cloud-buster: A Cloudflare resolver

Cloudflare Resolver

A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks.

It’s filled with awesome features!

• scan a wide array of miss-configuration and vulnerabilities
• search other IP resolution service databases
• detail origin and related services IPs
• a smart engine that certifies matches
• multiple command line arguments to customize and fine tune
• support target list for automated scans
• still maintained and improved

Download

Requirement

• Python 3.5
• dnspython3 1.14.0
• libssl
• openssl

sudo apt-get install python3 python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git

Use

python3 bust -h

• Run the fast/simple scan
  python3 bust mydomain.com
• Run the slow/comprehensive scanpython3 bust mydomain.com –scan mx crimeflare dnsdumpster subdomain –dept normal
• Scan multiple domains
  python3 bust domainlist.txt (with any options)
• Use a single scan technique
  python3 bust mydomain.com –scan crimeflare
• Chose your own mix of scan techniques
  python3 bust mydomain.com –scan subdomain mx
• Scan specific subdomains
  python3 bust mydomain.com –scan subdomain –sub www www2 ftp direct
• Scan the 20,000 most popular subdomains on the net
  python3 bust mydomain.com –dept full

Author: @SageHack

Source: https://github.com/SageHack/