Tools - urlcrazy
Alasta 26 Mars 2016 tools bash tools Linux Open Source Security shell dns collecte kali
Description : Nous allons utiliser urlcrazy pour vérifier et générer des variantes de noms de domaine.
Rappel :
Attention dans cet article l'outils est utilisé pour la recherche et l'apprentissage. Ce type d'outils ne doit pas être utilisé vers un serveur qui ne vous appartient pas, ceci peut être puni par la loi (voir les articles 323-XX).
Environnement de test :
Pour cela nous allons utiliser une VM tournant sur la distribution Kali. urlcrazy est installé de base sur Kali.
Utilisation :
La commande et ses options
1 root@kali:~# urlcrazy
2 URLCrazy version 0.5
3 by Andrew Horton (urbanadventurer)
4 http://www.morningstarsecurity.com/research/urlcrazy
5
6 Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking,
7 phishing, and corporate espionage.
8
9 Supports the following domain variations:
10 Character omission, character repeat, adjacent character swap, adjacent character replacement, double
11 character replacement, adjacent character insertion, missing dot, strip dashes, singular or pluralise,
12 common misspellings, vowel swaps, homophones, bit flipping (cosmic rays), homoglyphs, wrong top level
13 domain, and wrong second level domain.
14
15 Usage: /usr/bin/urlcrazy [options] domain
16
17 Options
18 -k, --keyboard=LAYOUT Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)
19 -p, --popularity Check domain popularity with Google
20 -r, --no-resolve Do not resolve DNS
21 -i, --show-invalid Show invalid domain names
22 -f, --format=TYPE Human readable or CSV (default: human readable)
23 -o, --output=FILE Output file
24 -h, --help This help
25 -v, --version Print version information. This version is 0.5
Utilisation
Pour avoir une réponse rapide on désactive la résolution DNS (option -r).
On force le type de clavier à celui de où se situe le domaine cible (option -t azerty).
Exemple : si le domaine cible exemple.com et en France on utilisera le type AZERTY.
1 root@kali:~# urlcrazy -k azerty -r exemple.com
2 URLCrazy Domain Report
3 Domain : exemple.com
4 Keyboard : azerty
5 At : 2016-03-26 15:39:27 +0100
6
7 # Please wait. 100 hostnames to process
8
9 Typo Type Typo CC-A Extn
10 ---------------------------------------------------
11 Character Omission eemple.com ? com
12 Character Omission exemle.com ? com
13 Character Omission exempe.com ? com
14 Character Omission exempl.com ? com
15 Character Omission exemple.cm ? cm
16 Character Omission exeple.com ? com
17 Character Omission exmple.com ? com
18 Character Repeat eexemple.com ? com
19 Character Repeat exeemple.com ? com
20 Character Repeat exemmple.com ? com
21 Character Repeat exemplee.com ? com
22 Character Repeat exemplle.com ? com
23 Character Repeat exempple.com ? com
24 Character Repeat exxemple.com ? com
25 Character Swap eexmple.com ? com
26 Character Swap exemlpe.com ? com
27 Character Swap exempel.com ? com
28 Character Swap exepmle.com ? com
29 Character Swap exmeple.com ? com
30 Character Swap xeemple.com ? com
31 Character Replacement ecemple.com ? com
32 Character Replacement ewemple.com ? com
33 Character Replacement exelple.com ? com
34 Character Replacement exemole.com ? com
35 Character Replacement exempke.com ? com
36 Character Replacement exemplr.com ? com
37 Character Replacement exemplz.com ? com
38 Character Replacement exempme.com ? com
39 Character Replacement exrmple.com ? com
40 Character Replacement exzmple.com ? com
41 Character Replacement rxemple.com ? com
42 Character Replacement zxemple.com ? com
43 Character Insertion erxemple.com ? com
44 Character Insertion excemple.com ? com
45 Character Insertion exemlple.com ? com
46 Character Insertion exempler.com ? com
47 Character Insertion exemplez.com ? com
48 Character Insertion exemplke.com ? com
49 Character Insertion exemplme.com ? com
50 Character Insertion exempole.com ? com
51 Character Insertion exermple.com ? com
52 Character Insertion exezmple.com ? com
53 Character Insertion exwemple.com ? com
54 Character Insertion ezxemple.com ? com
55 Missing Dot exemplecom.com ? com
56 Missing Dot wwwexemple.com ? com
57 Singular or Pluralise exemples.com ? com
58 Vowel Swap exampla.com ? com
59 Vowel Swap eximpli.com ? com
60 Vowel Swap exomplo.com ? com
61 Vowel Swap exumplu.com ? com
62 Bit Flipping axemple.com ? com
63 Bit Flipping dxemple.com ? com
64 Bit Flipping e8emple.com ? com
65 Bit Flipping ehemple.com ? com
66 Bit Flipping epemple.com ? com
67 Bit Flipping example.com ? com
68 Bit Flipping exdmple.com ? com
69 Bit Flipping exe-ple.com ? com
70 Bit Flipping exeeple.com ? com
71 Bit Flipping exeiple.com ? com
72 Bit Flipping exem0le.com ? com
73 Bit Flipping exempde.com ? com
74 Bit Flipping exemphe.com ? com
75 Bit Flipping exempla.com ? com
76 Bit Flipping exempld.com ? com
77 Bit Flipping exemplg.com ? com
78 Bit Flipping exemplm.com ? com
79 Bit Flipping exemplu.com ? com
80 Bit Flipping exempne.com ? com
81 Bit Flipping exemqle.com ? com
82 Bit Flipping exemrle.com ? com
83 Bit Flipping exemtle.com ? com
84 Bit Flipping exemxle.com ? com
85 Bit Flipping exeople.com ? com
86 Bit Flipping exgmple.com ? com
87 Bit Flipping exmmple.com ? com
88 Bit Flipping exumple.com ? com
89 Bit Flipping eyemple.com ? com
90 Bit Flipping ezemple.com ? com
91 Bit Flipping gxemple.com ? com
92 Bit Flipping mxemple.com ? com
93 Bit Flipping uxemple.com ? com
94 Homoglyphs exemp1e.com ? com
95 Homoglyphs exernple.com ? com
96 Wrong TLD exemple.ca ? ca
97 Wrong TLD exemple.ch ? ch
98 Wrong TLD exemple.de ? de
99 Wrong TLD exemple.edu ? edu
100 Wrong TLD exemple.es ? es
101 Wrong TLD exemple.fr ? fr
102 Wrong TLD exemple.it ? it
103 Wrong TLD exemple.jp ? jp
104 Wrong TLD exemple.net ? net
105 Wrong TLD exemple.nl ? nl
106 Wrong TLD exemple.no ? no
107 Wrong TLD exemple.org ? org
108 Wrong TLD exemple.ru ? ru
109 Wrong TLD exemple.se ? se
110 Wrong TLD exemple.us ? us
Avec la résolution DNS
1 root@kali:~# urlcrazy -k azerty exemple.com
2 URLCrazy Domain Report
3 Domain : exemple.com
4 Keyboard : azerty
5 At : 2016-03-26 21:31:37 +0100
6
7 # Please wait. 100 hostnames to process
8
9 Typo Type Typo DNS-A CC-A DNS-MX Extn
10 ----------------------------------------------------------------------------------------------------------
11 Character Omission eemple.com ? com
12 Character Omission exemle.com ? com
13 Character Omission exempe.com ? com
14 Character Omission exempl.com 199.59.243.118 CN,CHINA com
15 Character Omission exemple.cm ? cm
16 Character Omission exeple.com 173.255.136.107 US,UNITED STATES mail.exeple.com com
17 Character Omission exmple.com 67.210.233.131 RO,ROMANIA mail.exmple.com com
18 Character Repeat eexemple.com ? com
19 Character Repeat exeemple.com ? com
20 Character Repeat exemmple.com ? com
21 Character Repeat exemplee.com ? com
22 Character Repeat exemplle.com ? com
23 Character Repeat exempple.com ? com
24 Character Repeat exxemple.com ? com
25 Character Swap eexmple.com ? com
26 Character Swap exemlpe.com ? com
27 Character Swap exempel.com 91.217.181.150 SE,SWEDEN com
28 Character Swap exepmle.com ? com
29 Character Swap exmeple.com ? com
30 Character Swap xeemple.com ? com
31 Character Replacement ecemple.com ? com
32 Character Replacement ewemple.com ? com
33 Character Replacement exelple.com ? com
34 Character Replacement exemole.com ? com
35 Character Replacement exempke.com ? com
36 Character Replacement exemplr.com 69.64.147.242 US,UNITED STATES com
37 Character Replacement exemplz.com ? com
38 Character Replacement exempme.com ? com
39 Character Replacement exrmple.com ? com
40 Character Replacement exzmple.com 192.185.160.140 exzmple.com com
41 Character Replacement rxemple.com ? com
42 Character Replacement zxemple.com ? com
43 Character Insertion erxemple.com ? com
44 Character Insertion excemple.com 23.229.130.66 smtp.secureserver.net com
45 Character Insertion exemlple.com ? com
46 Character Insertion exempler.com 75.43.28.220 US,UNITED STATES exempler.com com
47 Character Insertion exemplez.com ? com
48 Character Insertion exemplke.com ? com
49 Character Insertion exemplme.com ? com
50 Character Insertion exempole.com ? com
51 Character Insertion exermple.com ? com
52 Character Insertion exezmple.com ? com
53 Character Insertion exwemple.com ? com
54 Character Insertion ezxemple.com ? com
55 Missing Dot exemplecom.com ? com
56 Missing Dot wwwexemple.com ? com
57 Singular or Pluralise exemples.com ? com
58 Vowel Swap exampla.com 69.172.201.208 US,UNITED STATES com
59 Vowel Swap eximpli.com ? com
60 Vowel Swap exomplo.com ? com
61 Vowel Swap exumplu.com ? com
62 Bit Flipping axemple.com ? com
63 Bit Flipping dxemple.com ? com
64 Bit Flipping e8emple.com ? com
65 Bit Flipping ehemple.com ? com
66 Bit Flipping epemple.com ? com
67 Bit Flipping example.com 93.184.216.34 E�, com
68 Bit Flipping exdmple.com ? com
69 Bit Flipping exe-ple.com ? com
70 Bit Flipping exeeple.com ? com
71 Bit Flipping exeiple.com ? com
72 Bit Flipping exem0le.com ? com
73 Bit Flipping exempde.com ? com
74 Bit Flipping exemphe.com ? com
75 Bit Flipping exempla.com 69.172.201.208 N8, com
76 Bit Flipping exempld.com ? com
77 Bit Flipping exemplg.com ? com
78 Bit Flipping exemplm.com ? com
79 Bit Flipping exemplu.com 141.8.225.124 CH,SWITZERLAND com
80 Bit Flipping exempne.com ? com
81 Bit Flipping exemqle.com ? com
82 Bit Flipping exemrle.com ? com
83 Bit Flipping exemtle.com ? com
84 Bit Flipping exemxle.com ? com
85 Bit Flipping exeople.com ? com
86 Bit Flipping exgmple.com 141.8.224.183 �, mail.mxproc.com com
87 Bit Flipping exmmple.com ? com
88 Bit Flipping exumple.com ? com
89 Bit Flipping eyemple.com ? com
90 Bit Flipping ezemple.com ? com
91 Bit Flipping gxemple.com ? com
92 Bit Flipping mxemple.com ? com
93 Bit Flipping uxemple.com ? com
94 Homoglyphs exemp1e.com ? com
95 Homoglyphs exernple.com ? com
96 Wrong TLD exemple.ca ? ca
97 Wrong TLD exemple.ch 95.142.162.29 FR,FRANCE mail.netoxygen.ch ch
98 Wrong TLD exemple.de 81.169.145.68 DE,GERMANY smtp.rzone.de de
99 Wrong TLD exemple.edu ? edu
100 Wrong TLD exemple.es ? es
101 Wrong TLD exemple.fr 78.46.156.162 DE,GERMANY mailforward1.cloudns.net fr
102 Wrong TLD exemple.it ? it
103 Wrong TLD exemple.jp ? jp
104 Wrong TLD exemple.net ? net
105 Wrong TLD exemple.nl 185.87.249.141 mail.exemple.nl nl
106 Wrong TLD exemple.no ? no
107 Wrong TLD exemple.org 72.52.4.119 US,UNITED STATES mail.nickstel.com org
108 Wrong TLD exemple.ru ? ru
109 Wrong TLD exemple.se ? se
110 Wrong TLD exemple.us ? us
Il y a la possibilité de vérifier le popularité du domaine avec Google (oprion -p) mais sur les différents domaines testés, aucun n'a resorti de résultat.
Via l'option -o on a la sortie dans un fichier et l'option -f CSV permet d'avoir une sortie csv qui permettra de retravailler la sortie.