← All tool guides

dnstwist

Auto-generated by Q-Branch Armory audit on 2026-10-12.

Overview

Domain name permutation engine for detecting typosquatting, phishing and brand impersonation

Classification

**Category:** Phishing attack tools

**Armory status:** Installed (dnstwist)

**Q-Branch check:** Ready — binary found in PATH

**Present on VPS3:** yes

**Installed flag:** yes

**Primary binary:** `dnstwist`

**Binary in PATH:** yes

**Resolved path:** `/usr/local/bin/tengu-armory-dnstwist`

Prerequisites

docker

go

java

root

ruby

wifi

Install

pip3 install --user dnstwist

Run

dnstwist --help

Operator notes

Launch from the [Digital Armory](/pentest/armory/) — do not maintain parallel tool lists in Q-Branch.

If the Q-Branch check is not **Ready**, run install steps or update the HackingTool manifest before relying on this tool in an engagement.

For authorized TenguProtect red-team work only.

Reference

https://github.com/elceef/dnstwist