π Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
β2,963May 1, 2025Updated last year
Alternatives and similar repositories for CloudFlair
Users that are interested in CloudFlair are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare networkβ2,659Mar 26, 2024Updated 2 years ago
- HTTP parameter discovery suite.β6,359Feb 20, 2025Updated last year
- Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies foβ¦β1,298Sep 5, 2022Updated 3 years ago
- CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websitesβ¦β1,573Sep 1, 2023Updated 2 years ago
- A python script that finds endpoints in JavaScript filesβ4,426Apr 13, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean β’ AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,290Aug 14, 2024Updated last year
- "Can I take over XYZ?" β a list of services and how to claim (sub)domains with dangling DNS records.β5,756Feb 8, 2025Updated last year
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!β1,091Mar 24, 2026Updated 3 months ago
- Automatic SSRF fuzzer and exploitation toolβ3,594Sep 4, 2025Updated 10 months ago
- Cloudflare, Sucuri, Incapsula real IP tracker.β1,783Jul 25, 2023Updated 2 years ago
- A Tool for Domain Flyoversβ5,956May 22, 2022Updated 4 years ago
- The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, suβ¦β3,774May 6, 2026Updated 2 months ago
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β5,044Mar 20, 2026Updated 4 months ago
- Scan for misconfigured S3 buckets across S3-compatible APIs!β3,160Updated this week
- Managed Kubernetes at scale on DigitalOcean β’ AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- SSRF (Server Side Request Forgery) testing resourcesβ2,508Oct 12, 2024Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,519May 1, 2024Updated 2 years ago
- DNS Takeover tool written in Goβ2,102Jul 3, 2026Updated 2 weeks ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,868Jun 29, 2026Updated 3 weeks ago
- Generates permutations, alterations and mutations of subdomains and then resolves themβ2,504Jan 9, 2025Updated last year
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β5,152Updated this week
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entβ¦β2,221Feb 23, 2026Updated 4 months ago
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,698Jun 11, 2026Updated last month
- Hidden parameters discovery suiteβ2,085Sep 8, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer β’ AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Rockyou for web fuzzingβ3,199Mar 11, 2026Updated 4 months ago
- IP lookup by favicon using Shodanβ1,200Feb 5, 2025Updated last year
- Everything about Web Application Firewalls (WAFs) from Security Standpoint! π₯β7,557Mar 26, 2026Updated 3 months ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,443Sep 13, 2024Updated last year
- Try to find the origin IP of a webapp protected by Cloudflare.β359Aug 8, 2024Updated last year
- β‘ Perform subdomain enumeration using the certificate transparency logs from Censys.β842May 1, 2025Updated last year
- A toolkit for testing, tweaking and cracking JSON Web Tokensβ6,712May 1, 2025Updated last year
- Fast passive subdomain enumeration tool.β14,045Jul 10, 2026Updated last week
- Fetches javascript file from a list of URLS or subdomains.β859Jul 22, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer β’ AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, fβ¦β4,407Sep 30, 2024Updated last year
- A repository with 3 tools for pwn'ing websites with .git repositories availableβ4,162Updated this week
- Automation for javascript recon in bug bounty.β1,103Sep 9, 2023Updated 2 years ago
- Server-Side Template Injection and Code Injection Detection and Exploitation Toolβ4,190Apr 21, 2024Updated 2 years ago
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,095Dec 21, 2024Updated last year
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for β¦β3,859Updated this week
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3β2,090Jan 2, 2024Updated 2 years ago