Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

added check to validate that hash is in subject table #806

Conversation

0xmilkmix
Copy link
Contributor

@garanews
Copy link
Contributor

Thanks, 8[.]8[.]8[.]8 now works, but for example this 172[.]93[.]184[.]62 no.

@garanews
Copy link
Contributor

@0xmilkmix was you able to test with that ip?

@jeromeleonard jeromeleonard added scope:analyzer Issue is analyzer related category:bug Issue is related to a bug labels Oct 14, 2020
@jeromeleonard jeromeleonard added this to the 3.0.0 milestone Oct 14, 2020
@jeromeleonard jeromeleonard changed the base branch from master to develop October 15, 2020 17:47
@jeromeleonard
Copy link
Contributor

@0xmilkmix @garanews, to fix issue mentionned by @garanews maybe an option is to remove subjects = result.get(ip).get('subjects') of L40 and update the code L33 to:

        if not result.get(ip, None):
            certificates = []
        else:
            certificates = list(result.get(ip).get('certificates'))
            subjects = result.get(ip).get('subjects', dict({}))

@0xmilkmix
Copy link
Contributor Author

@0xmilkmix @garanews, to fix issue mentionned by @garanews maybe an option is to remove subjects = result.get(ip).get('subjects') of L40 and update the code L33 to:

        if not result.get(ip, None):
            certificates = []
        else:
            certificates = list(result.get(ip).get('certificates'))
            subjects = result.get(ip).get('subjects', dict({}))

Hello @jeromeleonard , indeed that will work.

I implemented the fix that you suggested. Sorry for the delay !

@jeromeleonard
Copy link
Contributor

Thank you very much. We add it in the next release.

@jeromeleonard jeromeleonard merged commit ba418d8 into TheHive-Project:develop Oct 18, 2020
jeromeleonard added a commit that referenced this pull request Oct 19, 2020
@jeromeleonard
Copy link
Contributor

@0xmilkmix for your information, I added some code to extract specific observables from the report and also added some useful info in tags and descriptions. If you think other interesting info should be extract, feel free to share.

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug scope:analyzer Issue is analyzer related
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug] CIRCLPassiveSSL uncaught exception on unexpected server behavior
3 participants