IG-Detective

IG-Detective 🕵️‍♂️📸 Créé par@shredzwho | 💖 Soutenir ce projet IG-Detective est un outil OSINT Open Source Intelligence haute performance pour Instagram, écrit en Python. Il offre un shell interactif premium permettant d'effectuer des analyses approfondies sur des comptes Instagram, d'extraire...

HatCloud

HatCloud - abandonné HatCloud construit en Ruby. Il permet de contourner CloudFlare pour découvrir l'adresse IP réelle. Cela peut être utile si vous devez tester votre serveur et votre site web. Tester votre protection contre les Ddos Déni de Service ou Dos. CloudFlare est un service de réseau de...

Cloudcheck

Cloudcheck Cloudcheck est conçu pour être utilisé dans le même dossier que CloudFail. Assurez-vous que tous les fichiers de ce dépôt sont dans le même dossier avant utilisation. Créez également un fichier texte vide nommé none.txt dans le dossier data, ainsi il n'effectuera pas de bruteforce de...

WarChild

War Child Warchild est une suite de tests de déni de service conçue pour analyser la résistance de votre site web face à différents types d'attaques par déni de service auxquelles vous serez confronté, principalement organisées par des malfaiteurs pour endommager votre site. Installation...

evilwaf

EvilWAF — это продвинутый прозрачный MITM-прокси для обхода межсетевых экранов и глубокий сканер уязвимостей WAF, предназначенный для авторизованного тестирования безопасности. Он работает на транспортном уровне — не изменяет полезную нагрузку, cookie или заголовки ваших инструментов. Работает с...

Cloudflare-Bypass

Cloudflare-Bypass Outils de contournement Cloudflare | PentestCore Est un outil pour contourner Cloudflare que vous pouvez utiliser pour obtenir l'IP principale du serveur du site. Comment l'utiliser Linux : Entrez la commande ci-dessous dans le terminal : git clone...

CloudUnflare

CloudUnflare...

Exploit for CVE-2026-63030

wp2shell-cf-bypass Independent PoC for the WordPress batch ro...

Exploit for Deserialization of Untrusted Data in Facebook React

⚡ CVE-2025-55182 – Auto Exploit Toolkit Precision Engine...

From Cloudflare Bypass to Credit Card Theft

Introduction On July 6, 2025, a suspicious Python package called 'cloudscrapersafe' was uploaded to the Python Package Index PyPI. Marketed as a utility to evade Cloudflare’s anti-bot protections, this package was a modified version of a widely used 'cloudscraper' library, which is used to automa...

SSRF vulnerability in the vrite

Description This vulnerability can be used to leak remote server information, bypass CDN like cloudflare. Also it can be used to the SSRF attack. Proof of Concept Here we can use it to leak the real IP of the https://app.vrite.io. GET /proxy?url=https://your-vps-ip.nip.io/ HTTP/2 Host: app.vrite....

Yuga Labs: Origin IP Exposed waf bypass

The origin IP address of the website was exposed, allowing bypassing of the anti-DDoS mechanism in place, such as Cloudflare. This could have enabled access to the service without going through the web application firewall, potentially leading to unfiltered payloads being forwarded to the service...

SMTP2GO BBP: Origin IP found, WAF Cloudflare Bypass

Description: I have discovered that the http://172.105.190.180/login/ site exposed it's IP which could allow bypassing of anti-DDoS mechanisms i.e you are using Cloudflare for protection. For Originate IP address which I found from https://search.censys.io/ By using these IP address as a resolver...

Logitech: GET based Open redirect on [streamlabs.com/content-hub/streamlabs-obs/search?query=]

Summary: Description: in the following link, the parameter query is reflecting in multiple places, one of them is in the tag in the head section of the HTML source, the reflection is in the content attribute to be precise check the below image F983200 And i was able to break out of the content...

Razer: Reflected XSS on molpay.com with cloudflare bypass

The tester discovered a reflected XSS vulnerability on molpay.com which could allow an adversary to steal client side information such as a cookie. Razer Fintech thanks the tester for his clear report and PoC. Follow brutelogic for amazing bypass tips. Thank you for bounty @razer 🙏...

Razer: [press.razer.com] Origin IP found, Cloudflare bypassed

The tester discovered that the press.razer.com site exposed its IP which could allow bypassing of anti-DDoS mechanisms. While minor, Razer does appreciate the report and the tester bringing this to our attention...

CloudUnflare - Reconnaissance Real IP Address For Cloudflare Bypass

Reconnaissance Real IP address for Cloudflare Bypass. Preparation: 1. CompleteDNS API Create an account at completedns.com and verify first. Input your email and password on CompleteDNSLogin variable in cloudunflare.bash. 2. Dependencies Needed curl dig whois Debian Based apt-get install curl...

There are Upload file the file name at the time of discovery of the delay injection vulnerability-vulnerability warning-the black bar safety net

! The It is author in invited to test items found in the Upload File name the filename of a time delay blind injection vulnerabilities, this position is relatively rare, Share this in hopes of everyone starting to learn a role. The following is the author of the discovery process. Earlier this...

BillCipher - Information Gathering Tool For A Website Or IP Address

Information Gathering tool for a Website or IP address, use some ideas from Devploit. BillCipher can work in any operating system if they have and support Python 2, Python 3, and Ruby. Features DNS Lookup Whois Lookup GeoIP Lookup Subnet Lookup Port Scanner Page Links Zone Transfer HTTP Header Ho...

Th3Inspector - Tool for Information Gathering

Tool For Information Gathering. Usage Short Form| Long Form| Description ---|---|--- -i| --info| Website Information -n| --number| Phone Number Information -mx| --mailserver| Find IP Address And E-mail Server -w| --whois| Domain Whois Lookup -l| --location| Find Website/IP Address Location -c|...