Many people use the Cloudflare service to securely run their websites. If any website run behind Cloudflare, then it made difficult for attackers to get the real IP of the website. In this article, we learn how to find the Real IP address of the Website behind Cloudflare.
Find the Real IP Address of the Website Behind Cloudflare
Step 1:
Firstly, you have to download the Termux application on your Android device. Please download the Termux application from the F-Droid store. If you don't know how to install Termux from F-Droid, then you can watch the below video:
Step 2:
Install Termux on your Android device, then download Kali Linux.
Step 3:
After that, Install CloudFail in your Termux. CloudFail is a tactical reconnaissance tool that aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases.
Misconfigured DNS scan using DNSDumpster.com.
Scan the Crimeflare.com database.
Bruteforce scans over 2500 subdomains.
Commands to Install CloudFail
- apt-get update
- apt-get install sudo
- apt-get install git
- apt-get install python3-pip
- git clone https://github.com/m0rtem/CloudFail
- cd CloudFail
- pip3 install -r requirements.txt
- python3 cloudfail.py --target example.com
Replace example.com with the site name of which website you want to get an IP address.
Step 4:
If you want to watch a video tutorial watch the below video: