Shulou(Shulou.com)05/31 Report--

This article mainly shows you "what a tool URLCrazy is". The content is simple and clear. I hope it can help you solve your doubts. Let the editor lead you to study and learn this article "what is URLCrazy?"

URLCrazy is an attack testing tool for domain name security. It is essentially an OSINT open resource intelligence tool, which can help researchers generate and test phishing domain names and their variants, and perform Typo Squatting, URL hijacking, phishing and corporate espionage.

Working with scen

1. Detect Typo Squatting misvalue domain name attack by incorrectly entering domain name

2. Protect the security of enterprise domain names by registering common domain names Typo

3. Identify potential Typo domain names

4. Perform phishing attacks during penetration testing

Function introduction

1. Generate 15 domain name variants

More than 8000 common spelling mistakes are known

3. Support bit flip attacks

4. Multiple keyboard layouts (qwerty, azerty, qwertz, dvorak)

5. Check whether the domain name variant is valid.

6. Test whether the domain name variant is in use

7. Evaluate the popularity of domain name variants

Tool installation through the package manager

If you are using a Kali Linux, Ubuntu, or Debian system, you can install URLCrazy using the following command:

$sudo apt install urlcrazy install the latest Release version install the current development version

It is important to note here that the latest development version may be unstable:

$git clone https://github.com/urbanadventurer/urlcrazy.git installs Ruby

URLCrazy has been tested on Ruby v2.4 and v2.6. If you are using Ubuntu or Debian, you can run the following command to install:

$sudo apt install ruby installs Bundler

Bundler can provide Ruby projects with management capabilities that depend on components:

$gem install bundler installation dependency component $bundle install

Or, if you don't want to install bundler, you can choose to install gem dependencies using the following command:

$gem install json colorize async async-dns async-http command line argument

Usage:. / urlcrazy [options] domain

Options

-k,-keyboard=LAYOUT Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)

-p,-- popularity Check domain popularity with Google

-r,-- no-resolve Do not resolve DNS

-I-- show-invalid Show invalid domain names

-f,-- format=TYPE Human readable or CSV (default: human readable)

-o,-- output=FILE Output file

-n,-- nocolor Disable colour

-h,-- help This help

-v,-- version Print version information. This version is 0.7

Tool use

Simple use sample

By default, URLCrazy will detect more than 2000 Typo domain name variants for the target site:

$urlcrazy google.com

Evaluate the popularity of $urlcrazy-p domain.com above is all the content of this article "what is URLCrazy?" Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.