DNSMORPH is a domain name permutation engine, inspired by dnstwist. It is written in Go making for a compact and very fast tool. It robustly handles any domain or subdomain supplied and provides a number of configuration options to tune permutation runs.
DNSMORPH includes the following domain permutation attack types:
- Homograph attack (both on single and duplicate characters)
- Bitsquat attack
- Hyphenation attack
- Omission attack
- Repetition attack
- Replacement attack
- Subdomain attack
- Transposition attack
- Vowel swap attack
- Addition attack
Installation
There are two ways to install dnsmorph on your system:
- Downloading the pre-compiled binaries for your platform from the latest release page and extracting in a directory of your choosing.
- Downloading and compiling the source code yourself by running the following commands:
go get -v github.com/netevert/dnsmorphcd /$GOPATH/src/github.com/netevert/dnsmorphgo get -v ./...go build
An Arch Linux package is also available.
Also read: AQUATONE – DNS Reconnaissance
Usage
Usage menu output
Run attacks against a target domain
Run attacks against a list of domains
Include subdomain in attack
Run dns resolutions against permutated domains
Run geolocation against permutated domains
Run whois lookup against permutated domains
Output results to csv or json
Activate verbose output
DNSMORPH DEMO
