Bitsquat Detector

A tool to generate a list of domains which bitsquat a given domain. For further information on bitsquatting I recommend reading http://dinaburg.org/bitsquatting.html

A blog post about the development of this tool can be found at https://blog.barradell-johns.com/?p=124

Installation

This tool is designed to work on python 3 and has not been tested on python 2.

To install simply clone this repo

git clone https://github.com/Jack-Barradell/bitsquat-detector

Then setup the primary dependency of pythonwhois

pip install pythonwhois

Simple, That's it!

Usage

Bitsquat Detector
 
Usage: bitsquat.py -u <url>
The url prefix is not needed. E.g for www.google.com, only provide "google.com"
 
Flags:
        -u --url            - Target url to check
        -c --check          - Check if domain is registered. NOTE: To prevent rate limiting this slows the program down heavily
        -h --help           - Show this help message

Examples: bitsquat.py fake-domain.com

Examples

Just generate domains

> python bitsquat.py -u bbc.co.uk 
[+] Generating bitsquat domains
[+] Finished generating bitsquat domains
[+] Found rbc.co.uk
[+] Found jbc.co.uk
[+] Found fbc.co.uk
[+] Found cbc.co.uk
[+] Found brc.co.uk
[+] Found bjc.co.uk
[+] Found bfc.co.uk
[+] Found bcc.co.uk
[+] Found bbs.co.uk
[+] Found bbk.co.uk
[+] Found bbg.co.uk
[+] Found bba.co.uk
[+] Found bbb.co.uk
[+] Completed. Total domains found: 13

Generate domains and check them

> python .\bitsquat.py -u microsoft.com -c
[+] Generating bitsquat domains
[+] Finished generating bitsquat domains
[+] Found eicrosoft.com
        [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
[+] Found iicrosoft.com
        [+] Checking if registered
        [+] Available
        [+] Waiting 5 seconds until next check
[+] Found oicrosoft.com
        [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
[+] Found licrosoft.com
       [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
[+] Found mycrosoft.com
        [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
[+] Found macrosoft.com
        [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
[+] Found mmcrosoft.com
        [+] Checking if registered
        [-] Not available
        [+] Waiting 5 seconds until next check
<OUTPUT SNIPPED>
[+] Completed. Total domains found: 43

Errors

When using the -c option, you may encounter the following error

[!] Hit whois rate limit, continuing without whois

This occurs when too many requests have been made to check domain availability and will disable domain availability checking for the remainder of the session.

Disclaimer

All code and tools are provided for educational purposes and I can accept no responsibilty for misuse.