🎄 Join our Annual Holiday wargame and win prizes!


Homograph Attack

Homograph attack happen characters from different scripts or alphabets that look similar to characters in another script are used to deceive users or systems. For instance, using Cyrillic characters that resemble Latin characters to create a domain name that looks legitimate but directs users to a malicious site. Homograph attack is a subset of Visual spoofing vulnerability.

Remediation

Use Punycode to represent Unicode characters using ASCII characters. This can assist users in detecting deceptive attempts.

Metadata

  • Severity: low
  • Slug: homograph-attack

CWEs

  • 1007: Insufficient Visual Distinction of Homoglyphs Presented to User
  • 290: Authentication Bypass by Spoofing

Available Labs

Open Csharp labs in SecDim Play for this vulnerability.

Deco line
Deco line

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

Deco line
Deco line

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.

Read more