search

DefensePointSecurity / threat_note

DPS' Lightweight Investigation Notebook
Apache License 2.0
421 stars 97 forks source link

Adding non-valid IP address will dump attributes into Object field #131

Closed CyberIntelJunkie closed 8 years ago

CyberIntelJunkie commented 8 years ago

I noticed this when I was adding a domain but forgot to change the drop down menu (which to me means this is a rare bug).

If you add any value that isn't an IP address but IP address is selected as the Object Type, threat_note will dump any data populated in the other fields and paste them into the Object field. The Last Seen field will also be populated with "value=".

I was only able to replicate this with IPv4 selected. Other Object Types seem to either not do error checking, or not throw this error.

Before:

screen shot 2016-02-11 at 5 14 08 pm

After:

screen shot 2016-02-11 at 5 14 27 pm
CyberIntelJunkie commented 8 years ago

Just tested and it's fixed. Thanks!