passivetotal 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3a5c4295b8d9ad1670b868891fe25e1bdefd0b49
-  data.tar.gz: 1900ed9a136ea09cf7756f7119a4a59338ddc729
+  metadata.gz: 85bce6ee916bb8a5e96cc67480e16d83c66f0cca
+  data.tar.gz: ebd30157e8c383b021470901978b00409555c181
 SHA512:
-  metadata.gz: 7aa3c8d247c8388b3f7b0c46b88cacc10110af9418b59937e850c6442db1990ee16f6a02fdcee9d561e37af989164a01aacb9205c12d7c4a3df0bd371c3ad74a
-  data.tar.gz: 06de2d45b2f0ad06af9ec828ec5029fe75900635084124ab0d5d069b16e5edb9b07435b073ac4b1753a8e2045943df9fedd3359fb1c677dd40ba94866ee10602
+  metadata.gz: d471517e4c76f369bae5db3a817ff6fd186da54bc579dbda3d6e0b468d66bea6316e827d794e7782ecda1138c4fa733e655e8e6f9ca4d6d774f3155053e1fcb3
+  data.tar.gz: c2dfa0a1e729101bc703ad7bbe7ae9586041a2fcbf2945bf54e8d2e9125adfd6e089ee8b4ff735d61542e03acb815f265fae15de32416f8cbcac78643dd45c4a

data/README.md

@@ -54,32 +54,60 @@ Included in the gem is a command-line tool, passivetotal, with the following usa
     pt = PassiveTotal::API.new(user, apikey)
     # Create an array to shove results into
     res = Array.new
-    # query enrichment for the domain, www.passivetotal.org
-    res << @pt.enrichment('www.passivetotal.org')
-    # query enrichment for the ipv4 address, 107.170.89.121
-    res << @pt.enrichment('107.170.89.121')
+    
+    # ACCOUNT API
+    # Get account details your account.
+    res << @pt.account
+    # Get history associated with your account.
+    res << @pt.history
+    # Get notifications that have been posted to your account.
+    res << @pt.notifications
+    # Get details about the organization your account is associated with.
+    res << @pt.organization
+    # Get the teamstream for the organization your account is associated with.
+    res << @pt.teamstream
+    # Get source details for a specific source.
+    res << @pt.sources('riskiq')
+    
+    # DNS API
     # query passive DNS results for the domain, www.passivetotal.org
     res << @pt.passive('www.passivetotal.org')
     # query passive DNS results for the ipv4 address, 107.170.89.121
     res << @pt.passive('107.170.89.121')
-    # query for subdomains of passivetotal.org
-    res << @pt.subdomains('*.passivetotal.org')
     # query for unique IPv4 resolutions of passivetotal.org
     res << @pt.unique('passivetotal.org')
-    # query for the classification of www.passivetotal.org
-    res << @pt.classification('www.passivetotal.org')
-    # set the classification of www.passivetotal.org as benign
-    res << @pt.classification('www.passivetotal.org', 'non-malicious')
+    
+    # ENRICHMENT API
+    # query enrichment for the domain, www.passivetotal.org
+    res << @pt.enrichment('www.passivetotal.org')
+    # query enrichment for the ipv4 address, 107.170.89.121
+    res << @pt.enrichment('107.170.89.121')
+    # Get malware data
+    res << @pt.malware('noorno.com')
+    # query for malware sample records by the ip addres 98.124.243.47
+    res << @pt.malware("98.124.243.47")
+    # Get opensource intelligence data
+    res << @pt.osint("xxxmobiletubez.com")
+    # query for subdomains of passivetotal.org
+    res << @pt.subdomains('*.passivetotal.org')
+    
+    # WHOIS API
+    # Get WHOIS data for a domain or IP address
+    res << @pt.whois("passivetotal.org")
+    # Get WHOIS records based on field matching queries.
+    res << @pt.whois("proxy4655031@1and1-private-registration.com", "email")
+    
+    # ACTIONS API
     # query for the tags associated with www.chrisleephd.us
     res << @pt.tags('www.chrisleephd.us')
     # add the "cool" tag to www.chrisleephd.us
     res << @pt.add_tag('www.chrisleephd.us', 'cool')
     # remove the "cool" tag from www.chrisleephd.us (aww, I was cool for a few milliseconds :( )
-    res << @pt.remove_tag('www.chrisleephd.us', 'cool')
-    # query if 107.170.89.121 is a sinkhole
-    res << @pt.sinkhole('107.170.89.121')
-    # set 107.170.89.121 as not a sinkhole
-    res << @pt.sinkhole('107.170.89.121', false)
+    res << @pt.remove_tag('www.chrisleephd.us', 'cool')    
+    # query for the classification of www.passivetotal.org
+    res << @pt.classification('www.passivetotal.org')
+    # set the classification of www.passivetotal.org as benign
+    res << @pt.classification('www.passivetotal.org', 'non-malicious')
     # query if www.passivetotal.org has ever been listed as compromised
     res << @pt.ever_compromised('www.passivetotal.org')
     # set the ever_compromised flag for www.passivetotal.org to false to indicate that it was never compromised or that it is in sole control of a malicious actor.
@@ -92,6 +120,20 @@ Included in the gem is a command-line tool, passivetotal, with the following usa
     res << @pt.monitor('www.passivetotal.org')
     # unwatch www.passivetotal.org
     res << @pt.monitor('www.passivetotal.org', false)
+    # query if 107.170.89.121 is a sinkhole
+    res << @pt.sinkhole('107.170.89.121')
+    # set 107.170.89.121 as not a sinkhole
+    res << @pt.sinkhole('107.170.89.121', false)
+    
+    # HOST API
+    # Get detailed information about a host
+    res << @pt.components('passivetotal.org')
+    # Get all tracking codes for a domain or IP address.
+    res << @pt.trackers('passivetotal.org')
+    # Get hosts matching a specific tracker ID
+    res << @pt.trackers('UA-49901229', 'GoogleAnalyticsAccountNumber')
+    
+    # SSL API
     # list sites associated with SSL certificates with SHA-1 hash of e9a6647d6aba52dc47b3838c920c9ee59bad7034
     res << @pt.ssl_certificate('e9a6647d6aba52dc47b3838c920c9ee59bad7034')
     # list sites associated with SSL certificates with SHA-1 hash of e9a6647d6aba52dc47b3838c920c9ee59bad7034
@@ -100,10 +142,7 @@ Included in the gem is a command-line tool, passivetotal, with the following usa
     res << @pt.ssl_certificate_history('e9a6647d6aba52dc47b3838c920c9ee59bad7034')
     # retrieve certificate history from IPv4 address of 52.8.228.23
     res << @pt.ssl_certificate_history('52.8.228.23')
-    # query for malware sample records by the domain "noorno.com"
-    res << @pt.malware("noorno.com")
-    # query for malware sample records by the ip addres 98.124.243.47
-    res << @pt.malware("98.124.243.47")
+    
     # dump all this glorious information to feast your eyes upon
     pp res
 

data/lib/passivetotal/version.rb

@@ -1,3 +1,3 @@
 module PassiveTotal
-  VERSION = "1.0.1"
+  VERSION = "1.0.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: passivetotal
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - chrislee35
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-18 00:00:00.000000000 Z
+date: 2016-02-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json