Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to detect IP address from #5

Closed
matheusccarvalho opened this issue Jul 26, 2022 · 9 comments
Closed

Unable to detect IP address from #5

matheusccarvalho opened this issue Jul 26, 2022 · 9 comments
Assignees
Labels
bug Something isn't working error There is an error in this project

Comments

@matheusccarvalho
Copy link

matheusccarvalho commented Jul 26, 2022

Hello, this error is showing up for any websites.

  • Unable to detect IP address from

image

@matheusccarvalho matheusccarvalho added bug Something isn't working error There is an error in this project labels Jul 26, 2022
@FALL1N1
Copy link

FALL1N1 commented Jul 26, 2022

that's because crimeflare.herokuapp.com is down, don't expect it to get fixed

@jcn50
Copy link

jcn50 commented Aug 19, 2022

that's because crimeflare.herokuapp.com is down, don't expect it to get fixed

@FALL1N1 Why shouldn't we expect to get it fixed?...

@FALL1N1
Copy link

FALL1N1 commented Aug 19, 2022

that's because crimeflare.herokuapp.com is down, don't expect it to get fixed

@FALL1N1 Why shouldn't we expect to get it fixed?...

because the way it works is stupid and useless, it just obtains information from random websites like "dnstrails" and provides you with the results (note that you must have accounts with them and pay a fee)

it does not do any sort of "hacking" whatsoever and if the website you want to take down has no "SPF", "MX" or any other DNS records revealing their IP - you will never obtain the host unless you have a friend working at CloudFlare with high access

@zidansec
Copy link
Owner

itu karena crimeflare.herokuapp.com sedang down, jangan harap bisa diperbaiki

@FALL1N1Mengapa kita tidak berharap untuk memperbaikinya?...

karena cara kerjanya bodoh dan tidak berguna, itu hanya memperoleh informasi dari situs web acak seperti "dnstrails" dan memberi Anda hasilnya (perhatikan bahwa Anda harus memiliki akun dengan mereka dan membayar biaya)

itu tidak melakukan "peretasan" apa pun dan jika situs web yang ingin Anda hapus tidak memiliki "SPF", "MX" atau catatan DNS lainnya yang mengungkapkan IP mereka - Anda tidak akan pernah mendapatkan host kecuali Anda memiliki teman yang bekerja di CloudFlare dengan akses tinggi

Yes, it works with CloudFlare database pools circa 2018. And it allows working on legacy sites that still rely on Cloudflare as WAF. But no updates for new sites using cloudflare. So it can be concluded that this tool only works on sites that have been around for a long time. The database we use is the same as the database at crimeflare.org which existed several years ago. And now there are no more updates regarding the database. Although I have a manual way to see the IP behind cloudflare but to realize it is quite difficult.

@zidansec
Copy link
Owner

Of course, I already said that this tool does not guarantee 100% that it can see the real IP of cloudflare protected websites. The tool that guarantees is your own ability not with tools alone. Research manually or with a tool is needed to find the Original IP of the cloudflare waf.

@d4rks0ul555
Copy link

if there is no misconfiguration and all old ip moved to cloudflare server and even you knew the real ip but already moved to cloudflare server it's gonna be useless

@KaKi87
Copy link

KaKi87 commented Feb 14, 2023

@zidansec Where can that database be found ?

If I can download it, then I would create an app that works offline, also I'm thinking about creating a DNS server based on it.

Thanks

@zidansec zidansec pinned this issue Aug 8, 2023
@zidansec
Copy link
Owner

This tool is back in operation, but need to know. This tool is not 100% accurate, because as I explained. The way this tool works takes advantage of Cloudflare's leaked database in 2018. New API https://crimeflare.zidansec.com

@KaKi87
Copy link

KaKi87 commented Aug 16, 2023

Cloudflare's leaked database in 2018

Where can we find that ? Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working error There is an error in this project
Projects
None yet
Development

No branches or pull requests

6 participants