dnstwist

KO | EN

gitlite — search

#hacktoberfest #react #typescript #machine-learning #rust #deep-learning #nodejs #windows #kubernetes #vue #pytorch #security #mcp #openai

(★ 23)

A tool to monitor for potential spear phishing domains and send to Slack.

dnstwist Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# dnstwist

This is a tool that will fetch potential typo-squatting or IDN domains which could be targeting your domain for spear phishing.
Permutations will be fetched from https://dnstwist.it/.

It will take into account the registration and/or last updated WHOIS information and a potential whitelist.

Domains identified can be sent to Slack for automated alert purposes.

## Usage

First create a configuration file:
```yaml
# log settings, optional
log:
  # log level to use
  level: info

# the domains you'd like to monitor, required
domains:
  # domain(s) to monitor
  watchlist: [domain.com]
  # any domains to ignore
  whitelist: []
  # domains created in the last week
  created_since: 168h

# send alerts to a Slack channel, optional
slack:
  # slack channel webhook
  webhook: https://hooks.slack.com/services/XXX
```

And then run the tool:
```shell
% dnstwist -config=config.yml
```

You can also set configuration values via environment variables:

```shell
% LOG_LEVEL=info DOMAIN_WATCHLIST=domain.com SLACK_WEBHOOK=xxx dnstwist
```

And use it with the Docker image!

```shell
% docker run -ti --rm -e "DOMAIN_WATCHLIST=domain.com" -e "SLACK_WEBHOOK=xxx" ghcr.io/hazcod/dnstwist/dnstwist:latest
```

dnstwist

dnstwist Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

dnstwist

dnstwist Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README