π Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
β2,942May 1, 2025Updated 11 months ago
Alternatives and similar repositories for CloudFlair
Users that are interested in CloudFlair are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare networkβ2,529Mar 26, 2024Updated 2 years ago
- HTTP parameter discovery suite.β6,190Feb 20, 2025Updated last year
- Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies foβ¦β1,276Sep 5, 2022Updated 3 years ago
- CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websitesβ¦β1,552Sep 1, 2023Updated 2 years ago
- A python script that finds endpoints in JavaScript filesβ4,324Apr 13, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available β’ AdRun AI, ML, and HPC workloads on powerful cloud GPUsβwithout limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,153Aug 14, 2024Updated last year
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!β1,074Mar 24, 2026Updated 3 weeks ago
- "Can I take over XYZ?" β a list of services and how to claim (sub)domains with dangling DNS records.β5,624Feb 8, 2025Updated last year
- Automatic SSRF fuzzer and exploitation toolβ3,528Sep 4, 2025Updated 7 months ago
- Cloudflare, Sucuri, Incapsula real IP tracker.β1,777Jul 25, 2023Updated 2 years ago
- A Tool for Domain Flyoversβ5,923May 22, 2022Updated 3 years ago
- The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, suβ¦β3,720Updated this week
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β4,883Mar 20, 2026Updated 3 weeks ago
- Scan for misconfigured S3 buckets across S3-compatible APIs!β3,050Dec 11, 2025Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting β’ AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- SSRF (Server Side Request Forgery) testing resourcesβ2,485Oct 12, 2024Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,394May 1, 2024Updated last year
- DNS Takeover tool written in Goβ2,046Mar 16, 2026Updated last month
- Generates permutations, alterations and mutations of subdomains and then resolves themβ2,483Jan 9, 2025Updated last year
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,444Apr 10, 2026Updated last week
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β4,929Apr 11, 2026Updated last week
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entβ¦β2,154Feb 23, 2026Updated last month
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,600Mar 8, 2026Updated last month
- Rockyou for web fuzzingβ3,121Mar 11, 2026Updated last month
- Serverless GPU API endpoints on Runpod - Bonus Credits β’ AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Hidden parameters discovery suiteβ2,047Sep 8, 2024Updated last year
- IP lookup by favicon using Shodanβ1,197Feb 5, 2025Updated last year
- Everything about Web Application Firewalls (WAFs) from Security Standpoint! π₯β7,446Mar 26, 2026Updated 3 weeks ago
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,418Sep 13, 2024Updated last year
- Try to find the origin IP of a webapp protected by Cloudflare.β358Aug 8, 2024Updated last year
- β‘ Perform subdomain enumeration using the certificate transparency logs from Censys.β838May 1, 2025Updated 11 months ago
- Fast passive subdomain enumeration tool.β13,404Apr 8, 2026Updated last week
- A toolkit for testing, tweaking and cracking JSON Web Tokensβ6,483May 1, 2025Updated 11 months ago
- Automation for javascript recon in bug bounty.β1,081Sep 9, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,031Dec 21, 2024Updated last year
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, fβ¦β4,367Sep 30, 2024Updated last year
- Server-Side Template Injection and Code Injection Detection and Exploitation Toolβ4,140Apr 21, 2024Updated last year
- A repository with 3 tools for pwn'ing websites with .git repositories availableβ4,132Jun 14, 2023Updated 2 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3β2,069Jan 2, 2024Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.β839Jul 22, 2025Updated 8 months ago
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for β¦β3,698Updated this week