mirror of
https://github.com/nox-project/nox-framework.git
synced 2026-06-08 08:05:50 +00:00
nox-project
9bf66d3e50
- 124 sources (+1 xposedornot, bgpview replaced with ripestat) - Fix gravatar MD5 transform, fofa base64 query encoding - Fix misp_search URL resolution, threatconnect HMAC placeholder - Fix spycloud, duckduckgo, mailboxlayer/numverify/ipstack/ipinfodb endpoints - Fix DeHashEngine v1→v2, DorkEngine engine label, backup_endpoints consumed - Fix Retry-After HTTP-date parsing, Hashmob API schema, FIPS hashlib crash - Fix DB.close() event loop leak, _random_headers CH-UA override - Add query_transform mechanism (md5_lower, fofa_domain) - Lower scores: spyonweb, pipl_search, twitter_v2, hudsonrock rate_limit - Clean all internal tracking comments, fix Italian docstring
39 lines
876 B
JSON
39 lines
876 B
JSON
{
|
|
"name": "misp_search",
|
|
"category": "threat_intel",
|
|
"endpoint": "{MISP_URL}/attributes/restSearch",
|
|
"method": "POST",
|
|
"requires_auth": true,
|
|
"selectors": {
|
|
"attributes": "$.Attribute[*].value"
|
|
},
|
|
"rate_limit": 1.0,
|
|
"headers": {
|
|
"Authorization": "{MISP_API_KEY}",
|
|
"Content-Type": "application/json"
|
|
},
|
|
"payload_template": {
|
|
"returnFormat": "json",
|
|
"value": "{target}"
|
|
},
|
|
"api_key_slots": [
|
|
"{MISP_API_KEY}",
|
|
"{MISP_URL}"
|
|
],
|
|
"input_type": "any",
|
|
"output_type": [
|
|
"ip",
|
|
"domain",
|
|
"hash"
|
|
],
|
|
"normalization_map": {},
|
|
"tags": [
|
|
"passive",
|
|
"threat"
|
|
],
|
|
"health_check_url": "https://misp.local",
|
|
"expected_status": 200,
|
|
"reliability_score": 4,
|
|
"backup_endpoints": [],
|
|
"confidence": 0.85
|
|
} |