---
warning: DO NOT CHANGE THIS MANUALLY, THIS IS GENERATED BY https://github.com/duckdb/community-extensions repository, check README there
title: oast
excerpt: |
  DuckDB Community Extensions
  Validate, decode, and extract OAST (Out-of-Band Application Security Testing) domains in SQL

extension:
  name: oast
  description: Validate, decode, and extract OAST (Out-of-Band Application Security Testing) domains in SQL
  version: 0.1.0
  language: C
  build: cmake
  license: MIT
  requires_toolchains: "python3"
  maintainers:
    - hrbrmstr

repo:
  github: hrbrmstr/duckdb-oast
  ref: 61164985f09e98900bf05d012e740199dfe3b4bd

docs:
  hello_world: |
    -- Check if a domain is a valid OAST callback
    SELECT oast_validate('c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro') AS is_oast;
    -- Decode OAST metadata (timestamp, machine ID, campaign)
    SELECT oast_struct('c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro').*;
    -- Extract OAST domains from arbitrary text
    SELECT oast_extract('GET /c58bduhe008dovpvhvugcfemp9yyyyyyn.oast.pro HTTP/1.1');
  extended_description: |
    The oast extension provides functions for working with OAST (Out-of-Band Application Security Testing)
    domains directly in SQL. OAST domains are used by security testing tools like ProjectDiscovery Interactsh
    to detect out-of-band interactions during vulnerability scanning.

    Functions include validation (oast_validate), metadata decoding (oast_struct, oast_decode_json),
    domain extraction from text (oast_extract, oast_extract_decode), and convenience macros for
    field access (oast_campaign, oast_timestamp, oast_ksort, oast_machine_id).

    Supports domains from: oast.pro, oast.live, oast.site, oast.online, oast.fun, oast.me, interact.sh, interactsh.com.

    Pure C implementation with no external dependencies. Uses DuckDB stable C API (v1.2.0+).

extension_star_count: 5
extension_star_count_pretty: 5
extension_download_count: 29334
extension_download_count_pretty: 29.3k
image: '/images/community_extensions/social_preview/preview_community_extension_oast.png'
layout: community_extension_doc
---
### Compatibility Matrix

This table covers all DuckDB releases that have not reached [end-of-life](https://duckdb.org/release_calendar), including LTS releases, and shows the 2 most recent patch releases of each. Older patch releases are not listed, but the extension may be available for them as well.

<div class="extension_compatibility_table"></div>

| Platform | 1.4.4 | 1.4.5 | 1.5.5 | 1.5.6 | 2.0.0 |
| :--- | :---: | :---: | :---: | :---: | :---: |
| Linux AMD64 | ✅ | ✅ | ✅ | ✅ | ✅ |
| Linux ARM64 | ✅ | ✅ | ✅ | ✅ | ✅ |
| macOS AMD64 | ✅ | ✅ | ✅ | ✅ | ❌ |
| macOS ARM64 | ✅ | ✅ | ✅ | ✅ | ✅ |
| Windows AMD64 | ✅ | ✅ | ✅ | ✅ | ✅ |
| Windows ARM64 | ❌ | ❌ | ❌ | ❌ | ❌ |
| WebAssembly | ✅ | ✅ | ✅ | ✅ | ✅ |

### Installing and Loading
```sql
INSTALL {{ page.extension.name }} FROM community;
LOAD {{ page.extension.name }};
```

{% if page.docs.hello_world %}
### Example
```sql
{{ page.docs.hello_world }}```
{% endif %}

{% if page.docs.extended_description %}
### About {{ page.extension.name }}
{{ page.docs.extended_description }}
{% endif %}
### Added Functions

<div class="extension_functions_table"></div>

|    function_name     | function_type | description | comment | examples |
|----------------------|---------------|-------------|---------|----------|
| oast_campaign        | macro         | NULL        | NULL    |          |
| oast_count           | macro         | NULL        | NULL    |          |
| oast_decode_json     | scalar        | NULL        | NULL    |          |
| oast_extract         | scalar        | NULL        | NULL    |          |
| oast_extract_decode  | scalar        | NULL        | NULL    |          |
| oast_extract_structs | macro         | NULL        | NULL    |          |
| oast_has_oast        | macro         | NULL        | NULL    |          |
| oast_ksort           | macro         | NULL        | NULL    |          |
| oast_machine_id      | macro         | NULL        | NULL    |          |
| oast_struct          | macro         | NULL        | NULL    |          |
| oast_summary         | macro         | NULL        | NULL    |          |
| oast_timestamp       | macro         | NULL        | NULL    |          |
| oast_validate        | scalar        | NULL        | NULL    |          |

### Overloaded Functions

<div class="extension_functions_table"></div>

This extension does not add any function overloads.

### Added Types

<div class="extension_types_table"></div>

This extension does not add any types.

### Added Settings

<div class="extension_settings_table"></div>

|      name      |                       description                       | input_type | scope  | aliases | typed_value |
|----------------|---------------------------------------------------------|------------|--------|---------|-------------|
| temp_directory | Set the directory to which temporary files are written. | VARCHAR    | GLOBAL | []      | post.db.tmp |