CloudFlair
Find origin servers of websites behind CloudFlare or CloudFront using Censys internet-wide scan data.
What is CloudFlair?
CloudFlair is a Python-based security tool designed to find origin servers of websites that are behind CloudFlare or CloudFront but are publicly exposed due to misconfigurations. It works by querying Censys's internet-wide scan data to identify IPv4 hosts presenting SSL certificates associated with the target domain, then verifies these candidates to pinpoint likely origin servers. This helps security teams detect and fix CDN setup errors that could allow attackers to bypass CDN protections.
Security researchers, penetration testers, and system administrators responsible for securing web applications behind CDNs like CloudFlare or CloudFront.
Developers choose CloudFlair because it automates a tedious manual reconnaissance process, providing a focused, command-line tool that integrates directly with Censys data. Its ability to verify candidates and support both CloudFlare and CloudFront makes it a practical choice for identifying a specific but critical misconfiguration in CDN deployments.
Overview
🔎 Find origin servers of websites behind CloudFlare by using Internet-wide scan data from Censys.
Use Cases
Best For
- Identifying misconfigured CloudFlare origin servers during security assessments
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
