0
0day.rocks
blog.0day.rocks · Personal blog · on HN since 2017
A security researcher writes about phishing detection, Signal privacy, threat intelligence, and information operations.
What HN saysHN links it for practical phishing detection with Certstream and for its post on abusing Gmail to find unlisted email addresses.
16HN people shared it
3linked it in comments
20stories submitted
416story points
6 years agolast shared
2017people per year2026
Most-shared posts
- 1Abusing Gmail to get previously unlisted e-mail addresses3 people · 112 points · first shared 2017 · 50 comments on HN
- 2Operational Signal: Using Signal Pseudonymously3 people · 22 points · first shared 2017 · discussion on HN
- 3Catching phishing before they catch you3 people · 3 points · first shared 2017 · discussion on HN
- 4How to fake an APT28 attack: danger of single source data in threat intelligence2 people · 6 points · first shared 2017 · discussion on HN
- 5A Look into Signal’s Encrypted Profiles2 people · 3 points · first shared 2018 · discussion on HN
- 6France might be losing its first big information war1 people · 153 points · first shared 2018 · 176 comments on HN
- 7Practical waterholing through DNS typosquatting1 people · 99 points · first shared 2017 · 14 comments on HN
- 8Introducing the first ever shitpost-based RNG1 people · 7 points · first shared 2018 · discussion on HN
- 9How to create the perfect anonymizing botnet by abusing UPnP features1 people · 3 points · first shared 2018 · discussion on HN
- 10Starting in cybersecurity?1 people · 2 points · first shared 2017 · discussion on HN
- 11Securing a Web Hidden Service1 people · 2 points · first shared 2017 · discussion on HN
- 12Uncovering foreign trolls trying to influence French elections on Twitter1 people · 1 points · first shared 2018 · discussion on HN
- 13Current state of hacking back (counter hacking)1 people · 1 points · first shared 2018 · discussion on HN
- 14You will be surprised by what your Tweets may reveal about you and your habits1 people · 1 points · first shared 2017 · discussion on HN
- 15Link previews in IM apps and privacy1 people · 1 points · first shared 2017 · discussion on HN
What HN people wrote when they linked it
vuln · 2020-07-21
Certstream[0] is pretty cool. An great way to monitor for phishing domains[1]
[0] https://certstream.calidog.io/
[1]
https://github.com/x0rz/phishing_catcher
https://blog.0day.rocks/catching-phishing-using-certstream-97177f0d499…
VuWall-Matt · 2018-03-05
Took a little while, but I think this is what you are looking for: https://blog.0day.rocks/abusing-gmail-to-get-previously-unlisted-e-mai…
bks · 2018-09-15
If you are looking for a straightforward way to protect users from phishing, consider rewriting the URLS in their messages and check their clicks in real time against databases of phishing feeds.
You can check against - Google Safe Browser, Phishtank and other free phishing feeds if you don't have the money for real-time databases or proactive site scrapers.
This is one of the ways that we protect the end user from Phishing at https://www.phishprotection.com - part of the magic is to do a bunch of sanitization before accepting the message including strict SPF, DKIM, DMARC validation / virus protection at the edge / and watching the registration of SSL certificates for commonly exploited domains https://blog.0day.rocks/catching-phishing-using-certstream-97177f0d499…
If anyone is interested we rewrite URLs to match your domain name - something like linkcheck.yourdomain.com (protected by LetsEncrypt) and if you ever decide to leave you can export out the re-written URLs and redirect your domain to your own servers.
If you'd like to give it a try, feel free to let me know.