Search for categorized domain that can be used during red teaming engagement. Perfect to setup whitelisted domain for your Cobalt Strike beacon C&C.
It relies on expireddomains.net to obtain a list of expired domains. The domain availability is validated using checkdomain.com
$ python CatMyFish.py
CatMyFish v1.0 - Search for available already categorized domain
Charles F. Hamilton - Mandiant 2016
Usage CatMyFish.py keyword
Options:
-verbose More verbose output
-exitone Stop querying BlueCoat after first success
-filename Pull list from a file (-filename=path)
$ python CatMyFish.py sugar
CatMyFish v1.0 - Search for available already categorized domain
Charles F. Hamilton - Mandiant 2016
[+] (25) domains found using the keyword "sugar".
[+] BlueCoat categorization check may take several minutes. Bot check is pretty aggressive...
[+] Potential candidate: SugarNines.com categorized as Personal Sites.
[+] Potential candidate: CreativeSugarFlowers.com categorized as Restaurants/Dining/Food.
[+] Potential candidate: mysugargrove.com categorized as Society/Daily Living.
[+] Potential candidate: SugarTreeScrapbook.com categorized as Society/Daily Living.
[+] Potential candidate: SugarlandMania.com categorized as Entertainment.
[+] Potential candidate: SugarTreeProperties.com categorized as Real Estate.
[+] Potential candidate: BloodSugarTips.com categorized as Health.
[+] Potential candidate: SugarmillWoodsNews.com categorized as Real Estate.
[+] (8) candidates found.
[+] Awesome "SugarNines.com" is categorized and available.
[+] Awesome "CreativeSugarFlowers.com" is categorized and available.
[+] Awesome "mysugargrove.com" is categorized and available.
[+] Awesome "SugarTreeScrapbook.com" is categorized and available.
[+] Awesome "SugarlandMania.com" is categorized and available.
[+] Awesome "SugarTreeProperties.com" is categorized and available.
[+] Awesome "BloodSugarTips.com" is categorized and available.
[+] Awesome "SugarmillWoodsNews.com" is categorized and available.
[+] Search completed.
the BlueCoat categorization search is slow to avoid captcha.
Categorization check against other vendors. Populate the blacklisted categories
Charles F. Hamilton Aka Mr.Un1k0d3r RingZer0 Team