When a website operates behind Cloudflare, it becomes difficult for attackers to find an IP address. In addition to their services, Cloudflare also bolsters website security. In this article, you’ll learn various methods to find the Website IP address behind Cloudflare.
Find the Real IP Address of the Website behind Cloudflare
Many tools exist on the Internet to find the real IP address of the website, but we’ll discuss only two tools: CloudFail and CloakQuest3r.
Let’s begin with the Termux installation. You can download the Termux application from the F-Droid store. If you don’t know how to install Termux from F-Droid, then you can watch the below video:
Then, install Kali Linux on an Android device. You can use Termux to install Kali Linux. Enter the following commands in Termux to install Kali Linux:
pkg install wget openssl-tool proot -y && hash -r && wget https://raw.githubusercontent.com/EXALAB/AnLinux-Resources/master/Scripts/Installer/Kali/kali.sh && bash kali.sh
Additionally, you can watch our video demonstration for more clarity.
CloudFail
Our first tool to find IP behind Cloudflare is CloudFail. Enter the following commands in Termux to install CloudFail:
- Firstly, open the Termux application and enter the following command to run Kali Linux.
./start-kali.sh
- Then enter the following commands
apt-get update apt-get install sudo apt-get install python3-pip apt-get install git git clone https://github.com/m0rtem/CloudFail cd CloudFail pip3 install -r requirements.txt python3 cloudfail.py --target example.com
Replace example.com with the target website.
CloudFail is a tool that gathers information about a target protected by Cloudflare. You can use this tool to find IP behind Cloudflare. Moreover, you can use Tor service to mask all the requests. The tool has 3 different attack phases.
- Misconfigured DNS scan using DNSDumpster.com.
- Scan the Crimeflare.com database.
- Bruteforce scans over 2500 subdomains.
CloakQuest3r: Uncover the IP behind Cloudflare
Our second tool to find IP behind Cloudflare is CloakQuest3r. Enter the following commands in Termux to install CloakQuest3r:
git clone https://github.com/spyboy-productions/CloakQuest3r
cd CloakQuest3r
pip3 install -r requirements.txt
python cloakquest3r.py abc.comIf you face error in installing cryptography then run the pkg install python-cryptography command.
Conclusion
We hope you enjoyed our article on how to Find the Real IP Address of the Website Behind Cloudflare. We are always excited when one of our posts provides useful information on a topic like this. Please let us know if you have any questions. We would love to hear from you!
