reddit hackernews mail facebook facebook linkedin


Utilize misconfigured DNS and old database records to find hidden IPs behind CloudFlare network.

CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases.

1. Misconfigured DNS scan using
2. Scan the database.
3. Bruteforce scan over 2500 subdomains.