VulnCheck IP 인텔리전스에는 C2 데이터를 Next-Generation Firewall(NGFW)과 같은 서드파티 제어에서 쉽게 활용할 수 있도록 해주는 Tags API가 포함되어 있습니다. 이 API는 External Blocklists(EBL) 또는 Dynamic Blocklists(DBL)를 지원합니다.
현재 지원되는 IP 인텔리전스 태그는 다음과 같습니다:
| 태그 이름 | 동적 태그 URL |
|---|---|
| vulncheck-c2 | https://api.vulncheck.com/v3/tags/vulncheck-c2 |
curl --request GET --url https://api.vulncheck.com/v3/tags/vulncheck-c2 --header 'Accept: application/json' --header 'Authorization: Bearer insert_token_here'
package main
import (
"context"
"fmt"
"log"
"os"
vulncheck "github.com/vulncheck-oss/sdk-go-v2/v2"
)
func main() {
configuration := vulncheck.NewConfiguration()
configuration.Scheme = "https"
configuration.Host = "api.vulncheck.com"
client := vulncheck.NewAPIClient(configuration)
token := os.Getenv("VULNCHECK_API_TOKEN")
auth := context.WithValue(
context.Background(),
vulncheck.ContextAPIKeys,
map[string]vulncheck.APIKey{
"Bearer": {Key: token},
},
)
resp, httpRes, err := client.EndpointsAPI.TagsVulncheckC2Get(auth).Execute()
if err != nil || httpRes.StatusCode != 200 {
log.Fatal(err)
}
fmt.Printf("%+v", resp)
}
import vulncheck_sdk
configuration = vulncheck_sdk.Configuration(host="https://api.vulncheck.com/v3")
configuration.api_key["Bearer"] = "insert_token_here"
with vulncheck_sdk.ApiClient(configuration) as api_client:
endpoints_client = vulncheck_sdk.EndpointsApi(api_client)
api_response = endpoints_client.tags_vulncheck_c2_get()
print(api_response)
vulncheck tag vulncheck-c2
1.11.114.146
1.12.36.221
1.12.44.34
1.12.56.98
1.12.58.65
1.12.181.224
1.12.221.241
1.12.228.16
1.12.230.223
1.12.253.64
...
curl --request GET --url https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json --header 'Accept: application/json' --header 'Authorization: Bearer insert_token_here'
package main
import (
"fmt"
"io"
"net/http"
)
func main() {
request, _ := http.NewRequest("GET", "https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json", nil)
request.Header.Set("Accept", "application/json")
request.Header.Set("Authorization", "Bearer insert_token_here")
response, _ := http.DefaultClient.Do(request)
defer response.Body.Close()
bodyBytes, _ := io.ReadAll(response.Body)
fmt.Println(string(bodyBytes))
}
import requests
url = "https://api.vulncheck.com/v3/tags/vulncheck-c2?format=json"
headers = {
"accept": "application/json"
}
cookies = {
"token": "insert_token_here"
}
response = requests.get(url, headers=headers, cookies=cookies)
print(response.json())
vulncheck tag vulncheck-c2 --json