EvilURL

EvilURL v3.0 生成用于IDN同形字攻击的Unicode域名并检测它们。 EvilURL遵循BSD风格许可证发布。更多详情请参见 LICENSE。 克隆 root@kitploit: git clone https://github.com/UndeadSec/EvilURL.git 安装 root@kitploit: pip install python-nmap python-whois 运行 root@kitploit: cd EvilURL root@kitploit: python3 evilurl.py 视频...

Google Fixes Unicode Phishing Vulnerability in Chrome 58, Firefox Stands Pat

Google fixed a handful of issues when it released the latest version of its browser, Chrome 58, on Wednesday, including a vulnerability that could have made it easier for an attacker to carry out a phishing attack with Unicode domains. The vulnerability, based on Punycode – a way to represent...

Whole-script confusable domain label spoofing

Posted by Xudong Zheng Before I explain the details of the vulnerability, you should take a look at the proof-of-concept. Punycode makes it possible to register domains with foreign characters. It works by converting individual domain label to an alternative format using only ASCII characters. Fo...