263 matches found
tirith
tirith Tu navegador detectaría esto. Tu terminal no. Sitio web | Documentación | SKILL.md | Registro de cambios | Versiones Proyecto de código abierto independiente, con alojamiento respaldado por el Vercel Open Source Program Spring 2026 Cohort. ¿Puedes detectar la diferencia? curl -sSL...
dnsmorph
DNSMORPH 是一个域名排列引擎，受 dnstwist 启发。它采用 Go 编写，紧凑且非常快速。它能够健壮地处理任何提供的域名或子域名，并提供多种配置选项来调整排列运行。 DNSMORPH 包含以下域名排列攻击类型： 同形字攻击（针对单个和重复字符） 位篡位攻击 连字符攻击 省略攻击 重复攻击 替换攻击 子域名攻击 换位攻击 元音交换攻击 添加攻击 分身攻击 安装 在你的系统上安装 dnsmorph 有两种方式： 1. 从最新发布页面下载适合你平台的预编译二进制文件，并解压到任意目录。 2. 自己下载并编译源代码，运行以下命令： go get -v...
ditto
Ditto es una pequeña herramienta que acepta un nombre de dominio como entrada y genera todas sus variantes para un ataque homográfico como salida, verificando cuáles están disponibles y cuáles ya están registrados. Dominios PoC https://tᴡitter.com/ https://clᴏudflare.com Usando con Docker La imag...
opensquat
openSquat Core 📑 Table of Contents What is openSquat? Featured In Open-Core Model Key Features Quick Start Requirements Usage Premium and API Modes Configuration Automation CLI Reference Contributing Author License 🎯 What is openSquat? openSquat is an Open Source Intelligence OSINT security tool...
ditto
Ditto is a small tool that accepts a domain name as input and generates all its variants for an homograph attack as output, checking which ones are available and which are already registered. PoC domains https://tᴡitter.com/ https://clᴏudflare.com Using with Docker The image on docker hub is...
CVE-2017-15394
CVE-2017-15394 在Chromium浏览器（版本低于62.0.3202.62）的扩展UI中发现了一个URL欺骗漏洞。 通过扩展在Chromium中演示IDN同形字攻击。 1. 将未打包的扩展加载到Chrome中 2. 查看扩展详情并观察缺少punycode 影响 攻击者可利用此弱点协助欺骗攻击，迫使受害者向意外域名授予扩展权限。 补丁 发布于2017年10月17日：https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html...
EvilURL
EvilURL v3.0 Genera dominios unicode para el ataque de homografía IDN y los detecta. EvilURL se publica bajo una licencia estilo BSD. Consulta LICENSE para más detalles. CLONAR git clone https://github.com/UndeadSec/EvilURL.git INSTALAR pip install python-nmap python-whois EJECUTAR cd EvilURL...
huntglyph
huntglyph — Detecta ataques homógrafos Los ataques homógrafos aprovechan la similitud visual de caracteres de diferentes sistemas de escritura p. ej., la 'a' latina frente a la 'а' cirílica para suplantar nombres de dominio, nombres de archivo u otros identificadores, engañando a los usuarios par...
tirith v0.4.2
tirith Your browser would catch this. Your terminal won't. Website | Docs | SKILL.md | Changelog | Releases Independent open-source project, with hosting supported by the Vercel Open Source Program Spring 2026 Cohort. Can you spot the difference? curl -sSL https://install.example-cli.dev | bash...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : Roundcube Webmail vulnerabilities (USN-8223-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8223-1 advisory. It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibl...
USN-8223-1: Roundcube Webmail vulnerabilities
It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly use this issue to cause a homograph attack. CVE-2019-15237 It was discovered that Roundcube Webmail did not properly sanitize certain attributes when handling CSS within HTML messages and...
USN-8223-1 roundcube vulnerabilities
It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly use this issue to cause a homograph attack. CVE-2019-15237 It was discovered that Roundcube Webmail did not properly sanitize certain attributes when handling CSS within HTML messages and...
CVE-2019-20835
An issue was discovered in Foxit Reader and PhantomPDF before 9.5. It has homograph mishandling...
CVE-2025-12414 Looker account compromise via punycode homograph attack
An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be upgrad...
CVE-2025-12414
CVE-2025-12414 affects Looker installations using OIDC authentication, due to email address string normalization. Looker-hosted deployments are mitigated; self-hosted instances require upgrading to fixed versions (examples listed: 24.12.100+, 24.18.193+, 25.0.69+, 25.6.57+, 25.8.39+, 25.10.22+, 2...
EUVD-2021-12173
Malware in sbrugna...
EUVD-2020-4780
Malware in sbrugna...
EUVD-2017-8990
Malware in sbrugna...