Out of Character Use of Punycode and Homoglyph Attacks to Obfuscate URLs for Phishing
Offered By: YouTube
Course Description
Overview
Learn about advanced phishing techniques using punycode and homoglyph attacks in this 38-minute conference talk from AIDE 2012. Explore classic URL obfuscation methods, homographs, and the challenges posed by ASCII-based DNS. Discover likely sources for homoglyphs, examine a homoglyph attack generator demo, and understand browser and registrar protections. Investigate canonicalization errors, name spoofing, right-to-left text manipulation, and file name vulnerabilities. Gain insights into useful resources and references for further study on URL obfuscation and phishing prevention.
Syllabus
Intro
Classic Phishing Obfuscations
Homographs
Problem: DNS is ASCII
Likely Sources for Homoglyphs
Slashes?
Homoglyph Attack Generator Demo
Protections Implemented by Browsers
Defenses by Registrar
Approach
Test Strings
Facebook
Canonicalization Errors?
Name Spoofing
Right to left?
What about file names?
Useful Sites
References
Related Courses
Computer SecurityStanford University via Coursera Cryptography II
Stanford University via Coursera Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera Building an Information Risk Management Toolkit
University of Washington via Coursera Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network