Skip to content

Releases: ShantanuRauthan/OriginIPResolver

Release list

v2.0.0 - Historical DNS Lookup & Port Scanning

v2.0.0 - Historical DNS Lookup & Port Scanning Latest
Latest

Choose a tag to compare

View all tags
@ShantanuRauthan ShantanuRauthan released this 14 Jul 04:34
v2.0.0
573f172

Origin IP Resolver v2.0.0

Major update adding two powerful OSINT techniques for origin IP discovery.

New Features

Historical DNS Lookup

Queries passive DNS databases (AlienVault OTX, RapidDNS, HackerTarget) to find IPs the domain resolved to before the CDN was added. This is the single most effective technique for origin discovery — old DNS records often remain in passive DNS databases years after a site moves behind Cloudflare, Fastly, etc.

Port Scanning

Concurrent TCP connect scanner (~270 common ports) that runs on every discovered non-CDN IP. Identifies exposed services (SSH, MySQL, Redis, RDP, admin panels) with banner grabbing for service fingerprinting.

New CLI Flags

  • --no-historical — Skip historical DNS lookup
  • --no-portscan — Skip port scanning
  • --ports 22,80,443,8000-8100 — Custom port list or range

Improvements

  • Clean stdout/stderr separation for piping JSON output
  • Updated JSON output includes historical_dns_records and port_scan fields
  • Deduplicated historical records by IP in display output

Usage

python main.py example.com
python main.py example.com --no-historical
python main.py example.com --ports 22,80,443
python main.py example.com --json -o results.json
Assets 2
Loading

v1.0.0 - Initial Release

v1.0.0 - Initial Release

Choose a tag to compare

View all tags
@ShantanuRauthan ShantanuRauthan released this 12 Jul 17:07
v1.0.0
6b8dec5

Origin IP Resolver v1.0.0

First stable release of the OSINT reconnaissance tool for finding origin IPs behind CDNs.

Features

  • DNS Record Analysis — Resolves A, AAAA, CNAME, NS, MX, TXT, PTR records
  • Certificate Transparency Logs — Queries crt.sh for leaked subdomains and IPs
  • CDN Detection — Identifies Cloudflare, Akamai, Fastly, CloudFront, StackPath, Incapsula, Sucuri, Azure CDN, GCP CDN, GitHub Pages, OVH
  • Subdomain Enumeration — Brute-forces 100+ common subdomain prefixes to find non-CDN IPs
  • HTTP Header Fingerprinting — Detects web servers, frameworks, and CDN headers
  • SSL/TLS Certificate Analysis — Extracts issuer, SANs, validity, and signature details
  • JSON Output — Machine-readable output with --json flag

Usage

python main.py example.com
python main.py example.com --json -o results.json

Installation

pip install -r requirements.txt
Loading