urlcrazy 真的很crazy

 透過輸入網址,去推敲組合道網域前面,測試是否存在該網址位置,這可以當假訊息釣魚網站或一些名稱特性的猜測

安裝

sudo apt-get install urlcrazy

執行:

sudo urlcrazy  <網域>




URLCrazy version 0.7.1 by Andrew Horton (urbanadventurer)                                       

Visit http://www.morningstarsecurity.com/research/urlcrazy


Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking,

phishing, and corporate espionage.


Supports the following domain variations:

Character omission, character repeat, adjacent character swap, adjacent character replacement, double 

character replacement, adjacent character insertion, missing dot, strip dashes, insert dash,

singular or pluralise, common misspellings, vowel swaps, homophones, bit flipping (cosmic rays),

homoglyphs, wrong top level domain, and wrong second level domain.


Usage: ./urlcrazy [options] domain


Options

-k, --keyboard=LAYOUT  Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)

-p, --popularity       Check domain popularity with Google

-r, --no-resolve       Do not resolve DNS

-i, --show-invalid     Show invalid domain names

-f, --format=TYPE      Human readable, JSON, or CSV (default: human readable)

-o, --output=FILE      Output file

-n, --nocolor          Disable colour

-d, --debug            Enable debugging output for development

-h, --help             This help

-v, --version


官網:

http://www.morningstarsecurity.com/research/urlcrazy

留言

這個網誌中的熱門文章

用趨勢偵測 log4j