search

elceef / dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation
https://dnstwist.it
Apache License 2.0
4.81k stars 764 forks source link

"--only-new" option? #123

Open xme opened 3 years ago

xme commented 3 years ago

I was wondering if somebody worked on a patch to implement a command-line argument like "--only-new" to report only newly discovered domains (between different runs of dnstwist.py). Or did you implement another technique?

rfdevere commented 3 years ago

Maybe piping the output through awk to get the fields you want (if not all) then piping through grep -Fvxf old-domains.txt >>new-domains.txt

elceef commented 3 years ago

I have created a spin off project on top of this one with the working name dnstwist|sonar. It's not open source and not publicly available, but you can see it working by following @dnstwist on Twitter. AFAIK there are a few open source projects using dnstwist which try to provide similar functionality.

dekadentno commented 3 years ago

@xme Did you find a solution to compare the output with a previous result? I am not sure what's the best format for comparing (json, csv...)

My plan is ti make a cron job that will scan my website and detect if there are some phishing attempts, just the twitter bot does that @elceef showed.