ioc-finder icon indicating copy to clipboard operation
ioc-finder copied to clipboard

parser ssdeeps error

Open FANGOD opened this issue 2 years ago • 2 comments

from this url : https://botscout.com/last_caught_cache.htm

2600:114:62:902:769:6957:571:334 | 2600:114:62:902:769:6957:571:334

Maybe is ipv6, but the results type is ssdeeps.

        "ipv6s": [
            "2600:114:62:903:7335:5009:78:9631",
            "2600:114:62:902:769:6957:571:334",
            "20:906:21::22:2:9396:59",
            "2607:90:2776:957:3:391:893:944",
            "2600:114:62:903:5845:9020:1995:910",
            "2600:114:62:903:61:7220:2:81",
            "2806:20:5120:34:9199:81:982:970",
            "2600:114:62:904:6166:57:42:14"
        ],
        "ssdeeps": [
            "6957:571:334",
            "81:982:970",
            "903:5845:9020",
            "62:902:769",
            "90:2776:957",
            "3:391:893",
            "903:7335:5009"
        ]

Maybe it's not clear, please look at the example directly.

Thanks ~

FANGOD avatar Jul 22 '22 03:07 FANGOD

Thanks for reporting - that definitely looks like inaccurate parsing. I'll take a look at this as part of the 7.x.y work.

fhightower avatar Jul 23 '22 10:07 fhightower

There is a similar issue demonstrated here. If anyone would like to pick up this work, please comment on this issue and I'd be happy to work with you.

fhightower avatar Aug 25 '22 08:08 fhightower