rfang 0.1.1

A tool to refang IOCs.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use lazy_static::lazy_static;
use regex::Regex;
use std::env;

lazy_static! {
    // Replacers
    static ref DOTS_REGEX: Regex = Regex::new(r"\[\.\]").unwrap();
    static ref COLONS_REGEX: Regex = Regex::new(r"\[:\]").unwrap();
    static ref AT_REGEX: Regex = Regex::new(r"\[@\]").unwrap();
    static ref HXXP_REGEX: Regex = Regex::new(r"(?i)hxxp").unwrap();
    static ref SLASHES_REGEX: Regex = Regex::new(r"\[://\]").unwrap();
}

fn main() {
    let args: Vec<String> = env::args().collect();

    if args.len() < 2 {
        help();
    } else {
        for i in 1..args.len() {
            println!("{}", refang(&args[i]));
        }
    }
}

fn help() {
    println!("usage: dfang <string>")
}

fn refang(input: &str) -> String {
    let fanged_dots = DOTS_REGEX.replace_all(input, ".");
    let fanged_http = HXXP_REGEX.replace_all(&fanged_dots, "http");
    let fanged_slashes = SLASHES_REGEX.replace_all(&fanged_http, "://");
    let fanged_ats = AT_REGEX.replace_all(&fanged_slashes, "@");
    let fanged_colons = COLONS_REGEX.replace_all(&fanged_ats, ":");

    return fanged_colons.to_string();
}