+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Advanced Cloudflare domain resolver (/showthread.php?tid=5937517)
Pages: Pages
1
2
Advanced Cloudflare domain resolver - LimitlessJeff - Feb 4, 2019
~ACG~
They're two stages to this resolver so far, one using data that has been exploited via ssl, cloudflare config fu#k ups, requirements and so forth once exploited its then added to a database ready for a search query from the API user. If the website isn't in the database then it'd use a subdomain scanner (Basic I know)
to find info right there and then, I'm currently working on a stage three that searches in the past DNS records of the site with a good database connection, full of sources, grabbing the data, pinging the IP's and printing the appropriate sources for the API user.
Yes the API is hosted on SPAM, because im cheap basically./ Not anymore mfs
The FREE key for HF users only is: (hf:limitlessjeff)
They're two stages to this resolver so far, one using data that has been exploited via ssl, cloudflare config fu#k ups, requirements and so forth once exploited its then added to a database ready for a search query from the API user. If the website isn't in the database then it'd use a subdomain scanner (Basic I know)
to find info right there and then, I'm currently working on a stage three that searches in the past DNS records of the site with a good database connection, full of sources, grabbing the data, pinging the IP's and printing the appropriate sources for the API user.
Yes the API is hosted on SPAM, because im cheap basically./ Not anymore mfs
The FREE key for HF users only is: (hf:limitlessjeff)
PHP Code
<?php
network-deck.ml/cf/index.php?key=hf:limitlessjeff&url=[WEBSITE]
RE: Advanced Cloudflare domain resolver - frank3nstien - Feb 4, 2019
This is the status of your domain
alt-svc: quic=":443"; ma=2582000; v="35,37,43,46"
cf-ray: 4a433784880fc56a-ORD
connection: keep-alive
content-encoding: br
content-type: text/html; charset=UTF-8
date: Tue, 05 Feb 2019 04:10:57 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
set-cookie: __cfduid=*************** expires=Wed, 05-Feb-20 04:10:57 GMT; path=/; domain=.network-deck.ml; HttpOnly
transfer-encoding: chunked
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
RE: Advanced Cloudflare domain resolver - LimitlessJeff - Feb 5, 2019
(Feb 4, 2019 11:14 PM)frank3nstien Wrote: This is the status of your domain
alt-svc: quic=":443"; ma=2582000; v="35,37,43,46"
cf-ray: 4a433784880fc56a-ORD
connection: keep-alive
content-encoding: br
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
I do apologies mate, use the new url:network-deck.ml/
I'll update the thread.
RE: Advanced Cloudflare domain resolver - RonzaX - Feb 5, 2019
thanks for the contribution
RE: Advanced Cloudflare domain resolver - LimitlessJeff - Feb 6, 2019
(Feb 5, 2019 08:20 PM)Dylan Wrote: thanks for the contributionThanks for the comment bro, their will be a nice site soon just taking my time coding it, with more tools, free apis and so forth.
RE: Advanced Cloudflare domain resolver - SERPENT@ - Feb 7, 2019
It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!
RE: Advanced Cloudflare domain resolver - LimitlessJeff - Feb 7, 2019
(Feb 7, 2019 05:31 AM)SERPENT@ Wrote: It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!
Been coding it for about an hour so please try again.
RE: Advanced Cloudflare domain resolver - GpRomero - Feb 7, 2019
excellent to the tool box
as
dnsdupster
tcp ports
burp
httrack
teleport
RE: Advanced Cloudflare domain resolver - RonzaX - Feb 7, 2019
(Feb 7, 2019 05:31 AM)SERPENT@ Wrote: It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!It didn't worked !!!!!!
Quality reply
-
Btw op hit 4 stars by mistake
meant 5
RE: Advanced Cloudflare domain resolver - LimitlessJeff - Feb 8, 2019
(Feb 7, 2019 11:35 PM)Dylan Wrote: Quality reply
-
Btw op hit 4 stars by mistake
meant 5
PM me ur details man, seem a like a sound lad
(Feb 4, 2019 08:45 AM)LimitlessJeff Wrote:~ACG~
They're two stages to this resolver so far, one using data that has been exploited via ssl, cloudflare config fu#k ups, requirements and so forth once exploited its then added to a database ready for a search query from the API user. If the website isn't in the database then it'd use a subdomain scanner (Basic I know)
to find info right there and then, I'm currently working on a stage three that searches in the past DNS records of the site with a good database connection, full of sources, grabbing the data, pinging the IP's and printing the appropriate sources for the API user.
Yes the API is hosted on SPAM, because im cheap basically./ Not anymore mfs
The FREE key for HF users only is: (hf:limitlessjeff)
PHP Code
<?php
network-deck.ml/cf/index.php?key=hf:limitlessjeff&url=[WEBSITE]
NEW API
network-deck.ml/api/index.php?key=hf:limitlessjeff&data=
network-deck.ml/api/index.php?key=hf:limitlessjeff&data=
RE: Advanced Cloudflare domain resolver - frank3nstien - Feb 8, 2019
(Feb 5, 2019 01:37 AM)LimitlessJeff Wrote: I do apologies mate, use the new url:network-deck.ml/
I'll update the thread.
Its working perfectly Thanks for sharing 🤝
RE: Advanced Cloudflare domain resolver - ProMan - Feb 11, 2019
Nice, it's working.
Thanks for sharing this!
RE: Advanced Cloudflare domain resolver - KaizenLouie - Feb 12, 2019
you forgot to trim the "www" aliases before adding your "possible" aliases.
RE: Advanced Cloudflare domain resolver - sameunri - Feb 12, 2019
thanks for your effort!!
I'm checking now~
RE: Advanced Cloudflare domain resolver - p0p_c0rn - Feb 12, 2019
Tried with a site I go to but doesn't give me their true IP perhaps I am doing something wrong?