What tool is URLCrazy?
This article mainly shows you "what a tool URLCrazy is". The content is simple and clear. I hope it can help you solve your doubts. Let the editor lead you to study and learn this article "what is URLCrazy?"
URLCrazy is an attack testing tool for domain name security. It is essentially an OSINT open resource intelligence tool, which can help researchers generate and test phishing domain names and their variants, and perform Typo Squatting, URL hijacking, phishing and corporate espionage.
Working with scen
1. Detect Typo Squatting misvalue domain name attack by incorrectly entering domain name
2. Protect the security of enterprise domain names by registering common domain names Typo
3. Identify potential Typo domain names
4. Perform phishing attacks during penetration testing
Function introduction
1. Generate 15 domain name variants
More than 8000 common spelling mistakes are known
3. Support bit flip attacks
4. Multiple keyboard layouts (qwerty, azerty, qwertz, dvorak)
5. Check whether the domain name variant is valid.
6. Test whether the domain name variant is in use
7. Evaluate the popularity of domain name variants
Tool installation through the package manager
If you are using a Kali Linux, Ubuntu, or Debian system, you can install URLCrazy using the following command:
$sudo apt install urlcrazy install the latest Release version install the current development version
It is important to note here that the latest development version may be unstable:
$git clone https://github.com/urbanadventurer/urlcrazy.git installs Ruby
URLCrazy has been tested on Ruby v2.4 and v2.6. If you are using Ubuntu or Debian, you can run the following command to install:
$sudo apt install ruby installs Bundler
Bundler can provide Ruby projects with management capabilities that depend on components:
$gem install bundler installation dependency component $bundle install
Or, if you don't want to install bundler, you can choose to install gem dependencies using the following command:
$gem install json colorize async async-dns async-http command line argument
Usage:. / urlcrazy [options] domain
Options
-k,-keyboard=LAYOUT Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)
-p,-- popularity Check domain popularity with Google
-r,-- no-resolve Do not resolve DNS
-I-- show-invalid Show invalid domain names
-f,-- format=TYPE Human readable or CSV (default: human readable)
-o,-- output=FILE Output file
-n,-- nocolor Disable colour
-h,-- help This help
-v,-- version Print version information. This version is 0.7
Tool use
Simple use sample
By default, URLCrazy will detect more than 2000 Typo domain name variants for the target site:
$urlcrazy google.com
Evaluate the popularity of $urlcrazy-p domain.com above is all the content of this article "what is URLCrazy?" Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!
