passivetotal 1.0.3 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/passivetotal/api.rb +49 -0
- data/lib/passivetotal/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: f7e5a27c48b80aeafce0cbd714afbb55ecb690aa
|
4
|
+
data.tar.gz: 4e02e94929533e782d731bb7c42231d53e8ae944
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 2e414bfed888274d5e88763038c95179d1b5cd8b45e27bf577fddd2d62e6374c79e05b8d9b525d2a5c5691e1307e327a24cceb43279ae9b17f701d715f81f39e
|
7
|
+
data.tar.gz: 2cd27108fc078b78f497065b6b1797a1e41be94400d125aab67e2063deb22cafd081c436d47eceeee1d89d3bd76b3346d180ab6c3cde731b372ce09abbfef8e5
|
data/lib/passivetotal/api.rb
CHANGED
@@ -119,6 +119,22 @@ module PassiveTotal # :nodoc:
|
|
119
119
|
# metadata is an alias for enrichment
|
120
120
|
alias_method :metadata, :enrichment
|
121
121
|
|
122
|
+
# Enrichment bulk : Enrich each of the given queries with metadata
|
123
|
+
# query: An array of domains or IP addresses to query
|
124
|
+
def bulk_enrichment(query)
|
125
|
+
if query.class != Array
|
126
|
+
query = [query]
|
127
|
+
end
|
128
|
+
query.map do |q|
|
129
|
+
is_valid_with_error(__method__, [:ipv4, :domain], q)
|
130
|
+
if domain?(q)
|
131
|
+
q = normalize_domain(q)
|
132
|
+
end
|
133
|
+
q
|
134
|
+
end
|
135
|
+
get_with_data('enrichment/bulk', { 'query' => query })
|
136
|
+
end
|
137
|
+
|
122
138
|
# osint: Get opensource intelligence data
|
123
139
|
# query: A domain or IP address to query
|
124
140
|
def osint(query)
|
@@ -129,6 +145,22 @@ module PassiveTotal # :nodoc:
|
|
129
145
|
get('enrichment/osint', {'query' => query})
|
130
146
|
end
|
131
147
|
|
148
|
+
# osint bulk : Enrich each of the given queries with metadata
|
149
|
+
# query: An array of domains or IP addresses to query
|
150
|
+
def bulk_osint(query)
|
151
|
+
if query.class != Array
|
152
|
+
query = [query]
|
153
|
+
end
|
154
|
+
query.map do |q|
|
155
|
+
is_valid_with_error(__method__, [:ipv4, :domain], q)
|
156
|
+
if domain?(q)
|
157
|
+
q = normalize_domain(q)
|
158
|
+
end
|
159
|
+
q
|
160
|
+
end
|
161
|
+
get_with_data('enrichment/bulk/osint', { 'query' => query })
|
162
|
+
end
|
163
|
+
|
132
164
|
# subdomains: Get subdomains using a wildcard query
|
133
165
|
# query: A domain with wildcard, e.g., *.passivetotal.org
|
134
166
|
def subdomains(query)
|
@@ -356,6 +388,23 @@ module PassiveTotal # :nodoc:
|
|
356
388
|
end
|
357
389
|
get('enrichment/malware', {'query' => query})
|
358
390
|
end
|
391
|
+
|
392
|
+
# malware bulk: get sample information based from domains
|
393
|
+
# query: An array of domains or IP addresses to query
|
394
|
+
def bulk_malware(query)
|
395
|
+
if query.class != Array
|
396
|
+
query = [query]
|
397
|
+
end
|
398
|
+
query.map do |q|
|
399
|
+
is_valid_with_error(__method__, [:ipv4, :domain], q)
|
400
|
+
if domain?(q)
|
401
|
+
q = normalize_domain(q)
|
402
|
+
end
|
403
|
+
q
|
404
|
+
end
|
405
|
+
get_with_data('enrichment/bulk/malware', { 'query' => query })
|
406
|
+
end
|
407
|
+
|
359
408
|
|
360
409
|
private
|
361
410
|
|
data/lib/passivetotal/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: passivetotal
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.0.
|
4
|
+
version: 1.0.4
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- chrislee35
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2016-10-
|
11
|
+
date: 2016-10-23 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: json
|