CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applications
☆2,641Jun 26, 2026Updated 4 months ago
Alternatives and similar repositories for CF-Hero
Users that are interested in CF-Hero are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A fast WordPress plugin enumeration tool☆971Oct 26, 2026Updated last week
- Abuse trust-boundaries to bypass firewalls and network controls☆434Jul 10, 2026Updated 3 months ago
- Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy servi…☆2,283Jan 6, 2026Updated 9 months ago
- A tool that helps you find the real IP addresses hiding behind Cloudflare.☆654Jul 6, 2026Updated 3 months ago
- Header Exploitation HTTP☆765Sep 6, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- AI-powered ffuf wrapper☆812Dec 4, 2025Updated 10 months ago
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,915Updated this week
- Hunt every Endpoint in your code, expose Shadow APIs, map the Attack Surface.☆1,464Updated this week
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,087Oct 4, 2025Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,786Jun 11, 2026Updated 4 months ago
- The recursive internet scanner for hackers. 🧡☆10,907Updated this week
- best tool for finding SQLi,CRLF,XSS,LFi,OpenRedirect☆1,618Dec 7, 2025Updated 10 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,814Updated this week
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆1,523Jul 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Cybersecurity AI (CAI), the framework for AI Security☆9,847Aug 22, 2026Updated 2 months ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,316Updated this week
- An HTTP toolkit for security research.☆12,528Jul 21, 2026Updated 3 months ago
- A high-speed tool for passively gathering URLs, optimized for efficient and comprehensive web asset discovery without active scanning.☆920Oct 26, 2026Updated last week
- fuzzuli is a url fuzzing tool that aims to find critical backup files by creating a dynamic wordlist based on the domain.☆946Aug 24, 2023Updated 3 years ago
- An IIS short filename enumeration tool☆1,234Nov 25, 2024Updated last year
- 💀 Generate malicious PDF test files for testing phone-home callbacks, SSRF, XSS, NTLM credential theft, and data exfiltration in PDF vie…☆4,508Oct 17, 2026Updated 2 weeks ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,118Jul 20, 2026Updated 3 months ago
- AI-powered bug bounty hunting toolkit that works with or without subscription.☆5,528Updated this week
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more☆3,811Updated this week
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,109Aug 5, 2026Updated 2 months ago
- The Network Execution Tool☆5,969Updated this week
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,965May 22, 2024Updated 2 years ago
- 8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path tem…☆2,943Oct 20, 2026Updated last week
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…☆32,520Updated this week
- The Havoc Framework☆8,498Dec 18, 2025Updated 10 months ago
- The Distributed Scanning Framework for Everybody! Control Your Infrastructure, Scale Your Scanning-On Your Terms. Easily distribute arbit…☆808Sep 19, 2026Updated last month
- game of active directory☆8,558Oct 23, 2026Updated last week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool for auditing endpoints defined in exposed (Swagger/OpenAPI) definition files.☆881Updated this week
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆845May 16, 2026Updated 5 months ago
- A self-hosted sandbox for red teams to test payloads against modern detection before deployment. MCP integration lets an LLM agent drive …☆1,557May 5, 2026Updated 5 months ago
- REcollapse is a helper tool for black-box regex fuzzing to bypass validations and discover normalizations in web applications☆1,385Aug 7, 2025Updated last year
- Misconfig Mapper is a fast tool to help you uncover security misconfigurations on popular third-party services used by your company and/o…☆910Updated this week
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,862Apr 17, 2026Updated 6 months ago
- This map lists the essential techniques to bypass anti-virus and EDR☆3,483Mar 28, 2025Updated last year