Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.
☆2,286Jan 6, 2026Updated 10 months ago
Alternatives and similar repositories for CloakQuest3r
Users that are interested in CloakQuest3r are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Security testing tool for analyzing HTTP 403 responses and identifying access control misconfigurations in web applications.☆187Jan 6, 2026Updated 10 months ago
- Tool designed for fetching, validating, and storing working proxies.☆268Nov 20, 2025Updated 11 months ago
- Omnisci3nt is an open-source web reconnaissance and intelligence tool for extracting deep technical insights from domains, including subd…☆382Jun 15, 2026Updated 4 months ago
- Open-source URL masking & analysis tool for security research, phishing awareness, and defensive testing. Demonstrates adversary techniqu…☆545Jan 6, 2026Updated 10 months ago
- NucleiFuzzer is a robust automation tool that efficiently detects web application vulnerabilities, including XSS, SQLi, SSRF, and Open Re…☆1,867Apr 17, 2026Updated 6 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws☆4,088Oct 4, 2025Updated last year
- Track the GPS location of the user's smartphone or PC and capture a picture of the target, along with IP and device information.☆1,686Jan 6, 2026Updated 10 months ago
- Subprober is a powerful and efficient subdomain scanning tool written in Python. With the ability to handle large lists of subdomains. Th…☆269May 17, 2026Updated 5 months ago
- LEAKEY is a bash script which checks and validates for leaked credentials. The idea behind LEAKEY is to make it highly customizable and e…☆381Dec 5, 2023Updated 2 years ago
- SubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty☆812Oct 7, 2026Updated last month
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,108Aug 5, 2026Updated 3 months ago
- The recursive internet scanner for hackers. 🧡☆10,996Updated this week
- An automation tool that enumerates subdomains then filters out xss, sqli, open redirect, lfi, ssrf and rce parameters and then scans for …☆1,296Jul 18, 2024Updated 2 years ago
- SploitScan is a sophisticated cybersecurity utility designed to provide detailed information on vulnerabilities and associated exploits.☆1,436Updated this week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This map lists the essential techniques to bypass anti-virus and EDR☆3,483Mar 28, 2025Updated last year
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan, VirusTotal, GhostArchive & Intelligence X!☆2,789Jun 11, 2026Updated 4 months ago
- reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and findin…☆8,338Updated this week
- CrimeFlare is a useful tool for bypassing websites protected by CloudFlare WAF, with this tool you can easily see the real IP of websites…☆1,579Sep 1, 2023Updated 3 years ago
- Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality …☆703May 10, 2025Updated last year
- CF-Hero is a reconnaissance tool that uses multiple data sources to discover the origin IP addresses of Cloudflare-protected web applicat…☆2,652Jun 26, 2026Updated 4 months ago
- AllForOne allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories,☆747Mar 21, 2024Updated 2 years ago
- The Network Execution Tool☆5,978Updated this week
- PhantomCrawler is a Python-based web testing and research tool that simulates website interactions from multiple proxy IP addresses to an…☆82Jan 6, 2026Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- HTTP 403 bypass tool☆626Mar 16, 2024Updated 2 years ago
- 403/401 bypass tool: finds HTTP access-control bypasses via path, method, header and raw-request mutations. Baseline diff, auto-calibrati…☆1,915Oct 30, 2026Updated last week
- Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers☆311Mar 31, 2024Updated 2 years ago
- Modern CLI for exploring vulnerability data with powerful search, filtering, and analysis capabilities.☆2,734Updated this week
- A simple tool for bypassing file upload restrictions.☆908Jul 22, 2024Updated 2 years ago
- Burp Plugin to Bypass WAFs through the insertion of Junk Data☆1,523Jul 14, 2025Updated last year
- Cloudflare, Sucuri, Incapsula real IP tracker.☆1,785Jul 25, 2023Updated 3 years ago
- A simple script just made for self use for bypassing 403☆2,272May 30, 2024Updated 2 years ago
- This repository contain a lot of web and api vulnerability checklist , a lot of vulnerability ideas and tips from twitter☆3,659Feb 10, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,971May 22, 2024Updated 2 years ago
- Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules…☆6,193Jul 12, 2024Updated 2 years ago
- A rapid HTTP downgrade smuggling scanner written in Go.☆312May 16, 2024Updated 2 years ago
- A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.☆802Jan 9, 2025Updated last year
- A fast WordPress plugin enumeration tool☆972Oct 26, 2026Updated last week
- Real-world infosec wordlists, updated regularly☆1,804Oct 16, 2026Updated 3 weeks ago
- Quickly discover exposed hosts on the internet using multiple search engines.☆3,104Updated this week