Sha256: a3146d80a1c0a381a53236e39d0898b10eadd24b51e8ed6b12e12d3d85c382eb
Contents?: true
Size: 1.37 KB
Versions: 11
Compression:
Stored size: 1.37 KB
Contents
# frozen_string_literal: true
module Mihari
module Analyzers
#
# CIRCL passive DNS/SSL analyzer
#
class CIRCL < Base
include Concerns::Refangable
# @return [String, nil]
attr_reader :type
# @return [String, nil]
attr_reader :username
# @return [String, nil]
attr_reader :password
#
# @param [String] query
# @param [Hash, nil] options
# @param [String, nil] username
# @param [String, nil] password
#
def initialize(query, options: nil, username: nil, password: nil)
super(refang(query), options:)
@type = DataType.type(query)
@username = username || Mihari.config.circl_passive_username
@password = password || Mihari.config.circl_passive_password
end
def artifacts
case type
when "domain"
client.passive_dns_search query
when "hash"
client.passive_ssl_search query
else
raise ValueError, "#{@query}(type: #{@type || "unknown"}) is not supported."
end
end
def configured?
configuration_keys? || (username? && password?)
end
private
def client
Clients::CIRCL.new(username:, password:, timeout:)
end
def username?
!username.nil?
end
def password?
!password.nil?
end
end
end
end
Version data entries
11 entries across 11 versions & 1 rubygems