{"id":13529396,"url":"https://github.com/sysgoblin/PSURLScanio","last_synced_at":"2025-04-01T16:31:25.288Z","repository":{"id":124291644,"uuid":"198505098","full_name":"sysgoblin/PSURLScanio","owner":"sysgoblin","description":"🔎 Use urlscan.io with PowerShell!","archived":true,"fork":false,"pushed_at":"2021-02-22T09:12:24.000Z","size":85,"stargazers_count":33,"open_issues_count":0,"forks_count":6,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-11-02T16:34:51.137Z","etag":null,"topics":["api-wrapper","powershell","urlscan","urlscan-io"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sysgoblin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":".github/FUNDING.yml","license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null},"funding":{"custom":["https://www.buymeacoffee.com/j03EQ89vz"]}},"created_at":"2019-07-23T20:40:30.000Z","updated_at":"2024-10-22T04:27:16.000Z","dependencies_parsed_at":"2024-04-12T21:59:46.279Z","dependency_job_id":null,"html_url":"https://github.com/sysgoblin/PSURLScanio","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysgoblin%2FPSURLScanio","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysgoblin%2FPSURLScanio/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysgoblin%2FPSURLScanio/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sysgoblin%2FPSURLScanio/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sysgoblin","download_url":"https://codeload.github.com/sysgoblin/PSURLScanio/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246670543,"owners_count":20815002,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["api-wrapper","powershell","urlscan","urlscan-io"],"created_at":"2024-08-01T07:00:35.938Z","updated_at":"2025-04-01T16:31:25.006Z","avatar_url":"https://github.com/sysgoblin.png","language":"PowerShell","funding_links":["https://www.buymeacoffee.com/j03EQ89vz"],"categories":["PowerShell","API Wrapper"],"sub_categories":[],"readme":"\u003e This repo is no longer actively maintained, however PR's are welcome!\n\n[![Build Status](https://dev.azure.com/cbaylissmk2/github%20projects/_apis/build/status/sysgoblin.PSURLScanio?branchName=dev)](https://dev.azure.com/cbaylissmk2/github%20projects/_build/latest?definitionId=2\u0026branchName=dev)\n[![Powershell Gallery](https://img.shields.io/badge/PSGallery-1.0-success)](https://www.powershellgallery.com/packages/PSUrlScanio/1.0)\n\n## 🔍 PSURLScanio\n\u003e A Powershell module for using the urlscan.io API.\n\nPSURLScanio/PSUrlScanio is a Powershell module/wrapper for the urlscan.io API. The module allows you to quickly query/submit data to the service and incorporate it in to your automated threat hunting/intel processes using PoSh.\n\nFor example, let's hunt for some potential HSBC phishing pages that have embedded the companies logo! 🕵️‍\n![demo1](https://i.imgur.com/EuqSwoO.gif)\n\nFrom here we could loop through each result to grab more data, or even retrieve live screenshots!\n\n## 📦 Install\nHead over to urlscan.io and get yourself an API key (https://urlscan.io/user/apikey/new/), install the module and then run Connect-UrlScanio to set your key.\n```powershell\nInstall-Module -Name PSUrlScanio -Repository PSGallery\nConnect-UrlScanio -ApiKey \"2126abb6-3686-47ef-bae5-9daf6c9e0888\"\n```\n\n## 📜 Examples\n### Search for the last scan for the domain github.com.\n```powershell\nSearch-Urlscanio -Domain github.com -Limit 1 -Specific\n\nTaskDate   : 28/08/2019 19:01:45\nSubmission : api\nid         : 3313e096-3f4a-496f-9e9c-b0924e4d6824\nURL        : https://github.com/\nApiResult  : https://urlscan.io/api/v1/result/3313e096-3f4a-496f-9e9c-b0924e4d6824\nResultPage : https://urlscan.io/result/3313e096-3f4a-496f-9e9c-b0924e4d6824\n```\n(Omitting ```-Specific``` will return any scans where github.com is called in any http request while loading the page)\n\n### Do the same but return the entire response rather than basic details.\n```powershell\nSearch-Urlscanio -Domain github.com -Limit 1 -Specific -Raw Object\n\ntask           : @{visibility=public; method=api; ...}\nstats          : @{uniqIPs=3; consoleMsgs=0; dataLength=746649; ...}\npage           : @{country=US; server=GitHub.com; city=; ...}\nuniq_countries : 2\n_id            : 3313e096-3f4a-496f-9e9c-b0924e4d6824\nresult         : https://urlscan.io/api/v1/result/3313e096-3f4a-496f-9e9c-b0924e4d6824\n```\n\n### Get results from a specific scan id.\n```powershell\nGet-UrlScanioScan -uuid 03ba7a78-e779-4743-ae37-2b683ee9ec74\n\ndata     : @{requests=System.Object[]; cookies=System.Object[]; ...}\nstats    : @{resourceStats=System.Object[]; protocolStats=System.Object[]; ...}\nmeta     : @{processors=}\ntask     : @{uuid=03ba7a78-e779-4743-ae37-2b683ee9ec74; ...}\npage     : @{url=https://www.google.com/?gws_rd=ssl; domain=www.google.com; ...}\nlists    : @{ips=System.Object[]; countries=System.Object[]; ...}\nverdicts : @{overall=; urlscan=; engines=; community=}\n```\n\n### Get results from a scan but only return hash information\n```powershell\nGet-UrlScanioScan -id 03ba7a78-e779-4743-ae37-2b683ee9ec74 -DataType Hashes\n\ntype      size    hash                                                              url\n----      ----    ----                                                              ---\nDocument  237303  3bd8b5dc1430a1cf1bb26c08d7553f9ec2ee2d09b466dcb38e5674e7c368bf9b  https://www.google.com/?...\nImage       7960  5776cd87617eacec3bc00ebcf530d1924026033eda852f706c1a675a98915826  https://www.google.com/images/...\nImage       9768  a0e3b4584e7c0eb991bd5668a7495674dadccd5d1261dcba749d03700c5bceaa  https://ssl.gstatic.com/gb/...\nImage        864  68d641e6402d4fbf0ddd37c95af75afdfad913dd9a7e7c6d3d9589b81512a12e  https://www.gstatic.com/images/...\nImage          0  e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  https://consent.google.com/...\n```\n\n### Kick off a scan on the chosen domain/URL and return the scan results.\n```powershell\nStart-UrlScanioScan -Url google.com -ShowResults\n\ndata     : @{requests=System.Object[]; cookies=System.Object[]; ...}\nstats    : @{resourceStats=System.Object[]; protocolStats=System.Object[]; tlsStats=System.Object[]; ...}\nmeta     : @{processors=}\ntask     : @{uuid=781d9c96-7638-4393-b504-3cbc1ef5adfc; time=28/08/2019 19:58:22; ...}\npage     : @{url=http://www.google.com/sorry/index?continue=http://google.com/\u0026q=EhAqAQT4AZJUFAAAAAAAAAACGN65m-sFIhkA8aeDS4ML-09ouMDyyvDlbF81DD9ZWHvMMgFy; ...}\nlists    : @{ips=System.Object[]; countries=System.Object[]; asns=System.Object[]; domains=System.Object[]; servers=System.Object[]; urls=System.Object[]; linkDomains=System.Object[]; certificates=System.Object[]; hashes=System.Object[]}\nverdicts : @{overall=; urlscan=; engines=; community=}\n```\n(Example results have been truncated)\n\n## ❓ FAQ\n\n - **Can I contribute?**\n   - Yes please! Feel free to clone/test/add features and submit a PR or enhancement suggestion. Help yourself to the project board if you feel like it!\n - **Why can I only get 10000 results? There are way more for this domain!**\n   - 10k results is the max limit for the API, and I haven't figured out a magical way around it (yet...).\n - **Something's broke.**\n   - Please submit an issue for it and I'll take a look!\n\n## Support\n\nFeel free to reach out to me via twitter \u003ca href=\"https://twitter.com/sysgoblin\" target=\"_blank\"\u003e`@sysgoblin`\u003c/a\u003e.\n\nIf you fancy supporting me and what I'm working on you can always buy me a sfw beer (aka coffee) by the sponsor button on this repo. ☕👌\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysgoblin%2FPSURLScanio","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsysgoblin%2FPSURLScanio","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsysgoblin%2FPSURLScanio/lists"}