Table: urlscan_cookie - Query Urlscan Cookies using SQL
Urlscan.io is a free service that analyzes websites and provides information about their behavior, HTTP requests, and other related details. It offers insights into the structure and security of websites, helping users understand the nature of the sites they visit or analyze. One aspect of this service is the ability to examine cookies set during a scan, providing valuable data about the site's interaction with users' browsers.
Table Usage Guide
The urlscan_cookie
table provides insights into the cookies set during a urlscan.io scan. As a security analyst or web developer, you can explore cookie-specific details through this table, including cookie names, values, and associated domains. This table can be utilized to discover information about cookies, such as those related to tracking user behavior, the domains they are associated with, and the potential security implications of these cookies.
Important Notes
- You must specify the
scan
in thewhere
clause to query this table.
Examples
List cookies
Explore which cookies are associated with a specific web scan to understand potential tracking or privacy concerns. This can be useful in assessing the security measures of a website or identifying suspicious activity.
select *from urlscan_cookiewhere scan = '54c78f69-5294-4a17-8ae0-a71943954e09';
select *from urlscan_cookiewhere scan = '54c78f69-5294-4a17-8ae0-a71943954e09';
Schema for urlscan_cookie
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form, e.g. connection_name. | |
domain | text | Domain of the cookie. | |
expires | timestamp with time zone | Time when the cookie expires. | |
http_only | boolean | True if the cookie can only be accessed via HTTP requests. | |
name | text | Name of the cookie. | |
path | text | Path of the cookie. | |
scan | text | = | ID of the scan result. |
secure | boolean | True if the cookie is only available over secure connections. | |
session | boolean | True if the cookie is only valid for the current session. | |
size | bigint | Size of the cookie. | |
value | text | Value of the cookie. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan
You can pass the configuration to the command with the --config
argument:
steampipe_export_urlscan --config '<your_config>' urlscan_cookie