Kali Linux – Urlcrazy – Website DNS analysis Information Gathering || Kali Linux Urlcrazy Tool

Urlcrazy – Website DNS analysis Information Gathering On Kali Linux, Urlcrazy Kali Linux Tool,

Introduction
Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

Usage
Detect typo squatters profiting from typos on your domain name
Protect your brand by registering popular typos
Identify typo domain names that will receive traffic intended for another domain
Conduct phishing attacks during a penetration test

Features
Generates 15 types of domain variants
Knows over 8000 common misspellings
Supports cosmic ray induced bit flipping
Multiple keyboard layouts (qwerty, azerty, qwertz, dvorak)
Checks if a domain variant is valid
Test if domain variants are in use
Estimate popularity of a domain variant URLCrazy requires Linux and the Ruby interpreter.
Usage

Types of Domain Variations Supported
Character Omission

These types are created by leaving out a letter of the domain name, one letter at a time. For example, www.goole.com and www.gogle.com

Character Repeat

These types are created by repeating a letter of the domain name. For example, www.ggoogle.com and www.gooogle.com

Adjacent Character Swap

These types are created by swapping the order of adjacent letters in the domain name. For example, www.googel.com and www.ogogle.com

Adjacent Character Replacement

These types are created by replacing each letter of the domain name with letters to the immediate left and right on the keyboard. For example, www.googke.com and www.goohle.com

Double Character Replacement

These types are created by replacing identical, consecutive letters of the domain name with letters to the immediate left and right on the keyboard. For example, www.gppgle.com and www.giigle.com

Adjacent Character Insertion

These types are created by inserting letters to the immediate left and right on the keyboard of each letter. For example, www.googhle.com and www.goopgle.com

Missing Dot

These types are created by omitting a dot from the domainname. For example, wwwgoogle.com and www.googlecom

Strip Dashes

These types are created by omitting a dash from the domainname. For example, www.domain-name.com becomes www.domainname.com

Common Misspellings

Over 8000 common misspellings from Wikipedia. For example, www.youtube.com becomes www.youtub.com and www.abseil.com becomes www.absail.com

Vowel Swapping

Swap vowels within the domain name except for the first letter. For example, www.google.com becomes www.gaagle.com.

Homophones

Over 450 sets of words that sound the same when spoken. For example, www.base.com becomes www.bass.com.

Homoglyphs

One or more characters that look similar to another character but are different are called homogylphs. An example is that the lower case l looks similar to the numeral one, e.g. l vs 1. For example, google.com becomes goog1e.com.

Wrong Top Level Domain

Wrong Second Level Domain

Uses an alternate, valid second level domain for the top level domain. For example, www.trademe.co.nz becomes www.trademe.ac.nz and www.trademe.iwi.nz

Bit Flipping

Each letter in a domain name is an 8bit character. The character is substituted with the set of valid characters that can be made after a single bit flip. For example, facebook.com becomes bacebook.com, dacebook.com, faaebook.com,fabebook.com,facabook.com, etc.

Tips
The output will often be wider than the width of your terminal. If this bothers you, output your report to a file or increase the width of your terminal.

Keyboard layouts supported are
QWERTY
AZERTY
QWERTZ
DVORAK
Is the domain valid?
UrlCrazy has a database of valid top level and second level domains. This information has been compiled from Wikipedia and domain registrars. We know whether a domain is valid by checking if it matches toplevel and second level domains. For example, www.trademe.co.bz is a valid domain in Belize which allows any second level domain registrations but www.trademe.xo.nz isn’t because xo.nz isn’t an allowed second level domain in New Zealand.

Subscribe Our YouTube Channel

LEAVE A REPLY

Please enter your comment!
Please enter your name here