CloakQuest3r - Open-source security research tool for identifying

项目说明

<h4 align="center"> If you find this GitHub repo useful, please consider giving it a star! ⭐️ </h4>

<p align="center">
<a href="
<img src=" alt="Stars">
</a>
<a href="
<img src=" alt="Forks">
</a>
<a href="
<img src=" alt="Issues">
</a>
<a href="
<img src=" alt="License">
</a>
</p>

<p align="center">
<a href="
<img src="
</a>
&nbsp;
<a href="
<img src="
</a>
&nbsp;
<a href="
<img src="
</a>
&nbsp;
<a href="
<img src="
</a>

</p>

<img width="100%" align="centre" src=" />

<be>

CloakQuest3r is a Python-based security research 工具 designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services.

Websites often rely on Cloudflare to mask their origin 服务端 IPs for security and performance benefits. However, misconfigurations—such as exposed subdomains, legacy DNS records, or improperly secured services—can unintentionally reveal the underlying ser.

CloakQuest3r focuses on subdomain enumeration and passi techniques to help security professionals, penetration testers, and web administrators assess whether sensiti infrastructure is inad exposed. The 工具 is intended to support authorized security testing, defensi, and infrastructure hardening efforts.

🚀 Run Online Free On Google Colab, Google Shell, Binder

<!--
![Open In Colab]()

![Open in Cloud Shell]()
-->

<p align="center">
<a href=" src=" alt="Open In Colab" height="40"></a>
<a href=" src=" alt="Open in Cloud Shell" height="40" ></a>
<a href=" src=" alt="Open In Binder" height="40" ></a>
</p>

Key Features:

With CloakQuest3r, you can confidently e website security, unveil hidden , and secure your web assets by disclosing the true IP address concealed behind Cloudflare's protecti.

#### Featured:

CloakQuest3r is one of the Top 20 Most Popular Hacking Tools in 2023 by KitPloit

#### Limitation

> [!IMPORTANT]
> <h4> This 工具 is a Proof of Concept and is for Educational Purposes Only. </h4>

> [!CAUTION]
> Please use this responsibly and ethically.
> <h4> DISCLAIMER </h4>
> It is possible to use CloakQuest3r for nefarious purposes. It merely illustrates what adept attackers are capable of. Defenders have a responsibility to consider such attacks and protect their users from them. Using CloakQuest3r should only be done with the written permission of the targeted parties for legitimate penetration testing assignments.

---

<h4 align="center">
OS compatibility :
<br><br>
<img src="
<img src="
<img src="
<img src="
</h4>

<h4 align="center">
Requirements:
<br><br>
<img src="
<img src="
</h4>

How to Use:
1. Run with a single command-line argument: the target domain you want to analyze.

For Termux(android) User use the command gi if having trouble installing cryptography using requirements.txt

pkg install python-cryptography

3. The 工具 will check if the website is using Cloudflare. If not, it will inform you and ask if you still want to proceed.

4. If Cloudflare is detected, it will first print historical IP records and then it will scan for subdomains and identify their real IP addresses.

5. You will recei output, including the number of subdomains scanned, the total number of subdomains found, and the time taken for the scan.

6. Any real IP addresses found will be displayed, allowing you to conduct further analysis and penetration testing.

it simplifies the process of assessing website security by pro a clear, organized, and informati. Use it to enhance your security assessments, identify potential , and secure your web assets.

---

Optional: SecurityTrails API

Retrie IP information from SecurityTrails. if you have an API key add it to the configuration file (config.ini).

Upon initial execution of the script, it generates a config.ini file with the following content:

Go to CloakQuest3r directory and add your API key in config.ini file.

Subsequently, the script attempts to retrieve data from the SecurityTrails API. If the retrie due to reasons such as quota limitations or site una, the corresponding function is gracefully skipped.

<!--
#### Run It Online on replit.com
It is just a demo and not all functionality is a. Please install the 工具 to access its full potential.

![Run on Repl.it]()
-->
---
#### Contribution:

Contributions and feature requests are welcome! If you encounter any issues or ha for impro, feel free to open an issue or submit a pull request.

#### 😴🥱😪💤 ToDo:

#### 💬 If having an issue Chat here
![Discord Server]()

⭔ Snapshots:

<img width="100%" align="centre" src=" />
-->
<h4 align="center"> ‼️ Other Useful Tools 🤓 </h4>

R4ven Track Someone's Location Over The Internet.

Facad1ng is a URL masking 工具 designed to help you Hide Phishing URLs.

Omnisci3nt is a powerful web reconnaissance 工具.

WebSecProbe bypass 403.

fetches, , and stores working proxies.

<h4 align="center"> If you find this GitHub repo useful, please consider giving it a star! ⭐️ </h4>

项目信息

开发语言：Python

Star 数：2269

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Open-源码 security research 工具 for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。