A Notepad++ plugin to neutralize and restore the functionality of Indicators of Compromise (IOCs) by defanging and refanging them.
- Selective or whole-text defanging: You can choose between defanging/refanging selected portions of the text or applying the process to the entire content of the Notepad++ document. This makes it convenient for handling IOCs of varying lengths and complexities.
- Supports full URLs, valid domains, IPv4 and IPv6 addresses.
- Create
Defanger
folder in Notepad++'s plugins installation folder. - Copy
Defanger.dll
from the Defanger release zip file into the newly created folder. Please use the correct archive version based on your Notepad++ architecture - x86, x64. - Restart Notepad++ and you are all set.
- Alternatively, download the source and build it - the build will copy the dll to the Notepad++'s plugins folder.
- When applied to the selected text
Defang
defangs any valid URLs, domains and IP addresses whichever included in the selected portion.
- Selected Defang
Auto Defang All
defangs all the valid URLs, domains and IP addresses found in the document while excluding the invalid ones.
- Defanged all text in the document excluding one invalid IP address.
Refang
andAuto Refang All
supported styles
- Refanged output
Styles |
---|
hxxp(s) -> http(s) |
hXXp(s) -> http(s) |
[://] -> :// |
[.] -> . |
{.} -> . |
(.) -> . |
[dot] -> . |
{dot} -> . |
(dot) -> . |
[:] -> : |
\. -> . |
[/] -> / |
This plugin has been created using the Notepad++ pluginpack for .Net https://github.com/kbilsted/NotepadPlusPlusPluginPack.Net/releases