Jump to content

Μorfir

Active Members
 View Profile  See their activity

  • Posts

    6

  • Joined

  • Last visited

 Content Type 

Posts posted by Μorfir

    Testing Unicode Homoglyphs

    in Security

    Posted

    Not sure what you mean by only works with DNS. Granted, it has limited uses I suppose. I don't see an option for setting your own member title, so can't test that. I does seem the system only lets one person use a given display name. The forum would not let me use "Morfir" since it was take by you, but it would let me use "Μorfir".

    Testing Unicode Homoglyphs

    in Security

    Posted

    Just to break the trust model by looking like someone I am not. Most system only let one user have a given use name, which was why I tried to set up an account here that would look like Daren's. I need to try it with email systems.

    Testing Unicode Homoglyphs

    in Security

    Posted

    You don't necessary have to register the domain name to do it, you could just have the fakeout be part of a subdomain (you just need to control your own DNS).

    Not sure if this will get parsed right on the forums:

    Unicode URL to give out: 127.0.0.1／windows／system32／.irongeek.com

    Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-um81ghai.irongeek.com

    Unicode URL to give out: 127.0.0.1⁄windows⁄system32⁄.irongeek.com

    Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-436ihai.irongeek.com

    Unicode URL to give out: 127.0.0.1∕windows∕system32∕.irongeek.com

    Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-zk3jhai.irongeek.com

    Unicode URL to give out: 127.0.0.1̸windows̸system32̸.irongeek.com

    Encoded lable to set up in DNS: 127.0.0.xn--1windowSsystem32-dxjhi.irongeek.com

    and even if it did, notice what the url bar shows you. It seems Web Browsers have mostly gotten wise to it, so I'm looking for other applications like usernames.

    Thanks.

×
×
  • Create New...