FAN-GOD

Incorrect parsing of ipv4 cidrs to urls

1

Hello, there's a little problem here. Source url: https://blog.talosintelligence.com/2022/08/threat-roundup-0729-0805.html Error info: ``` "urls": [ "85.93.4.0/25", "85.93.39.32/27", "85.93.4.192/27", "85.93.40.0/21", "85.93.0.116/31", "85.93.39.16/28", "85.93.3.224/27", "85.93.4.236/31", "85.93.39.128/25", "85.93.48.0/24", "85.93.49.128/28", "85.93.49.0/25", "85.93.4.128/26", "85.93.0.112/30", "85.93.39.64/26", "85.93.0.96/28",...

parser ssdeeps error

2

from this url : `https://botscout.com/last_caught_cache.htm` ``` 2600:114:62:902:769:6957:571:334 | 2600:114:62:902:769:6957:571:334 ``` Maybe is ipv6, but the results type is ssdeeps. ``` "ipv6s": [ "2600:114:62:903:7335:5009:78:9631", "2600:114:62:902:769:6957:571:334", "20:906:21::22:2:9396:59", "2607:90:2776:957:3:391:893:944", "2600:114:62:903:5845:9020:1995:910", "2600:114:62:903:61:7220:2:81", "2806:20:5120:34:9199:81:982:970", "2600:114:62:904:6166:57:42:14"...

Maybe an ioc type should be added.

1

`ip:port` I don't know what it should be called, but not domain or ip or url.

Some file paths match to wrong paths.

1

Like this url: https://www.socinvestigation.com/socgholish-malware-on-the-rise-detection-response/ I got this: ``` "file_paths": [ "/all*\") OR (CommandHistory=\"*whoami /all*\")))) OR (ImageFileName=\"*\\\\nltest.exe", "/all%'))) or (\"Image\" ilike '%\\nltest.exe", "/all'))) or (NewProcessName endswith @'\\nltest.exe", "/all`)) OR (process:`*\\nltest.exe", "/all*\"))...

Identify ip or version

1

I am very confused about how to distinguish between ip and version number. I tried a lot of regular expressions to correct verison, but it is not enough, it doesn't...

Incorrect extract domains from AV signatures

1

text ``` W64/BURNTCIGAR.BQ!tr W64/BURNTCIGAR.CA!tr W64/BURNTCIGAR.CB!tr W64/Agent.ARD!tr Riskware/BURNTCIGAR W32/PossibleThreat ``` got ``` { "domains": [ "burntcigar.ca" ] } ``` Is there a way to avoid this? Thanks ~

``` ➜ Desktop python3 samples.py Traceback (most recent call last): File "samples.py", line 212, in with pdfplumber.open(file_name, password="") as pdf: File "/home/johnny/.local/lib/python3.8/site-packages/pdfplumber/pdf.py", line 55, in open inst = cls(fp, **kwargs)...

`TypeError: not a string` after pressing to special characters use delete

6

``` 今天（2023年6月29日）星期几为星期四。 USER: 而且4月6号是 星期四 # --> 是{ }星, here is not space, after pressing to special characters use delete, throws an error │ py:316 in _EncodeAsPieces │ │ │...

X All configured authentication methods failed

1

SSH connection error: I have an SSH connection with a configured public key, and it should connect successfully. However, no matter which option I choose in Tabby, it results in...