CloudBypass

Tool for finding real origin IPs behind Cloudflare/WAF.

Features

• Subdomain enumeration (crt.sh, Certspotter, HackerTarget, Subdomain Center, Bufferover, AlienVault, ThreatMiner, JLDC, SecurityTrails)
• Historical IP discovery (ViewDNS, SecurityTrails API, Shodan, Censys)
• Content similarity validation
• SSL certificate matching
• WAF detection (wafw00f)
• Favicon hash computation (Shodan/Censys)
• Multiple domain processing

Installation

git clone https://github.com/YOUR_USERNAME/cloudbypass.git
cd cloudbypass
pip install -r requirements.txt

Configuration

Create ~/.cloudbypass.conf:

securitytrails=YOUR_API_KEY
shodan=YOUR_API_KEY
censys_id=YOUR_CENSYS_ID
censys_secret=YOUR_CENSYS_SECRET

API keys are optional - tool works without them, but some features require paid APIs.

Usage

# Single domain
python cloudbypass.py -i example.com -v

# List of domains
python cloudbypass.py -l domains.txt -o results.txt

# Full scan (all API tests, favicon, WAF)
python cloudbypass.py -i example.com --full

# Only enumerate subdomains
python cloudbypass.py -i example.com --subs-only

# Only resolve IPs (no validation)
python cloudbypass.py -i example.com --resolve-only

Options

Flag	Description
-i	Single domain
-l	File with domains (one per line)
-o	Output file
-v	Verbose output
-t	Timeout (default: 10)
-s	Similarity threshold 0-1 (default: 0.7)
-w	Workers (default: 20)
--subs-only	Only enumerate subdomains
--subs-file	Load subdomains from file
--resolve-only	Only resolve IPs, skip validation
--no-waf	Skip WAF detection
--favicon	Compute favicon hash
--full	Run all tests (Shodan/Censys, favicon, WAF)

Requirements

• Python 3.8+
• requests
• urllib3

Optional (for full functionality):

• wafw00f (WAF detection)
• nmap (SSL certificate check)

Disclaimer

For educational and authorized security testing only.