Cloaken

Details

ID	`Cloaken`
Provider	Cloaken
Category	Data Enrichment & Threat Intelligence
From Version	5.0.0
Docker Image	`demisto/vendors-sdk:1.0.0.10120494`
Supported Modules	Agentix XSIAM

README

Use the Cloaken integration to unshorten URLs in AWS behind TOR.

Use Cases

Unshorten a URL to run the expanded URL through intelligence sources.

Configure Cloaken on Cortex XSOAR

Navigate to Settings > Integrations > Servers & Services.
Search for Cloaken.
Click Add instance to create and configure a new integration instance.
- Name: a textual name for the integration instance.
- credentials : credentials for integration
- Server URL : server url for cloaken instance
Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

Unshorten a URL: cloaken-unshorten-url

1. Unshorten a URL

Unshortens a URL.

Base Command

cloaken-unshorten-url

Input

Argument Name	Description	Required
url	URL to unshorten.	Required

Context Output

Path	Type	Description
Cloaken.UnshortenedURL	string	The unshortened URL.
Cloaken.OriginalURL	string	The original URL.
Cloaken.Status	integer	Status of the response: BADREQUEST or OK.
URL.Data	string	The unshortened URL.

Command Example

cloaken-unshorten-url url=https://someurl.com

Context Example

{
URL:{Data:"http://badperson.com"},
Cloaken:{
    original_url:"https://tinyurl.com/x223z3223",
    unshortened_url:"http://badperson.com",
   response_status:201
}

Human Readable Output

Cloakened URL:

original_url	unshortened_url
https://tiny.url.com/x223z3223	http://badperson.com

cloaken-screenshot-url

Creates a screenshot of the specified URL.

Base Command

cloaken-screenshot-url

Input

Argument Name	Description	Required
url	The URL for which to take a screenshot.	Required

Context Output

Path	Type	Description
CloakenScreenshot.Url	string	Url
CloakenScreenshot.Status	string	Status of the screenshot.

Configuration parameters

server_url — Server URL (e.g., https://cloaken.cypherint.com) (required)
credentials — Username (required)
proxy — Use system proxy settings
insecure — Trust any certificate (not secure)

Commands (2)

cloaken-screenshot-url
Creates a screenshot of the specified URL.
cloaken-unshorten-url
Unshortens a URL.

Source

Cloaken.py Cloaken.yml Cloaken_description.md

Download History Raw

commonfields:
  id: Cloaken
  version: -1
name: Cloaken
display: Cloaken
category: Data Enrichment & Threat Intelligence
provider: Cloaken
description: Unshorten URLs onsite using the power of a Tor proxy server to prevent leaking IP addresses to adversaries.
configuration:
- display: Server URL (e.g., https://cloaken.cypherint.com)
  name: server_url
  defaultvalue: https://cloaken.cypherint.com
  type: 0
  required: true
- display: Username
  name: credentials
  defaultvalue: ""
  type: 9
  required: true
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
script:
  script: ''
  type: python
  subtype: python3
  commands:
  - name: cloaken-unshorten-url
    arguments:
    - name: url
      required: true
      description: URL to unshorten.
    outputs:
    - contextPath: Cloaken.UnshortenedURL
      description: The unshortened URL.
      type: string
    - contextPath: Cloaken.OriginalURL
      description: The original URL.
      type: string
    - contextPath: URL.Data
      description: The unshortened URL.
      type: string
    - contextPath: Cloaken.Status
      description: 'Status of the response: BADREQUEST or OK.'
      type: number
    description: Unshortens a URL.
  - name: cloaken-screenshot-url
    arguments:
    - name: url
      required: true
      description: The URL for which to take a screenshot.
    outputs:
    - contextPath: CloakenScreenshot.Url
      description: Url.
      type: string
    - contextPath: CloakenScreenshot.Status
      description: Status of the screenshot.
      type: string
    description: Creates a screenshot of the specified URL.
  dockerimage: demisto/vendors-sdk:1.0.0.10120494
fromversion: 5.0.0
tests:
- No tests