Shulou(Shulou.com)06/01 Report--

Brief introduction urlcrazy generates typos domain name and variant domain name for the specified domain name and checks whether the generated domain name is accessible. Urlcrazy is mainly used to pre-check url hijacking and phishing of well-known sites. The main purpose is to find available typos domain names to implement subsequent phishing, URL hijacking and other non-directed * *.

Example one: root@kali:/tmp# urlcrazy ziroom.com

When no parameters are added, urlcrazy uses the qwerty keyboard by default to generate typos domain names and then detect them.

Typos domain name

When I type www.baidu.com, the bit will be entered as: www.baudi.com due to pressing the wrong key. At this time is to visit another site rather than Baidu, this site may be an advertising site, phishing site for Baidu, etc., with different spelling mistakes will visit different sites. This kind of domain name caused by keystroke error is typos domain name. Typos domain name is more common in large and medium-sized companies. This kind of domain name has the following advantages:

Increase the number of visits to the site, set up fishing sites, and go fishing

There are many types of typos domain names generated by urlcrazy, such as character repetition, character exchange, and so on, which can be viewed through utlcrazy-h.

Keyboard: qwerty

The output of example 1 contains the keyboard type: qwerty. When urlcrazy is working, it will generate typos domain according to the wrong keys that people often press according to different keyboard types. Urlcrazy supports four types of keyboards, which are described below.

Qwerty: domestic computer keyboard, domestic smartphone default keyboard qwertz: German keyboard azerty: French keyboard dvorak: a keyboard invented by Americans that makes it easy to use common characters together, which is rare in China.

I have only used the qwerty keyboard above. When looking up the typos domain names of those countries through urlcrazy, you can specify the corresponding keyboard with the-k parameter.

Example 2: check the popularity of the typos site through google to query the Google popularity of the typos domain name by setting the #-p parameter. To gain popularity, you need to connect to the public network root@kali:/tmp # urlcrazy ziroom.com-p

Popularity statistics are based on the frequency ranking of different typos domain names in Google search. High-ranking typos domain names are more likely to be accessed, which can provide a success rate. Since I don't have any information about the popularity of Google, I didn't get it. In theory, we can also get Baidu popularity, but due to the existence of Baidu bidding ranking, so the results are not necessarily accurate, this function will be expanded in the future.

Example 3: no dns query for typos domain name. #-r parameter setting does not do dns query. Dns query is to obtain the IP address of the domain name. It is not clear what the specific function is. If you want to know, you can directly check the source code root@kali:/tmp # urlcrazy ziroom.com-r in the / usr/share/urlcrazy/ directory.

Since the main purpose of using urlcrazy is to determine whether the typos domain name can be registered, it is necessary to query the A record of DNS. The domain names that cannot be found in DNS are generally for sale and can be purchased as soon as possible.

Example 4: save the result to a file. The #-o parameter is used to specify the file in which the result is saved. The #-f parameter is used to specify the format in which the data is saved. Urlcrazy supports two formats: human readable and CSV. The default is human readable.

The purpose of this function saved in the file is not clear, and it is not known how to use it to perform this function.

Summary

If you want to use the typos domain name to carry out phishing, URL hijacking and other *, use urlcrazy, you can find a more suitable typos domain name.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.