Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] All Onyphe analyzer return "Invalid output" #591

Closed
icepaule opened this issue Jan 19, 2020 · 5 comments
Closed

[Bug] All Onyphe analyzer return "Invalid output" #591

icepaule opened this issue Jan 19, 2020 · 5 comments
Assignees
Labels
category:bug Issue is related to a bug scope:analyzer Issue is analyzer related
Milestone

Comments

@icepaule
Copy link

Describe the bug
I just pulled that latest version an tested the 4 Onyphe analyzers.
They all come back with:
{
"errorMessage": "Invalid output\n",
"input": null,
"success": false
}

To Reproduce
call any Onyphe analyzer with an IP

Expected behavior
A valid response

Complementary information
A great and fantastic tool. Please keep up this fantastic work ..!!!! :-)

Work environment

  • Client OS: Windows 10
  • Server OS: Ubuntu 18.04
  • Browse type and version: Chrome (latest)
  • Cortex version: 2.1.3-1
  • Cortex Analyzer/Responder name: Onyphe_Forward_1_0
  • Cortex Analyzer/Responder version: 1.0
  • Cortex Analyzer/Responder name: Onyphe_Ports_1_0
  • Cortex Analyzer/Responder version: 1.0
  • Cortex Analyzer/Responder name: Onyphe_Reverse_1_0
  • Cortex Analyzer/Responder version: 1.0
  • Cortex Analyzer/Responder name: Onyphe_Threats_1_0
  • Cortex Analyzer/Responder version: 1.0

Possible solutions
n.a.

Additional context
n.a.

@icepaule icepaule added the category:bug Issue is related to a bug label Jan 19, 2020
@jeromeleonard jeromeleonard added this to the 2.5.0 milestone Jan 20, 2020
@jeromeleonard jeromeleonard added the scope:analyzer Issue is analyzer related label Jan 20, 2020
@jeromeleonard jeromeleonard modified the milestones: 2.5.0, 2.3.1 Jan 20, 2020
@garanews
Copy link
Contributor

Hello,
I just tried all 4 analyzers and everything is ok:
image
image
image

I can receive this error
{
"input": null,
"success": false,
"errorMessage": "no output",
"artifacts": []
}

If I try to analyze an ip written in wrong way, such as add it with [.]
Not able to receive "Invalid output"
Can you give me more info to reproduce issue?

@jeromeleonard
Copy link
Contributor

Also made some test, with and without docker, from TheHive and directly into Cortex, with fanged real IP address and also unfanged. Also tried with bad IP address. Never managed to get this output.
@icepaule last version of Cortex is 3.0.1, could you please try with this version ?

@nadouani
Copy link
Contributor

nadouani commented Feb 7, 2020

@garanews I thing we should fix the milestone of this issue

@nadouani nadouani removed this from the 2.3.1 milestone Feb 7, 2020
@garanews
Copy link
Contributor

Hi @icepaule are you still experiencing this error?

@jeromeleonard jeromeleonard added this to the 2.6.0 milestone Feb 28, 2020
@dadokkio dadokkio closed this as completed Mar 4, 2020
@dadokkio
Copy link
Contributor

dadokkio commented Mar 4, 2020

We can consider this issue closed. If you still have this issues please reopen this issue adding more information.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:bug Issue is related to a bug scope:analyzer Issue is analyzer related
Projects
None yet
Development

No branches or pull requests

5 participants