DNSTwist Fundamentals
Course Content
As its name suggests, the idea of this tool is pretty straightforward – DNSTWIST will help you in finding alternative domain names that are based on the name of your original domain.
If you are into Cybersecurity, especially Social Engineering which includes Phishing emails, then this kind of tool is a must-have because you will be able to find domains that almost look like your original domain and have the potential to become a Phishing landing page for the bad guys.
Disclaimer: The usage of any information or materials in this course is entirely at your own risk, for which me (Tino Sokic) or we (Cybrary) shall not be liable.
Prerequisites
Course Goals
After this course, you are expected to have an understanding of how this tool works and how to use it to find phishing sites based on the domain of your interest.What is DNSTWIST?
Essentially, DNSTWIST is a Python script which is designed to help you in your domain security. The tool was developed by Mr. Marcin Ulikowski and the beauty of this tool is in its simplicity and usefulness. It takes a domain of your choosing and then via various algorithms it generates domain names which could potentially be used for phishing, corporate espionage, typosquatting, different DNS attacks or simple house fun, but with serious repercussions which are always a possibility.Why Should I Care about DNSTWIST?
There are a handful of reasons why you should care about domain names or for a tool like DNSTWIST in general, especially if you are in the Cyber Security profession and community. In my opinion, some of the reasons are:Instructed by
I am a security professional and a systems engineer (read: geek). The combination of various IT certifications and my attendance of law school has generated one great love to Cyber Security. I have spent most of my IT career acquiring knowledge and skills in large systems as well as working with customers as an entrepreneur and CEO of my own company. I am proud of my/our website ucionica.net (Croatian: classroom) which is the biggest regional website that provides free tutorials and how to’s about technology. I really enjoy doing Security Awareness trainings, IT workshops, seminars, speaking at conferences and vulnerability testing. I have worked as a network and security engineer at one of the biggest Croatian Motorway companies from which I have developed my love for cyber security and raising the global security awareness. In my private time I play the guitar and sing - actually I do a gig once or twice a year at a local coffee shop or restaurant. Besides playing, I enjoy reading, recreational running, walking my little Yorkie and traveling with my wife.
