search

woj-ciech / Danger-zone

Correlate data between domains, IPs and email addresses, present it as a graph and store everything into Elasticsearch and JSON files.
669 stars 127 forks source link

Elastic Cloud Settings #14

Open ir0nf1re opened 5 years ago

ir0nf1re commented 5 years ago

The settings.json file has a setting for a local instance of Elastic search. Would it be possible to give us the parameters for Elastic Cloud? I have installed Danger-zone on Kali, and it works great, but would really like to use Elastic Cloud.

woj-ciech commented 5 years ago

Hey, Sorry but I don't have possibility to test this functionality but please find commits https://github.com/woj-ciech/Danger-zone/commit/6c0697ea933caeb5b05fb6b1193a9c860cb4f2b6 and https://github.com/woj-ciech/Danger-zone/commit/1695c3e1242d4c50ff8419f19bfd12f89c2af2c9 in branch https://github.com/woj-ciech/Danger-zone/tree/Elastic-cloud Let me know if it works

ir0nf1re commented 5 years ago

It seems there is no connection to the Elastic cloud, below is a screenshot of Wireshark traffic

wire

woj-ciech commented 5 years ago

Sorry but I don't exactly get what you mean. Screenshot shows DNS traffic and that your request cannot be resolved. Check your address or DNS server please.

ir0nf1re commented 5 years ago

I have no connection issues; Danger-zone connects fine to other domains, but seems to have an issue with Elastic cloud. Below is the tools.py settings that I have, as per your commit.

def test_connection(): config = parse_config() try: es = Elasticsearch(host=config['elastic']['host'], port=config['elastic']['port'], http_auth=(config['elastic']['user'],config['elastic']['password']),use_ssl=config['elastic']['ssl']) print "Succesfully connected to ElasticSearch" return es except: print 'Unable to connect to Elasticsearch. \nCheck your connection and settings.json file' sys.exit()

woj-ciech commented 5 years ago

Sorry again but I have no opportunity to test it and verify how it exactly works. Please refer to https://www.packtpub.com/mapt/book/big_data_and_business_intelligence/9781787285217/11/ch11lvl1sec108/connecting-to-the-elastic-cloud-cluster-with-python and https://pypi.org/project/elastic-cloud/