https://github.com/monkeym4ster/DomainFuzz

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage
https://github.com/monkeym4ster/DomainFuzz

dns domain domains fuzz phishing typosquatting

Last synced: 22 days ago
JSON representation

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

• Host: GitHub
• URL: https://github.com/monkeym4ster/DomainFuzz
• Owner: monkeym4ster
• Created: 2017-04-28T09:39:58.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2017-12-27T01:33:54.000Z (almost 7 years ago)
• Last Synced: 2024-08-05T17:29:04.116Z (4 months ago)
• Topics: dns, domain, domains, fuzz, phishing, typosquatting
• Language: JavaScript
• Homepage:
• Size: 9.27 MB
• Stars: 89
• Watchers: 5
• Forks: 26
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - monkeym4ster/DomainFuzz - Domain name permutation engine for detecting typo squatting, phishing and corporate espionage (JavaScript)

README

        
# DomainFuzz

Find similar-looking domain names that adversaries can use to attack you. Can detect typosquatters, phishing attacks, fraud and corporate espionage. Useful as an additional source of targeted threat intelligence.

![Demo](/docs/screenshots/demo.gif)

## Usage

TODO.

## Command util

This project provides a cli tool.

For example, use qq.com as a target:

```bash

node cli.js --target qq.com --format csv --out-put qq.csv -c 10 --modules whois,banners,mxcheck,geoip

```

### Options

* `--target `            target domain name or URL to check

* `-o --out-put `          Output filename

* `-f --format `           Output format (JSON|CSV) [JSON]

* `-c --concurrency `       start specified NUMBER of concurrency

* `--modules `           Enable modules (whois|banners|mxcheck|ssdeep|geoip)

* `--nameservers `  comma separated list of nameservers to query

* `--dictionary `          generate additional domains using dictionary FILE

* `--registered`                 show only registered domain names (TODO)

* `--can-register`               show only can register domain names (TODO)

## Dependencies

* http://ssdeep.sourceforge.net/

* http://dev.maxmind.com/geoip/geoip2/geolite2/

## Reference

* https://github.com/elceef/dnstwist/