KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #ai-agent #developer-tools #codex #typescript #cli #deepseek-harness #claude-code #ai-agents #mcp #rust

CloudRip

★ 641 Open GitHub ↗

A tool that helps you find the real IP addresses hiding behind Cloudflare.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# CloudRip

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
[![Python 3.8+](https://img.shields.io/badge/python-3.8+-blue.svg)](https://www.python.org/downloads/)
[![Version](https://img.shields.io/badge/version-2.1.0-green.svg)](https://github.com/moscovium-mc/CloudRip/releases)
[![Platform](https://img.shields.io/badge/platform-linux%20%7C%20macos%20%7C%20windows-lightgrey.svg)]()
[![Tool Type](https://img.shields.io/badge/tool-recon-red.svg)]()
[![Built for](https://img.shields.io/badge/built%20for-pentesting-red.svg)]()

[![GitHub Stars](https://img.shields.io/github/stars/moscovium-mc/CloudRip?style=social)](https://github.com/moscovium-mc/CloudRip/stargazers)
[![Forks](https://img.shields.io/github/forks/moscovium-mc/CloudRip?style=social)](https://github.com/moscovium-mc/CloudRip/network/members)
[![Issues](https://img.shields.io/github/issues/moscovium-mc/CloudRip)](https://github.com/moscovium-mc/CloudRip/issues)

[![Maintenance](https://img.shields.io/badge/Maintained%3F-yes-green.svg)](https://github.com/moscovium-mc/CloudRip/graphs/commit-activity)
[![Code style: black](https://img.shields.io/badge/code%20style-black-000000.svg)](https://github.com/psf/black)

A tool that helps you find the real IP addresses hiding behind Cloudflare by checking subdomains. For penetration testing, security research, and learning how Cloudflare protection works.

## Table of Contents

- [What it does](#what-it-does)
- [Installation](#installation)
- [How to use it](#how-to-use-it)
- [Examples](#examples)
- [Output Formats](#output-formats)
- [Version History](#version-history)
- [Contributors](#contributors)
- [Contributing](#contributing)
- [Support](#support)
- [Need to avoid Rate Limits?](#need-to-avoid-rate-limits)
- [Legal Notice](#legal-notice)
- [License](#license)

## What it does

- **IPv4 & IPv6 support** - Resolves both A and AAAA records
- **Multiple IPs detection** - Finds ALL IPs behind a domain, not just the first one
- **Progress bar** - Real-time progress with live stats (found/cloudflare count)
- **Dynamic Cloudflare IP detection** - Fetches latest IP ranges from Cloudflare's API (with fallback)
- **Fast subdomain scanning** - Uses multiple threads to speed things up
- **Multiple wordlists** - Combine several wordlists in a single scan
- **Wordlist comments** - Use `#` to add comments in your wordlists
- **Multiple output formats** - Export to JSON, YAML, CSV, or plain text
- **Verbose & quiet modes** - Control output verbosity
- **Filters out Cloudflare IPs** - Only shows you the real server addresses
- **Bring your own wordlist** - Or use the built-in one (dom.txt)
- **Save your findings** - Export results to a file for later
- **Rate limiting** - Won't spam the target and get you blocked
- **Solid default wordlist** - Organized and comprehensive for better results

## Installation

### Requirements

- Python 3.8 or higher
- pip (Python package manager)

### Setup

Clone the repository:
```bash
git clone https://github.com/moscovium-mc/CloudRip
cd CloudRip
```

Create a virtual environment and install dependencies:

**Linux/macOS:**
```bash
python3 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
```

**Windows:**
```powershell
python -m venv venv
venv\Scripts\activate
pip install -r requirements.txt
```

> [!TIP]
> Always use a virtual environment to avoid dependency conflicts with other Python projects.

## How to use it

Basic scan:
```bash
python3 cloudrip.py example.com
```

With all the options:
```bash
python3 cloudrip.py example.com -w wordlist1.txt -w wordlist2.txt -t 20 -o report.json -f json
```

**Options:**

| Option | Description |
|--------|-------------|
| `<domain>` | The site you're testing (like example.com) |
| `-w, --wordlist` | Wordlist file(s). Can be specified multiple times (default: dom.txt) |
| `-t, --threads` | How many threads to run (default: 10) |
| `-o, --output` | Save results to a file |
| `-f, --format` | Output format: `normal`, `json`, `yaml`, `csv` (default: normal) |
| `-v, --verbose` | Show all results including "not found" entries |
| `-q, --quiet` | Minimal output - only show found IPs |

## Examples

**Basic scan:**
```bash
python3 cloudrip.py example.com
```

**Multiple wordlists with JSON output:**
```bash
python3 cloudrip.py example.com -w subs1.txt -w subs2.txt -o report.json -f json
```

**Fast scan with 50 threads:**
```bash
python3 cloudrip.py example.com -t 50 -o results.csv -f csv
```

**Verbose mode (see all attempts):**
```bash
python3 cloudrip.py example.com -v
```

**Quiet mode (only found IPs):**
```bash
python3 cloudrip.py example.com -q -o found.txt
```

## Output Formats

### Normal (default)
```
CloudRip Scan Report
============================================================
Target: example.com
Date: 2025-11-28T12:00:00+00:00
Total checked: 150

[FOUND] Non-Cloudflare IPs (3):
  mail.example.com
    v4:[192.168.1.1, 192.168.1.2, 192.168.1.3]
  ftp.example.com
    v4:[10.0.0.1] | v6:[2001:db8::1]

[CLOUDFLARE] Behind Cloudflare (5):
  www.example.com
    v4:[104.16.1.1 [CF], 172.67.1.1 [CF]] | v6:[2606:4700::1 [CF]]
```

### JSON
```json
{
  "target_domain": "example.com",
  "scan_date": "2025-11-28T12:00:00+00:00",
  "total_checked": 150,
  "summary": {
    "found": 3,
    "cloudflare": 5,
    "not_found": 142,
    "errors": 0
  },
  "results": { ... }
}
```

### CSV
```csv
domain,ipv4,ipv4_cloudflare,ipv6,ipv6_cloudflare,status,error
mail.example.com,192.168.1.1;192.168.1.2;192.168.1.3,,,,found,
www.example.com,104.16.1.1;172.67.1.1,104.16.1.1;172.67.1.1,2606:4700::1,2606:4700::1,cloudflare,
```

## Version History

See [CHANGELOG.md](CHANGELOG.md) for full version history.

## Contributors

Huge thanks to [@Dxsk](https://github.com/Dxsk) for the contributions to v2.1.0

## Contributing

Got ideas for improvements? Found a bug? If it's better wordlists, new features, or bug fixes - all contributions help.

**How to contribute:**

1. Fork the repository
2. Create a feature branch (`git checkout -b feature/amazing-feature`)
3. Commit your changes (`git commit -m 'Add amazing feature'`)
4. Push to the branch (`git push origin feature/amazing-feature`)
5. Open a pull request

**Guidelines:**
- Follow Python best practices and PEP 8
- Add type hints to new code
- Update documentation as needed
- Test your changes thoroughly

## Support

If you find this project useful, consider supporting my work:

**Crypto donations:**
- <a href="bitcoin:bc1quavqz6cxqzfy4qtvq4zxc4fjgap3s7cmxja0k4"><img src="https://img.shields.io/badge/Bitcoin-000000?style=plastic&logo=bitcoin&logoColor=white" alt="Bitcoin"></a> `bc1quavqz6cxqzfy4qtvq4zxc4fjgap3s7cmxja0k4`
- <a href="ethereum:0x5287af72afbc152b09b3bf20af3693157db9e425"><img src="https://img.shields.io/badge/Ethereum-627EEA?style=plastic&logo=ethereum&logoColor=white" alt="Ethereum"></a> `0x5287af72afbc152b09b3bf20af3693157db9e425`
- <a href="solana:HYZjfEx8NbEMJX1vL1GmGj39zA6TgMsHm5KCHWSZxF4j"><img src="https://img.shields.io/badge/Solana-9945FF?style=plastic&logo=solana&logoColor=white" alt="Solana"></a> `HYZjfEx8NbEMJX1vL1GmGj39zA6TgMsHm5KCHWSZxF4j`
- <a href="monero:86zv6vTDuG35sdBzBpwVAsD71hbt2gjH14qiesyrSsMkUAWHQkPZyY9TreeQ5dXRuP57yitP4Yn13SQEcMK4MhtwFzPoRR1"><img src="https://img.shields.io/badge/Monero-FF6600?style=plastic&logo=monero&logoColor=white" alt="Monero"></a> `86zv6vTDuG35sdBzBpwVAsD71hbt2gjH14qiesyrSsMkUAWHQkPZyY9TreeQ5dXRuP57yitP4Yn13SQEcMK4MhtwFzPoRR1`

## Legal Notice

> [!WARNING]
> **FOR AUTHORIZED SECURITY TESTING ONLY**

**Only use CloudRip on systems you have explicit permission to test.** This tool is designed for ethical security research, authorized penetration testing, and educational purposes only.

**Unauthorized reconnaissance or scanning of systems is illegal** and may violate various laws including:
- Computer Fraud and Abuse Act (CFAA) in the United States
- Computer Misuse Act in the United Kingdom
- Similar legislation in other jurisdictions

**You are solely responsible for how you use this tool.** The author assumes NO LIABILITY for any misuse, damage, or illegal activity conducted with CloudRip.

**Ethical Use Required:**
- Obtain written authorization before testing
- Respect rate limits and system resources
- Follow responsible disclosure practices
- Comply with all applicable laws and regulations

## License

MIT License - See [LICENSE](LICENSE) for details.

---

**[Star this repo](https://github.com/moscovium-mc/CloudRip)** if you find it useful

</div>

CloudRip

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README