deep confusables-cli基于deep confusables相似度生成的相似度矩阵生成输入的新变体。
deep-confusables的Python项目详细描述
深度混淆
Visual Unicode attacks with deep learning
deep-confusablesis the first tool that uses Deep Learning, especially Transfer Learning, to automatically create new variations of inputs using Unicode characters. It is a typical visual attack but in this case the tool uses the power of the machines to select the most similar characters between all possibles.
演示
先决条件
python=3.5
安装
pip3 install deep-confusables
开始
快速示例
$ deep-confusables -d example.org -m 10 -c -v
__ ___ ___ __ __ __ ___ __ __ ___ __
| \ |__ |__ |__) __ / ` / \ |\ | |__ | | /__` /\ |__) | |__ /__`
|__/ |___ |___ | \__, \__/ | \| | \__/ .__/ /~~\ |__) |___ |___ .__/
Visual Unicode attacks with Deep Learning
Version 1.1.1
Created by:
- José Ignacio Escribano Pablos (@jiep)
- Miguel Hernández Boza (@Miguel000)
- Alfonso Muñoz Muñoz (@mindcrypt)
Similar domains to example.org
cxamp1ȅ.org
cxamp1o.org
cxamp1ɕ.org
cxamp1ƈ.org
cxamp1ɔ.org
cxamp1c.org
cxamp1e.org
cxamp1ǝ.org
cxamp1ɘ.org
cxamp1ȇ.org
Checking if domains are up
The domain cxamp1ȅ.org does not exist
The domain cxamp1o.org does not exist
The domain cxamp1ɕ.org does not exist
The domain cxamp1ƈ.org does not exist
The domain cxamp1ɔ.org does not exist
The domain cxamp1c.org does not exist
The domain cxamp1e.org does not exist
The domain cxamp1ǝ.org does not exist
The domain cxamp1ɘ.org does not exist
The domain cxamp1ȇ.org does not exist
Total similar domains to example.org: 10
注意
Sometimes the output isn't render, that is because the terminal needs the font, but if you copy the text is correct.
获得帮助
$ deep-confusables -h
__ ___ ___ __ __ __ ___ __ __ ___ __
| \ |__ |__ |__) __ / ` / \ |\ | |__ | | /__` /\ |__) | |__ /__`
|__/ |___ |___ | \__, \__/ | \| | \__/ .__/ /~~\ |__) |___ |___ .__/
Visual Unicode attacks with Deep Learning
Version 1.1.1
Created by:
- José Ignacio Escribano Pablos (@jiep)
- Miguel Hernández Boza (@Miguel000)
- Alfonso Muñoz Muñoz (@mindcrypt)
usage: deep-confusables [-h] [-d DOMAIN] [-v] [-c] [-w] [-vt] [-m MAX]
[-t 75,80,85,90,95,99] [-key API] [-o OUTPUT]
[-i FILEINPUT]
deep-confusables-cli: Visual Unicode attacks with Deep Learning - System based
on the similarity of the characters unicode by means of Deep Learning. This
provides a greater number of variations and a possible update over time
optional arguments:
-h, --help show this help message and exit
-d DOMAIN, --domain DOMAIN
check similar domains to this one
-v, --verbose
-c, --check check if this domain is alive
-w, --whois check whois
-vt, --virustotal check Virus Total
-m MAX, --max MAX maximum number of similar domains
-t 75,80,85,90,95,99, --threshold 75,80,85,90,95,99
Similarity threshold
-key API, --api-key API
VirusTotal API Key
-o OUTPUT, --output OUTPUT
Output file
-i FILEINPUT, --input FILEINPUT
List of targets. One input per line.
Examples:
>$ deep-confusables -d example.com -o dominionsexample.txt
>$ deep-confusables --domain example.com -m 100 -t 85
>$ deep-confusables -i fileexample.txt -c -w -v
贡献
欢迎合作！
有许多任务要做。您可以检查Issues并向我们发送拉取请求。
许可证
此项目是在mit许可下授权的-有关详细信息，请参阅LICENSE.md文件。
作者
- 何塞·伊格纳西奥·埃斯克里巴诺·帕布罗斯-@jiep
- 米格尔·埃尔南德斯·博扎-@Miguel000
- 阿方索·穆尼奥斯·穆尼奥斯-@mindcrypt
欢迎加入QQ群-->： 979659372
