Building custom connectors IT and Infosec systems

SimonKing

Hi, I am trying to build a bunch of custom connectors for various systems. I have built connectors for

SentinelOne (updated one I created in a past job)
EndOfLifeDate,
DMARCLY
Abnormal Email.

I have had no luck with the existing JIRA connector so I am looking at creating my own JIRA connector but also creating connectors for

Wiz - CSPM (Getting token but not yet got queries working)
Zoho EndPoint Central (Authentication is a multi step issue here !)
Appcheck (Nearly Finished)
Initigriti Bug Bounty Program (Not started)
HaveIBeenPwned (Not Started)
EasyDMARC (Not looking at this until next year)

Rather than reinventing the wheel, I was wondering if anyone else had made (or tried to make) connectors for any of these and would be willing to share their code.

In a previous job I have also previously created connectors for:

AlienVault, CSC Global, Detectify, IBM X Force, OutPost24 SWAT, Shodan, URL Scan and Nominet 😁

ArborRose

I have not. But you could use Jupyter Notebooks and Python to establish connections to the APIs of the tools you've mentioned.

Wiz - CSPM:

import requests


token = "your_api_token"

headers = {"Authorization": f"Bearer {token}"}

url = "https://api.wiz.io/your_endpoint"


response = requests.get(url, headers=headers)

data = response.json()

Zoho EndPoint Central:

import requests


auth_url = "https://accounts.zoho.com/oauth/v2/auth"

token_url = "https://accounts.zoho.com/oauth/v2/token"

client_id = "your_client_id"

client_secret = "your_client_secret"

redirect_uri = "your_redirect_uri"

code = "authorization_code"


token_data = {

    "grant_type": "authorization_code",

    "client_id": client_id,

    "client_secret": client_secret,

    "redirect_uri": redirect_uri,

    "code": code,

}

response = requests.post(token_url, data=token_data)

access_token = response.json().get("access_token")


# Use the access token to make API calls

Appcheck:

import requests


url = "https://api.appcheck.com/v1/your_endpoint"

headers = {"Authorization": "Bearer your_token"}


response = requests.get(url, headers=headers)

data = response.json()

Intigriti Bug Bounty Program:

import requests


url = "https://api.intigriti.com/your_endpoint"

headers = {"Authorization": "Bearer your_token"}


response = requests.get(url, headers=headers)

data = response.json()

HaveIBeenPwned:

import requests


email = "test@example.com"

url = f"https://haveibeenpwned.com/api/v3/breachedaccount/{email}"

headers = {

    "User-Agent": "YourAppName",

    "hibp-api-key": "your_api_key"

}


response = requests.get(url, headers=headers)

data = response.json()