cloudflare-resolver

A security tool that aim at doing the following

Check if domains or ips are part of the CloudFlare network
Scan domains for know vulnerabilities that allow to find ip
Dictionary scan subdomains to find ips outside of CF network

Usage instructions

Install (see below)
Download latest CloudFlare IPs and CrimeFlare DB
python3 lists/update.py
Run the fast/simple scan
python3 bust mydomain.com
Run the slow/comprehensive scan
python3 bust mydomain.com --scan mx crimeflare subdomains panels --dept normal
Scan multiple domains
python3 bust domainlist.txt (with any options)

Other examples

Use a single can technique
python3 bust mydomain.com --scan crimeflare
Chose your own mix of scan techniques
python3 bust mydomain.com --scan subdomains mx
Scan specific domains
python3 bust mydomain.com --scan subdomains --sub www www2 ftp direct
Scan specific admin panels
python3 bust mydomain.com --scan panels --pan cpanel cpanel:ssl whm
Scan the 20,000 most popular subdomains on the net
python3 bust mydomain.com --dept full

Using domain lists

Use a text file with one domain per line, nothing else

Updating lists

CrimeFlare DB is updated every two weeks, the GitHub repo might not be up to date with the latest list. You should use the update tool to get the latests lists.

Tested OSes

Debian
Ubuntu
Arch
Void
Parabola

How to use (Ubuntu)

sudo apt-get install python3 python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloudflare-resolver.git
cd cloud-buster
python3 bust -h

How to use (Debian 9)

su
apt install python3-pip
pip3 install dnspython3
git clone https://github.com/SageHack/cloudflare-resolver.git
cd cloud-buster
python3 bust -h

How to use (Debian 8)

su root
apt-get remove python3
apt-get autoremove
apt-get update
apt-get install libssl-dev openssl
cd /opt
wget https://www.python.org/ftp/python/3.4.3/Python-3.4.3.tgz
tar xzf Python-3.4.3.tgz
cd Python-3.4.3
./configure
make
sudo make install
rm *.tgz
rm -fr Python-3.4.3/
ln -s /usr/local/bin/python3 /usr/bin/python3
pip3 install dnspython3
# Open new terminal window
git clone https://github.com/SageHack/cloudflare-resolver.git
cd cloud-buster
python3 bust -h

How to use (Void)

xbps-install python3 python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloudflare-resolver.git
cd cloud-buster
python3 bust -h

How to use (Arch and Parabola)

pacman -Sy python python-pip
pip install dnspython3
git clone https://github.com/SageHack/cloudflare-resolver.git
cd cloud-buster
python3 bust -h

bilportistivraboti/cloud-buster