mihari 0.13.1 → 0.13.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. data/README.md +13 -13
  3. data/lib/mihari/analyzers/base.rb +1 -1
  4. data/lib/mihari/analyzers/urlscan.rb +1 -1
  5. data/lib/mihari/cli.rb +13 -13
  6. data/lib/mihari/emitters/base.rb +1 -1
  7. data/lib/mihari/retriable.rb +2 -2
  8. data/lib/mihari/version.rb +1 -1
  9. metadata +2 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: df5ec8a92b6bf1622274b5b488aa544520d15f0360e5274ba466f324f49d0e0e
4
- data.tar.gz: eb6149534d02b0ee551f37b7f01a65e3c936851fdb589bf21b1b938cb2f9d963
3
+ metadata.gz: c5a283261490c642311f94a2cb72a5a1596b2b5b2d3ba1b69d54b7ef785b4d39
4
+ data.tar.gz: '078f0fa96c14cd90a1c91ba1ca6235c453049b826719fc69db8e2c629e7fcc49'
5
5
  SHA512:
6
- metadata.gz: 51bd37cf056ad05ba6c5abd499b045ef963de6bb30414168229826a390ff0ee66a751204d6210336e668092a397f4d879c3a0ad39fcd84b381f11c77b42d7c74
7
- data.tar.gz: c1ad6709246b86ede8a204b2db51af678149fd5bccfec2701c6562cf52123b1215c18a644091e49f23f352e8d248bc40e1fc84523491c5893670b9bb8f3ee7d8
6
+ metadata.gz: d9189cbee2cce11c71342a06f741a8ff5d9351aedc0dd84e85378f8e2b4c88275812fa12cf0b8681965b09f27f7009bb7e7267cade8dd0c74655c11e28cd0d35
7
+ data.tar.gz: ead6cf8241cdba49266abdc455ba8d65287aa1defe9d8dd49a528b7061b26bcf7a23fb80c377d3c26a3a4554e3105aad57775affcf4ee5e720bf31885c1c9558
data/README.md CHANGED
@@ -69,22 +69,22 @@ mihari supports the following services by default.
69
69
  $ mihari
70
70
  Commands:
71
71
  mihari alerts # Show the alerts on TheHive
72
- mihari binaryedge [QUERY] # BinaryEdge lookup by a given query
73
- mihari censys [QUERY] # Censys IPv4 lookup by a given query
74
- mihari circl [DOMAIN|SHA1] # CIRCL passive DNS/SSL lookup by a given domain / SHA1 certificate fingerprint
75
- mihari crtsh [QUERY] # crt.sh lookup by a given query
76
- mihari dnpedia [QUERY] # DNPedia domain lookup by a given query
72
+ mihari binaryedge [QUERY] # BinaryEdge host search by a query
73
+ mihari censys [QUERY] # Censys IPv4 search by a query
74
+ mihari circl [DOMAIN|SHA1] # CIRCL passive DNS/SSL lookup by a domain / SHA1 certificate fingerprint
75
+ mihari crtsh [QUERY] # crt.sh search by a query
76
+ mihari dnpedia [QUERY] # DNPedia domain search by a query
77
77
  mihari help [COMMAND] # Describe available commands or one specific command
78
78
  mihari import_from_json # Give a JSON input via STDIN
79
- mihari onyphe [QUERY] # Onyphe datascan lookup by a given query
80
- mihari passivetotal [IP|DOMAIN|EMAIL|SHA1] # PassiveTotal lookup by a given ip / domain / email / SHA1 certificate fingerprint
81
- mihari securitytrails [IP|DOMAIN|EMAIL] # SecurityTrails lookup by a given ip, domain or email
82
- mihari securitytrails_domain_feed [REGEXP] # SecurityTrails new domain feed lookup by a given regexp
83
- mihari shodan [QUERY] # Shodan host lookup by a given query
79
+ mihari onyphe [QUERY] # Onyphe datascan search by a query
80
+ mihari passivetotal [IP|DOMAIN|EMAIL|SHA1] # PassiveTotal lookup by an ip / domain / email / SHA1 certificate fingerprint
81
+ mihari securitytrails [IP|DOMAIN|EMAIL] # SecurityTrails lookup by an ip, domain or email
82
+ mihari securitytrails_domain_feed [REGEXP] # SecurityTrails new domain feed search by a regexp
83
+ mihari shodan [QUERY] # Shodan host search by a query
84
84
  mihari status # Show the current configuration status
85
- mihari urlscan [QUERY] # urlscan lookup by a given query
86
- mihari virustotal [IP|DOMAIN] # VirusTotal resolutions lookup by a given ip or domain
87
- mihari zoomeye [QUERY] # ZoomEye lookup by a given query
85
+ mihari urlscan [QUERY] # urlscan search by a given query
86
+ mihari virustotal [IP|DOMAIN] # VirusTotal resolutions lookup by an ip or domain
87
+ mihari zoomeye [QUERY] # ZoomEye search by a query
88
88
 
89
89
  ```
90
90
 
data/lib/mihari/analyzers/base.rb CHANGED
@@ -77,7 +77,7 @@ module Mihari
77
77
  end
78
78
 
79
79
  def set_unique_artifacts
80
- retry_on_timeout { unique_artifacts }
80
+ retry_on_error { unique_artifacts }
81
81
  rescue ArgumentError => _e
82
82
  klass = self.class.to_s.split("::").last.to_s
83
83
  raise Error, "Please configure #{klass} API settings properly"
data/lib/mihari/analyzers/urlscan.rb CHANGED
@@ -40,7 +40,7 @@ module Mihari
40
40
  end
41
41
 
42
42
  def search
43
- api.search(query)
43
+ api.search(query, size: 10_000)
44
44
  rescue ::UrlScan::ResponseError => _e
45
45
  nil
46
46
  end
data/lib/mihari/cli.rb CHANGED
@@ -5,7 +5,7 @@ require "json"
5
5
 
6
6
  module Mihari
7
7
  class CLI < Thor
8
- desc "censys [QUERY]", "Censys IPv4 lookup by a given query"
8
+ desc "censys [QUERY]", "Censys IPv4 search by a query"
9
9
  method_option :title, type: :string, desc: "title"
10
10
  method_option :description, type: :string, desc: "description"
11
11
  method_option :tags, type: :array, desc: "tags"
@@ -16,7 +16,7 @@ module Mihari
16
16
  end
17
17
  end
18
18
 
19
- desc "shodan [QUERY]", "Shodan host lookup by a given query"
19
+ desc "shodan [QUERY]", "Shodan host search by a query"
20
20
  method_option :title, type: :string, desc: "title"
21
21
  method_option :description, type: :string, desc: "description"
22
22
  method_option :tags, type: :array, desc: "tags"
@@ -26,7 +26,7 @@ module Mihari
26
26
  end
27
27
  end
28
28
 
29
- desc "onyphe [QUERY]", "Onyphe datascan lookup by a given query"
29
+ desc "onyphe [QUERY]", "Onyphe datascan search by a query"
30
30
  method_option :title, type: :string, desc: "title"
31
31
  method_option :description, type: :string, desc: "description"
32
32
  method_option :tags, type: :array, desc: "tags"
@@ -36,7 +36,7 @@ module Mihari
36
36
  end
37
37
  end
38
38
 
39
- desc "urlscan [QUERY]", "urlscan lookup by a given query"
39
+ desc "urlscan [QUERY]", "urlscan search by a given query"
40
40
  method_option :title, type: :string, desc: "title"
41
41
  method_option :description, type: :string, desc: "description"
42
42
  method_option :tags, type: :array, desc: "tags"
@@ -47,7 +47,7 @@ module Mihari
47
47
  end
48
48
  end
49
49
 
50
- desc "virustotal [IP|DOMAIN]", "VirusTotal resolutions lookup by a given ip or domain"
50
+ desc "virustotal [IP|DOMAIN]", "VirusTotal resolutions lookup by an ip or domain"
51
51
  method_option :title, type: :string, desc: "title"
52
52
  method_option :description, type: :string, desc: "description"
53
53
  method_option :tags, type: :array, desc: "tags"
@@ -57,7 +57,7 @@ module Mihari
57
57
  end
58
58
  end
59
59
 
60
- desc "securitytrails [IP|DOMAIN|EMAIL]", "SecurityTrails lookup by a given ip, domain or email"
60
+ desc "securitytrails [IP|DOMAIN|EMAIL]", "SecurityTrails lookup by an ip, domain or email"
61
61
  method_option :title, type: :string, desc: "title"
62
62
  method_option :description, type: :string, desc: "description"
63
63
  method_option :tags, type: :array, desc: "tags"
@@ -68,7 +68,7 @@ module Mihari
68
68
  end
69
69
  map "st" => :securitytrails
70
70
 
71
- desc "securitytrails_domain_feed [REGEXP]", "SecurityTrails new domain feed lookup by a given regexp"
71
+ desc "securitytrails_domain_feed [REGEXP]", "SecurityTrails new domain feed search by a regexp"
72
72
  method_option :title, type: :string, desc: "title"
73
73
  method_option :description, type: :string, desc: "description"
74
74
  method_option :tags, type: :array, desc: "tags"
@@ -80,7 +80,7 @@ module Mihari
80
80
  end
81
81
  map "st_domain_feed" => :securitytrails_domain_feed
82
82
 
83
- desc "crtsh [QUERY]", "crt.sh lookup by a given query"
83
+ desc "crtsh [QUERY]", "crt.sh search by a query"
84
84
  method_option :title, type: :string, desc: "title"
85
85
  method_option :description, type: :string, desc: "description"
86
86
  method_option :tags, type: :array, desc: "tags"
@@ -90,7 +90,7 @@ module Mihari
90
90
  end
91
91
  end
92
92
 
93
- desc "dnpedia [QUERY]", "DNPedia domain lookup by a given query"
93
+ desc "dnpedia [QUERY]", "DNPedia domain search by a query"
94
94
  method_option :title, type: :string, desc: "title"
95
95
  method_option :description, type: :string, desc: "description"
96
96
  method_option :tags, type: :array, desc: "tags"
@@ -100,7 +100,7 @@ module Mihari
100
100
  end
101
101
  end
102
102
 
103
- desc "circl [DOMAIN|SHA1]", "CIRCL passive DNS/SSL lookup by a given domain / SHA1 certificate fingerprint"
103
+ desc "circl [DOMAIN|SHA1]", "CIRCL passive DNS/SSL lookup by a domain / SHA1 certificate fingerprint"
104
104
  method_option :title, type: :string, desc: "title"
105
105
  method_option :description, type: :string, desc: "description"
106
106
  method_option :tags, type: :array, desc: "tags"
@@ -110,7 +110,7 @@ module Mihari
110
110
  end
111
111
  end
112
112
 
113
- desc "passivetotal [IP|DOMAIN|EMAIL|SHA1]", "PassiveTotal lookup by a given ip / domain / email / SHA1 certificate fingerprint"
113
+ desc "passivetotal [IP|DOMAIN|EMAIL|SHA1]", "PassiveTotal lookup by an ip / domain / email / SHA1 certificate fingerprint"
114
114
  method_option :title, type: :string, desc: "title"
115
115
  method_option :description, type: :string, desc: "description"
116
116
  method_option :tags, type: :array, desc: "tags"
@@ -120,7 +120,7 @@ module Mihari
120
120
  end
121
121
  end
122
122
 
123
- desc "zoomeye [QUERY]", "ZoomEye lookup by a given query"
123
+ desc "zoomeye [QUERY]", "ZoomEye search by a query"
124
124
  method_option :title, type: :string, desc: "title"
125
125
  method_option :description, type: :string, desc: "description"
126
126
  method_option :tags, type: :array, desc: "tags"
@@ -131,7 +131,7 @@ module Mihari
131
131
  end
132
132
  end
133
133
 
134
- desc "binaryedge [QUERY]", "BinaryEdge lookup by a given query"
134
+ desc "binaryedge [QUERY]", "BinaryEdge host search by a query"
135
135
  method_option :title, type: :string, desc: "title"
136
136
  method_option :description, type: :string, desc: "description"
137
137
  method_option :tags, type: :array, desc: "tags"
data/lib/mihari/emitters/base.rb CHANGED
@@ -16,7 +16,7 @@ module Mihari
16
16
  end
17
17
 
18
18
  def run(**params)
19
- retry_on_timeout { emit(params) }
19
+ retry_on_error { emit(params) }
20
20
  end
21
21
 
22
22
  def emit(*)
data/lib/mihari/retriable.rb CHANGED
@@ -2,12 +2,12 @@
2
2
 
3
3
  module Mihari
4
4
  module Retriable
5
- def retry_on_timeout(times: 3, interval: 10)
5
+ def retry_on_error(times: 3, interval: 10)
6
6
  try = 0
7
7
  begin
8
8
  try += 1
9
9
  yield
10
- rescue Timeout::Error => _e
10
+ rescue Errno::ECONNRESET, Errno::ECONNABORTED, Errno::EPIPE, OpenSSL::SSL::SSLError, Timeout::Error => _e
11
11
  sleep interval
12
12
  retry if try < times
13
13
  raise
data/lib/mihari/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module Mihari
4
- VERSION = "0.13.1"
4
+ VERSION = "0.13.2"
5
5
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: mihari
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.13.1
4
+ version: 0.13.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Manabu Niseki
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-10-28 00:00:00.000000000 Z
11
+ date: 2019-11-08 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler