steampipe plugin install urlscan

Table: urlscan_link - Query Urlscan Links using SQL

Urlscan Links is a resource in Urlscan.io service. It provides detailed information about every link that has been scanned by Urlscan.io. This includes the URL, associated page, and the status of the scan, providing critical insights into the security status of these links.

Table Usage Guide

The urlscan_link table provides insights into the links scanned by Urlscan.io as a security analyst, you can explore the details of each scanned link through this table, including the URL, associated page, and the status of the scan. Utilize it to uncover information about the security status of these links, helping you identify potential security risks and take necessary actions.

Important Notes

  • You must specify the scan in the where clause to query this table.

Examples

Explore the specific links found within a webpage. This can be particularly useful in identifying potential security risks or understanding the structure and content of a website.

select
href,
text
from
urlscan_link
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
href;
select
href,
text
from
urlscan_link
where
scan = '54c78f69-5294-4a17-8ae0-a71943954e09'
order by
href;

Schema for urlscan_link

NameTypeOperatorsDescription
_ctxjsonbSteampipe context in JSON form.
hreftextHREF of the link.
scantext=ID of the scan result.
sp_connection_nametext=, !=, ~~, ~~*, !~~, !~~*Steampipe connection name.
sp_ctxjsonbSteampipe context in JSON form.
texttextText of the link.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- urlscan

You can pass the configuration to the command with the --config argument:

steampipe_export_urlscan --config '<your_config>' urlscan_link