cloudflared

Cloudflare Tunnel client Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin e.g. a webserver. Cloudflare attracts client requests and sends them to...

IG-Detective

IG-Detective 🕵️‍♂️📸 Created by@shredzwho | 💖 Sponsor this project IG-Detective is a high-performance, Python-based Open Source Intelligence OSINT tool for Instagram. It offers a premium interactive shell to perform deep analysis on Instagram accounts, extract location history, mapping interactions,...

svg_phishing_tools

SVG Security Analysis Toolkit - Tool Documentation This toolkit contains specialized Python tools for analyzing potentially malicious SVG files and detecting security mechanisms. Overview The toolkit consists of four main tools: 1. extract.py - Static analysis for obfuscated URL extraction 2...

cloudflare-security-art

Cloudflare Security Configuration Free Plan About us I’m Aksana 5Ksana , founder of the open-source BitcoinArt project. My husband, Aliaksandr ALEX Zasinets , helps with security, testing, and open-source tools. Aliaksandr is a QA Automation Engineer , Penetration Tester , and open-source securit...

zentinel

A security-first reverse proxy built to guard the free web A reverse proxy on Cloudflare Pingora with explicit limits, predictable failure modes and security logic in crash-isolated agents, for operators who want to sleep. Website · Docs · Playground · All repositories Zentinel is a reverse proxy...

cloudscraper

cloudscraper - Enhanced Edition Enhanced byZied Boughdir Latest Release: v3.0.0 🚀 - Major Upgrade 🆕 Major New Features in v3.0.0 🛡️ Automatic 403 Error Recovery - Intelligent session refresh when 403 errors occur after prolonged use 📊 Session Health Monitoring - Proactive session management with...

mhr-cfw

MHR-CFW MITM Domain-Fronted HTTP Relay + Cloudflare Worker Exit English| Persian ---|--- How It Works 1 - GAS + Cloudflare Worker Exit Client - Local Relay - Google/CDN Front - GAS Google Apps Script Relay - Cloudflare Worker - Exit | +- Shows www.google.com to network DPI filter 2 - GAS +...

Scrapling

Effortless Web Scraping for the Modern Web -DFE0E5 !Static Badgehttps://img.shields.io/badge/Skill-black?style=flat&label=Agent&...

area51

Every callback, captured. The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a dashboard you control, and it gets whatever response you choose in return. Getting started · Playbooks · CLI · Architecture ·...

cloudflare-bypass-2026

Cloudflare Bypass Tool 2026 A multi-strategy toolkit for researching and testing Cloudflare Turnstile / Challenge flows on macOS, Windows, and Linux. 面向 Cloudflare Turnstile / Challenge 的多方案研究与授权测试工具集，支持 Mac / Windows / Linux 。 Table of Contents / 目录 English| 中文 ---|--- Disclaimer| 免责声明 Overview|...

CloudFail

CloudFail CloudFail is a tactical reconnaissance tool which aims to gather enough information about a target protected by Cloudflare in the hopes of discovering the location of the server. Using Tor to mask all requests, the tool as of right now has 3 different attack phases. 1. Misconfigured DNS...

ROOT-APP-GOBINARY-CVE-2026-1229 CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root

Root has patched CVE-2026-1229 in the github.com/cloudflare/circl package for Root:Go. Multiple fixed versions available...

flareprox

FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...

Cloudcheck

Cloudcheck Cloudcheck is made to be used in the same folder as CloudFail. Make sure all files in this repo are in the same folder before using. Also create a empty text file called none.txt in the data folder, that way it doesn't do a subdomain brute when testing. Cloudcheck will automatically...

CVE-2023-6289

CVE-2023-6289 Swift Performance Lite = 2.3.6.14 - Missing Authorization to Unauthenticated Settings Export Description The Swift Performance Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the on functionality hooked via admininit functi...

nuubi

Nuubi Tools Scanner, Recon. Details Options: -h/--help | Show help message and exit Arguments: -b/--banner | Banner grabing of target ip address -s/--subnet | Subnetlookup of target -c/--cms | Cms detect with headers -d/--dns | Dnslookup of target domain -e/--extract | Extract links from target...

waf-community-bypasses

WAF community bypasses Web Application Firewalls a.k.a. WAF are garbage. All the vendors, from the cheapest Cloudflare to "enterpise" like Imperva, Akamai, F5, Checkpoint, or Fortinet are just cheating with their customers by delivering 0 actual protection. 99.9% of WAF signatures are just RegExp...

evilwaf

EvilWAF is an advanced transparent MITM Firewall bypass proxy and deep WAF vulnerability scanner designed for authorized security testing. It operates at the transport layer — it does not touch payloads, cookies, or headers from your tools. Works with any tool likeffuz, sqlmap, nuclei and etc tha...

pingap

Pingap A reverse proxy and application gateway built on Cloudflare Pingora. It is configured through TOML files or a web admin that is part of the binary, takes changes without a restart, and comes with more than thirty plugins. 中文说明 | Documentation · 中文文档 | Examples | Plugins | Crates | Upgradin...

CF-Hero

CF-Hero CF-Hero What's it? • Features • Background • Installation • Usage • Running cf-hero • ZoomEye Sponsor • To Do What's it? CF-Hero is a comprehensive reconnaissance tool developed to discover the real IP addresses of web applications protected by Cloudflare. It performs multi-source...