MISP / misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators
http://misp.github.io/misp-warninglists/
520 stars 170 forks source link

initial suggestion of public IPFS gateways #240

Closed ekamioka closed 1 year ago

ekamioka commented 1 year ago

initial suggestion of public IPFS gateways - thanks to https://ipfs.github.io/public-gateway-checker/

Relevance: https://blog.talosintelligence.com/ipfs-abuse/

adulau commented 1 year ago

Thanks a lot for the pull-request. It's a great idea.

I did some changes in the warning-list to ensure that will match all the cases in MISP and only extracted the associated hostnames mentioned in the source JSON file.

Quick extractor I used: cat gateways.json | jq -r .[] | cut -d: -f2 | cut -d"/" -f3 | sort | awk '{print "\""$1"\","}'

If you have sometime, it might cool to have a generator script to include it in the generator pipeline. Feel free if you want to make a PR for this part.

ekamioka commented 1 year ago

Great, thank you! I am getting familiar with the scripts and data format to submit new lists.