Name: DNSTWIST
Author: Open Source

Communications Outsourcing

Help Desk

Web and Video Conferencing

Customer Support

Push Notifications

Development

Business Intelligence (BI)

Calibration Management

Collaboration

Environmental, Social, and Governance (ESG)

Interactive Voice Response (IVR)

Enterprise

Accounting

Online Trading

Payment Gateway

Finance and Accounting

Applicant Tracking

Corporate Learning Management

Employee Onboarding

Employee Performance Management

HR Management

On-Demand Payment

Payroll

Professional Employer Organizations (PEO)

Resume Parsing

Succession Planning

Talent Intelligence

Talent Management

Workforce Analytics

Workforce Management

Human Resources

API Management

Cloud Storage

Distributed Denial of Service (DDoS) Protection

Dynamic Application Security Testing (DAST)

Embedded Business Intelligence (BI)

Endpoint Encryption

File Sync and Share

Fraud Detection

HTML Editors

Hyper-Converged Infrastructure

Integration Platform as a Service (iPaaS)

Monolithic Frame-based Disk Arrays

Network Performance Monitoring

Network Virtualization

Password Management System

Remote Monitoring and Management

Routers

Secure Email Gateway

Session Border Controllers

Solid State Drives

Static Application Security Testing (SAST)

Static Code Analysis

VoIP Monitoring

Information Technology

A/B Testing

Ad Serving & Retargeting

All-in-One Marketing

Business Card Scanning

Content Management

Data Management

Direct Mail Automation

Email Marketing

Marketing Automation

Marketing Resource Management

Real-Time Interaction Management

Search Marketing Intelligence

Social Media Management

Survey & Forms Building

Video Streaming

Web Analytics

Marketing

Project Management

Transcription

Professional Services

Customer Relationship Management (CRM)

Sales Gamification

Sales

Auto Repair

Car Rental

Equation Editors

Forestry

Insurance Agency Management

Vertical-Specific

Find top rated software and services based on in-depth reviews from verified users. 400+ software categories including PaaS, NoSQL, BI, HR, and more.

Phishing Catcher

Open Source

YARA

DNSTWIST is a domain name permutation engine developed by elceef. According to the vendor, it is designed to detect various types of domain-related attacks, including homograph phishing, typo squatting, and brand impersonation. This software generates comprehensive lists of domain permutations based on a provided domain name and verifies their usage. The vendor claims that DNSTWIST is suitable for organizations of all sizes, from small businesses to large enterprises. It is said to be widely used by cybersecurity professionals, IT administrators, brand protection teams, law enforcement agencies, and domain registrars and registries to enhance domain name security, prevent attacks, and safeguard brand reputation.

## Key Features

**Variety of domain fuzzing algorithms**: DNSTWIST offers a range of domain fuzzing algorithms, including homoglyph fuzzing, insertion fuzzing, omission fuzzing, substitution fuzzing, transposition fuzzing, and hyphenation fuzzing. These algorithms are claimed to generate comprehensive lists of domain permutations for thorough analysis.

**Unicode domain names (IDN)**: According to the vendor, DNSTWIST supports Unicode domain names (IDN), enabling users to generate domain permutations that include characters from different Unicode scripts. This feature is said to help detect homograph attacks that utilize visually similar characters.

**Additional domain permutations from dictionary files**: Users can enhance the domain fuzzing process by providing DNSTWIST with dictionary files containing commonly used words or phrases. The vendor claims that this feature allows the generation of additional domain permutations for comprehensive analysis.

**Efficient multithreaded task distribution**: DNSTWIST utilizes efficient multithreading to distribute domain fuzzing tasks across multiple threads. This is said to enable faster processing of large numbers of domain permutations, ensuring timely results even for extensive analyses.

**Live phishing webpage detection**: According to the vendor, DNSTWIST can detect live phishing webpages by comparing the HTML similarity of generated domains with the original domain. It utilizes fuzzy hashes such as ssdeep and tlsh to identify similarity and detect ongoing phishing attacks.

**Screenshot visual similarity comparison**: DNSTWIST compares the visual similarity of webpage screenshots using perceptual hashes (pHash). The vendor claims that this feature helps identify visually similar webpages, enabling the detection of brand impersonation and fraud.

**Rogue MX host detection**: By analyzing MX records, DNSTWIST can detect rogue MX hosts that intercept misdirected emails. According to the vendor, this feature helps identify potential instances of email redirection and alerts users to potential security risks.

**GeoIP location**: DNSTWIST performs real-time lookups to determine the geographical location (approximated to the country) of IPv4 addresses associated with generated domains. The vendor states that this feature provides users with valuable information about the potential origin of the domains.

**Export to CSV and JSON**: DNSTWIST allows users to export the generated domain permutations and their associated information to CSV and JSON formats. This feature is claimed to facilitate easy integration with other tools, analysis, and further processing of the data.


DNSTWIST is an open source threat hunting tool that allows a user to proactively scan for potentially hazardous domains.

DNSTWIST

Threat Hunting

Threat Intelligence

Features for categories that leverage threat intelligence in network security

Network Analytics

Analyzes various data reports and logs (DNS, firewall, user data, security information etc.) to identify threats in a network.

Threat Recognition

Detection and recognition of malicious software within a network that could pose a threat to sensitive information.

Vulnerability Classification

Prioritizing vulnerabilities, to determine which vulnerabilities are most urgent and require a quicker resolution.

Automated Alerts and Reporting

Systems in place to automatically alert, report, or notify of issues that may need timely remediation.

Threat Analysis

Analyzing known factors such as behavior patterns, affected areas, and other specific features to more easily identify a threat.

Threat Intelligence Reporting

Generates reports that display information on threats (such as name, type, frequency of attack, area affected, etc.)

Automated Threat Identification

Leveraging multiple sources of information (such as threat intelligence databases) to automatically identify threats.

Threat Hunting Tools

Tools that actively scan a network for threats. These tools will commonly integrate with and use threat intelligence databases for threat identification and elimination.

Scanning for Vulnerabilities

Scans that identify vulnerable areas within a network.

Behavioral Analytics

Using threat behavior to establish a pattern which can be used to identify the similar threats faster in the future.

Endpoint Security

Endpoint security software protects enterprise connected devices from malware and cyber attacks.

Infection Remediation

Capability to quarantine infected endpoint and terminate malicious processes.

Anti-Exploit Technology

In-memory and application layer attack blocking (e.g. ransomeware)

TrustRadius is a technology and business research firm based in Austin, Texas. The company is known as a review platform for verified B2B technology and software reviews through a proprietary algorithm and human verification.

TrustRadius

Home

DNSTWIST

Overview

What is DNSTWIST?