Defanger

A Notepad++ plugin to neutralize and restore the functionality of Indicators of Compromise (IOCs) by defanging and refanging them.

Selective or whole-text defanging: You can choose between defanging/refanging selected portions of the text or applying the process to the entire content of the Notepad++ document. This makes it convenient for handling IOCs of varying lengths and complexities.
Supports full URLs, valid domains, IPv4 and IPv6 addresses.

Installation

Create Defanger folder in Notepad++'s plugins installation folder.
Copy Defanger.dll from the Defanger release zip file into the newly created folder. Please use the correct archive version based on your Notepad++ architecture - x86, x64.
Restart Notepad++ and you are all set.
Alternatively, download the source and build it - the build will copy the dll to the Notepad++'s plugins folder.

Usage

When applied to the selected text Defang defangs any valid URLs, domains and IP addresses whichever included in the selected portion.

sample3 (2)

Selected Defang

sample4

Auto Defang All defangs all the valid URLs, domains and IP addresses found in the document while excluding the invalid ones.

new1

Defanged all text in the document excluding one invalid IP address.

new2

Refang and Auto Refang All supported styles

fubal1

Refanged output

final

| Styles | |---------------------------|
| hxxp(s) -> http(s) | | hXXp(s) -> http(s) | | [://] -> :// |
| [.] -> . |
| {.} -> . | | (.) -> . | | [dot] -> . | | {dot} -> . | | (dot) -> . | | [:] -> : | | \. -> . | | [/] -> / |

Authors

0x4427

knight0x07

Misc

This plugin has been created using the Notepad++ pluginpack for .Net https://github.com/kbilsted/NotepadPlusPlusPluginPack.Net/releases

Defanger

Install / Use

README

Defanger

Installation

Usage

Authors

0x4427

knight0x07

Misc