π Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
β2,940May 1, 2025Updated 10 months ago
Alternatives and similar repositories for CloudFlair
Users that are interested in CloudFlair are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare networkβ2,532Mar 26, 2024Updated 2 years ago
- HTTP parameter discovery suite.β6,154Feb 20, 2025Updated last year
- Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies foβ¦β1,275Sep 5, 2022Updated 3 years ago
- CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websitesβ¦β1,543Sep 1, 2023Updated 2 years ago
- A python script that finds endpoints in JavaScript filesβ4,309Apr 13, 2024Updated last year
- NordVPN Threat Protection Proβ’ β’ AdTake your cybersecurity to the next level. Block phishing, malware, trackers, and ads. Lightweight app that works with all browsers.
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.β6,124Aug 14, 2024Updated last year
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!β1,065Updated this week
- "Can I take over XYZ?" β a list of services and how to claim (sub)domains with dangling DNS records.β5,605Feb 8, 2025Updated last year
- Automatic SSRF fuzzer and exploitation toolβ3,515Sep 4, 2025Updated 6 months ago
- Cloudflare, Sucuri, Incapsula real IP tracker.β1,772Jul 25, 2023Updated 2 years ago
- A Tool for Domain Flyoversβ5,916May 22, 2022Updated 3 years ago
- The fastest and complete solution for domain recognition. Supports screenshoting, port scan, HTTP check, data import from other tools, suβ¦β3,708Mar 21, 2026Updated last week
- Fetch known URLs from AlienVault's Open Threat Exchange, the Wayback Machine, and Common Crawl.β4,860Mar 20, 2026Updated last week
- Scan for misconfigured S3 buckets across S3-compatible APIs!β3,031Dec 11, 2025Updated 3 months ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- SSRF (Server Side Request Forgery) testing resourcesβ2,482Oct 12, 2024Updated last year
- Fetch all the URLs that the Wayback Machine knows about for a domainβ4,364May 1, 2024Updated last year
- DNS Takeover tool written in Goβ2,034Mar 16, 2026Updated 2 weeks ago
- ππ¦ Dalfox is a powerful open-source XSS scanner and utility focused on automation.β4,884Mar 22, 2026Updated last week
- Generates permutations, alterations and mutations of subdomains and then resolves themβ2,476Jan 9, 2025Updated last year
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findinβ¦β7,371Mar 20, 2026Updated last week
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!β2,574Mar 8, 2026Updated 3 weeks ago
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entβ¦β2,146Feb 23, 2026Updated last month
- Rockyou for web fuzzingβ3,099Mar 11, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways β’ AdManaged hosting with the flexibility to host WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Cloudways by DigitalOcean.
- Hidden parameters discovery suiteβ2,038Sep 8, 2024Updated last year
- IP lookup by favicon using Shodanβ1,193Feb 5, 2025Updated last year
- Everything about Web Application Firewalls (WAFs) from Security Standpoint! π₯β7,401Updated this week
- GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grepβ1,412Sep 13, 2024Updated last year
- Try to find the origin IP of a webapp protected by Cloudflare.β358Aug 8, 2024Updated last year
- β‘ Perform subdomain enumeration using the certificate transparency logs from Censys.β838May 1, 2025Updated 10 months ago
- Fast passive subdomain enumeration tool.β13,323Updated this week
- Automation for javascript recon in bug bounty.β1,073Sep 9, 2023Updated 2 years ago
- A toolkit for testing, tweaking and cracking JSON Web Tokensβ6,453May 1, 2025Updated 10 months ago
- Wordpress hosting with auto-scaling on Cloudways β’ AdFully Managed hosting built for WordPress-powered businesses that need reliable, auto-scalable hosting. Cloudways SafeUpdates now available.
- Simple, fast web crawler designed for easy, quick discovery of endpoints and assets within a web applicationβ5,015Dec 21, 2024Updated last year
- Server-Side Template Injection and Code Injection Detection and Exploitation Toolβ4,131Apr 21, 2024Updated last year
- The dynamic infrastructure framework for everybody! Distribute the workload of many different scanning tools with ease, including nmap, fβ¦β4,363Sep 30, 2024Updated last year
- A repository with 3 tools for pwn'ing websites with .git repositories availableβ4,132Jun 14, 2023Updated 2 years ago
- Smuggler - An HTTP Request Smuggling / Desync testing tool written in Python 3β2,068Jan 2, 2024Updated 2 years ago
- Fetches javascript file from a list of URLS or subdomains.β839Jul 22, 2025Updated 8 months ago
- This repo contains hourly-updated data dumps of bug bounty platform scopes (like Hackerone/Bugcrowd/Intigriti/etc) that are eligible for β¦β3,675Updated this week