O365 Squatting
Presents a Python tool to proactively identify typosquatted domains pre-configured against Office 365 infrastructure.
Summary
Preemptive Domain Squatting Discovery
0365 Squatting is a Python-based utility created to uncover malicious typosquatted domains targeting organizations before active attacks or phishing campaigns begin.
Querying Office 365 Infrastructure
The tool generates permutation lists of typosquatted domains and queries Office 365 services directly, identifying domains configured in Microsoft infrastructure that may not yet resolve in public DNS.
Defensive Mitigation and Bug Hunting
Identifying configured domains early enables defenders to block malicious mail routes, preempt credential harvesting, and detect potential domain takeover conditions.
Related talks
Recon Village·30 min
Anthony Kava
Law enforcement investigator Anthony Kava uncovers widespread typosquatting and doppelgänger domains mimicking government agencies to defraud citizens.
Blue Team Village·41 min
Project Obsidian
Project Obsidian demonstrates using graph visualization tools to map phishing infrastructure, identify sender anomalies, and correlate multi-stage campaigns.
Blue Team Village·36 min
ch33r10
Proposes extracting indicators of emulation from cyber threat intelligence to model adversary behaviors more accurately.