A Maltego transform server that implements a transform set to handle queries to the Ditto IDN homograph attacks and detection tool, as well as local transformations for working with the resulting entities. You can read more about it in my accompanying blogpost.
- SimilarDomains
- RegisteredDomains
- LiveDomains
- AvailableDomains
- LiveDomainsTLD
- LookupAddr
- ToDomainNames
- ToRegistrarNames
- ToNameServers
- ToCreationDate
go build
docker pull dreadl0ck/ditto-trx
Check the examples folder and unit tests!
Import the dittotrx.mtz file into maltego, to install the transforms and entities.
$ tree dittotrx
dittotrx
├── Entities
│ └── dittotrx.IDNDomain.entity
├── EntityCategories
│ └── dittotrx.category
├── Icons
│ └── dittotrx
│ ├── domain_black.svg
│ ├── domain_black.xml
│ ├── domain_black24.svg
│ ├── domain_black32.svg
│ ├── domain_black48.svg
│ └── domain_black96.svg
├── Servers
│ └── Local.tas
├── TransformRepositories
│ └── Local
│ ├── dittotrx.LookupAddr.transform
│ ├── dittotrx.LookupAddr.transformsettings
│ ├── dittotrx.ToCreationDate.transform
│ ├── dittotrx.ToCreationDate.transformsettings
│ ├── dittotrx.ToDomainNames.transform
│ ├── dittotrx.ToDomainNames.transformsettings
│ ├── dittotrx.ToIPAddresses.transform
│ ├── dittotrx.ToIPAddresses.transformsettings
│ ├── dittotrx.ToNameServers.transform
│ ├── dittotrx.ToNameServers.transformsettings
│ ├── dittotrx.ToRegistrarNames.transform
│ ├── dittotrx.ToRegistrarNames.transformsettings
│ ├── dittotrx.VisitDomain.transform
│ └── dittotrx.VisitDomain.transformsettings
├── TransformSets
│ └── DittoTRX.set
└── version.properties
$ cloc *.go
2 text files.
2 unique files.
0 files ignored.
github.com/AlDanial/cloc v 1.84 T=0.01 s (227.0 files/s, 23263.9 lines/s)
-------------------------------------------------------------------------------
Language files blank comment code
-------------------------------------------------------------------------------
Go 2 39 39 127
-------------------------------------------------------------------------------
SUM: 2 39 39 127
-------------------------------------------------------------------------------
GPLv3