFFFFF) + 1)
34
- end
35
- end
36
-
37
- private
38
-
39
- def data
40
- File.read path
41
- end
42
- end
43
- end
data/lib/mihari/retriable.rb DELETED
@@ -1,17 +0,0 @@
1
- # frozen_string_literal: true
2
-
3
- module Mihari
4
- module Retriable
5
- def retry_on_error(times: 3, interval: 10)
6
- try = 0
7
- begin
8
- try += 1
9
- yield
10
- rescue Errno::ECONNRESET, Errno::ECONNABORTED, Errno::EPIPE, OpenSSL::SSL::SSLError, Timeout::Error, RetryableError => e
11
- sleep interval
12
- retry if try < times
13
- raise e
14
- end
15
- end
16
- end
17
- end
data/lib/mihari/slack_monkeypatch.rb DELETED
@@ -1,16 +0,0 @@
1
- # frozen_string_literal: true
2
-
3
- module Slack
4
- class Notifier
5
- module Util
6
- class LinkFormatter
7
- class << self
8
- def format(string, opts = {})
9
- # Resolve warning in Ruby 2.7
10
- LinkFormatter.new(string, **opts).formatted
11
- end
12
- end
13
- end
14
- end
15
- end
16
- end