Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases.
- Misconfigured DNS scan using DNSDumpster.com.
- Scan the Crimeflare.com database.
- Bruteforce scan over 2897 subdomains.
Related:
- How to detect and identify the type of Web Application Firewall (WAF)
- How to bypass Cloudflare, Incapsula, SUCURI and another WAF
Examples:
- anti-malware.ru
- codeby.net