ioc-extractor/dist/chunk-A2GVSYTG.js

IoC (Indicator of Compromise) extractor

import {
  tlds
} from "./chunk-WKF5HO56.js";

// src/aux/regexes.ts
var alphabets = "a-z";
var numbers = "0-9";
var labelLetters = `${alphabets}${numbers}`;
var oneOrMoreLabel = `[${labelLetters}]{1,63}`;
var zeroOrMoreLabel = `[${labelLetters}]{0,63}`;
var zeroOrMoreLabelWithHyphen = `[${labelLetters}-]{0,63}`;
var nonDigitTwoOrMoreLabelWithHyphen = `[${alphabets}-]{2,63}`;
var idnPrefix = "xn--";
var nonStrictTld = nonDigitTwoOrMoreLabelWithHyphen;
var strictTld = `${tlds.sort((a, b) => b.length - a.length).join("|")}`;
var asnRegex = /(AS|ASN)\d+/gi;
var btcRegex = /\b[13][a-km-zA-HJ-NP-Z0-9]{26,33}\b/g;
var cveRegExp = /(CVE-(19|20)\d{2}-\d{4,7})/gi;
var ethRegex = /\b0x[a-fA-F0-9]{40}\b/g;
var gaPubIDRegex = /pub-\d{16}/gi;
var gaTrackIDRegex = /UA-\d{4,9}(-\d{1,2})?/gi;
var macAddressRegex = /\b[A-F0-9]{2}([-:])(?:[A-F0-9]{2}\1){4}[A-F0-9]{2}\b/gi;
var md5Regex = /\b[A-F0-9]{32}\b/gi;
var sha1Regex = /\b[A-F0-9]{40}\b/gi;
var sha256Regex = /\b[A-F0-9]{64}\b/gi;
var sha512Regex = /\b[A-F0-9]{128}\b/gi;
var ssdeepRegex = /\b\d+:[A-Z0-9/+]{3,}:[A-Z0-9/+]{3,}/gi;
var xmrRegex = /\b4[0-9AB][1-9A-HJ-NP-Za-km-z]{93}\b/g;

export {
  labelLetters,
  oneOrMoreLabel,
  zeroOrMoreLabel,
  zeroOrMoreLabelWithHyphen,
  nonDigitTwoOrMoreLabelWithHyphen,
  idnPrefix,
  nonStrictTld,
  strictTld,
  asnRegex,
  btcRegex,
  cveRegExp,
  ethRegex,
  gaPubIDRegex,
  gaTrackIDRegex,
  macAddressRegex,
  md5Regex,
  sha1Regex,
  sha256Regex,
  sha512Regex,
  ssdeepRegex,
  xmrRegex
};