Abusix send email

api_app/analyzers_manager/migrations/0081_adjust_abusix.py

@@ -0,0 +1,23 @@
+from django.db import migrations
+
+
+def migrate(apps, schema_editor):
+    AnalyzerConfig = apps.get_model("analyzers_manager", "AnalyzerConfig")
+
+    AnalyzerConfig.objects.filter(
+        name="Abusix",
+    ).update(health_check_status=True)
+
+
+def reverse_migrate(apps, schema_editor):
+    pass
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("api_app", "0062_alter_parameter_python_module"),
+        ("analyzers_manager", "0080_remove_dns0_names_analyzer"),
+    ]
+    operations = [
+        migrations.RunPython(migrate, reverse_migrate),
+    ]

api_app/connectors_manager/connectors/abuse_submitter.py

@@ -0,0 +1,18 @@
+from api_app.connectors_manager.connectors.email_sender import EmailSender
+
+
+class AbuseSubmitter(EmailSender):
+    @property
+    def subject(self) -> str:
+        return (
+            "Takedown domain request for "
+            f"{self._job.parent_job.parent_job.observable_name}"
+        )
+
+    @property
+    def body(self) -> str:
+        return (
+            f"Domain {self._job.parent_job.parent_job.observable_name} "
+            "has been detected as malicious by our team. We kindly request you to take "
+            "it down as soon as possible."
+        )

api_app/connectors_manager/connectors/email_sender.py

@@ -0,0 +1,47 @@
+from django.core.mail import EmailMessage
+
+from api_app.connectors_manager.classes import Connector
+from intel_owl.settings import DEFAULT_FROM_EMAIL
+from tests.mock_utils import if_mock_connections, patch
+
+
+class EmailSender(Connector):
+    sender: str
+    subject: str
+    header: str
+    body: str
+    footer: str
+
+    def run(self) -> dict:
+        if self.sender:
+            sender = self.sender
+        else:
+            sender = DEFAULT_FROM_EMAIL
+        body = self.body
+        if self.header:
+            body = self.header + "\n\n" + body
+        if self.footer:
+            body = body + "\n\n" + self.footer
+        base_eml = EmailMessage(
+            subject=self.subject,
+            from_email=sender,
+            to=[self._job.observable_name],
+            body=body,
+        )
+        base_eml.send()
+        return {"receiver": self._job.observable_name}
+
+    def update(self) -> bool:
+        pass
+
+    @classmethod
+    def _monkeypatch(cls):
+        patches = [
+            if_mock_connections(
+                patch(
+                    "django.core.mail.EmailMessage.send",
+                    return_value="Email sent",
+                )
+            )
+        ]
+        return super()._monkeypatch(patches=patches)

api_app/connectors_manager/migrations/0030_connector_config_emailsender.py

@@ -0,0 +1,167 @@
+from django.db import migrations
+from django.db.models.fields.related_descriptors import (
+    ForwardManyToOneDescriptor,
+    ForwardOneToOneDescriptor,
+    ManyToManyDescriptor,
+)
+
+plugin = {
+    "python_module": {
+        "health_check_schedule": None,
+        "update_schedule": None,
+        "module": "email_sender.EmailSender",
+        "base_path": "api_app.connectors_manager.connectors",
+    },
+    "name": "EmailSender",
+    "description": "Send email",
+    "disabled": False,
+    "soft_time_limit": 60,
+    "routing_key": "default",
+    "health_check_status": True,
+    "maximum_tlp": "AMBER",
+    "run_on_failure": True,
+    "model": "connectors_manager.ConnectorConfig",
+}
+
+params = [
+    {
+        "python_module": {
+            "module": "email_sender.EmailSender",
+            "base_path": "api_app.connectors_manager.connectors",
+        },
+        "name": "subject",
+        "type": "str",
+        "description": "Email subject",
+        "is_secret": False,
+        "required": True,
+    },
+    {
+        "python_module": {
+            "module": "email_sender.EmailSender",
+            "base_path": "api_app.connectors_manager.connectors",
+        },
+        "name": "header",
+        "type": "str",
+        "description": "Email header for initial greetings",
+        "is_secret": False,
+        "required": False,
+    },
+    {
+        "python_module": {
+            "module": "email_sender.EmailSender",
+            "base_path": "api_app.connectors_manager.connectors",
+        },
+        "name": "body",
+        "type": "str",
+        "description": "Email body",
+        "is_secret": False,
+        "required": True,
+    },
+    {
+        "python_module": {
+            "module": "email_sender.EmailSender",
+            "base_path": "api_app.connectors_manager.connectors",
+        },
+        "name": "footer",
+        "type": "str",
+        "description": "Email footer for final greetings",
+        "is_secret": False,
+        "required": False,
+    },
+    {
+        "python_module": {
+            "module": "email_sender.EmailSender",
+            "base_path": "api_app.connectors_manager.connectors",
+        },
+        "name": "sender",
+        "type": "str",
+        "description": "Email sender",
+        "is_secret": False,
+        "required": False,
+    },
+]
+
+values = []
+
+
+def _get_real_obj(Model, field, value):
+    def _get_obj(Model, other_model, value):
+        if isinstance(value, dict):
+            real_vals = {}
+            for key, real_val in value.items():
+                real_vals[key] = _get_real_obj(other_model, key, real_val)
+            value = other_model.objects.get_or_create(**real_vals)[0]
+        # it is just the primary key serialized
+        else:
+            if isinstance(value, int):
+                if Model.__name__ == "PluginConfig":
+                    value = other_model.objects.get(name=plugin["name"])
+                else:
+                    value = other_model.objects.get(pk=value)
+            else:
+                value = other_model.objects.get(name=value)
+        return value
+
+    if (
+        type(getattr(Model, field))
+        in [ForwardManyToOneDescriptor, ForwardOneToOneDescriptor]
+        and value
+    ):
+        other_model = getattr(Model, field).get_queryset().model
+        value = _get_obj(Model, other_model, value)
+    elif type(getattr(Model, field)) in [ManyToManyDescriptor] and value:
+        other_model = getattr(Model, field).rel.model
+        value = [_get_obj(Model, other_model, val) for val in value]
+    return value
+
+
+def _create_object(Model, data):
+    mtm, no_mtm = {}, {}
+    for field, value in data.items():
+        value = _get_real_obj(Model, field, value)
+        if type(getattr(Model, field)) is ManyToManyDescriptor:
+            mtm[field] = value
+        else:
+            no_mtm[field] = value
+    try:
+        o = Model.objects.get(**no_mtm)
+    except Model.DoesNotExist:
+        o = Model(**no_mtm)
+        o.full_clean()
+        o.save()
+        for field, value in mtm.items():
+            attribute = getattr(o, field)
+            if value is not None:
+                attribute.set(value)
+        return False
+    return True
+
+
+def migrate(apps, schema_editor):
+    Parameter = apps.get_model("api_app", "Parameter")
+    PluginConfig = apps.get_model("api_app", "PluginConfig")
+    python_path = plugin.pop("model")
+    Model = apps.get_model(*python_path.split("."))
+    if not Model.objects.filter(name=plugin["name"]).exists():
+        exists = _create_object(Model, plugin)
+        if not exists:
+            for param in params:
+                _create_object(Parameter, param)
+            for value in values:
+                _create_object(PluginConfig, value)
+
+
+def reverse_migrate(apps, schema_editor):
+    python_path = plugin.pop("model")
+    Model = apps.get_model(*python_path.split("."))
+    Model.objects.get(name=plugin["name"]).delete()
+
+
+class Migration(migrations.Migration):
+    atomic = False
+    dependencies = [
+        ("api_app", "0062_alter_parameter_python_module"),
+        ("connectors_manager", "0029_4_change_primary_key"),
+    ]
+
+    operations = [migrations.RunPython(migrate, reverse_migrate)]