Skip to content

Commit 26fb6bf

Browse files
kiaora17kiaora17
committed
OVHCloud Responders: OvhDomainOrder & OvhDomainRedirection
1 parent 99e6e12 commit 26fb6bf

5 files changed

Lines changed: 678 additions & 0 deletions

File tree

‎responders/OvhCloud/OvhDomainOrder.json‎

Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,81 @@
1+
{
2+
"name": "OVH_Domain_Order",
3+
"version": "1.0",
4+
"author": "THA-CERT",
5+
"url": "https://github.com/TheHive-Project/Cortex-Analyzers/blob/master/responders/OvhCloud",
6+
"license": "AGPL-V3",
7+
"description": "Buy an available Domain Name on OVH Cloud.",
8+
"dataTypeList": ["thehive:case_artifact"],
9+
"command": "OvhCloud/ovh_cloud.py",
10+
"baseConfig": "OvhCloud",
11+
"config": {
12+
"service": "OvhDomainOrder"
13+
},
14+
"configurationItems": [
15+
{
16+
"name": "API_endpoint",
17+
"description": "Specify here OVH API's endpoint. Eg: 'ovh-eu', 'ovh-us' or 'ovh-ca'.",
18+
"type": "string",
19+
"multi": false,
20+
"required": true,
21+
"defaultValue": "ovh-eu"
22+
},
23+
{
24+
"name": "API_ovh_subsidiary",
25+
"description": "Specify here which OVH subsidiary where you want to order. Will be 'EU', 'US' or 'CA' by default.",
26+
"type": "string",
27+
"multi": false,
28+
"required": false
29+
},
30+
{
31+
"name": "API_ak",
32+
"description": "Specify here the Application key of your OVH Cloud account.",
33+
"type": "string",
34+
"multi": false,
35+
"required": true
36+
},
37+
{
38+
"name": "API_as",
39+
"description": "Specify here the Application secret of your OVH Cloud account.",
40+
"type": "string",
41+
"multi": false,
42+
"required": true
43+
},
44+
{
45+
"name": "API_cs",
46+
"description": "Specify here the Consumer secret of your OVH Cloud account.",
47+
"type": "string",
48+
"multi": false,
49+
"required": true
50+
},
51+
{
52+
"name": "price_limit",
53+
"description": "Maximum allowed price to buy one domain name, WITHOUT Taxes. ⚠ PRICE LIMIT USES OVH SUBSIDIARY DEFAULT CURRENCY ⚠",
54+
"type": "number",
55+
"multi": false,
56+
"required": true
57+
},
58+
{
59+
"name": "required_configuration",
60+
"description": "Set required confirguration values needed by OVH, in order to be able to finalize the order. More info: https://docs.ovh.com/fr/domains/api-order/#recuperation-des-configurations-requises. Format: 'LABEL:VALUE', EG: 'OWNER_CONTACT:/me/contact/1234'",
61+
"type": "string",
62+
"multi": true,
63+
"required": false
64+
},
65+
{
66+
"name": "thehive_url",
67+
"description": "Optionally, specify here the API URL to add informational tags to observable.",
68+
"type": "string",
69+
"multi": false,
70+
"required": false,
71+
"defaultValue": "http://thehive:9000"
72+
},
73+
{
74+
"name": "thehive_token",
75+
"description": "Optionally, specify here the API Key to add informational tags to observable.",
76+
"type": "string",
77+
"multi": false,
78+
"required": false
79+
}
80+
]
81+
}

‎responders/OvhCloud/OvhDomainRedirection.json‎

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
{
2+
"name": "OVH_Domain_Redirection",
3+
"version": "1.0",
4+
"author": "THA-CERT",
5+
"url": "https://github.com/TheHive-Project/Cortex-Analyzers/blob/master/responders/OvhCloud",
6+
"license": "AGPL-V3",
7+
"description": "Redirect an owned Domain Name on OVH Cloud, to a specific URL.",
8+
"dataTypeList": ["thehive:case_artifact"],
9+
"command": "OvhCloud/ovh_cloud.py",
10+
"baseConfig": "OvhCloud",
11+
"config": {
12+
"service": "OvhDomainRedirection"
13+
},
14+
"configurationItems": [
15+
{
16+
"name": "API_endpoint",
17+
"description": "Specify here OVH API's endpoint. Eg: 'ovh-eu', 'ovh-us' or 'ovh-ca'.",
18+
"type": "string",
19+
"multi": false,
20+
"required": true,
21+
"defaultValue": "ovh-eu"
22+
},
23+
{
24+
"name": "API_ovh_subsidiary",
25+
"description": "Specify here which OVH subsidiary where you want to order. Will be 'EU', 'US' or 'CA' by default.",
26+
"type": "string",
27+
"multi": false,
28+
"required": false
29+
},
30+
{
31+
"name": "API_ak",
32+
"description": "Specify here the Application key of your OVH Cloud account.",
33+
"type": "string",
34+
"multi": false,
35+
"required": true
36+
},
37+
{
38+
"name": "API_as",
39+
"description": "Specify here the Application secret of your OVH Cloud account.",
40+
"type": "string",
41+
"multi": false,
42+
"required": true
43+
},
44+
{
45+
"name": "API_cs",
46+
"description": "Specify here the Consumer secret of your OVH Cloud account.",
47+
"type": "string",
48+
"multi": false,
49+
"required": true
50+
},
51+
{
52+
"name": "domain_redirection",
53+
"description": "Set URL where redirect to, after acquiring the current domain name. EG: 'https://www.myhomepage.com'",
54+
"type": "string",
55+
"multi": false,
56+
"required": true
57+
},
58+
{
59+
"name": "thehive_url",
60+
"description": "Optionally, specify here the API URL to add informational tags to observable.",
61+
"type": "string",
62+
"multi": false,
63+
"required": false,
64+
"defaultValue": "http://thehive:9000"
65+
},
66+
{
67+
"name": "thehive_token",
68+
"description": "Optionally, specify here the API Key to add informational tags to observable.",
69+
"type": "string",
70+
"multi": false,
71+
"required": false
72+
}
73+
]
74+
}

‎responders/OvhCloud/README.md‎

Lines changed: 66 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,66 @@
1+
# OVH Cloud Responders
2+
3+
4+
## OVH Domain Order
5+
6+
### Description
7+
*OVH Domain Order* can be used to purchase an **available** Domain Name with OVH Cloud registrar.
8+
A price limit should be set to avoid too expensive acquisitions, depending of your budget.
9+
10+
### Prerequisites
11+
To use this *OVH Domain Order* Responder, you will need:
12+
* an active OVHCloud account,
13+
* create a OVHCloud API Keys, with necessary rights. For example:
14+
* post `/order/cart`
15+
* get `/order/cart/*`
16+
* post `/order/cart/*`
17+
18+
### Parameters
19+
20+
#### Price Limit
21+
A mandatory price limit has to be set, to avoid expensive acquisitions.
22+
23+
> [!WARNING]
24+
> Maximum allowed price to buy a Domain Name corresponds to the price **WITHOUT Taxes**.
25+
> **⚠ PRICE LIMIT USES OVH CLOUD SUBSIDIARY DEFAULT CURRENCY ⚠**
26+
27+
#### Required Configurations
28+
Some Domain Name acquisition requires mandatory configuration(s), depending of the TLD or of OVH Subsidiaries.
29+
A list of required configurations can be found on this [OVH Cloud website](https://help.ovhcloud.com/csm/en-domain-names-api-order?id=kb_article_view&sysparm_article=KB0051563#fetch-required-configurations).
30+
31+
#### TheHive API
32+
Optionally, TheHive endpoint and API Key can be set, to allow *OVH Domain Order* Responder to add tags to the Observable, even when its execution fails.
33+
34+
### Author
35+
**Thales Group CERT** - [thalesgroup-cert on GitHub](https://github.com/thalesgroup-cert)
36+
37+
38+
## OVH Domain Redirection
39+
40+
### Description
41+
*OVH Domain Redirection* can be used to redirect an **owned** Domain Name, with OVH Cloud registrar, to the URL of your choice.
42+
A price limit should be set to avoid too expensive acquisitions, depending of your budget.
43+
44+
### Prerequisites
45+
To use this *OVH Domain Redirection* Responder, you will need:
46+
* an active OVHCloud account,
47+
* create a OVHCloud API Keys, with necessary rights. For example:
48+
* get `/domain/zone/*`
49+
* post `/domain/zone/*`
50+
* put `/domain/zone/*`
51+
52+
### Parameters
53+
54+
#### Domain Redirection
55+
Set the full URL where to redirect parent domain and `www` subdomain.
56+
57+
For example:
58+
* if domain redirection is set to `https://mydomain.com/abuse`,
59+
* and *OVH Domain Redirection* Responder is used on Observable `myd0main.com`,
60+
* then requests to `myd0main.com` & `www.myd0main.com` will redirect to `https://mydomain.com/abuse`.
61+
62+
#### TheHive API
63+
Optionally, TheHive endpoint and API Key can be set, to allow *OVH Domain Redirection* Responder to add tags to the Observable, even when its execution fails.
64+
65+
### Author
66+
**Thales Group CERT** - [thalesgroup-cert on GitHub](https://github.com/thalesgroup-cert)

0 commit comments

Comments
 (0)