mirror of
https://github.com/reconurge/flowsint.git
synced 2026-11-11 13:43:46 -06:00
Two enrichers silently return empty results instead of failing loudly. 1. domain_to_dns dnsx >= 1.2 treats -d as "bruteforce this domain" and exits with "missing wordlist(w) flag required with domain(d) input" unless -w is also given, so `dnsx -d example.com -a -aaaa -json -silent` never produces output. The enricher catches nothing (the tool exits 0) and returns [], while Celery still reports the task as succeeded. Feed the single target on stdin instead, which is the supported single-target invocation. DockerTool.launch() gains an optional entrypoint override so a shell can be put in front of the image entrypoint; the domain is passed through shlex.quote(). 2. ip_to_fraudscore Scamalytics assigns each account a numbered API node (api11, api12, ...) and the host was hardcoded to api12, which returns 404 for every account provisioned on a different node. The host is now read from a SCAMLYTICS_API_HOST secret/env var, defaulting to the previous api12 so existing deployments are unaffected. Verified against dnsx v1.2.2 and a live Scamalytics v3 account.
flowsint-enrichers
The repository containing open-source enrichers for flowsint.
Testing
uv run pytest
⚠️ 🚧 Work in progress !.