CloudBunny is a tool that uses search engines such as Censys, Shodan, and Zoomeye to find the origin IP of the server. It is typically used when a company only uses a Web Application Firewall (WAF) for its main domain and leaves the subdomains unprotected. CloudBunny uses the same concept to find origin IPs of the domains. In this recipe, we will look at the usage of CloudBunny to find misconfigured Cloudflare domains.
Finding origin servers with CloudBunny
How to do it...
- Download/clone the repository from GitHub: https://github.com/Warflop/CloudBunny:
- Next, install the Python dependencies by using the pip install -r requirements.txt command.
- Since the tool is dependent on Shodan, Censys, and Zoomeye, we need to provide...