Skip to content
This repository has been archived by the owner on Jul 1, 2019. It is now read-only.

SageHack/cloud-buster

master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Cloudflare Resolver

Build Status

A comprehensive pentest tool that checks Cloudflare enabled sites for origin IP leaks.

It's filled with awesome features!

  • scan a wide array of miss-configuration and vulnerabilities
  • search other IP resolution service databases
  • detail origin and related services IPs
  • smart engine that certify matches
  • multiple command line arguments to customize and fine tune
  • support target list for automated scans

Screenshot

Warning

I have left the hacking scene and thus, archived this project. It's still awesome and you can still use it and fork it.

Requirements

Usage

Basic use cases

  • Simple (fast) scan: python3 bust mydomain.com
  • Comprehensive (slow) scan: python3 bust mydomain.com --scan mx crimeflare dnsdumpster subdomain --dept normal
  • Scan multiple domains: python3 bust domainlist.txt (with any options)

Complex use cases

  • Use a single scan technique: python3 bust mydomain.com --scan crimeflare
  • Chose your own mix of scan techniques: python3 bust mydomain.com --scan subdomain mx
  • Specific subdomains: python3 bust mydomain.com --scan subdomain --sub www www2 ftp direct
  • Scan the 20,000 most popular subdomains on the net: python3 bust mydomain.com --dept full

Using domain lists

Use a text file with one domain per line, nothing else

Installation

Ubuntu

sudo apt-get install python3 python3-pip
pip3 install dnspython3 bs4
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Debian 9

su
apt install python3-pip
pip3 install dnspython3 bs4
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Debian 8

su root
apt-get remove python3
apt-get autoremove
apt-get update
apt-get install libssl-dev openssl
cd /opt
wget https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
tar xzf Python-3.4.3.tgz
cd Python-3.4.3
./configure
make
sudo make install
rm *.tgz
rm -fr Python-3.4.3/
ln -s /usr/local/bin/python3 /usr/bin/python3
pip3 install dnspython3 bs4
# Open new terminal window
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Void

xbps-install python3 python-pip
pip install dnspython3 bs3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Arch and Parabola

pacman -Sy python python-pip
pip install dnspython3 bs3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

Contributing

The current tested version is Python 3.5.3. Please use this version to submit pull requests.

Otherwise, all other requirements are listed above.