steampipe plugin install urlscan

Table: urlscan_cookie - Query Urlscan Cookies using SQL

Urlscan.io is a free service that analyzes websites and provides information about their behavior, HTTP requests, and other related details. It offers insights into the structure and security of websites, helping users understand the nature of the sites they visit or analyze. One aspect of this service is the ability to examine cookies set during a scan, providing valuable data about the site's interaction with users' browsers.

Table Usage Guide

The urlscan_cookie table provides insights into the cookies set during a urlscan.io scan. As a security analyst or web developer, you can explore cookie-specific details through this table, including cookie names, values, and associated domains. This table can be utilized to discover information about cookies, such as those related to tracking user behavior, the domains they are associated with, and the potential security implications of these cookies.

Important Notes

  • You must specify the scan in the where clause to query this table.

Examples

List cookies

Explore which cookies are associated with a specific web scan to understand potential tracking or privacy concerns. This can be useful in assessing the security measures of a website or identifying suspicious activity.

select
*
from
urlscan_cookie
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09';
select
*
from
urlscan_cookie
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09';

Schema for urlscan_cookie

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form, e.g. connection_name.
domaintextDomain of the cookie.
expirestimestamp with time zoneTime when the cookie expires.
http_onlybooleanTrue if the cookie can only be accessed via HTTP requests.
nametextName of the cookie.
pathtextPath of the cookie.
scantext=ID of the scan result.
securebooleanTrue if the cookie is only available over secure connections.
sessionbooleanTrue if the cookie is only valid for the current session.
sizebigintSize of the cookie.
valuetextValue of the cookie.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_cookie