behindflare
by alebeta90
This tool was created as a Proof of Concept to reveal the threats related to web service misconfiguration using CloudFlare as reverse proxy and WAF
AI summary
Misconfiguration scanner
Reveals web service misconfigurations using CloudFlare as reverse proxy and WAF
- stars
- 15
- forks
- 3
- watching
- 1
Similar projects
Found by comparing what the projects do, not just their names.
m0rtem/cloudfail2.3K
Server hunter
Reconnaissance tool that gathers information about a Cloudflare-protected target to discover its server location using misconfigured DNS and old database records.
Proxy server
A Cloudflare worker script for enabling A/B testing and canary releases across multiple backends.
Cloudflare checker
Detects whether a website is running behind Cloudflare
Traffic Obfuscator
Obfuscates Shadowsocks traffic to mimic HTTPS and evades deep packet inspection
Facebook-GRPC proxy
A Cloudflare Worker that uses Facebook-based authorization and GraphQL proxy queries with Hasura
Domain scanner
A tool for identifying misconfigured CloudFront domains to prevent domain hijacking
Vulnerability scanner
Checks AWS accounts for subdomain hijacking vulnerabilities
Proxy server
A toolkit for building Cloudflare Workers with high-level proxying primitives and routing capabilities
PWA deployment
A proof-of-concept deployment of a PWA to a Cloudflare worker using Preact and Redux for dynamic server-side rendering
Vulnerability scanner
Scans networks to identify vulnerabilities by correlating CPEs with CVEs using an API
Cloud scanner
An open-source tool to help penetration testers gather information about cloud environments and identify potential vulnerabilities.
IP scanner
A tool designed to scan millions of Cloudflare IP addresses and identify those compatible with CDNs.
Network scanner
Automated network scanner discovering internet-wide misconfigurations of network services.
Web attack protection tool
Automates deployment of AWS WAF security rules to protect against common web-based attacks
DNS scanner
Detects DNS record misconfigurations that could be exploited by attackers
