microsoft-office365 contains CIDR blocs
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 650
- Forks
- 195
- Avg merge
- 18h 17m
- Merged PRs (30d)
- 74
Description
List of known Office 365 URLs and IP address ranges contains some CIRD blocks, but as it is a mix of domains, IPs and blocks, it is quite difficult to properly figure out what is in this list.
And as the type isn't cird, I'm pretty sure MISP doesn't use this list properly.
@iglocska what do you think?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with lists/microsoft-office365/list.json and inspect how its domains, IPs, and CIDR blocks are represented and typed. Compare the declared type with the mixed contents and verify how MISP consumes the list; done means the entries are unambiguous and CIDR blocks are handled correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- json
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100