fplanzer icon

domain typosquatting hijacking check

fplanzer | PRO | 03/24/22 12:47:34 PM UTC | 0 ⭐ | 1266 👁️ | Never ⏰ | []
Bash |

1.36 KB

|

None

|

0 👍

/

0 👎

git clone https://github.com/atenreiro/opensquat
pip install -r requirements.txt
 
Edit the "keywords.txt" with your customised keywords to hunt.
 
 
  # Lazy run with default options
    python opensquat.py
 
    # for all the options
    python opensquat.py -h
    
    # Search for generic terms used in phishing campaigns (can lead to false positives)
    python opensquat.py -k generic.txt
 
    # With DNS validation (quad9)
    python opensquat.py --dns
    
    # Subdomain search
    python opensquat.py --subdomains
    
    # Check for domains with open ports 80/443
    python opensquat.py --portcheck
 
    # With Phishing validation (Phishing Database)
    python opensquat.py --phishing phish_results.txt
 
    # Save output as JSON
    python opensquat.py -o example.json -t json
 
    # Save output as CSV
    python opensquat.py -o example.csv -t csv
 
    # Conduct a certificate transparency (ct) hunt
    python opensquat.py --ct
 
    # Period search - registrations from the last month (default: day)
    python opensquat.py -p month
 
    # Tweak confidence level. The lower values bring more false positives
    # (0: very high, 1: high (default), 2: medium, 3: low, 4: very low
    python opensquat.py -c 2
 
    # All validations options
    python opensquat.py --phishing phishing_domains.txt --dns --ct --subdomains --portcheck 

Comments