homograph-attack

Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.

openSquat is an open-source tool that detects look-alike domains impersonating your brand, by scanning newly registered domains daily.

既适合程序员，也适合中文电子文字整编人员(in beta)。汉字繁、简、异、兼、笔、变等关联关系可视化。非寻常汉字字符、同形字符攻击、不可打印字符等检视工具。结合OpenCC、Unicode等数据 | Chinese characters relations or vatiants (simplified, traditional etc) visualization. Potential Unihan/UCD homograph/punycode attack/phishing, non-printable invisible characters inspector

Toolkit to both detect and sanitize homographic spoofing attacks in URLs and Email addresses

Newly registered Domain Monitoring to detect phishing and brand impersonation with subdomain enumeration and source code scraping

🕵️‍♀️🕵️‍♂️ Ruby gem for determining whether a given URL is considered an IDN homograph attack

Detect Phishing fetching Certificate Transparency Logs

a tool that creates permutations of domain names using homographic unicode characters

📯 Confusing domain name character generator.

IDN homograph attack with more of possibility attacks

This is a project which aims to identify Social-Engineering in the domain of digital-forensics & cyber-security. The first approach is to find an abuse of the graphical-similiarity of strings.

Find homograph attack candidates for top 1m sites

Finds Homographic domain name in a given set.

Generate all homoglyphs for a given input sentence.

An open-source, fully on-device anti-phishing browser extension that makes hidden threats visible. It proactively reveals true link destinations, unmasks homograph domains, and decodes short links, giving you the clear context needed to spot scams yourself

Detect and mitigate homograph attacks in terminal output for curl

A security scanner designed to detect invisible Unicode vulnerabilities, BiDi overrides, and homoglyph attacks in source code to prevent Trojan Source exploits.

🌐 RootCause Web Inspector v0.2.0 — sensor forense del navegador: cookies, sesiones de correo, extensiones, descargas, permisos y páginas que simulan una ventana real (Browser-in-the-Browser). Panel local en 127.0.0.1, extensión MV3, CERO dependencias y cero telemetría verificada en CI.

The security-first Python library that stands guard between your application and the wild west of user-submitted URLs. One import. One call. Sixteen battle-tested checks. Zero excuses for SSRF, XSS, and 16+ Attack Vectors.