Cloud-Buster: A Cloudflare Resolver

cloudflare-resolver

A security tool that aims at doing the following

• Check if domains or ips are part of the CloudFlare network
• Scan domains for know vulnerabilities that allow finding ip
• Dictionary scan subdomains to find ips outside of CF network

Download

Requirement

• Python 3.5
• dnspython3 1.14.0
• libssl
• openssl

sudo apt-get install python3 python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git

Use

python3 bust -h

• Run the fast/simple scan
  python3 bust mydomain.com
• Run the slow/comprehensive scanpython3 bust mydomain.com –scan mx crimeflare dnsdumpster subdomain –dept normal
• Scan multiple domains
  python3 bust domainlist.txt (with any options)
• Use a single scan technique
  python3 bust mydomain.com –scan crimeflare
• Chose your own mix of scan techniques
  python3 bust mydomain.com –scan subdomain mx
• Scan specific subdomains
  python3 bust mydomain.com –scan subdomain –sub www www2 ftp direct
• Scan the 20,000 most popular subdomains on the net
  python3 bust mydomain.com –dept full

CrimeFlare DB is updated every two weeks, the GitHub repo might not be up to date with the latest list. You should use the update tool to get the latest lists.

Author: @SageHack

Source: https://github.com/SageHack/

Also Read:  Novahot v1.1.0 Releases: A Webshell Framework for Penetration Testers