Git Product home page Git Product logo

cloud-buster's Introduction

Cloudflare Resolver

Build Status

A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks.

It's filled with awesome features!

  • scan a wide array of miss-configuration and vulnerabilities
  • search other IP resolution service databases
  • detail origin and related services IPs
  • smart engine that certify matches
  • multiple command line arguments to customize and fine tune
  • support target list for automated scans

Screenshot

Warning

I have left the hacking scene and thus, archived this project. It's still awesome and you can still use it and fork it.

Requirements

Usage

Basic use cases

  • Simple (fast) scan: python3 bust mydomain.com
  • Comprehensive (slow) scan: python3 bust mydomain.com --scan mx crimeflare dnsdumpster subdomain --dept normal
  • Scan multiple domains: python3 bust domainlist.txt (with any options)

Complex use cases

  • Use a single scan technique: python3 bust mydomain.com --scan crimeflare
  • Chose your own mix of scan techniques: python3 bust mydomain.com --scan subdomain mx
  • Specific subdomains: python3 bust mydomain.com --scan subdomain --sub www www2 ftp direct
  • Scan the 20,000 most popular subdomains on the net: python3 bust mydomain.com --dept full

Using domain lists

Use a text file with one domain per line, nothing else

Installation

Ubuntu

sudo apt-get install python3 python3-pip
pip3 install dnspython3 bs4
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Debian 9

su
apt install python3-pip
pip3 install dnspython3 bs4
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Debian 8

su root
apt-get remove python3
apt-get autoremove
apt-get update
apt-get install libssl-dev openssl
cd /opt
wget https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
tar xzf Python-3.4.3.tgz
cd Python-3.4.3
./configure
make
sudo make install
rm *.tgz
rm -fr Python-3.4.3/
ln -s /usr/local/bin/python3 /usr/bin/python3
pip3 install dnspython3 bs4
# Open new terminal window
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Void

xbps-install python3 python-pip
pip install dnspython3 bs3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Arch and Parabola

pacman -Sy python python-pip
pip install dnspython3 bs3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Contributing

The current tested version is Python 3.5.3. Please use this version to submit pull requests.

Otherwise, all other requirements are listed above.

cloud-buster's People

Contributors

mhajder avatar nil0x42 avatar ryanking13 avatar saatanaperkele avatar sagehack avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.