From 5a22106731bac745fb230cc3d776e3eeda9dd28f Mon Sep 17 00:00:00 2001
From: arnydo <arnydo@gmail.com>
Date: Tue, 16 Oct 2018 15:02:39 -0400
Subject: [PATCH] Create DefangURL.mjs

---
 src/core/operations/DefangURL.mjs | 43 +++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 src/core/operations/DefangURL.mjs

diff --git a/src/core/operations/DefangURL.mjs b/src/core/operations/DefangURL.mjs
new file mode 100644
index 00000000..9917b47a
--- /dev/null
+++ b/src/core/operations/DefangURL.mjs
@@ -0,0 +1,43 @@
+/**
+ * @author arnydo [arnydo@protonmail.com]
+ * @copyright Crown Copyright 2016
+ * @license Apache-2.0
+ */
+
+import Operation from "../Operation";
+
+/**
+ * DefangURL operation
+ */
+class DefangURL extends Operation {
+
+    /**
+     * DefangURL constructor
+     */
+    constructor() {
+        super();
+
+        this.name = "Defang URL";
+        this.module = "URL";
+        this.description = "Takes a Universal Resource Locator (URL) and 'Defangs' it; meaning, the URL becomes invalid and neutralizes the risk of accidentally clicking on a malicious link.<br><br>This is often used when dealing with malicious links or IOCs.<br><br>Works well when combined with the 'Extract URLs' operation.";
+        this.infoURL = "";
+        this.inputType = "string";
+        this.outputType = "string";
+        this.args = [];
+    }
+
+    /**
+     * @param {string} input
+     * @param {Object[]} args
+     * @returns {string}
+     */
+    run(input, args) {
+        let defang = input.replace(/http/gi, "hxxp");
+        defang = defang.replace(/\./g, "[.]");
+        defang = defang.replace(/:\/\//g, "[://]");
+        return defang;
+    }
+
+}
+
+export default DefangURL;