Testing Unicode Homoglyphs

[Μorfir]

Just wanted to see if it works on the forums systems for making a name that looks like

аardwοlf/Darren Κitchen

http://www.irongeek.com/homoglyph-attack-generator.php

[Μorfir]

Well, I guess it does not show the username, so I guess it's not that impressive on this forum system. Still, nice to test and I could use unicode in my login name.

[Μorfir]

You don't necessary have to register the domain name to do it, you could just have the fakeout be part of a subdomain (you just need to control your own DNS).

Not sure if this will get parsed right on the forums:

Unicode URL to give out: 127.0.0.1／windows／system32／.irongeek.com

Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-um81ghai.irongeek.com

Unicode URL to give out: 127.0.0.1⁄windows⁄system32⁄.irongeek.com

Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-436ihai.irongeek.com

Unicode URL to give out: 127.0.0.1∕windows∕system32∕.irongeek.com

Encoded lable to set up in DNS: 127.0.0.xn--1windowssystem32-zk3jhai.irongeek.com

Unicode URL to give out: 127.0.0.1̸windows̸system32̸.irongeek.com

Encoded lable to set up in DNS: 127.0.0.xn--1windowSsystem32-dxjhi.irongeek.com

and even if it did, notice what the url bar shows you. It seems Web Browsers have mostly gotten wise to it, so I'm looking for other applications like usernames.

Thanks.

[Μorfir]

Ok, it looks like the forum soft ware does not autolink those, so try coping ad pasting. The top one most likely will not work.

[Μorfir]

Just to break the trust model by looking like someone I am not. Most system only let one user have a given use name, which was why I tried to set up an account here that would look like Daren's. I need to try it with email systems.

[Infiltrator]

I wonder if it would be possible to edit your "Member Title" to say something like admin or global mod. I'll check it out when I get home.

Yeah I don't think that would be possible though, unless there is a bug in the forums software, only the forum administrators can change your "Member title", to administrators or moderators.

Nice try though.

[Μorfir]

Not sure what you mean by only works with DNS. Granted, it has limited uses I suppose. I don't see an option for setting your own member title, so can't test that. I does seem the system only lets one person use a given display name. The forum would not let me use "Morfir" since it was take by you, but it would let me use "Μorfir".

[Infiltrator]

Actually you can change your member title to Moderator or Forum Admin or whatever... But that doesnt help you. You need to be able to edit groups not member title. My bad.

Yeah you can only change your member title, not your group status.

Changing your member title is not hard at all, you need to go into your account settings and then profile. In the profile session, there should be a field called change member title or something similar.