MSRXTools / Incident response
IOC extractor & defanger
Pull IPs, domains, URLs, emails, hashes and CVE IDs out of any report or alert, defanged and ready to share or block.
Runs in your browser
Loading tool…
Good to know
- Defanged indicators (hxxps://, [.]) cannot be clicked by accident; share them that way in chats and tickets.
- Check indicators against your firewall, DNS and proxy logs to see whether anything on your network contacted them.
- Private addresses (10.x, 192.168.x) are usually your own machines, so they are skipped by default.
Related tools
Access log attack finder
Paste nginx or Apache access logs and find SQL injection, XSS, path traversal, Log4Shell, secret probing, scanners and login brute force, by IP.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Paste nginx or Apache access logs and find SQL injection, XSS, path traversal, Log4Shell, secret probing, scanners and login brute force, by IP.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.