https://github.com/bonifield/urlbreakdown

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis
https://github.com/bonifield/urlbreakdown

analysis blueteam dfir dfir-automation forensics pentest-tool pentesting python webapp

Last synced: 4 days ago
JSON representation

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis

• Host: GitHub
• URL: https://github.com/bonifield/urlbreakdown
• Owner: bonifield
• License: mit
• Created: 2021-04-28T20:46:03.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-04-28T21:13:53.000Z (over 3 years ago)
• Last Synced: 2024-12-19T02:46:30.612Z (about 1 month ago)
• Topics: analysis, blueteam, dfir, dfir-automation, forensics, pentest-tool, pentesting, python, webapp
• Language: Python
• Homepage:
• Size: 8.79 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# URLBreakdown

splits a URL into individual components, unescapes arguments, and performs light calculations for manual or automated analysis

### Installation

```

pip install urlbreakdown

```

### Usage

**URLBreakdown("url", pguid=None, verbose=False)**

- default is just a URL, with no parent GUID, in non-verbose mode

	- include a parent GUID/UUID if generated in the script calling this module

	- verbose includes a simple character frequency map, and an additional array-of-nested-arrays of parameters

```

from urlbreakdown import URLBreakdown

u = URLBreakdown("https://search.yahoo.com/search?p=google&fr=yfp-t&ei=UTF-8&fp=1&blank1=&blank2=")

print(u.json)

#

# optional arguments pguid and verbose

#

u = URLBreakdown("https://search.yahoo.com/search?p=google&fr=yfp-t&ei=UTF-8&fp=1&blank1=&blank2=", pguid="1234-5678-9001", verbose=True)

```

### Available Attributes

```

json (string)

output (dictionary)

```

### Example Output (via test-urlbreakdown-usage-example.py)

```

{

  "@timestamp": "2021-04-28T19:46:38.144Z",

  "guid": "be9fc53e-04a1-4ec9-b382-5a3ef7704039",

  "url": {

    "full": "https://www.google.com/search?client=firefox-b-1-d&q=reddit&a=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E",

    "len": 104,

    "original": "https://www.google.com/search?client=firefox-b-1-d&q=reddit&a=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E",

    "dot_count_url": 2,

    "scheme": "https",

    "domain": "www.google.com",

    "dot_count_domain": 2,

    "query": "client=firefox-b-1-d&q=reddit&a=%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E",

    "query_len": 74,

    "path": "/search",

    "unquoted": {

      "query": "client=firefox-b-1-d&q=reddit&a=alert(1);",

      "query_len": 58

    },

    "parameters": {

      "keys": [

        "a",

        "q",

        "client"

      ],

      "values": [

        "reddit",

        "alert(1)",

        "firefox-b-1-d",

        "<script>alert(1);"

      ],

...

```