search

InQuest / iocextract

Defanged Indicator of Compromise (IOC) Extractor.
https://inquest.readthedocs.io/projects/iocextract/
GNU General Public License v2.0
498 stars 91 forks source link

URL generic regex is too loose #5

Closed rshipp closed 6 years ago

rshipp commented 6 years ago

Require at least one [\w] character immediately following the ://. Exceptions for [\s\[\(]* to catch defangs.