Phishing with typo squatting tool

Reading Time: < 1 minute

DNSTwist is a great tool for blue and red team. Github link : https://github.com/elceef/dnstwist

or an online version : https://dnstwister.report/

This tool will generate a high amount of possibilities of typosquatting (addition, bitsquatting,homoglyph, hyphenation, insertion, omission, repetition, replacement, subdomain and transportation ) given a domain name, and it will check actual status (header, MX records etc… )

For Infra guys, it’s also possible to use it to generate static list of domains, you want to prevent your users to surf to. Use the CSV format .

Here is the result of : python dnstwist.py -f csv scrt.ch

0