cloudflare-resolver

A security tool that aim at doing the following

• Check if domains or ips are part of the CloudFlare network
• Scan domains for know vulnerabilities that allow to find ip
• Dictionary scan subdomains to find ips outside of CF network

Requirements

• Python 3.5
• dnspython3 1.14.0
• libssl
• openssl

Usage instructions

• Run the fast/simple scan
• python3 bust mydomain.com
• Run the slow/comprehensive scan
• python3 bust mydomain.com --scan mx crimeflare dnsdumpster subdomain --dept normal
• Scan multiple domains
• python3 bust domainlist.txt (with any options)

Other examples

• Use a single scan technique
• python3 bust mydomain.com --scan crimeflare
• Chose your own mix of scan techniques
• python3 bust mydomain.com --scan subdomain mx
• Scan specific subdomains
• python3 bust mydomain.com --scan subdomain --sub www www2 ftp direct
• Scan the 20,000 most popular subdomains on the net
• python3 bust mydomain.com --dept full

Using domain lists

Use a text file with one domain per line, nothing else

Updating lists

CrimeFlare DB is updated every two weeks, the GitHub repo might not be up to date with the latest list. You should use the update tool to get the latests lists.

Tested OSes

• Debian
• Ubuntu
• Arch
• Void
• Parabola

How to use (Ubuntu)

sudo apt-get install python3 python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Debian 9)

su
apt install python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Debian 8)

su root
apt-get remove python3
apt-get autoremove
apt-get update
apt-get install libssl-dev openssl
cd /opt
wget https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
tar xzf Python-3.4.3.tgz
cd Python-3.4.3
./configure
make
sudo make install
rm *.tgz
rm -fr Python-3.4.3/
ln -s /usr/local/bin/python3 /usr/bin/python3
pip3 install dnspython3
# Open new terminal window
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Void)

xbps-install python3 python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h

How to use (Arch and Parabola)

pacman -Sy python python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloud-buster.git
cd cloud-buster
python3 bust -h