########################################################################################## PAS-18: Extract interesting paths from Cookies ########################################################################################## Issue Type: New Feature ----------------------------------------------------------------------------------------- Issue Information ==================== Priority: Major Status: Open Resolution: Unresolved Project: PCAP Analysis Script (PAS) Reported By: btasker Assigned To: btasker Components: - HTTP - Data Correlation and Extraction Affected Versions: - 0.1 Targeted for fix in version: - 0.1 Labels: Cookies, Time Estimate: 45 minutes Time Logged: 15 minutes ----------------------------------------------------------------------------------------- Issue Description ================== PAS-3 introduced a mechanism for locating paths marked as "interesting" within HTTP requests (including referer) headers. However, as noted here - http://projects.bentasker.co.uk/jira_projects/browse/PAS-3.html#comment1298875 - it may also be possible to extract interesting information from cookie values. The way in which the pattern matching is performed will need to be slightly different though, so should probably add an additional option for _config.sh_ Once paths are extracted, they should be added to _interestingdomains-full.csv_ with the third column being "HTTP Cookie". As in the LinkedIn example, it might be possible to extract a timestamp of the user visiting (or technically, leaving) that path, so should look at adding that as a 4th column ----------------------------------------------------------------------------------------- Issue Relations ================ - relates to PAS-3: Allow configuration of "interesting" Referrers ----------------------------------------------------------------------------------------- Activity ========== ----------------------------------------------------------------------------------------- 2015-11-27 00:02:21 git ----------------------------------------------------------------------------------------- -- BEGIN QUOTE -- Repo: PCAPAnalyseandReport Commit: 183a1728d007e4a666dffc76354c2a801091c0ec Author: Ben Tasker