In a recently disclosed analysis, Zafran’s research team has unveiled a pervasive misconfiguration vulnerability affecting some of the world’s largest web application firewall (WAF) vendors, including Akamai, Cloudflare, Fastly, and...
In a detailed analysis, TRAC Labs has exposed a phishing campaign named Gabagool that targets corporate and government employees. The campaign leverages the trusted reputation of Cloudflare’s R2 storage service...
Cloudflare, renowned for its content delivery network (CDN) services, is facing criticism regarding its internet abuse management policies. Spamhaus has voiced concerns over Cloudflare’s approach to handling abuse and strongly...
A team of specialists from World Watch has discovered a new Traffic Distribution System (TDS) closely linked to affiliate marketing and actively used in fraudulent schemes. This system, named R0bl0ch0n...
Cado Security researchers have recently unveiled several campaigns exploiting Cloudflare’s WARP service to attack vulnerable internet-facing services. WARP, a free VPN service designed to optimize user traffic, is being leveraged...
On June 27, 2024, Cloudflare’s popular 1.1.1.1 public DNS resolver service experienced disruptions, leaving a small percentage of users worldwide unable to access the service or facing significant latency issues....
A proof-of-concept (PoC) was disclosed for a severe design flaw (CVE-2023-50387) in Domain Name System Security Extensions (DNSSEC), leaving DNS infrastructures vulnerable to widespread denial-of-service (DoS) attacks. Known as “KeyTrap“,...
CloakQuest3r CloakQuest3r is a powerful Python tool meticulously crafted to uncover the true IP address of websites safeguarded by Cloudflare and other alternatives, a widely adopted web security and performance...
In October 2016, a hacker used the Mirai Internet of Things worm to control millions of Internet of Things devices to launch an attack on the US DNS service provider...
CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by CloudFlare in the hopes of discovering the location of the server. Using Tor...
Web Information Gathering / WebApp PenTest
by do son · Published January 20, 2018 · Last modified May 1, 2024
CloudFlair is a tool to find origin servers of websites protected by CloudFlare who are publicly exposed and don’t restrict network access to the CloudFlare IP ranges as they should....
Web Information Gathering / WebApp PenTest
by do son · Published September 8, 2017 · Last modified November 4, 2024
CloudFire This project focuses on discovering potential IP’s leaking from behind cloud-proxied services, e.g. Cloudflare. Although there are many ways to tackle this task, we are focusing right now on...
Cloudflare Enumeration Tool v1.2 A simple tool to allow easy querying of Cloudflare’s DNS data written in Python. Download Usage Source: https://github.com/mandatoryprogrammer/cloudflare_enum
Web Information Gathering / WebApp PenTest
by do son · Published August 23, 2017 · Last modified November 4, 2024
HatCloud HatCloud builds in Ruby. It makes bypass in CloudFlare to discover real IP. This is useful if you need to test your server and website. Testing your protection against Ddos (Denial of...
Support Securityonline.info site. Thanks!
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
November 19, 2024
