Marcin Ulikowski

dnstwist. Domain name permutation engine for detecting homograph phishing attacks, typo squatting, and brand impersonation

bitlocker. Volatility Framework plugin for extracting BitLocker FVEK (Full Volume Encryption Key)

subzuf. a smart DNS response-guided subdomain fuzzer

ppdeep. Pure-Python library for computing fuzzy hashes (ssdeep)

dhcpf. Passive DHCP fingerprinting implementation

mactelnet. Open source client for connecting to Mikrotik routers via MAC address

inet-scan. Scripts and payloads for internet-wide network scanning

yara-rulz. Collection of generic YARA rules

tkeypoc. PoC exploit code for CVE-2015-5477 BIND9 TKEY remote DoS vulnerability

pyrebind. Tiny DNS rebinding service

wcf-deserializer. A Burp Extender plugin, that will make binary soap objects readable and modifiable.

splunk-dnstwist-cmd. Splunk add-on providing a custom command to generate lookalike domain permutations