Overview
This node performs the 'Refang' operation, which restores defanged URLs or IP addresses to their original, safe-to-use form. It is useful in scenarios where URLs or IPs have been altered to prevent accidental clicks or execution, such as in cybersecurity reports or threat intelligence sharing, and need to be converted back to their functional form for further processing or analysis.
Use Case Examples
- Restoring a defanged URL like 'hxxp://example[.]com' back to 'http://example.com' for automated scanning.
- Converting defanged IP addresses in threat intelligence data back to their original form for network monitoring.
Properties
| Name | Meaning |
|---|---|
| Value | The string value containing the defanged URL or IP address that should be refanged back to its original form. |
| Property Name | The name of the property in the output JSON where the refanged value will be written. Supports dot-notation for nested properties. |
Output
JSON
- The refanged URL or IP address written to the specified property in the output JSON object.
Dependencies
- Uses the 'fanger' library for defanging and refanging operations.
- Uses 'lodash' for setting nested properties in the output JSON.
Troubleshooting
- If the input value is not a valid defanged URL or IP, the refang operation may fail and throw an error.
- Errors during processing will either stop execution or be captured in the output if 'Continue On Fail' is enabled.
- Ensure the 'Property Name' is correctly specified to avoid output data being written to unintended locations.
Links
- fanger NPM Package - Library used for defanging and refanging URLs and IP addresses.