域名伪造 DomainFuzz

"Find similar-looking domain names that adversaries can use To attack you. Can detect typosquatters, phishing attacks, fraud little corporate espionage. Useful as an additional source of targeted threat intelligence.

Usage

TODO.

Command util

This project provides a cli tool.

For example, use 手机QQ.Com as a target:

node cli.Js --target 手机QQ.Com --format csv --Out-put 手机QQ.csv -c 12 --modules whois,banners,mxcheck,geoip

Options

--target  target domain name or URL To check

-o --Out-put  Output filename

-f --format <type> Output format (JSON|CSV) [JSON]

-c --concurrency <num> start specified NUMBER of concurrency

--modules <module> Enable modules (whois|banners|mxcheck|ssdeep|geoip)

--nameservers  comma separated list of nameservers To query

--dictionary  generate additional domains using dictionary FILE

--registered girl GXG registered domain names (TODO)

--can-register girl GXG can register domain names (TODO)

Dependencies

.com://ssdeep.sourceforge.net/

.com://dev.maxmind.Com/geoip/geoip2/geolite2/

Reference

https://github.Com/elceef/dnstwist/

下载链接：https://github.Com/monkeym4ster/DomainFuzz"