misp-modules icon indicating copy to clipboard operation
misp-modules copied to clipboard

HIBP Enrichment Module returns "Array returned Array returned Array returned..." rather than actual results

Open jberkers42 opened this issue 1 year ago • 0 comments

We configured the Have I Been Pwdned enrichment module as we have an API key.

I have an e-mail address that I know is caught up in several compromises since it is ~26 years old. When I add this as an attribute on an Event, the hibp plugin does appear to run, but when we open the results we get the following:

image

The corresponding JSON data containing the list of breaches the address is associated with is as follows, when calling the same API endpoint using PostMan:

[
    {
        "Name": "AntiPublic"
    },
    {
        "Name": "ExploitIn"
    },
    {
        "Name": "LinkedIn"
    },
    {
        "Name": "LinkedInScrape"
    },
    {
        "Name": "OnlinerSpambot"
    },
    {
        "Name": "PDL"
    },
    {
        "Name": "Trillian"
    },
    {
        "Name": "VerificationsIO"
    },
    {
        "Name": "Zynga"
    }
]

I don't know if this is the result of changes on HIBP's end, or a general issue with the code as I am not that conversant in Python.

Can anyone help?

Regards, JohnB

jberkers42 avatar Sep 10 '24 07:09 jberkers42