lair vs dnstwist

lair

Lair is a reactive attack collaboration framework and web application built with meteor. (by lair-framework)

dnstwist

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation (by elceef)

Phishing Typosquatting Domains DNS Osint Idn Fuzzing threat-hunting homograph-attack Scanner threat-intelligence homoglyph

Source Code

dnstwist.it

Suggest alternative

Edit details

SurveyJS - Open-Source JSON Form Builder to Create Dynamic Forms Right in Your App

With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

surveyjs.io

featured

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

lair		dnstwist
	Project
1	Mentions	23
376	Stars	4,550
0.5%	Growth	-
10.0	Activity	7.6
about 4 years ago	Latest Commit	about 1 month ago
JavaScript	Language	Python
MIT License	License	Apache License 2.0

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

lair

Posts with mentions or reviews of lair. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-10-06.

Awesome Penetration Testing
124 projects | dev.to | 6 Oct 2021

Lair - Reactive attack collaboration framework and web application built with meteor.

dnstwist

Posts with mentions or reviews of dnstwist. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-11-27.

Have I Been Squatted?
3 projects | news.ycombinator.com | 27 Nov 2023
Domain Permutation - HaveIBeenSquatted & dnstwist
2 projects | /r/cybersecurity | 1 Nov 2023

I recently stumbled upon 2 cool domain permutation tools: HIBS & dnstwist
Accounting got phished. Paid out big bucks
3 projects | /r/sysadmin | 31 May 2023

https://dnstwist.it/ - check your domain now
Phishing campaign defence advice
1 project | /r/sysadmin | 26 May 2023

You can hunt down evil twin domains with https://dnstwist.it/
adjacent domain names
1 project | /r/cybersecurity | 3 Mar 2023
Alternative To Domain Tools
1 project | /r/cybersecurity | 10 Feb 2023
Typosquatting list
1 project | /r/k12sysadmin | 9 Feb 2023

I periodically run dnstwist and add whatever it finds to our block list.
List of 26 services for OSINT | BLUE TEAMS | RED TEAMS
2 projects | /r/Hacking_Tutorials | 3 Feb 2023
God damn. In situations like this how can I detect the fake one? This is truly scary.
7 projects | /r/Bitwarden | 25 Jan 2023

Pi-hole (with every reasonable blocklist I can find) protects me from many of these domains. NextDNS would be another option for DNS-based blocking for people who don't want to administer it themselves. I also plan to use DNSTwist to generate additional blocklists for typo-based phishing that I can plug into the Pi-hole for important sites.
Google Search Ads showing fake bitwarden web vault site as top result.
1 project | /r/Bitwarden | 24 Jan 2023

What are some alternatives?

When comparing lair and dnstwist you can also consider the following projects:

Metasploit - Metasploit Framework

opensquat - The openSquat is an open-source tool for detecting domain look-alikes by searching for newly registered domains that might be impersonating legit domains.

iodine - Official git repo for iodine dns tunnel

dnschef - DNSChef - DNS proxy for Penetration Testers and Malware Analysts

ZAP - The ZAP core project

urlcrazy - Generate and test domain typos and variations to detect and perform typo squatting, URL hijacking, phishing, and corporate espionage.

bettercap - The Swiss Army knife for 802.11, BLE, IPv4 and IPv6 networks reconnaissance and MITM attacks.

octoDNS - Tools for managing DNS across multiple providers

Cppcheck - static analysis of C/C++ code

amass - In-depth attack surface mapping and asset discovery

Kaitai Struct - Kaitai Struct: declarative language to generate binary data parsers in C++ / C# / Go / Java / JavaScript / Lua / Nim / Perl / PHP / Python / Ruby

WhatBreach - OSINT tool to find breached emails, databases, pastes, and relevant information