csirtgadgets/cif-chrome

CIF Chrome Extension

cif-chrome

CIF Chrome Plugin

cif-chrome's Issues

Bug: Not logging searches to CIF

When you search using the plugin, it does not log the search in CIF. We have a fork of the plugin internally that uses an older version. The only difference is between the cif.js files. If it is helpful, we can share with you our cif.js file to try and figure out the issue.

add custom TLP support

Switching between multiple profiles

If one configures multiple cif profiles (servers) in the chrome plugin, how does one select which server to query or submit against?

Enhancement request: adding provider

I would like to request the addition of the ability to set the "provider" field when submitting a new CIF observable in the chrome plugin.

This would be helpful to track manual submissions.

more info when submission fails (or succeeds)

Settings UI disappears when you click away

Steps to reproduce:

1. Click the CIF Icon
2. Click the hamburger menu
3. Click settings
4. Click another web page to copy and paste values

The settings menu disappears.

Maybe it would be better to have hamburger menu -> settings open this URL:

chrome-extension://bmnnmaiojjlmdffefbipodkhbmhbedhn/content/settings.html

this might also address issue #5

Submit feature not working

When trying to submit an observable within the chrome plugin, the submit button appears to do nothing. No error message, No success message, etc.

on the back side the apache access logs show a 404:

192.168.1.106 - - [25/Apr/2016:09:09:04 -0900] "POST /observables/new HTTP/1.1" 404 609 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36"
192.168.1.106 - - [25/Apr/2016:09:09:07 -0900] "POST /observables/new HTTP/1.1" 404 471 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36"
192.168.1.106 - - [25/Apr/2016:09:14:13 -0900] "POST /observables/new HTTP/1.1" 404 1860 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36"

fix ipv4 address searches

Search UI table is not present

It seems after a recent update to Chrome, the CIF search table is collapsed, almost like Chrome does not support tables in a plugin any more.

I tried to re-download the plugin to make sure it wasn't anything I was doing wrong.

remove "/api" from sample text

remove "/api" from sample text within the api location text box.

cif-chrome/src/content/settings.js

Line 60 in 0340b6d

toappend+='<td><input type="text" class="urlinput form-control" placeholder="https://example.org/api" size="72"/></td>';

Uppercase hash search does not work

Hello,

It seems that hashes (md5/sha1/sha256) are normalized to modify any upper case letters to lower case.

If a hash includes upper case letters when it is added using the Chrome plugin, it is automatically normalized in the backend CIF database to a hash with lower case letters.

However, if a user tries to search for the same hash based indicator using the chrome plugin with upper case letters, the search will not normalize the hash to lower case characters and will not return any results.

add custom groups support

Settings UI layout

When trying to create a new profile the following settings are laid out horizontally.

Name API Location Token Groups Options Actions

That makes some text boxes (name) so small that you can only see two characters before they start scrolling left off the screen. I believe they layout should be vertical similar to submit so the user can seen what is being typed in the text boxes.

horizontal scroll with results

Can the plugin UI window resize after returning results from a CIF server.

You get horizontal scroll and vertical scroll bars (if there enough results).

screenshot:
https://dl.dropboxusercontent.com/u/10394183/cif-chrome-ui-screenshot.png

Having to scroll horizontally and vertically is not a good user experience.

problem: google chrome store plugin unsigned(?)

submit to partners

• trusted partners (post to another group)