Rappel :

Attention dans cet article l'outils est utilisé pour la recherche et l'apprentissage. Ce type d'outils ne doit pas être utilisé vers un serveur qui ne vous appartient pas, ceci peut être puni par la loi (voir les articles 323-XX).

Environnement de test :

Pour cela nous allons utiliser une VM tournant sur la distribution Kali. urlcrazy est installé de base sur Kali.

Utilisation :

La commande et ses options

 1 root@kali:~# urlcrazy 
 2 URLCrazy version 0.5
 3 by Andrew Horton (urbanadventurer)
 4 http://www.morningstarsecurity.com/research/urlcrazy
 5 
 6 Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking,
 7 phishing, and corporate espionage.
 8 
 9 Supports the following domain variations:
10 Character omission, character repeat, adjacent character swap, adjacent character replacement, double 
11 character replacement, adjacent character insertion, missing dot, strip dashes, singular or pluralise,
12 common misspellings, vowel swaps, homophones, bit flipping (cosmic rays), homoglyphs, wrong top level 
13 domain, and wrong second level domain.
14 
15 Usage: /usr/bin/urlcrazy [options] domain
16 
17 Options
18  -k, --keyboard=LAYOUT Options are: qwerty, azerty, qwertz, dvorak (default: qwerty)
19  -p, --popularity    Check domain popularity with Google
20  -r, --no-resolve   Do not resolve DNS
21  -i, --show-invalid Show invalid domain names
22  -f, --format=TYPE    Human readable or CSV (default: human readable)
23  -o, --output=FILE Output file
24  -h, --help       This help
25  -v, --version    Print version information. This version is 0.5

Utilisation

Pour avoir une réponse rapide on désactive la résolution DNS (option -r).
On force le type de clavier à celui de où se situe le domaine cible (option -t azerty).
Exemple : si le domaine cible exemple.com et en France on utilisera le type AZERTY.

  1 root@kali:~# urlcrazy -k azerty -r exemple.com
  2 URLCrazy Domain Report
  3 Domain    : exemple.com
  4 Keyboard  : azerty
  5 At        : 2016-03-26 15:39:27 +0100
  6 
  7 # Please wait. 100 hostnames to process
  8 
  9 Typo Type              Typo            CC-A  Extn  
 10 ---------------------------------------------------
 11 Character Omission     eemple.com      ?     com   
 12 Character Omission     exemle.com      ?     com   
 13 Character Omission     exempe.com      ?     com   
 14 Character Omission     exempl.com      ?     com   
 15 Character Omission     exemple.cm      ?     cm    
 16 Character Omission     exeple.com      ?     com   
 17 Character Omission     exmple.com      ?     com   
 18 Character Repeat       eexemple.com    ?     com   
 19 Character Repeat       exeemple.com    ?     com   
 20 Character Repeat       exemmple.com    ?     com   
 21 Character Repeat       exemplee.com    ?     com   
 22 Character Repeat       exemplle.com    ?     com   
 23 Character Repeat       exempple.com    ?     com   
 24 Character Repeat       exxemple.com    ?     com   
 25 Character Swap         eexmple.com     ?     com   
 26 Character Swap         exemlpe.com     ?     com   
 27 Character Swap         exempel.com     ?     com   
 28 Character Swap         exepmle.com     ?     com   
 29 Character Swap         exmeple.com     ?     com   
 30 Character Swap         xeemple.com     ?     com   
 31 Character Replacement  ecemple.com     ?     com   
 32 Character Replacement  ewemple.com     ?     com   
 33 Character Replacement  exelple.com     ?     com   
 34 Character Replacement  exemole.com     ?     com   
 35 Character Replacement  exempke.com     ?     com   
 36 Character Replacement  exemplr.com     ?     com   
 37 Character Replacement  exemplz.com     ?     com   
 38 Character Replacement  exempme.com     ?     com   
 39 Character Replacement  exrmple.com     ?     com   
 40 Character Replacement  exzmple.com     ?     com   
 41 Character Replacement  rxemple.com     ?     com   
 42 Character Replacement  zxemple.com     ?     com   
 43 Character Insertion    erxemple.com    ?     com   
 44 Character Insertion    excemple.com    ?     com   
 45 Character Insertion    exemlple.com    ?     com   
 46 Character Insertion    exempler.com    ?     com   
 47 Character Insertion    exemplez.com    ?     com   
 48 Character Insertion    exemplke.com    ?     com   
 49 Character Insertion    exemplme.com    ?     com   
 50 Character Insertion    exempole.com    ?     com   
 51 Character Insertion    exermple.com    ?     com   
 52 Character Insertion    exezmple.com    ?     com   
 53 Character Insertion    exwemple.com    ?     com   
 54 Character Insertion    ezxemple.com    ?     com   
 55 Missing Dot            exemplecom.com  ?     com   
 56 Missing Dot            wwwexemple.com  ?     com   
 57 Singular or Pluralise  exemples.com    ?     com   
 58 Vowel Swap             exampla.com     ?     com   
 59 Vowel Swap             eximpli.com     ?     com   
 60 Vowel Swap             exomplo.com     ?     com   
 61 Vowel Swap             exumplu.com     ?     com   
 62 Bit Flipping           axemple.com     ?     com   
 63 Bit Flipping           dxemple.com     ?     com   
 64 Bit Flipping           e8emple.com     ?     com   
 65 Bit Flipping           ehemple.com     ?     com   
 66 Bit Flipping           epemple.com     ?     com   
 67 Bit Flipping           example.com     ?     com   
 68 Bit Flipping           exdmple.com     ?     com   
 69 Bit Flipping           exe-ple.com     ?     com   
 70 Bit Flipping           exeeple.com     ?     com   
 71 Bit Flipping           exeiple.com     ?     com   
 72 Bit Flipping           exem0le.com     ?     com   
 73 Bit Flipping           exempde.com     ?     com   
 74 Bit Flipping           exemphe.com     ?     com   
 75 Bit Flipping           exempla.com     ?     com   
 76 Bit Flipping           exempld.com     ?     com   
 77 Bit Flipping           exemplg.com     ?     com   
 78 Bit Flipping           exemplm.com     ?     com   
 79 Bit Flipping           exemplu.com     ?     com   
 80 Bit Flipping           exempne.com     ?     com   
 81 Bit Flipping           exemqle.com     ?     com   
 82 Bit Flipping           exemrle.com     ?     com   
 83 Bit Flipping           exemtle.com     ?     com   
 84 Bit Flipping           exemxle.com     ?     com   
 85 Bit Flipping           exeople.com     ?     com   
 86 Bit Flipping           exgmple.com     ?     com   
 87 Bit Flipping           exmmple.com     ?     com   
 88 Bit Flipping           exumple.com     ?     com   
 89 Bit Flipping           eyemple.com     ?     com   
 90 Bit Flipping           ezemple.com     ?     com   
 91 Bit Flipping           gxemple.com     ?     com   
 92 Bit Flipping           mxemple.com     ?     com   
 93 Bit Flipping           uxemple.com     ?     com   
 94 Homoglyphs             exemp1e.com     ?     com   
 95 Homoglyphs             exernple.com    ?     com   
 96 Wrong TLD              exemple.ca      ?     ca    
 97 Wrong TLD              exemple.ch      ?     ch    
 98 Wrong TLD              exemple.de      ?     de    
 99 Wrong TLD              exemple.edu     ?     edu   
100 Wrong TLD              exemple.es      ?     es    
101 Wrong TLD              exemple.fr      ?     fr    
102 Wrong TLD              exemple.it      ?     it    
103 Wrong TLD              exemple.jp      ?     jp    
104 Wrong TLD              exemple.net     ?     net   
105 Wrong TLD              exemple.nl      ?     nl    
106 Wrong TLD              exemple.no      ?     no    
107 Wrong TLD              exemple.org     ?     org   
108 Wrong TLD              exemple.ru      ?     ru    
109 Wrong TLD              exemple.se      ?     se    
110 Wrong TLD              exemple.us      ?     us

Avec la résolution DNS

  1 root@kali:~# urlcrazy -k azerty  exemple.com
  2 URLCrazy Domain Report
  3 Domain    : exemple.com
  4 Keyboard  : azerty
  5 At        : 2016-03-26 21:31:37 +0100
  6 
  7 # Please wait. 100 hostnames to process
  8 
  9 Typo Type              Typo            DNS-A            CC-A              DNS-MX                    Extn  
 10 ----------------------------------------------------------------------------------------------------------
 11 Character Omission     eemple.com                       ?                                           com   
 12 Character Omission     exemle.com                       ?                                           com   
 13 Character Omission     exempe.com                       ?                                           com   
 14 Character Omission     exempl.com      199.59.243.118   CN,CHINA                                    com   
 15 Character Omission     exemple.cm                       ?                                           cm    
 16 Character Omission     exeple.com      173.255.136.107  US,UNITED STATES  mail.exeple.com           com   
 17 Character Omission     exmple.com      67.210.233.131   RO,ROMANIA        mail.exmple.com           com   
 18 Character Repeat       eexemple.com                     ?                                           com   
 19 Character Repeat       exeemple.com                     ?                                           com   
 20 Character Repeat       exemmple.com                     ?                                           com   
 21 Character Repeat       exemplee.com                     ?                                           com   
 22 Character Repeat       exemplle.com                     ?                                           com   
 23 Character Repeat       exempple.com                     ?                                           com   
 24 Character Repeat       exxemple.com                     ?                                           com   
 25 Character Swap         eexmple.com                      ?                                           com   
 26 Character Swap         exemlpe.com                      ?                                           com   
 27 Character Swap         exempel.com     91.217.181.150   SE,SWEDEN                                   com   
 28 Character Swap         exepmle.com                      ?                                           com   
 29 Character Swap         exmeple.com                      ?                                           com   
 30 Character Swap         xeemple.com                      ?                                           com   
 31 Character Replacement  ecemple.com                      ?                                           com   
 32 Character Replacement  ewemple.com                      ?                                           com   
 33 Character Replacement  exelple.com                      ?                                           com   
 34 Character Replacement  exemole.com                      ?                                           com   
 35 Character Replacement  exempke.com                      ?                                           com   
 36 Character Replacement  exemplr.com     69.64.147.242    US,UNITED STATES                            com   
 37 Character Replacement  exemplz.com                      ?                                           com   
 38 Character Replacement  exempme.com                      ?                                           com   
 39 Character Replacement  exrmple.com                      ?                                           com   
 40 Character Replacement  exzmple.com     192.185.160.140                    exzmple.com               com   
 41 Character Replacement  rxemple.com                      ?                                           com   
 42 Character Replacement  zxemple.com                      ?                                           com   
 43 Character Insertion    erxemple.com                     ?                                           com   
 44 Character Insertion    excemple.com    23.229.130.66                      smtp.secureserver.net     com   
 45 Character Insertion    exemlple.com                     ?                                           com   
 46 Character Insertion    exempler.com    75.43.28.220     US,UNITED STATES  exempler.com              com   
 47 Character Insertion    exemplez.com                     ?                                           com   
 48 Character Insertion    exemplke.com                     ?                                           com   
 49 Character Insertion    exemplme.com                     ?                                           com   
 50 Character Insertion    exempole.com                     ?                                           com   
 51 Character Insertion    exermple.com                     ?                                           com   
 52 Character Insertion    exezmple.com                     ?                                           com   
 53 Character Insertion    exwemple.com                     ?                                           com   
 54 Character Insertion    ezxemple.com                     ?                                           com   
 55 Missing Dot            exemplecom.com                   ?                                           com   
 56 Missing Dot            wwwexemple.com                   ?                                           com   
 57 Singular or Pluralise  exemples.com                     ?                                           com   
 58 Vowel Swap             exampla.com     69.172.201.208   US,UNITED STATES                            com   
 59 Vowel Swap             eximpli.com                      ?                                           com   
 60 Vowel Swap             exomplo.com                      ?                                           com   
 61 Vowel Swap             exumplu.com                      ?                                           com   
 62 Bit Flipping           axemple.com                      ?                                           com   
 63 Bit Flipping           dxemple.com                      ?                                           com   
 64 Bit Flipping           e8emple.com                      ?                                           com   
 65 Bit Flipping           ehemple.com                      ?                                           com   
 66 Bit Flipping           epemple.com                      ?                                           com   
 67 Bit Flipping           example.com     93.184.216.34    E,                                         com   
 68 Bit Flipping           exdmple.com                      ?                                           com   
 69 Bit Flipping           exe-ple.com                      ?                                           com   
 70 Bit Flipping           exeeple.com                      ?                                           com   
 71 Bit Flipping           exeiple.com                      ?                                           com   
 72 Bit Flipping           exem0le.com                      ?                                           com   
 73 Bit Flipping           exempde.com                      ?                                           com   
 74 Bit Flipping           exemphe.com                      ?                                           com   
 75 Bit Flipping           exempla.com     69.172.201.208   N8,                                         com   
 76 Bit Flipping           exempld.com                      ?                                           com   
 77 Bit Flipping           exemplg.com                      ?                                           com   
 78 Bit Flipping           exemplm.com                      ?                                           com   
 79 Bit Flipping           exemplu.com     141.8.225.124    CH,SWITZERLAND                              com   
 80 Bit Flipping           exempne.com                      ?                                           com   
 81 Bit Flipping           exemqle.com                      ?                                           com   
 82 Bit Flipping           exemrle.com                      ?                                           com   
 83 Bit Flipping           exemtle.com                      ?                                           com   
 84 Bit Flipping           exemxle.com                      ?                                           com   
 85 Bit Flipping           exeople.com                      ?                                           com   
 86 Bit Flipping           exgmple.com     141.8.224.183    ,               mail.mxproc.com           com   
 87 Bit Flipping           exmmple.com                      ?                                           com   
 88 Bit Flipping           exumple.com                      ?                                           com   
 89 Bit Flipping           eyemple.com                      ?                                           com   
 90 Bit Flipping           ezemple.com                      ?                                           com   
 91 Bit Flipping           gxemple.com                      ?                                           com   
 92 Bit Flipping           mxemple.com                      ?                                           com   
 93 Bit Flipping           uxemple.com                      ?                                           com   
 94 Homoglyphs             exemp1e.com                      ?                                           com   
 95 Homoglyphs             exernple.com                     ?                                           com   
 96 Wrong TLD              exemple.ca                       ?                                           ca    
 97 Wrong TLD              exemple.ch      95.142.162.29    FR,FRANCE         mail.netoxygen.ch         ch    
 98 Wrong TLD              exemple.de      81.169.145.68    DE,GERMANY        smtp.rzone.de             de    
 99 Wrong TLD              exemple.edu                      ?                                           edu   
100 Wrong TLD              exemple.es                       ?                                           es    
101 Wrong TLD              exemple.fr      78.46.156.162    DE,GERMANY        mailforward1.cloudns.net  fr    
102 Wrong TLD              exemple.it                       ?                                           it    
103 Wrong TLD              exemple.jp                       ?                                           jp    
104 Wrong TLD              exemple.net                      ?                                           net   
105 Wrong TLD              exemple.nl      185.87.249.141                     mail.exemple.nl           nl    
106 Wrong TLD              exemple.no                       ?                                           no    
107 Wrong TLD              exemple.org     72.52.4.119      US,UNITED STATES  mail.nickstel.com         org   
108 Wrong TLD              exemple.ru                       ?                                           ru    
109 Wrong TLD              exemple.se                       ?                                           se    
110 Wrong TLD              exemple.us                       ?                                           us

Il y a la possibilité de vérifier le popularité du domaine avec Google (oprion -p) mais sur les différents domaines testés, aucun n'a resorti de résultat.
Via l'option -o on a la sortie dans un fichier et l'option -f CSV permet d'avoir une sortie csv qui permettra de retravailler la sortie.