Tools - urlcrazy
Alasta 26 Mars 2016 tools bash tools Linux Open Source Security shell dns collecte kali
Description : Nous allons utiliser urlcrazy pour vérifier et générer des variantes de noms de domaine.
Rappel :
Attention dans cet article l’outils est utilisé pour la recherche et l’apprentissage. Ce type d’outils ne doit pas être utilisé vers un serveur qui ne vous appartient pas, ceci peut être puni par la loi (voir les articles 323-XX).
Environnement de test :
Pour cela nous allons utiliser une VM tournant sur la distribution Kali. urlcrazy est installé de base sur Kali.
Utilisation :
La commande et ses options
root@kali:~# urlcrazy
URLCrazy version 0.5
by Andrew Horton (urbanadventurer)
http://www.morningstarsecurity.com/research/urlcrazy
Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking,
phishing, and corporate espionage.
Supports the following domain variations:
Character omission, character repeat, adjacent character swap, adjacent character replacement, double
character replacement, adjacent character insertion, missing dot, strip dashes, singular or pluralise,
common misspellings, vowel swaps, homophones, bit flipping (cosmic rays), homoglyphs, wrong top level
domain, and wrong second level domain.
Usage: /usr/bin/urlcrazy [options] domain
Options
-k, --keyboard=LAYOUT Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)
-p, --popularity Check domain popularity with Google
-r, --no-resolve Do not resolve DNS
-i, --show-invalid Show invalid domain names
-f, --format=TYPE Human readable or CSV (default: human readable)
-o, --output=FILE Output file
-h, --help This help
-v, --version Print version information. This version is 0.5Utilisation
Pour avoir une réponse rapide on désactive la résolution DNS (option -r).
On force le type de clavier à celui de où se situe le domaine cible (option -t azerty).
Exemple : si le domaine cible exemple.com et en France on utilisera le type AZERTY.
root@kali:~# urlcrazy -k azerty -r exemple.com
URLCrazy Domain Report
Domain : exemple.com
Keyboard : azerty
At : 2016-03-26 15:39:27 +0100
# Please wait. 100 hostnames to process
Typo Type Typo CC-A Extn
---------------------------------------------------
Character Omission eemple.com ? com
Character Omission exemle.com ? com
Character Omission exempe.com ? com
Character Omission exempl.com ? com
Character Omission exemple.cm ? cm
Character Omission exeple.com ? com
Character Omission exmple.com ? com
Character Repeat eexemple.com ? com
Character Repeat exeemple.com ? com
Character Repeat exemmple.com ? com
Character Repeat exemplee.com ? com
Character Repeat exemplle.com ? com
Character Repeat exempple.com ? com
Character Repeat exxemple.com ? com
Character Swap eexmple.com ? com
Character Swap exemlpe.com ? com
Character Swap exempel.com ? com
Character Swap exepmle.com ? com
Character Swap exmeple.com ? com
Character Swap xeemple.com ? com
Character Replacement ecemple.com ? com
Character Replacement ewemple.com ? com
Character Replacement exelple.com ? com
Character Replacement exemole.com ? com
Character Replacement exempke.com ? com
Character Replacement exemplr.com ? com
Character Replacement exemplz.com ? com
Character Replacement exempme.com ? com
Character Replacement exrmple.com ? com
Character Replacement exzmple.com ? com
Character Replacement rxemple.com ? com
Character Replacement zxemple.com ? com
Character Insertion erxemple.com ? com
Character Insertion excemple.com ? com
Character Insertion exemlple.com ? com
Character Insertion exempler.com ? com
Character Insertion exemplez.com ? com
Character Insertion exemplke.com ? com
Character Insertion exemplme.com ? com
Character Insertion exempole.com ? com
Character Insertion exermple.com ? com
Character Insertion exezmple.com ? com
Character Insertion exwemple.com ? com
Character Insertion ezxemple.com ? com
Missing Dot exemplecom.com ? com
Missing Dot wwwexemple.com ? com
Singular or Pluralise exemples.com ? com
Vowel Swap exampla.com ? com
Vowel Swap eximpli.com ? com
Vowel Swap exomplo.com ? com
Vowel Swap exumplu.com ? com
Bit Flipping axemple.com ? com
Bit Flipping dxemple.com ? com
Bit Flipping e8emple.com ? com
Bit Flipping ehemple.com ? com
Bit Flipping epemple.com ? com
Bit Flipping example.com ? com
Bit Flipping exdmple.com ? com
Bit Flipping exe-ple.com ? com
Bit Flipping exeeple.com ? com
Bit Flipping exeiple.com ? com
Bit Flipping exem0le.com ? com
Bit Flipping exempde.com ? com
Bit Flipping exemphe.com ? com
Bit Flipping exempla.com ? com
Bit Flipping exempld.com ? com
Bit Flipping exemplg.com ? com
Bit Flipping exemplm.com ? com
Bit Flipping exemplu.com ? com
Bit Flipping exempne.com ? com
Bit Flipping exemqle.com ? com
Bit Flipping exemrle.com ? com
Bit Flipping exemtle.com ? com
Bit Flipping exemxle.com ? com
Bit Flipping exeople.com ? com
Bit Flipping exgmple.com ? com
Bit Flipping exmmple.com ? com
Bit Flipping exumple.com ? com
Bit Flipping eyemple.com ? com
Bit Flipping ezemple.com ? com
Bit Flipping gxemple.com ? com
Bit Flipping mxemple.com ? com
Bit Flipping uxemple.com ? com
Homoglyphs exemp1e.com ? com
Homoglyphs exernple.com ? com
Wrong TLD exemple.ca ? ca
Wrong TLD exemple.ch ? ch
Wrong TLD exemple.de ? de
Wrong TLD exemple.edu ? edu
Wrong TLD exemple.es ? es
Wrong TLD exemple.fr ? fr
Wrong TLD exemple.it ? it
Wrong TLD exemple.jp ? jp
Wrong TLD exemple.net ? net
Wrong TLD exemple.nl ? nl
Wrong TLD exemple.no ? no
Wrong TLD exemple.org ? org
Wrong TLD exemple.ru ? ru
Wrong TLD exemple.se ? se
Wrong TLD exemple.us ? us Avec la résolution DNS
root@kali:~# urlcrazy -k azerty exemple.com
URLCrazy Domain Report
Domain : exemple.com
Keyboard : azerty
At : 2016-03-26 21:31:37 +0100
# Please wait. 100 hostnames to process
Typo Type Typo DNS-A CC-A DNS-MX Extn
----------------------------------------------------------------------------------------------------------
Character Omission eemple.com ? com
Character Omission exemle.com ? com
Character Omission exempe.com ? com
Character Omission exempl.com 199.59.243.118 CN,CHINA com
Character Omission exemple.cm ? cm
Character Omission exeple.com 173.255.136.107 US,UNITED STATES mail.exeple.com com
Character Omission exmple.com 67.210.233.131 RO,ROMANIA mail.exmple.com com
Character Repeat eexemple.com ? com
Character Repeat exeemple.com ? com
Character Repeat exemmple.com ? com
Character Repeat exemplee.com ? com
Character Repeat exemplle.com ? com
Character Repeat exempple.com ? com
Character Repeat exxemple.com ? com
Character Swap eexmple.com ? com
Character Swap exemlpe.com ? com
Character Swap exempel.com 91.217.181.150 SE,SWEDEN com
Character Swap exepmle.com ? com
Character Swap exmeple.com ? com
Character Swap xeemple.com ? com
Character Replacement ecemple.com ? com
Character Replacement ewemple.com ? com
Character Replacement exelple.com ? com
Character Replacement exemole.com ? com
Character Replacement exempke.com ? com
Character Replacement exemplr.com 69.64.147.242 US,UNITED STATES com
Character Replacement exemplz.com ? com
Character Replacement exempme.com ? com
Character Replacement exrmple.com ? com
Character Replacement exzmple.com 192.185.160.140 exzmple.com com
Character Replacement rxemple.com ? com
Character Replacement zxemple.com ? com
Character Insertion erxemple.com ? com
Character Insertion excemple.com 23.229.130.66 smtp.secureserver.net com
Character Insertion exemlple.com ? com
Character Insertion exempler.com 75.43.28.220 US,UNITED STATES exempler.com com
Character Insertion exemplez.com ? com
Character Insertion exemplke.com ? com
Character Insertion exemplme.com ? com
Character Insertion exempole.com ? com
Character Insertion exermple.com ? com
Character Insertion exezmple.com ? com
Character Insertion exwemple.com ? com
Character Insertion ezxemple.com ? com
Missing Dot exemplecom.com ? com
Missing Dot wwwexemple.com ? com
Singular or Pluralise exemples.com ? com
Vowel Swap exampla.com 69.172.201.208 US,UNITED STATES com
Vowel Swap eximpli.com ? com
Vowel Swap exomplo.com ? com
Vowel Swap exumplu.com ? com
Bit Flipping axemple.com ? com
Bit Flipping dxemple.com ? com
Bit Flipping e8emple.com ? com
Bit Flipping ehemple.com ? com
Bit Flipping epemple.com ? com
Bit Flipping example.com 93.184.216.34 E�, com
Bit Flipping exdmple.com ? com
Bit Flipping exe-ple.com ? com
Bit Flipping exeeple.com ? com
Bit Flipping exeiple.com ? com
Bit Flipping exem0le.com ? com
Bit Flipping exempde.com ? com
Bit Flipping exemphe.com ? com
Bit Flipping exempla.com 69.172.201.208 N8, com
Bit Flipping exempld.com ? com
Bit Flipping exemplg.com ? com
Bit Flipping exemplm.com ? com
Bit Flipping exemplu.com 141.8.225.124 CH,SWITZERLAND com
Bit Flipping exempne.com ? com
Bit Flipping exemqle.com ? com
Bit Flipping exemrle.com ? com
Bit Flipping exemtle.com ? com
Bit Flipping exemxle.com ? com
Bit Flipping exeople.com ? com
Bit Flipping exgmple.com 141.8.224.183 �, mail.mxproc.com com
Bit Flipping exmmple.com ? com
Bit Flipping exumple.com ? com
Bit Flipping eyemple.com ? com
Bit Flipping ezemple.com ? com
Bit Flipping gxemple.com ? com
Bit Flipping mxemple.com ? com
Bit Flipping uxemple.com ? com
Homoglyphs exemp1e.com ? com
Homoglyphs exernple.com ? com
Wrong TLD exemple.ca ? ca
Wrong TLD exemple.ch 95.142.162.29 FR,FRANCE mail.netoxygen.ch ch
Wrong TLD exemple.de 81.169.145.68 DE,GERMANY smtp.rzone.de de
Wrong TLD exemple.edu ? edu
Wrong TLD exemple.es ? es
Wrong TLD exemple.fr 78.46.156.162 DE,GERMANY mailforward1.cloudns.net fr
Wrong TLD exemple.it ? it
Wrong TLD exemple.jp ? jp
Wrong TLD exemple.net ? net
Wrong TLD exemple.nl 185.87.249.141 mail.exemple.nl nl
Wrong TLD exemple.no ? no
Wrong TLD exemple.org 72.52.4.119 US,UNITED STATES mail.nickstel.com org
Wrong TLD exemple.ru ? ru
Wrong TLD exemple.se ? se
Wrong TLD exemple.us ? us Il y a la possibilité de vérifier le popularité du domaine avec Google (oprion -p) mais sur les différents domaines testés, aucun n’a resorti de résultat.
Via l’option -o on a la sortie dans un fichier et l’option -f CSV permet d’avoir une sortie csv qui permettra de retravailler la sortie.