Downloads 10.1kthis week

GitHub stars 5

Extension descriptor (YAML)

Validate, decode, and extract OAST (Out-of-Band Application Security Testing) domains in SQL

Compatibility Matrix

This table covers all DuckDB releases that have not reached end-of-life, including LTS releases, and shows the 2 most recent patch releases of each. Older patch releases are not listed, but the extension may be available for them as well.

Installing and Loading

INSTALL oast FROM community;
LOAD oast;

Example

-- Check if a domain is a valid OAST callback
SELECT oast_validate('c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro') AS is_oast;
-- Decode OAST metadata (timestamp, machine ID, campaign)
SELECT oast_struct('c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro').*;
-- Extract OAST domains from arbitrary text
SELECT oast_extract('GET /c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro HTTP/1.1');

About oast

The oast extension provides functions for working with OAST (Out-of-Band Application Security Testing) domains directly in SQL. OAST domains are used by security testing tools like ProjectDiscovery Interactsh to detect out-of-band interactions during vulnerability scanning.

Functions include validation (oast_validate), metadata decoding (oast_struct, oast_decode_json), domain extraction from text (oast_extract, oast_extract_decode), and convenience macros for field access (oast_campaign, oast_timestamp, oast_ksort, oast_machine_id).

Supports domains from: oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me, interact.sh, interactsh.com.

Pure C implementation with no external dependencies. Uses DuckDB stable C API (v1.2.0+).

Added Functions

Overloaded Functions

This extension does not add any function overloads.

Added Types

This extension does not add any types.

Added Settings