Multi-Factor Authentication Phishing Setup Part 1: Picking an Effective Domain 

In this video, I begin a series on building a multifactor phishing setup for use in red team or pentesting engagements. I will show you how to use dnstwist, urlcrazy, and ExpiredDomains.net to either register or buy an effective domain name for Phishing or C2 infrastructure.
DnsTwist
github.com/elceef/dnstwist
URLCrazy
github.com/urbanadventurer/ur...
ExpiredDomains.net
www.expireddomains.net/register/
Domain Categorization Links
Brightcloud: www.brightcloud.com/tools/url...
Cisco: talosintelligence.com
Checkpoint: urlcat.checkpoint.com/urlcat/...
Fortiguard: www.fortiguard.com/iprep
Multirbl: multirbl.valli.org
MXToolBox - Blacklists: mxtoolbox.com/blacklists.aspx
Palo Alto: urlfiltering.paloaltonetworks...
Symantec: sitereview.bluecoat.com
TrendMicro: global.sitesafety.trendmicro.com
00:00 Introduction
02:00 URL Crazy and DNS Twist
03:20 ExpiredDomains.net
08:40 Verifying Domain Reputation
11:15 Outro
~-~~-~~~-~~-~
Please watch: "Red Team Tips February 1st: OPSEC Safe Active Directory Enumeration with SilentHound "
• Red Team Tips February...
~-~~-~~~-~~-~

Наука