[dmitriblovv]

Hi, anyone knows how to find the real IP address of a website using Cloudflare?
I tried everything I know and can possibly think of.
Please help me out!

[DramaKing]

This may not be possible (without torture or hacking the CloudFlare account, anyway). There's subdomain enumeration and DNS history, but those are more like ways to detect misconfigurations. Plus, there may not be any open ports if you do find a real IP address.

Some tools for doing this are Cloudmare and CloudUnflare.

[InspectorGadget]

https://crt.sh/ is also a good shout, lets you find sub domains associated with the domain which may not be behind cloudflare but on the same IP as the cloudflared domain.

[Terry A. Davis]

https://crt.sh/ is also a good shout, lets you find sub domains associated with the domain which may not be behind cloudflare but on the same IP as the cloudflared domain.

Oh snap, I've been looking for this for an age, I couldn't remember what it was called.
Thanks!

I use https://subdomainfinder.c99.nl/ - it's a good tool for enumerating subdomains, not sure how much info they gather on you before you search so take with grain of salt before you go scanning all the domains you then want to break into.

[R5N3T]

Oh snap, I've been looking for this for an age, I couldn't remember what it was called.
Thanks!

I use https://subdomainfinder.c99.nl/ - it's a good tool for enumerating subdomains, not sure how much info they gather on you before you search so take with grain of salt before you go scanning all the domains you then want to break into.

U right, this good https://subdomainfinder.c99.nl

[jcole]

Hi, anyone knows how to find the real IP address of a website using Cloudflare?
I tried everything I know and can possibly think of.
Please help me out!

Do CF resolvers not work anymore?

[dmitriblovv]

Oh snap, I've been looking for this for an age, I couldn't remember what it was called.
Thanks!

I use https://subdomainfinder.c99.nl/ - it's a good tool for enumerating subdomains, not sure how much info they gather on you before you search so take with grain of salt before you go scanning all the domains you then want to break into.

This is dope, it worked. I found the IP. Thank you!