Skip to content

improve fqdn extraction from response body using parsers #1773

@tarunKoyalwar

Description

@tarunKoyalwar

Please describe your feature request:

  • currently we use regex to extract potential domains and then apply some heuristic rules
  • this can furthur be improved by using actual parsers
  • parsers allow us to filter out and locate contexts and then extract fqdns from those places ( ex: src , href attributes of html , strings literals of javscript etc)

Describe the use case of this feature:

  • reduced FP and FN

Metadata

Metadata

Assignees

Labels

Type: EnhancementMost issues will probably ask for additions or changes.
No fields configured for Enhancement.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions