dwisiswant0/cf-check

Stars
222
Rank 179,123 (Top 4 %)
Language
Go
License
Apache License 2.0
Created over 4 years ago
Updated 6 months ago

dwisiswant0/cf-check

dwisiswant0

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

CloudFlare Checker written in Go

cf-check

Check an Host is Owned by CloudFlare.

Install

Grab from releases page, or
If you have Go1.18+ compiler installed & configured:

$ go install github.com/dwisiswant0/cf-check@latest

Usage

$ echo "uber.com" | cf-check
34.98.127.226

or

$ cf-check -d <FILE>

Flags

$ cf-check -h
Usage of cf-check:
  -c int
        Set the concurrency level (default: 20)
  -cf
        Show CloudFlare only
  -d    Print domains instead of IP addresses

Workaround

The goal is that you don't need to do a port scan if it's proven that the IP is owned by Cloudflare.

$ subfinder -silent -d uber.com | filter-resolved | cf-check -d | anew | naabu -silent -verify | httpx -silent

License

cf-check is distributed under Apache License 2.0.

apkleaks

Scanning APK file for URIs, endpoints & secrets.

awesome-oneliner-bugbounty

A collection of awesome one-liner scripts especially for bug bounty tips.

crlfuzz

A fast tool to scan CRLF vulnerability written in Go

go-dork

The fastest dork scanner written in Go.

findom-xss

A fast DOM based XSS vulnerability scanner with simplicity.

ppfuzz

A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀

gf-secrets

Secret and/or credential patterns used for gf.

galer

A fast tool to fetch URLs from HTML attributes by crawl-in.

go-stare

A fast & light web screenshot without headless browser but Chrome DevTools Protocol!

proxylogscan

A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855).

unew

A tool for append URLs, skipping duplicates/paths & combine parameters.

slackcat

A simple way of sending messages from the CLI output to your Slack with webhook.

ngocok

ngrok Collaborator Link — yet another Burp Collaborator alternative for free with ngrok.

tlder

TLDs finder — check domain name availability across all valid top-level domains.

noizy

A drop-in replacement to Apple Hearing - Background Sounds with over 30+ available sounds.

wadl-dumper

Dump all available paths and/or endpoints on WADL file.

chatgptui

ChatGPT 🤖 with Textual User Interface (TUI) mode written in Go.

ipfuscator

A blazing-fast, thread-safe, straightforward and zero memory allocations tool to swiftly generate alternative IP(v4) address representations in Go.

hinject

Host Header Injection Checker

unch

Hides message with invisible Unicode characters

cve-2023-50164-poc

Proof of Concept for Path Traversal in Apache Struts ("CVE-2023-50164")

bounty-targets-alert

It's an watcher for new scopes added to bounty-targets-data and send you alert to Slack.

continuous-nuclei

Running nuclei Continuously

stargather

A fast GitHub stargazers information gathering tool

nuclei-templates-dir

Nuclei Templates Directory

look4jar

Looking for JAR files that are vulnerable to Log4j RCE (CVE‐2021‐44228)?

secpat2gf

convert secret patterns to gf compatible.

discat

A simple way of sending messages from the CLI output to your Discord channel with webhook.

nodep

A tool for check available dependency packages across npmjs, PyPI or RubyGems registry.

cekBin

Free source to check, verify & validate BIN (Bank Identification Number), credit, debit, charge or a prepaid card.

gD0rk

Google Hack Database dork automatic tool.

WiFiID

@wifi.id Account Extractor & Checker

osscope

A curated GitHub repository that's in-scope and eligible for bounty.

BitslerBOT

Automatically Betting for Bitsler.com

gollina

Follina MS-MSDT 0-day MS Office RCE (CVE-2022-30190) PoC in Go

huntr-hacktivity

huntr.dev public disclosures/hacktivity watcher

Faucet-DOGE-Bot

Get faucet DOGE coin every minutes

croter

A faster way to bruteforce IEEE 802.11 WEP & WPA-PSK key with simplicity written in Go

siml

siml is a CLI tool for discovering similar, related to, competitive, or alternative options to a given site.

leakz-passive-workflow

Caido's passive workflow to find potential leaked secrets, PII, and sensitive fields.

cox

Cox is bluemonday-wrapper to perform a deep-clean and/or sanitization of (nested-)interfaces from HTML to prevent XSS payloads.

shloop

Want to execute command repeatedly without workache? Here is shloop born for it!

CVE-2020-5902

slacksh

Interactivity with *nix shell system flexibly via Slack slash commands.

S3-Downloader

AWS S3 Downloader

indodax-notify

Get newest cryptocurrency coin price notifications from Indodax market on your desktop!

yt-dl

YouTube Download

increment-commit-hash

Auto replaces commit hash prefix incrementally with lucky-commit by hooking post-commit.

cwa-filter-rules

Updated common web attack threat dataset

CVE-2020-24148

CVE-2020-24148 Proof-of-Concept

ghostify-crack

A crack 💥 version of Ghostify, that helps you view Instagram stories without a trace (the story owner won't know you saw their story!)

advisory

My advisories (backlog)

CVE-2020-9496

rotatemyass

An HideMyAss wrapper as IP proxy rotating

xiaomi-backup

Xiaomi Backup Applications

Teleslack

Posting Public Telegram Channel Messages to Slack Channel

unmountpoint

Go library to wait for the detached/unmounted state of a path.

cpenum

A fast tool for cPanel user enumeration

CVE-2018-7600

PoC for CVE-2018-7600 Drupal SA-CORE-2018-002 (Drupalgeddon 2).

prepare-commit-msg-ai

Prepare Git Commit Message with AI: Write commit message based on code changes with AI.

nuclei-confuser

This repository gathers matchers from Nuclei templates designed to fool the Nuclei scanner.

foaas-discord

FOaaS Discord BOT integration to telling people to fuck off!

SpoonBOT

Spoon Cast BOT Tools

cloe

CL.0 ee! Client-side desync fuzzing [WIP]

never-gonna-give-u-up

gologger-backtracer

An gologger (by ProjectDiscovery) wrapper to display backtrace

bash_recon

slack-boti

PHP Webhook for Slack BOT Interactivity with Slash Commands

codeql-javascript-unsafe-jquery-plugin

ibin

[WIP] Ignore binaries

Omnibus

shitclone

Recursively repository cloning & do something inside that shit

docker-slim-action

dwisiswant0

linkedin-jobs-bot

LinkedIn Jobs -> Discord Webhook