Skip to main content

Warninglist

Get a list of warninglists:

POST

https://misp.local/warninglists

Response: 

200:

{
  "Warninglists": [
    {
      "Warninglist": {
        "id": "3",
        "name": "List of known domains to know external IP",
        "type": "cidr",
        "description": "string",
        "version": "10",
        "enabled": true,
        "warninglist_entry_count": "1234",
        "valid_attributes": "domain, hostname, domain|ip, uri, url",
        "WarninglistEntry": [
          {
            "id": "1234",
            "value": "10.128.0.0/24",
            "warninglist_id": "3"
          }
        ]
      }
    }
  ]
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}

Search warninglists:

POST

https://misp.local/warninglists

Response: 

200:

{
  "Warninglists": [
    {
      "Warninglist": {
        "id": "3",
        "name": "List of known domains to know external IP",
        "type": "cidr",
        "description": "string",
        "version": "10",
        "enabled": true,
        "warninglist_entry_count": "1234",
        "valid_attributes": "domain, hostname, domain|ip, uri, url",
        "WarninglistEntry": [
          {
            "id": "1234",
            "value": "10.128.0.0/24",
            "warninglist_id": "3"
          }
        ]
      }
    }
  ]
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}

Enable/disable warninglists:

POST

https://misp.local/warninglists/toggleEnable

Response: 

200:

{
  "saved": true,
  "success": "1 warninglist(s) disabled"
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}

Get warninglist by ID:

GET

https://misp.local/warninglists/view/{warninglistId}

Response: 

200:

{
  "Warninglist": {
    "id": "3",
    "name": "List of known domains to know external IP",
    "type": "cidr",
    "description": "string",
    "version": "10",
    "enabled": true,
    "warninglist_entry_count": "1234",
    "valid_attributes": "domain, hostname, domain|ip, uri, url",
    "WarninglistEntry": [
      {
        "id": "1234",
        "value": "10.128.0.0/24",
        "warninglist_id": "3"
      }
    ]
  }
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}

Check if a list of values matches any warninglists:

POST

https://misp.local/warninglists/checkValue

Request:
[
  "10.128.0.2"
]
Response: 

200:

{
  "10.128.0.2": [
    {
      "id": "10",
      "name": "List of known Wikimedia address ranges"
    }
  ]
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}

Update warninglists:

POST

https://misp.local/warninglists/update

Response: 

200:

{
  "saved": true,
  "success": true,
  "name": "Successfully updated 1 warninglists.",
  "message": "Successfully updated 1 warninglists.",
  "url": "/warninglists/update"
}

403:

{
  "name": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "message": "Authentication failed. Please make sure you pass the API key of an API enabled user along in the Authorization header.",
  "url": "/attributes"
}

404:

{
  "name": "Invalid attribute",
  "message": "Invalid attribute",
  "url": "/attributes/1234"
}

Default:

{
  "name": "string",
  "message": "string",
  "url": "/attributes"
}