Defanged Indicator of Compromise (IOC) Extractor.
Extract indicators of compromise from text, including "escaped" ones.
Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .
URL / IP / Email defanging with Javascript. Make IoC harmless.
Defanger is a Notepad++ plugin that defangs/refangs malicious IOCs.
URL / IP / Email defanging with Golang. Make IoC harmless.
A GitHub Action to deploy with Defang.
GoFangDefang is a Go library for secure manipulation of Indicators of Compromise (IOCs), converting them between their original "fang" format (with special characters) and a safer "defang" format. It prevents accidental execution of potentially malicious IOCs like URLs, IPs, domains, or subdomains.
Repo for topics of interest.
Container image for building with Railpack.
Strip JavaScript, OpenAction, Launch actions and other active content from PDFs. Lightweight Python library on top of pikepdf. MIT licensed.
IOC extractor for threat intel and incident response: pulls URLs, domains, IPv4/IPv6, emails, MD5/SHA1/SHA256/SHA512, CVEs, ATT&CK IDs, crypto wallets and registry keys from text, logs and reports, refangs defanged IOCs, filters noise and exports JSON, CSV, STIX 2.1 and SARIF. Zero deps.
redefang is a simple API providing functionality to defang or refang an IOC over a simple HTTPS API, either POST / GET
Presents an OpenAI-compatible interface for AWS Bedrock designed to be deployed alongside Defang services
Defang and refang IOCs (hxxps://evil[.]com) in text, logs and reports with several styles, and a CI check that fails when threat reports, tickets or docs contain live, clickable or half-defanged URLs, domains, IPs or emails. CLI, library and GitHub Action. Zero deps.
To associate your repository with the defang topic, visit your repo's landing page and select "manage topics."