urlcrazy

😜⌨ URLCrazy URLCrazy 是一款 OSINT 工具，用于生成和测试域名拼写错误或变体，以检测或执行域名抢注、URL 劫持、钓鱼攻击和商业间谍活动。 主页：https://github.com/urbanadventurer/urlcrazy 🌟 使用案例 检测利用您域名拼写错误获利的人 通过注册热门拼写错误来保护您的品牌 识别会接收本属于其他域名的流量的拼写错误域名 在渗透测试期间进行钓鱼攻击 ⭐ 功能特点 生成 17 种域名变体 掌握 8000 多个常见拼写错误 支持超过 1500 个顶级域名 位翻转攻击...

ditto

Ditto 是一个小型工具，它接受域名作为输入，生成所有用于同形异义攻击的变体作为输出，并检查哪些可用、哪些已注册。 PoC 域名 https://tᴡitter.com/ https://clᴏudflare.com 使用 Docker Docker Hub 上的镜像每次推送都会更新，您只需： root@kitploit: docker run evilsocket/ditto -h 从源码编译 从源码编译需要 Go 编译器，这会将二进制文件安装到 $GOPATH/bin： root@kitploit: make sure go modules are used...

Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem

AI-generated lookalike domains are now embedded inside the third-party scripts running on your web properties. Here's why your current stack can't see them, and what detection actually requires. Download the CISO Expert Guide to Typosquatting in the AI Era → TL;DR Typosquatting is no longer a use...

URLCrazy - Test domain typos and variations to detect typo squatting, URL hijacking, phishing, and corporate espionage

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage. Usage Detect typo squatters profiting from typos on your domain name Protect your brand by registering popular typos Identify typo domain names that will receive...