Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Proofpoint v3 to decoder #86

Merged
merged 5 commits into from
Mar 21, 2021
Merged

Add Proofpoint v3 to decoder #86

Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
1d2d178
Update Sooty.py
TheresAFewConors Mar 21, 2021
21ddcdf
Update Sooty.py
TheresAFewConors Mar 21, 2021
7e90f83
Update Sooty.py
TheresAFewConors Mar 21, 2021
c57762f
Update Sooty.py
TheresAFewConors Mar 21, 2021
6306768
fixed bug in PP decoder
TheresAFewConors Mar 21, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 22 additions & 4 deletions Sooty.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@
"""

import base64

from unfurl import core
import hashlib
import html.parser
Expand Down Expand Up @@ -160,6 +161,15 @@ def decodev2(rewrittenurl):
if url not in linksFoundList:
linksFoundList.append(url)

def decodev3(rewrittenurl):
match = re.search(r'v3/__(?P<url>.+?)__;', rewrittenurl)
if match:
url = match.group('url')
if re.search(r'\*(\*.)?', url):
url = re.sub('\*', '+', url)
if url not in linksFoundList:
linksFoundList.append(url)

def titleLogo():
TitleOpen.titleOpen()
os.system('cls||clear')
Expand Down Expand Up @@ -212,22 +222,30 @@ def proofPointDecoder():
print(" --------------------------------- ")
rewrittenurl = str(input(" Enter ProofPoint Link: ").strip())
match = re.search(r'https://urldefense.proofpoint.com/(v[0-9])/', rewrittenurl)
matchv3 = re.search(r'urldefense.com/(v3)/', rewrittenurl)
if match:
if match.group(1) == 'v1':
decodev1(rewrittenurl)
for each in linksFoundList:
print('\n Decoded Link: %s' % each)
linksFoundList.clear()
elif match.group(1) == 'v2':
decodev2(rewrittenurl)
for each in linksFoundList:
print('\n Decoded Link: %s' % each)
linksFoundList.clear()

if matchv3 is not None:
if matchv3.group(1) == 'v3':
decodev3(rewrittenurl)
for each in linksFoundList:
print('\n Decoded Link: %s' % each)
linksFoundList.clear()
else:
print('Unrecognized version in: ', rewrittenurl)
else:
print(' No valid URL found in input: ', rewrittenurl)
print(' No valid URL found in input: ', rewrittenurl)

mainMenu()

def urlDecoder():
print("\n --------------------------------- ")
print(" U R L D E C O D E R ")
Expand Down