Ищешь сабдомены, проверяешь там может быть айпи, можешь еще принять от сайта письмо на почту, и посмотреть откуда оно идёт. Поюзай разный софт посмотри как работает. Вот еще тут посмотри: https://xss.pro/threads/28805/
-
XSS.stack #1 – первый литературный журнал от юзеров форума
CloudFlare Bypass // Как узнать IP за CloudFlare и другими WAF и CND
- Автор темы tabac
- Дата начала
Exposure Management and Threat Hunting Solutions | Censys
Exposure Management, External Attack Surface Management, and Threat Hunting solutions powered by the most comprehensive dataset of internet intelligence.
censys.io
Shodan
Search engine of Internet-connected devices. Create a free account to get started.
www.shodan.io
GreyNoise
viz.greynoise.io
ONYPHE - Cyber Defense Search Engine
ONYPHE is a Cyber Defense Search Engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise. ONYPHE does correlate this information with data gathered by performing active Internet...
onyphe.io
BinaryEdge
We scan and monitor the internet to help organizations improve their security. What is being exposed today?
app.binaryedge.io
Find email addresses and send cold emails • Hunter
Hunter is the leading solution to find and verify professional email addresses. Start using Hunter and connect with the people that matter for your business.
hunter.io
Find out if you’ve been part of a data breach
Have your online accounts been exposed in a data breach?
ghostproject.fr
Code Search | Grep by Vercel
Effortlessly search for code, files, and paths across a million GitHub repositories.
grep.app
Sales automation & acceleration at scale | Snov.io
Snov.io combines cold email, sales outreach, LinkedIn automation, and email finder tools into one platform, simplifying and optimizing the sales process.
snov.io
crt.sh | Certificate Search
Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)
crt.sh
Ahmia — Search Tor Hidden Services
A search engine for services accessible on the Tor network.
ahmia.fi
网络空间测绘，网络空间安全搜索引擎，网络空间搜索引擎，安全态势感知 - FOFA网络空间测绘系统
FOFA 是白帽汇推出的一款网络空间搜索引擎，它通过进行网络空间测绘，能够帮助研究人员或者企业迅速进行网络资产匹配，例如进行漏洞影响范围分析、应用分布统计、应用流行度排名统计等。
fofa.so
Intelligence X
Intelligence X is a search engine and data archive. Search Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more.
intelx.io
IVRE
An open-source network recon framework to analyze Nmap, Masscan, ZGrab2 and Zeek/Bro results through Web interfaces, CLI tools and a Python API.
ivre.rocks
GreyNoise
At GreyNoise, we collect and analyze untargeted, widespread, and opportunistic scan and attack activity that reaches every server directly connected to the Internet.
viz.greynoise.io
RiskIQ Community Edition
community.riskiq.com
WiGLE: Wireless Network Mapping
Maps and database of 802.11 wireless networks, with statistics, submitted by wardrivers, netstumblers, and net huggers.
wigle.net
Search Engine for Source Code - PublicWWW.com
Search engine for source code - ultimate solution for digital marketing and affiliate marketing research.
publicwww.com
ASNLookup - Another Reconnaissance Tool
This tool leverages ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes.
asnlookup.com
RTSAK - AS Numbers, BGP Routes & IP Network Intelligence
RTSAK provides BGP routing intelligence, AS number lookups, IP prefix analysis, and network topology research. Explore autonomous systems and internet routing data.
www.rtsak.com
Login - BGP.Tools
bgp.tools allows you to do bgp debugging and gives insight into internet routing with ease in a user friendly way
bgp.tools
See the attack surface for domain paypal.com | Web Magellan
See the attack surface for domain paypal.com
webmagellan.com
Spyse — Internet Assets Search Engine
Spyse is a search engine built for a quick cyber intelligence of IT infrastructures, networks, and even the smallest parts of the internet.
spyse.com
NAPALM FTP Indexer
The most advanced FTP Indexer and FTP Search Engine service maintained by members. Search and download files from public FTP servers
www.searchftps.net
NerdyData.com - Search The Web's Source Code for Technologies - NerdyData
Search Engine For Source Code. Find websites using technology, HTML, Javascript, CSS Tags.
www.nerdydata.com
Find Other Websites Owned By The Same Person
Reverse lookup Google Analytics, Google Adsense, Amazon affiliates, Emails, IPs, and other third party IDs.
analyzeid.com
VK CORPORATE SERVICES LIMITED | ICIJ Offshore Leaks Database
Panama Papers Intermediary: VK CORPORATE SERVICES LIMITED
offshoreleaks.icij.org
ipv4info.com
dehashed.com
Argus Managed Defence | mnemonic
passivedns.mnemonic.no
Team Cymru IP to ASN Lookup v1.0
asn.cymru.com
Reverse DNS Lookup Online Tool | HackerTarget.com
Reverse DNS records search for hostnames, or resolve a single IP or even a Range of IP addresses. A powerful DNS recon tool for assessing an organisation.
hackertarget.com
FileChef - Open Directory Search Engine
Filechef is a niche search engine, specializing in file search. It indexes millions of files found on the web and provides efficient search over them with easy to use filters. It is the largest search engine of its kind with over 200M files indexed.
filechef.com
Insecam - World biggest online cameras directory
Insecam.com - the world biggest directory of online cameras. Watch live street, traffic, parking, office, road, beach, earth online webcams. .
insecam.org
Maltiverse
maltiverse.com
Reposearch Source Code Search Engine - Good in finding code fragments
A powerful source code search engine with project-scoped type ahead suggestions. With support for any SVN/Github repository location. Supports filtering on file extension, location and language construct.
codefinder.org
ThreatMiner.org | Data Mining for Threat Intelligence
ThreatMiner is a threat intelligence portal that provides information on indicators of compromise (IOC) such as domains, IP address, malware samples (MD5, SHA1 and SHA256), SSL certificates, WHOIS information and malicious URLs such as phishing and malware links.
threatminer.org
Traceroute Online with Network Map | Tactical Network Testing
Online Traceroute with Visual Mapping. Gathers detailed ASN and location information. Map the packets path.
traceroute-online.com
Intezer Analyze
analyze.intezer.com
Natlas | Natlas
Natlas is an open source project designed to provide scalable network scanning and an interface to search through the results. For more information, visit github.com/natlas/natlas
natlas.io
ANY.RUN
Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.
app.any.run
GitHub - Quikko/Recon-Methodology: Recon Methodology
Recon Methodology . Contribute to Quikko/Recon-Methodology development by creating an account on GitHub.
github.com
BINANCE.COM Relationship Profile on BuiltWith
BINANCE.COM website relationships and historical profile
builtwith.com
sberbank.com - robtex.com
sberbank.com is the parent of www.sberbank.com. sberbank.com resolves to one…Host names pointing to 84.252.149.158: ns4.sberbank.ru and tmp2.sberbank.ru.
www.robtex.com
Scamalytics
Scamalytics IP address fraud risk lookup. Check IP addresses on our website or use our API. Check for proxies and fraud profile.
scamalytics.com
https://fccid.io/ (iot recon)
http://dns.bufferover.run/dns?q= (godno)
DNSDumpster - Find & lookup dns records for recon & research
Free domain research tool to discover hosts related to a domain. Find visible hosts from the attackers perspective for Red and Blue Teams.
dnsdumpster.com
Datashare
datashare.icij.org
https://manytools.org/network/query-dns-records-online/go/ (spf и txt)
mxtoolbox.com/spf.aspx (spf)
https://www.virustotal.com/gui/domain/paypal.com/relations
Domain > sberbank.ru | Threatcrowd.org Open Source Threat Intelligence
www.threatcrowd.org
Whois Lookup, Domain Availability & IP Search - DomainTools
Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.
whois.domaintools.com
sberbank.ru - robtex.com
sberbank.ru is a parent of fgate5.sberbank.ru, developer.sberbank.ru,…points to 194.54.14.49; email12.sberbank.ru points to 185.157.97.11.
www.robtex.com
Domain: google.com | ThreatMiner.org
ThreatMiner provides information on cyber security reports, passive DNS (pDNS) records, subdomains, Uniform Resource Locators (URLs) and malware samples associated with google.com.
threatminer.org
Test DNS server records online (query A, AAAA, CNAME, MX, PTR, SPF, SRV, NS, TXT, or all available)
Query a DNS server on IP Addresses and Domain Names. Query DNS for MX, TXT, SPF, SRV, SOA and more.
manytools.org
LevelBlue - Open Threat Exchange
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
otx.alienvault.com
IPinfo | The Trusted IP Data Provider for Developers & Enterprises
IPinfo delivers fast, accurate, and reliable IP data to power fraud detection, geolocation, analytics, and more. Trusted by over 500,000 developers.
ipinfo.io
Bug Bounty Helper
dorks.faisalahmed.me
IPv4Info - All data for ipv4 network blocks and autonomous systems
All-in-one tool to view ipv4 netblock registration data, ipv4 allocation table, all domains on same ip address or in same netblock, ASN information.
ipv4info.com
Helpful Platform For Trade Companies To Expand Business-外贸邦
Great Export Import is a platform for you to find and verify target companies, a platform for trade companies to share information and expand business.
en.52wmb.com
AIT Graphsense – AIT Austrian Institute of Technology
graphsense.info
Check files for metadata
This online metadata viewer shows all hidden metadata for audio, video, document, ebook & image files. Online EXIF data viewer, no installation required.
www.get-metadata.com
WiGLE: Wireless Network Mapping
Maps and database of 802.11 wireless networks, with statistics, submitted by wardrivers, netstumblers, and net huggers.
wigle.net
Если можно отправить письмо с сайта, мб это форум и т.д то в заголовке письма будет реальный IP сервера. Год назад работало сейчас хз.
Я еще как то месяца 2 назад сканировал вебсайт, и находил реальный айпи за счёт картинки на сайте, хотя весь сайт был под клаудом
Может не по теме, да и тред мертвый но все же. Кто знает как найти амазоновские бакеты?
Спасибо, годно!Но вообще обычно хватает брута субдоменов,censys и поиску по сертуExposure Management and Threat Hunting Solutions | Censys
Exposure Management, External Attack Surface Management, and Threat Hunting solutions powered by the most comprehensive dataset of internet intelligence.censys.ioShodan
Search engine of Internet-connected devices. Create a free account to get started.www.shodan.ioGreyNoise
viz.greynoise.ioONYPHE - Cyber Defense Search Engine
ONYPHE is a Cyber Defense Search Engine for open-source and cyber threat intelligence data collected by crawling various sources available on the Internet or by listening to Internet background noise. ONYPHE does correlate this information with data gathered by performing active Internet...onyphe.ioBinaryEdge
We scan and monitor the internet to help organizations improve their security. What is being exposed today?app.binaryedge.iohttps://wigle.netFind email addresses and send cold emails • Hunter
Hunter is the leading solution to find and verify professional email addresses. Start using Hunter and connect with the people that matter for your business.
Find out if you’ve been part of a data breach
Have your online accounts been exposed in a data breach?Code Search | Grep by Vercel
Effortlessly search for code, files, and paths across a million GitHub repositories.Sales automation & acceleration at scale | Snov.io
Snov.io combines cold email, sales outreach, LinkedIn automation, and email finder tools into one platform, simplifying and optimizing the sales process.crt.sh | Certificate Search
Free CT Log Certificate Search Tool from Sectigo (formerly Comodo CA)crt.shAhmia — Search Tor Hidden Services
A search engine for services accessible on the Tor network.ahmia.fi网络空间测绘，网络空间安全搜索引擎，网络空间搜索引擎，安全态势感知 - FOFA网络空间测绘系统
FOFA 是白帽汇推出的一款网络空间搜索引擎，它通过进行网络空间测绘，能够帮助研究人员或者企业迅速进行网络资产匹配，例如进行漏洞影响范围分析、应用分布统计、应用流行度排名统计等。fofa.soIntelligence X
Intelligence X is a search engine and data archive. Search Tor, I2P, data leaks and the public web by email, domain, IP, CIDR, Bitcoin address and more.intelx.ioIVRE
An open-source network recon framework to analyze Nmap, Masscan, ZGrab2 and Zeek/Bro results through Web interfaces, CLI tools and a Python API.http://onyphe.ioGreyNoise
At GreyNoise, we collect and analyze untargeted, widespread, and opportunistic scan and attack activity that reaches every server directly connected to the Internet.
RiskIQ Community Edition
community.riskiq.comWiGLE: Wireless Network Mapping
Maps and database of 802.11 wireless networks, with statistics, submitted by wardrivers, netstumblers, and net huggers.Search Engine for Source Code - PublicWWW.com
Search engine for source code - ultimate solution for digital marketing and affiliate marketing research.ASNLookup - Another Reconnaissance Tool
This tool leverages ASN to look up IP addresses (IPv4 & IPv6) owned by a specific organization for reconnaissance purposes.asnlookup.comRTSAK - AS Numbers, BGP Routes & IP Network Intelligence
RTSAK provides BGP routing intelligence, AS number lookups, IP prefix analysis, and network topology research. Explore autonomous systems and internet routing data.Login - BGP.Tools
bgp.tools allows you to do bgp debugging and gives insight into internet routing with ease in a user friendly waySee the attack surface for domain paypal.com | Web Magellan
See the attack surface for domain paypal.comwebmagellan.comSpyse — Internet Assets Search Engine
Spyse is a search engine built for a quick cyber intelligence of IT infrastructures, networks, and even the smallest parts of the internet.spyse.comNAPALM FTP Indexer
The most advanced FTP Indexer and FTP Search Engine service maintained by members. Search and download files from public FTP serversNerdyData.com - Search The Web's Source Code for Technologies - NerdyData
Search Engine For Source Code. Find websites using technology, HTML, Javascript, CSS Tags.threatcrowd.orgFind Other Websites Owned By The Same Person
Reverse lookup Google Analytics, Google Adsense, Amazon affiliates, Emails, IPs, and other third party IDs.
urlscan.ioVK CORPORATE SERVICES LIMITED | ICIJ Offshore Leaks Database
Panama Papers Intermediary: VK CORPORATE SERVICES LIMITED
ipv4info.com
dehashed.com
Argus Managed Defence | mnemonic
Team Cymru IP to ASN Lookup v1.0
asn.cymru.comReverse DNS Lookup Online Tool | HackerTarget.com
Reverse DNS records search for hostnames, or resolve a single IP or even a Range of IP addresses. A powerful DNS recon tool for assessing an organisation.FileChef - Open Directory Search Engine
Filechef is a niche search engine, specializing in file search. It indexes millions of files found on the web and provides efficient search over them with easy to use filters. It is the largest search engine of its kind with over 200M files indexed.filechef.comInsecam - World biggest online cameras directory
Insecam.com - the world biggest directory of online cameras. Watch live street, traffic, parking, office, road, beach, earth online webcams. .insecam.orgMaltiverse
maltiverse.comReposearch Source Code Search Engine - Good in finding code fragments
A powerful source code search engine with project-scoped type ahead suggestions. With support for any SVN/Github repository location. Supports filtering on file extension, location and language construct.ThreatMiner.org | Data Mining for Threat Intelligence
ThreatMiner is a threat intelligence portal that provides information on indicators of compromise (IOC) such as domains, IP address, malware samples (MD5, SHA1 and SHA256), SSL certificates, WHOIS information and malicious URLs such as phishing and malware links.NETOGRAPH.IOTraceroute Online with Network Map | Tactical Network Testing
Online Traceroute with Visual Mapping. Gathers detailed ASN and location information. Map the packets path.
Intezer Analyze
Natlas | Natlas
Natlas is an open source project designed to provide scalable network scanning and an interface to search through the results. For more information, visit github.com/natlas/natlasnatlas.ioANY.RUN
Interactive malware hunting service. Live testing of most type of threats in any environments. No installation and no waiting necessary.www.crunchbase.com/ (смотрим на купленные компании компанией?)GitHub - Quikko/Recon-Methodology: Recon Methodology
Recon Methodology . Contribute to Quikko/Recon-Methodology development by creating an account on GitHub.github.com
BINANCE.COM Relationship Profile on BuiltWith
BINANCE.COM website relationships and historical profilebuiltwith.com@iptools_robot (бот в тг)sberbank.com - robtex.com
sberbank.com is the parent of www.sberbank.com. sberbank.com resolves to one…Host names pointing to 84.252.149.158: ns4.sberbank.ru and tmp2.sberbank.ru.
dns.coffee/domainsScamalytics
Scamalytics IP address fraud risk lookup. Check IP addresses on our website or use our API. Check for proxies and fraud profile.
https://fccid.io/ (iot recon)
http://dns.bufferover.run/dns?q= (godno)
https://github.com/pownjs/recon (toshje godno)DNSDumpster - Find & lookup dns records for recon & research
Free domain research tool to discover hosts related to a domain. Find visible hosts from the attackers perspective for Red and Blue Teams.dnsdumpster.com
Datashare
https://manytools.org/network/query-dns-records-online/go/ (spf и txt)
mxtoolbox.com/spf.aspx (spf)
https://www.virustotal.com/gui/domain/paypal.com/relations
Domain > sberbank.ru | Threatcrowd.org Open Source Threat Intelligence
www.threatcrowd.orgsecuritytrails.com/domain/google.com/dns ((historical data)Whois Lookup, Domain Availability & IP Search - DomainTools
Research domain ownership with Whois Lookup: Get ownership info, IP address history, rank, traffic, SEO & more. Find available domains & domains for sale.
sberbank.ru - robtex.com
sberbank.ru is a parent of fgate5.sberbank.ru, developer.sberbank.ru,…points to 194.54.14.49; email12.sberbank.ru points to 185.157.97.11.Domain: google.com | ThreatMiner.org
ThreatMiner provides information on cyber security reports, passive DNS (pDNS) records, subdomains, Uniform Resource Locators (URLs) and malware samples associated with google.com.Test DNS server records online (query A, AAAA, CNAME, MX, PTR, SPF, SRV, NS, TXT, or all available)
Query a DNS server on IP Addresses and Domain Names. Query DNS for MX, TXT, SPF, SRV, SOA and more.LevelBlue - Open Threat Exchange
Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.otx.alienvault.comspyse.comIPinfo | The Trusted IP Data Provider for Developers & Enterprises
IPinfo delivers fast, accurate, and reliable IP data to power fraud detection, geolocation, analytics, and more. Trusted by over 500,000 developers.
Bug Bounty Helper
dorks.faisalahmed.meIPv4Info - All data for ipv4 network blocks and autonomous systems
All-in-one tool to view ipv4 netblock registration data, ipv4 allocation table, all domains on same ip address or in same netblock, ASN information.ipv4info.comddosecrets.comHelpful Platform For Trade Companies To Expand Business-外贸邦
Great Export Import is a platform for you to find and verify target companies, a platform for trade companies to share information and expand business.en.52wmb.com
AIT Graphsense – AIT Austrian Institute of Technology
Check files for metadata
This online metadata viewer shows all hidden metadata for audio, video, document, ebook & image files. Online EXIF data viewer, no installation required.https://centralops.net/co/DomainDossier.aspx (годно)WiGLE: Wireless Network Mapping
Maps and database of 802.11 wireless networks, with statistics, submitted by wardrivers, netstumblers, and net huggers.
Искать в исходном коде и параметрах окружения, если есть такая возможность.
Брутить-сканить при помощи s3scanner, AWSBucketDump или аналога.
Можно глянуть по истории смены ip домена.
https://viewdns.info/iphistory/?domain=
Там как правило до перехода на клауд сайт сидит на этом хостинге.
https://viewdns.info/iphistory/?domain=
Там как правило до перехода на клауд сайт сидит на этом хостинге.
клаудфейл уже перестал работать?
Finding real IPs of origin servers behind CloudFlare or Tor
Tor hidden services and reverse-proxy providers (CloudFlare) are useless when making simple mistakes. This is how you can reveal origin IPs because of them.
www.secjuice.com
Здравствуйте многоуважаемые форумчане. Скажите или подскажите как обойти бесплатную защиту от ddos и узнать реальный ip сайта.
Все исключительно в учебных целях)
Все исключительно в учебных целях)
Здравствуй многоуважаемый новичок форума и юный дудосер.
4-5 VPS (обычно хватает, но чем больше - тем лучше), с оперативкой 4-8 ГБ каждый, желательно из разных дц и стран, скрипты с многопоточностью и прокси. Много прокси. Вот и весь секрет против бесплатного антиддос от Cloudflare.
Поиск.
Стопроцентных методов нет. А если сайт уже подвергался ранее ddos атакам, то тем более проблематично.
Последнее редактирование:
Спасибо, опробую)))))
Скриптиком не поделитесь? Исключительно в учёбных целяю мы же тут все культурные люди
Конечно же поделюсь. В ЛС. Не знаю как насчёт тут культуры, но что ни каждая третья тема в ленте - так какая-то продажа. Такое первое впечатление, что треть форума - это какой-то симбиоз хакеров с вредоносными генами торгашей, по совместительству подрабатывающими барыжничеством.
Мы - порядочные люди, и за скрипты и помощь новичкам денег не берём.
xss.pro - гостеприимный форум (с) )
Знайте, я очень благодарен вам. По больше бы культуры в наше непростое время когда даже торрент трекеры банят...
Здравствуйте уважаемые, у кого есть опыт обхода cloudflare, не могли бы поделиться7
GitHub - jychp/cloudflare-bypass: Bypass Coudflare bot protection using Cloudflare Workers
Bypass Coudflare bot protection using Cloudflare Workers - jychp/cloudflare-bypass
github.com
GitHub - m0rtem/CloudFail: Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network - m0rtem/CloudFail
github.com
можно так поискать оригинальный сервер.
Спасибоно это не точноGitHub - jychp/cloudflare-bypass: Bypass Coudflare bot protection using Cloudflare Workers
Bypass Coudflare bot protection using Cloudflare Workers - jychp/cloudflare-bypassgithub.com