dnstwist

See what sort of trouble users can get in trying to type your domain name. Find lookalike domains that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud, and brand impersonation. Useful as an additional source of targeted threat intelligence. DNS fuzzing is an...

sloppy-joe

捕获幻觉依赖、拼写钓鱼依赖和非规范依赖 在它们进入生产环境之前。 cargo install sloppy-joe 2026年3月的LiteLLM供应链攻击攻陷了一个月下载量达9700万的包。攻击者窃取了发布凭证，推送了恶意版本，这些版本窃取SSH密钥、云凭证和K8s密钥。sloppy-joe默认的72小时版本发布时间门控本可以阻止这两个被投毒的版本——它们在被发现后几小时内就被分析，远在门控开启之前。如果你在CI中运行sloppy-joe check，这次攻击就会失败。 完整分析 AI代码生成器产生的包名有大约20%的概率是幻觉。攻击者注册这些名称并等待。sloppy-joe在npm...

antisquat

AntiSquat AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by...

antisquat

AntiSquat AntiSquat 利用AI技术，如自然语言处理（NLP）、大型语言模型（ChatGPT）等，增强对域名抢注和钓鱼域的检测。 如何使用 通过 git clone https://github.com/redhuntlabs/antisquat 克隆项目。 输入 pip install -r requirements.txt 安装所有依赖。 在 https://platform.openai.com/account/api-keys 获取 ChatGPT API 密钥。 创建一个名为 .openai-key 的文件，并将你的 ChatGPT API 密钥粘贴进去。 可选...

Qualys Adds Threat Intelligence for Typosquatting and Defamatory Domains to External Attack Surface Management

Cybersecurity professionals can now use Qualys CyberSecurity Asset Management CSAM with External Attack Surface Management EASM to reduce cyber risks from credential harvesting, phishing, and malware downloads and diminish reputational harm. Bad actors have been registering look-alike, sound-alik...