Detect domains that attackers could register to exploit single-bit memory errors during DNS lookups
What is bitsquatting?
Bitsquatting exploits random single-bit errors in computer memory (caused by cosmic rays, heat,
voltage fluctuations, or faulty RAM). When a program resolves a domain name like microsoft.com,
the ASCII characters are stored in memory. A single bit-flip can silently change a character —
for example, m (01101101) could become l (01101100) if bit 0 flips —
causing the computer to contact licrosoft.com instead.
An attacker who registers these bit-flipped domains can intercept traffic, serve malware, or steal credentials
without any user interaction. This tool generates all valid single-bit-flip variants of a domain and checks
whether any have been registered.