intelowlproject / IntelOwl

IntelOwl: manage your Threat Intelligence at scale
https://intelowlproject.github.io
GNU Affero General Public License v3.0
3.19k stars 400 forks source link

Crt_sh analyzer, closes #1321 #2379

Closed g4ze closed 6 days ago

g4ze commented 2 weeks ago

closes #1321

Description

Please include a summary of the change and link to the related issue.

Type of change

Please delete options that are not relevant.

Checklist

Important Rules

g4ze commented 2 weeks ago

@mlodic This works absolutely fine for domains. The problem lies with the generics. They only respond in HTML as far as I have tried. The library that you have put in the issue doesn't seem to have any options or functionality for generics.

mlodic commented 2 weeks ago

could you provide some examples of queries performed/answers retrieved? the library was just a suggestion, we can avoid that so we can have one less dependency to manage as well

g4ze commented 2 weeks ago

As you can see, i haven't used the library itself.

curl -H "accept: application/json" https://crt.sh/?q=2381082454
<BR><BR>Unsupported output type: json</BODY>
</HTML>
curl https://crt.sh/?q=238108245s4
<return html page>
mlodic commented 1 week ago

yeah I tried too and yes, the service does not work for other types. So let's support just domains. Could you please avoid using that library and write the query with requests? That's so simple that we don't need to add a dependency