A Cloudflare resolver that works
Branch: master
Clone or download
SageHack Merge pull request #32 from ryanking13/master
Fixing typos on updater.py
Latest commit 7740f8c Oct 17, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
bust Add missing imports Oct 14, 2018
crimeflare Added comment on second filter script Mar 29, 2018
lists Stop ignoring files in here Mar 30, 2018
.gitignore close #22: Auto update ressources as needed Mar 30, 2018
LICENSE.md Added license file. Apr 3, 2015
README.md Correcting the git link Aug 11, 2018
screenshot.png Updated screenshot following new output changes Mar 30, 2018

README.md

cloudflare-resolver

A security tool that aim at doing the following

  • Check if domains or ips are part of the CloudFlare network
  • Scan domains for know vulnerabilities that allow to find ip
  • Dictionary scan subdomains to find ips outside of CF network

Screenshot

Requirements

Usage instructions

  • Run the fast/simple scan
  • python3 bust mydomain.com
  • Run the slow/comprehensive scan
  • python3 bust mydomain.com --scan mx crimeflare dnsdumpster subdomain --dept normal
  • Scan multiple domains
  • python3 bust domainlist.txt (with any options)

Other examples

  • Use a single scan technique
  • python3 bust mydomain.com --scan crimeflare
  • Chose your own mix of scan techniques
  • python3 bust mydomain.com --scan subdomain mx
  • Scan specific subdomains
  • python3 bust mydomain.com --scan subdomain --sub www www2 ftp direct
  • Scan the 20,000 most popular subdomains on the net
  • python3 bust mydomain.com --dept full

Using domain lists

Use a text file with one domain per line, nothing else

Updating lists

CrimeFlare DB is updated every two weeks, the GitHub repo might not be up to date with the latest list. You should use the update tool to get the latests lists.

Tested OSes

  • Debian
  • Ubuntu
  • Arch
  • Void
  • Parabola

How to use (Ubuntu)

sudo apt-get install python3 python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Debian 9)

su
apt install python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Debian 8)

su root
apt-get remove python3
apt-get autoremove
apt-get update
apt-get install libssl-dev openssl
cd /opt
wget https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
tar xzf Python-3.4.3.tgz
cd Python-3.4.3
./configure
make
sudo make install
rm *.tgz
rm -fr Python-3.4.3/
ln -s /usr/local/bin/python3 /usr/bin/python3
pip3 install dnspython3
# Open new terminal window
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Void)

xbps-install python3 python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Arch and Parabola)

pacman -Sy python python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h