Forensics Wiki - Changes related to "Category:Analysis" [en]

Gurls

2013-05-20T19:47:08Z

Gurls

2013-05-20T14:35:04Z

Gurls

2013-05-19T21:15:06Z

Gurls

2013-05-19T20:43:10Z

New page

Gruls is a bash script and is short for grep urls.

#!/bin/bash
protocol="(ftp|http|https|gopher|mailto|pop|smtp|news|nntp|telnet|whois|file|imap|prospero|peercast|ed2k|irc|aim|mime|ftam|pnm|rtsp|ldap)"
ip="([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.((0|[1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.){2}([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])"
fqdn="(\w(-?\w+)*\.)+[a-z]{2,}"
host="(${ip}|${fqdn})"
port="(:[0-9]+)?"
urlregexp="${protocol}://${host}${port}/?"

(
if [ "$1" ]
then
while [ "$1" ]
do
egrep -o "$urlregexp" "$1"
shift
done
else
egrep -o "$urlregexp" /dev/stdin
fi
) | sed 's;/$;;g'

@@ Line 3: / Line 3: @@
   #!/bin/bash
   protocol="(ftp|http|https|gopher|mailto|pop|smtp|news|nntp|telnet|whois|file|imap|prospero|peercast|ed2k|irc|aim|mime|ftam|pnm|rtsp|ldap)"
-  ip="([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.((0|[1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.){2}([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])"
+  ip4="([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.((0|[1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])\.){2}([1-9][0-9]?|1[0-9]{2}|2[0-4][0-9]|25[0-4])"
   fqdn="(\w(-?\w+)*\.)+[a-z]{2,}"
-  host="(${ip}|${fqdn})"
+  host="(${ip4}|${fqdn})"
   port="(:[0-9]+)?"
   urlregexp="${protocol}://${host}${port}/?"
@@ Line 32: / Line 32: @@
   root@forensic# strings /dev/sdb1 | gurls > /tmp/urls
 ==See Also==
 * [[bulk_extractor]] provides similar functionality but on a much larger scale. Still, scripts like ''gurls'' are good for quickly searching through data.
-{{Linux}}

← Older revision		Revision as of 14:35, 20 May 2013
Line 32:		Line 32:

	root@forensic# strings /dev/sdb1 \| gurls > /tmp/urls		root@forensic# strings /dev/sdb1 \| gurls > /tmp/urls
		+
		+	==See Also==
		+	* [[bulk_extractor]] provides similar functionality but on a much larger scale. Still, scripts like ''gurls'' are good for quickly searching through data.

	{{Linux}}		{{Linux}}

@@ Line 1: / Line 1: @@
-Gruls is a bash script and is short for grep urls.
+Gruls is a bash script and is short for grep urls :
   #!/bin/bash
@@ Line 21: / Line 21: @@
   fi
   ) | sed 's;/$;;g'