Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add url defang #394

Merged
merged 2 commits into from
Nov 7, 2018
Merged

Add url defang #394

merged 2 commits into from
Nov 7, 2018

Conversation

arnydo
Copy link
Contributor

@arnydo arnydo commented Oct 16, 2018

Simple operation to "Defang" a URL. Replaces "." with "[.]" and "://" with "[://]" to render the URL invalid and prevent accidental clicking/browsing. Often used with IOCs.

Works well when used after the "ExtractURLs" operation.

Example:
https://baddomain.io/badfile.exe -> hxxps[://]baddomain[.]io/badfile[.]exe

@n1474335 n1474335 merged commit 69033a7 into gchq:master Nov 7, 2018
@n1474335
Copy link
Member

n1474335 commented Nov 7, 2018

Great, thanks for the contribution. I've added a number of arguments so that you can specify which elements of the URL to defang. By default it now only processes legitimate URLs and domains rather than everything. This allows you to paste paragraphs of text in and not have to worry about defanging full stops etc.

@arnydo
Copy link
Contributor Author

arnydo commented Nov 7, 2018

Excellent! Thanks for the merge. CyberChef has been an excellent tool.

This pull request was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants