+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: ["HQ"-Tut] Find the real I.P. behind a Cloudflare protected server (/showthread.php?tid=5357555)
["HQ"-Tut] Find the real I.P. behind a Cloudflare protected server - Dr. Lightman - Jul 30, 2016
Hey,
So it's simple, from my personal experience. Let's say this is a Minecraft community, it has basically three things ; A website, a teamspeak, a Minecraft server application.
To make this tutorial more realistic lets take exemple with this Minecraft website : https://forum.aliacraft.net/ I did check, no vulnerabilities that would leak the domain I.P., at least not with the last tutorials I found here on HF.
Now, what's interesting is their Teamspeak server, if they have their own Dedi/vps they'll most likely host it on the same server right ? Then, just check for the subdomain. Here it's : voice.aliacraft.net . It points out the an OVH Server. Amazing, now lets check if it's the same as for the Website server, go to : http://167.114.21.xx (TS3's IP). It leads to the Website, we won.
Basically if there's no TS3, use this method with the minecraft(Or any game server) domain, or any else application.
This won't help you in all situation, but in some fields it will help you, especially when all others cloudflare 'resolvers' didn't work.
2nd way : Check for the domain history, and check previous hosters before Cloudflare. If there's OVH, or any other hoster, then check the IP to see where it leads to. If it leads to the website, then you got the back-end IP
Here is the website for this : http://viewdns.info/iphistory/
* - N00B1234 - Jul 30, 2016
not bad i tried, seems to be better than google dig.
* - Dr. Lightman - Jul 30, 2016
(Jul 30, 2016 12:29 PM)N00B1234 Wrote: not bad i tried, seems to be better than google dig.
Actually I didn't ever make google dig found a back-end server, so yeah, I prefer alternatives which are less known but not less efficient
* - miller88 - Aug 2, 2016
(Jul 30, 2016 12:32 PM)Dr. Lightman Wrote: Actually I didn't ever make google dig found a back-end server, so yeah, I prefer alternatives which are less known but not less efficient
+1
* - hophopha - Aug 2, 2016
Hey guys, can't post in the marketplace so posting here instead. Looking for someone to help me with a hacking job, can pay up to 100 dollars. Pm me your icq if interested and I will get in touch.