typosquatting 开源项目推荐（230 个）

elceef /dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

atenreiro /opensquat

openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.

urbanadventurer /urlcrazy

Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

hl2guide /Filterlist-for-AdGuard-or-PiHole

A very aggressive filter-list that consolidates over 370 lists for use in AdGuard Home, Pi-Hole or similar.

edoardogerosa /dnsmorph

Domain name permutation engine written in Go

happycakefriends /certainly

Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scenarios.

haveibeensquatted /twistrs

A domain name permutation and enumeration library powered by Rust.

typosquatter /ail-typo-squatting

Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.

monkeym4ster /DomainFuzz

Domain name permutation engine for detecting typo squatting, phishing and corporate espionage

zntrio /typogenerator

Golang string typosquatting generator

typosquatter /ail-typo-website

Website for ail-typo-squatting library

PAST2212 /domainthreat

Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping

elementsinteractive /twyn

Security tool against dependency typosquatting attacks

w0h1v /mcp-dnstwist

MCP server for dnstwist, a powerful DNS fuzzing tool that helps detect typosquatting, phishing, and corporate espionage.

david3107 /squatm3

Squatm3 is a python tool designed to enumerate available domains generated modifying the original domain name through different techniques

IQTLabs /pypi-scan

Scan pypi for typosquatting

cybersecify /OpenEASD

Self-hosted external attack surface scanner. See what attackers see: subdomains, takeovers, open ports, CVEs ranked by EPSS/KEV, TLS/SSH/web hygiene, leaked secrets, breach and lookalike domain exposure. Recon for pentests, evidence for ISO 27001/SOC 2 audits. 30 tools, 13 phases, one `docker compose up`. MIT.

rangertaha /urlinsane

Typosquatting tool that supports OSINT investigations, and designed to operate on multilingual target domains.

Swek09 /DepSentry

🛡️ Blazing fast Supply Chain Security tool written in Rust. Features ephemeral sandboxing, hybrid analysis (CVE + Heuristics), and entropy-based malware detection.

vpav /doppelganger

一种使用同拼Unicode字符生成域名排列的工具