Table: urlscan_cookie - Query Urlscan Cookies using SQL

Urlscan.io is a free service that analyzes websites and provides information about their behavior, HTTP requests, and other related details. It offers insights into the structure and security of websites, helping users understand the nature of the sites they visit or analyze. One aspect of this service is the ability to examine cookies set during a scan, providing valuable data about the site's interaction with users' browsers.

Table Usage Guide

The urlscan_cookie table provides insights into the cookies set during a urlscan.io scan. As a security analyst or web developer, you can explore cookie-specific details through this table, including cookie names, values, and associated domains. This table can be utilized to discover information about cookies, such as those related to tracking user behavior, the domains they are associated with, and the potential security implications of these cookies.

Important Notes

You must specify the scan in the where clause to query this table.

Examples

List cookies

Explore which cookies are associated with a specific web scan to understand potential tracking or privacy concerns. This can be useful in assessing the security measures of a website or identifying suspicious activity.

select
  *
from
  urlscan_cookie
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09';

select
  *
from
  urlscan_cookie
where
  scan = '54c78f69-5294-4a17-8ae0-a71943954e09';

Schema for urlscan_cookie

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form, e.g. connection_name.
domain	text		Domain of the cookie.
expires	timestamp with time zone		Time when the cookie expires.
http_only	boolean		True if the cookie can only be accessed via HTTP requests.
name	text		Name of the cookie.
path	text		Path of the cookie.
scan	text	=	ID of the scan result.
secure	boolean		True if the cookie is only available over secure connections.
session	boolean		True if the cookie is only valid for the current session.
size	bigint		Size of the cookie.
value	text		Value of the cookie.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_cookie