ninoseki / mihari

A query aggregator for OSINT based threat hunting

Home Page:https://ninoseki.github.io/mihari/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[v4] Record metadata

ninoseki opened this issue · comments

Summary

Record metadata (raw JSON response) in an artifact.

For example, If Mihari finds 1.1.1.1 via Censys, metadata will be:

{
	"ip": "1.1.1.1",
	"services": [
		{ "port": 53, "service_name": "DNS", "transport_protocol": "UDP" },
		{ "port": 80, "service_name": "HTTP", "transport_protocol": "TCP" },
		{ "port": 443, "service_name": "HTTP", "transport_protocol": "TCP" }
	],
	"location": {
		"continent": "Oceania",
		"country": "Australia",
		"country_code": "AU",
		"timezone": "Australia/Sydney",
		"coordinates": { "latitude": -33.494, "longitude": 143.2104 },
		"registered_country": "Australia",
		"registered_country_code": "AU"
	},
	"autonomous_system": {
		"asn": 13335,
		"description": "CLOUDFLARENET",
		"bgp_prefix": "1.1.1.0/24",
		"name": "CLOUDFLARENET",
		"country_code": "US"
	}
}

Original data

{
  "code": 200,
  "status": "OK",
  "result": {
    "query": "ip:1.1.1.1",
    "total": 1,
    "hits": [
      {
        "ip": "1.1.1.1",
        "services": [
          { "port": 53, "service_name": "DNS", "transport_protocol": "UDP" },
          { "port": 80, "service_name": "HTTP", "transport_protocol": "TCP" },
          { "port": 443, "service_name": "HTTP", "transport_protocol": "TCP" }
        ],
        "location": {
          "continent": "Oceania",
          "country": "Australia",
          "country_code": "AU",
          "timezone": "Australia/Sydney",
          "coordinates": { "latitude": -33.494, "longitude": 143.2104 },
          "registered_country": "Australia",
          "registered_country_code": "AU"
        },
        "autonomous_system": {
          "asn": 13335,
          "description": "CLOUDFLARENET",
          "bgp_prefix": "1.1.1.0/24",
          "name": "CLOUDFLARENET",
          "country_code": "US"
        }
      }
    ],
    "links": { "next": "", "prev": "" }
  }
}