[B! domain][security][phishing] ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ishideo id:ishideo

domainã¨securityã¨phishingã«é–¢ã™ã‚‹ishideoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Subdomain Takeoverã«ã‚ˆã‚‹è©æ¬ºã‚µã‚¤ãƒˆã¸ã®èª˜å°Žã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
2020å¹´7æœˆã¾ã§ã«å›½å†…å¤–ã®è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãŒã€ŒSubdomain Takeoverã€ã¨ã¿ã‚‰ã‚Œã‚‹å½±éŸ¿ã‚’å—ã‘ã€å½“è©²ã‚µã‚¤ãƒˆã«æŽ¥ç¶šã—ãŸåˆ©ç”¨è€…ãŒè©æ¬ºã‚µã‚¤ãƒˆã«èª˜å°Žã•ã‚Œã‚‹äº‹è±¡ãŒç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ã“ã“ã§ã¯ã“ã®äº‹è±¡ã«é–¢é€£ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ ä½•ãŒèµ·ãã¦ã‚‹ã®ï¼Ÿ èª˜å°Žã•ã‚Œã‚‹è©æ¬ºã‚µã‚¤ãƒˆã®ä¸€ä¾‹ å¤§æ‰‹çµ„ç¹”ã‚’å«ã‚€è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åã«ãŠã„ã¦ã€æ¤œç´¢ã‚µã‚¤ãƒˆã‹ã‚‰æŽ¥ç¶šã—ãŸéš›ã«è©æ¬ºã‚µã‚¤ãƒˆã¸é·ç§»ã•ã›ã‚‹äº‹è±¡ãŒç™ºç”Ÿã—ã¦ã„ãŸã€‚ å„çµ„ç¹”ç®¡ç†ã®ã‚µãƒ¼ãƒãƒ¼ã‚„ãƒ¬ã‚¸ã‚¹ãƒˆãƒ©ã€CDNã‚µãƒ¼ãƒ“ã‚¹ãŒç›´æŽ¥è¢«å®³ã‚’å—ã‘ãŸã®ã§ã¯ãªãã€Subdomain Takeoverã¨å‘¼ç§°ã•ã‚Œã‚‹æ‰‹æ³•ã«ã‚ˆã‚ŠéŽåŽ»ä½¿ç”¨ã•ã‚Œã¦ã„ãŸãƒ‰ãƒ¡ã‚¤ãƒ³åãŒç‹™ã‚ã‚ŒãŸã¨ã¿ã‚‰ã‚Œã‚‹ã€‚ ã©ã†å¯¾å¿œã™ã‚Œã°ã‚ˆã„ï¼Ÿ ä¸è¦ãªCNAMEãƒ¬ã‚³ãƒ¼ãƒ‰ã‚’å‰Šé™¤ã™ã‚‹ã€‚ å½±éŸ¿ç¯„å›²ã¯ï¼Ÿ æ£ç¢ºãªè¢«å®³çŠ¶æ³ã¯æŠŠæ¡ã—ã¦ã„ãªã„ãŒã€è¤‡æ•°ã®å›½å†…å¤–ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãŒå½±éŸ¿ã‚’å—ã‘ã¦ãŠã‚Šã€æ¤œç´¢ã«ã‹ã‹ã‚‹ã‚‚ã®ã ã‘ã§ã‚‚100ä»¶ä»¥ä¸Šã‚’piyokangoã¯ç¢ºèªï¼ˆ2020å¹´7æœˆ
ishideo 2021/02/25
subdomain

takeover

vulnerability

security

piyolog

domain

phishing
ãƒªãƒ³ã‚¯
GitHub - vavenger/fighting-phishing-methods
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
ishideo 2021/02/24
phishing

security

osint

infosec

domain

github

report
ãƒªãƒ³ã‚¯
Expired Domain Allowed Researcher to Hijack Country's TLD
ishideo 2021/01/20
dig

dns

tld

malicious

ns

name-server

.cd

phishing

domain

security
ãƒªãƒ³ã‚¯
How Cybercriminals Run Phishing Campaigns: Tools and Resources
ishideo 2020/09/24
phishing

security

osint

spf

dkim

dmarc

punycode

domain

comparitech
ãƒªãƒ³ã‚¯
ã™ãã‚™è²¢çŒ®ã¦ã‚™ãã‚‹ï¼å½ã‚µã‚¤ãƒˆã®æŽ¢ç´¢ã‹ã‚‰é€šå ±ã¾ã§ - Qiita
ã‚¯ãƒãƒ¼ã‚ãƒ³ã‚° è©æ¬ºå¸«ã¯ã€å½ã‚µã‚¤ãƒˆãŒãƒ–ãƒãƒƒã‚¯ãƒªã‚¹ãƒˆã«è¿½åŠ ã•ã‚Œãªã„ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã€ã€Œã‚¯ãƒãƒ¼ã‚ãƒ³ã‚°ï¼ˆCloakingï¼‰ã€æ‰‹æ³•ã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ã‚¯ãƒãƒ¼ã‚ãƒ³ã‚°ã¨ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã«å¯¾ã—ãã‚Œãžã‚Œç•°ãªã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚„ URL ã‚’è¡¨ç¤ºã™ã‚‹è¡Œç‚ºã§ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã€ç‰¹å®šã®æ¡ä»¶ãŒãã‚ã£ã¦ã„ã‚‹å ´åˆã®ã¿å½ã‚µã‚¤ãƒˆã‚’è¡¨ç¤ºã•ã›ã¾ã™ã€‚èª¿æŸ»ç›®çš„ã«ã‚ˆã‚‹å½ã‚µã‚¤ãƒˆã®æŽ¥ç¶šã‚’å¦¨å®³ã—ã¦ã„ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã®ç¾çŠ¶ ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°å¯¾ç–å”è°ä¼š, ã€Œãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°è©æ¬ºã®ãƒ“ã‚¸ãƒã‚¹ãƒ—ãƒã‚»ã‚¹åˆ†é¡žã€ã‚’å…¬é–‹ (2021/03/16), https://www.antiphishing.jp/news/info/collabo_20210316.html 2003å¹´ã«ã‚ªãƒ¼ã‚¹ãƒˆãƒ©ãƒªã‚¢ã®éŠ€è¡Œã‚’è£…ã£ãŸãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ãƒ¡ãƒ¼ãƒ«ãŒç¢ºèªã•ã‚Œã¦ã„ã¾ã™ã€‚2004å¹´11æœˆã«ã¯åˆã¨ãªã‚‹æ—¥æœ¬èªžã®ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆãŒç¢ºèªã•ã‚Œã¾ã—ãŸ(VISAã‚«ãƒ¼ãƒ‰ã®æš—è¨¼ç•ªå·ã‚’å…¥
ishideo 2020/07/29
phishing

security

osint

domain

qiita

report

reputation

phishtank

whois

ping
ãƒªãƒ³ã‚¯
Page not found - HackTricks
Translations Afrikaans Chinese English French German Greek Hindi Italian Japanese Korean Polish Portuguese Serbian Spanish Swahili Turkish Ukrainian Document not found (404) This URL is invalid, sorry. Please use the navigation bar or search to continue.
ishideo 2020/05/28
hacktricks

asset

enumeration

subdomain

dns

domain

osint

security

brute-force
ãƒªãƒ³ã‚¯
GitHub - atenreiro/opensquat: The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains and brands.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert
ishideo 2020/05/19
python

typosquatting

phishing

osint

security

domain

homograph-attack

github

domain-squat

opensquat
ãƒªãƒ³ã‚¯
æ–°è¦ç™»éŒ²ãƒ‰ãƒ¡ã‚¤ãƒ³: æ‚ªæ„ã®ã‚ã‚‹æ”»æ’ƒè€…ã«ã‚ˆã‚‹æ‚ªç”¨
æ¦‚è¦ è„…å¨æ”»æ’ƒè€…ã¯ã€ãŸã³ãŸã³ã€Œæ–°è¦ç™»éŒ²ãƒ‰ãƒ¡ã‚¤ãƒ³(Newly Registered Domains, ä»¥é™NRDã¨è¡¨è¨˜)ã€ã‚’ä½¿ã£ã¦æ‚ªæ„ã®ã‚ã‚‹æ”»æ’ƒã‚’ä»•æŽ›ã‘ã‚‹ã“ã¨ãŒç¢ºèªã•ã‚Œã¦ã„ã¾ã™ã€‚å¦è¡“æ©Ÿé–¢ã¨ç”£æ¥ç•Œã®èª¿æŸ»ãƒ¬ãƒãƒ¼ãƒˆã‹ã‚‰ã‚‚ã€NRDã®ãƒªã‚¹ã‚¯ãŒé«˜ã„ã“ã¨ã‚’ç¤ºã™çµ±è¨ˆçš„ãªè¨¼æ‹ ãŒç¤ºã•ã‚Œã¦ãŠã‚Šã€ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€è©æ¬ºãªã©ã«NRDãŒæ‚ªç”¨ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã™ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ãã¾ã—ãŸã€‚ã—ãŸãŒã£ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ãƒ™ã‚¹ãƒˆ ãƒ—ãƒ©ã‚¯ãƒ†ã‚£ã‚¹ã§ã¯ã€ä¼æ¥ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§NRDã‚’ãƒ–ãƒãƒƒã‚¯ã™ã‚‹ã‹ã€åŽ³æ ¼ã«ãƒ¢ãƒ‹ã‚¿ãƒªãƒ³ã‚°ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã¨ã“ã‚ãŒã“ã†ã—ãŸè¨¼æ‹ ãŒã‚ã‚‹ã«ã‚‚ã‹ã‹ã‚ã‚‰ãšã€ã“ã‚Œã¾ã§ã€å®Ÿéš›ã®ã‚µãƒ³ãƒ—ãƒ«ã‚’ä½¿ç”¨ã—ãŸNRDé–¢é€£ã®æ‚ªç”¨ãªã‚‰ã³ã«è„…å¨ã«é–¢ã™ã‚‹åŒ…æ‹¬çš„ãªã‚±ãƒ¼ã‚¹ ã‚¹ã‚¿ãƒ‡ã‚£ã¯å˜åœ¨ã—ã¾ã›ã‚“ã§ã—ãŸã€‚ãã“ã§æœ¬ç¨¿ã§ã¯ã€æ‚ªæ„ã®ã‚ã‚‹æ”»æ’ƒè€…ã«ã‚ˆã‚‹NRDæ‚ªç”¨ã®åŒ…æ‹¬çš„ã‚±ãƒ¼ã‚¹ ã‚¹ã‚¿ãƒ‡ã‚£ã¨åˆ†æžã‚’ç¤ºã—ã¾ã™ã€‚ å¼Šç¤¾ã¯ã“ã‚Œã¾ã§9å¹´ä»¥ä¸Šã«ã‚ãŸã‚ŠNRDã‚’è¿½è·¡ã—ã¦ãã¾ã—
ishideo 2019/10/29
domain

phishing

scam

dns

malware

typosquatting

nrd

security

infosec

paloalto
ãƒªãƒ³ã‚¯
SecurityTrails | How to use name server records to locate malicious domains en masse
ishideo 2019/10/17
name-server

malicious

domain

phishing

urlscan.io

bulk

submit

osint

security

securitytrails
ãƒªãƒ³ã‚¯
What can be learnt from a phishing domain
ishideo 2019/08/02
phishing

security

osint

securitytrails

domain
ãƒªãƒ³ã‚¯
ã©ã‚Œãã‚‰ã„è‡ªç¤¾ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒãªã‚Šã™ã¾ã•ã‚Œã¦ã„ã‚‹ã‹ã€ã”å˜çŸ¥ã§ã™ã‹? | IIJ Engineers Blog
IIJ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯æœ¬éƒ¨ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒ“ã‚¹éƒ¨æ‰€å±žã€‚ ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã®é‹ç”¨æ¥å‹™ã«å¾“äº‹ã—ã€æ—¥ã€…ä¸–ç•Œã®æ‚ªã¨æˆ¦ã†ä¸€å…ã®çˆ¶è¦ªã€‚ç¤¾å†… Power Automate ã‚¨ãƒãƒ³ã‚¸ã‚§ãƒªã‚¹ãƒˆ(è‡ªç§°)ã€‚M3AAWG member / openSUSE Users / WIDE Project ãƒ¡ãƒ³ãƒãƒ¼ã€‚è¶£å‘³ã¯å¤§å–œåˆ©ã€‚ã¯ãŒãè·äººã€‚ ä¼æ¥ã®æƒ…å ±ã‚·ã‚¹ãƒ†ãƒ éƒ¨é–€ã§ãƒ¡ãƒ¼ãƒ«ã‚’æ‹…å½“ã•ã‚Œã¦ã„ã‚‹ã¿ãªã•ã‚“ã€ã“ã®å•ã„ã«ç”ãˆã‚‰ã‚Œã‚‹æ–¹ã¯ã€ã©ã‚Œãã‚‰ã„ã„ã‚‰ã£ã—ã‚ƒã‚‹ã§ã—ã‚‡ã†ã‹ã€‚ ã€Œãã‚“ãªã“ã¨ã€æ°—ã«ã—ãŸã“ã¨ã‚‚ãªã„ã€ã¨ã„ã†æ–¹ã‚‚å°‘ãªããªã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ãã‚Œã‚‚ãã®ã¯ãšã€ã“ã‚Œã¾ã§é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ã‚’ä»£è¡¨ã™ã‚‹ SPFã€DKIM ã¯ã€é€ä¿¡è€…å´ãŒå—ä¿¡è€…å´ã§ã©ã®ã‚ˆã†ã«è©•ä¾¡ã•ã‚ŒãŸã‹çŸ¥ã‚‹è¡“ãŒã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ã¾ã—ã¦ã‚„ã€ç¬¬ä¸‰è€…ã®ä½•è€…ã‹ãŒè‡ªç¤¾ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å‹æ‰‹ã«ä½¿ã£ã¦èª°ã‹ã«ãƒ¡ãƒ¼ãƒ«ã‚’é€ã£ã¦ã„ã‚‹ã€ãªã‚“ã¦çŸ¥ã‚‹ã“ã¨ã¯ä¸å¯èƒ½ã§ã—ãŸã€‚ ã—ã‹ã—ã€DMARC(RFC 7489;ã€Œãƒ‡ã‚£ãƒ¼
ishideo 2019/07/04
dmarc

domain

dns

security

phishing
ãƒªãƒ³ã‚¯
GitHub - urbanadventurer/urlcrazy: Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.
ishideo 2019/04/14
urlcrazy

url

domain

ruby

security

github

phishing

tyosquatting
ãƒªãƒ³ã‚¯
1