DNSTwist is a great tool for blue and red team. Github link : https://github.com/elceef/dnstwist
or an online version : https://dnstwister.report/
This tool will generate a high amount of possibilities of typosquatting (addition, bitsquatting,homoglyph, hyphenation, insertion, omission, repetition, replacement, subdomain and transportation ) given a domain name, and it will check actual status (header, MX records etc… )
![](https://www.bussink.net/wp-content/uploads/2020/02/dnstwist1-1024x514.jpg)
For Infra guys, it’s also possible to use it to generate static list of domains, you want to prevent your users to surf to. Use the CSV format .
Here is the result of : python dnstwist.py -f csv scrt.ch
![](https://www.bussink.net/wp-content/uploads/2020/02/dnstwist2.jpg)
Recent Comments