CloakQuest3r Find Real IPs Behind Cloudflare

CloakQuest3r - Discover Real IPs Behind Cloudflare ⚡🛡️
CloakQuest3r is a Python-based security research tool built to help uncover the real origin IP address of websites protected by Cloudflare and other CDN / reverse proxy services.
It’s designed for authorized security testing, defensive assessments, and infrastructure hardening 🔍✅.
👉 GitHub: https://github.com/spyboy-productions/CloakQuest3r

---

​

Why Real IP Discovery Matters 🌐​

Websites use Cloudflare to hide their origin server IP for better security and performance.
But common misconfigurations can accidentally expose that IP, such as:

• ⚠️ Leaked subdomains
• 🧾 Old or forgotten DNS records
• 🖥️ Legacy services still pointing to the origin
• 🔓 Improper SSL or infrastructure setup

Once the real IP is exposed, attackers can bypass Cloudflare entirely 🚨.

---

​

What CloakQuest3r Actually Does 🧠​

CloakQuest3r uses passive analysis and subdomain enumeration to identify weak points that may reveal the real backend server.
It is ideal for:

• 🧑‍💻 Penetration testers
• 🔐 Security researchers
• 🏢 Web administrators
• 🛡️ Blue team assessments

---

​

Key Features of CloakQuest3r 🚀​

🔎 Real IP Detection​

Identifies potential origin IP addresses behind Cloudflare-protected domains — critical for realistic pentesting.

🌍 Subdomain Scanning​

Enumerates subdomains to find services that may resolve directly to the origin server.

🕘 IP Address History​

Uses ViewDNS to fetch:

• Historical IPs
• Server location
• ISP / owner
• Last seen date

🔐 SSL Certificate Analysis​

Extracts SSL certificate data to spot infrastructure clues that might expose the real IP.

🧭 SecurityTrails API (Optional)​

Add your free SecurityTrails API key to retrieve deeper historical IP intelligence 📊.

⚡ Threaded Scanning​

Uses multi-threading for fast and efficient scans, even with large subdomain lists.

📄 Detailed Reporting​

Provides clean output including:

• Total subdomains scanned
• Discovered subdomains
• Scan duration
• Any exposed real IPs

Perfect for deep analysis and security reporting 🧾.

---

​

Run CloakQuest3r Online for Free ☁️​

No local setup needed! You can run CloakQuest3r directly on:

• 🚀 Google Colab
• 🐚 Google Cloud Shell
• 📦 Binder

This makes testing fast, portable, and beginner-friendly.

---

​

Basic Usage Example 🧪​

git clone https://github.com/spyboy-productions/CloakQuest3r.git
cd CloakQuest3r
python3 cloakquest3r.py -d example.com

Optional (SecurityTrails):

# config.ini
SECURITYTRAILS_API_KEY=your_api_key_here

​

Final Thoughts 🧠​

CloakQuest3r is a powerful tool for uncovering hidden infrastructure weaknesses behind Cloudflare.
If you care about real-world web security, bug bounty hunting, or defensive audits, this tool deserves a place in your toolkit 🧰🔥.