This repository has been archived by the owner on Jun 17, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 17
/
Copy pathtest.sh
81 lines (51 loc) · 3.29 KB
/
test.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
#!/bin/bash
set -e
#echo 'adding ubuntu to cif group...'
#sudo usermod -aG cif ubuntu
. /etc/default/cif
. /etc/default/smrt
echo 'giving things a chance to settle...'
sleep 10
echo 'testing connectivity'
curl -v -k https://localhost
sudo -E -u cif cif --config /home/cif/.cif.yml -p
echo 'testing query'
sudo -E -u cif cif --config /home/cif/.cif.yml --search example.com
echo 'waiting...'
sleep 5
echo 'testing query'
sudo -E -u cif cif --config /home/cif/.cif.yml --search example.com
echo 'waiting...'
sleep 5
sudo -E -u cif cif --config /home/cif/.cif.yml --itype ipv4 --tags saerch
sudo -E -u cif cif --config /home/cif/.cif.yml -q 93.184.216.34
echo 'waiting...'
sleep 5
sudo -E -u cif cif --config /home/cif/.cif.yml -q 93.184.216.34
sudo -E -u cif CSIRTG_SMRT_RUNTIME_PATH=/var/lib/smrt CSIRTG_SMRT_CACHE_PATH=/var/lib/smrt csirtg-smrt -r /etc/cif/rules/default/openphish.yml -d --remember --client cif --config /etc/cif/csirtg-smrt.yml --limit 100 --skip-invalid --fireball --goback 7
sudo -E -u cif CSIRTG_SMRT_RUNTIME_PATH=/var/lib/smrt CSIRTG_SMRT_CACHE_PATH=/var/lib/smrt csirtg-smrt -r /etc/cif/rules/default/openphish.yml -d --remember --client cif --config /etc/cif/csirtg-smrt.yml --limit 100 --skip-invalid --fireball --goback 7
sudo -E -u cif CSIRTG_TOKEN="" CSIRTG_SMRT_RUNTIME_PATH=/var/lib/smrt CSIRTG_SMRT_CACHE_PATH=/var/lib/smrt csirtg-smrt -r /etc/cif/rules/default/csirtg.yml -f darknet -d --remember --client cif --config /etc/cif/csirtg-smrt.yml --limit 100 --skip-invalid --fireball --goback 7
sudo -E -u cif CSIRTG_TOKEN="" CSIRTG_SMRT_RUNTIME_PATH=/var/lib/smrt CSIRTG_SMRT_CACHE_PATH=/var/lib/smrt csirtg-smrt -r /etc/cif/rules/default/csirtg.yml -f uce-urls -d --remember --client cif --config /etc/cif/csirtg-smrt.yml --limit 100 --skip-invalid --fireball --goback 7
echo 'waiting 30s... let hunter do their thing...'
sleep 30
sudo -E -u cif cif --config /home/cif/.cif.yml --provider csirtg.io
sudo -E -u cif cif --config /home/cif/.cif.yml --provider openphish.com
sudo -E -u cif cif --config /home/cif/.cif.yml --itype ipv4 --feed --tags scanner
sudo -E -u cif cif --config /home/cif/.cif.yml --itype ipv4 --feed --tags scanner --days 17
sudo -E -u cif cif --config /home/cif/.cif.yml --itype fqdn --feed --tags search
sudo -E -u cif cif --config /home/cif/.cif.yml --itype url --feed --tags uce
sudo -E -u cif cif --config /home/cif/.cif.yml --itype url --feed --tags phishing
sudo -E -u cif cif --config /home/cif/.cif.yml --itype ipv4 --feed --tags phishing --confidence 2
sudo -E -u cif cif --config /home/cif/.cif.yml --itype ipv4 --confidence 1,6 --no-feed -d
sudo -E -u cif cif --config /home/cif/.cif.yml --itype fqdn --confidence 1,6 --no-feed -d
echo "testing submissions"
sudo -E -u cif cif --config /home/cif/.cif.yml --indicator csirtg.io --tags malware --submit --confidence 8
sudo -E -u cif cif --config /home/cif/.cif.yml -nq csirtg.io
echo
echo
echo "testing tokens"
sudo -E -u cif cif-tokens --config /home/cif/.cif.yml
sudo -E -u cif cif-tokens --config /home/cif/.cif.yml --user test-write --write --create
sudo -E -u cif cif-tokens --config /home/cif/.cif.yml --user test-read --read --create
sudo -E -u cif cif-tokens --config /home/cif/.cif.yml --user test-read-write --write --create --read
sudo -E -u cif CIFSDK_CLIENT_HTTP_TRACE=1 cif-tokens -d --config /home/cif/.cif.yml