GithubHelp home page GithubHelp logo

hackcdn's Introduction

hackcdn

寻找CDN背后的真实IP。

说明

  • 使用猪猪侠的wydomain2进行子域名收集
  • 使用第三方库IPy进行CIDR地址处理
  • 根据HTTP响应包长度在给出的地址范围内寻找真实IP
  • 若担心由于跳转造成的判断不准确可在URL中带上路径
  • 可以选择在请求中带上Cookie信息
  • 考虑到网站可能在其它端口可用-p选项指定端口列表

使用

帮助信息

WX20170712-171055@2x

目标网站的域名，使用了CDN

WX20170712-181255@2x

收集目标相关信息

WX20170712-181505@2x

得到子域名及其IP

WX20170712-181901@2x

得到IP段信息，同时发现目标真实IP段

WX20170712-181521@2x

在该IP段查找目标网站的真实IP

WX20170712-181636@2x

成功发现一个IP

WX20170712-181651@2x

Test URL后边的两个数字分别是不特别设置Host头的响应包长度，以及把Host头设置为目标域名时的响应包长度（考虑到有些网站的真实IP所在主机为反向代理，它们会根据Host头转发到后端负载主机）。如果前者是0而后者长度正确，则应在本地配置hosts后通过域名访问网站。

hackcdn's People

Contributors

superfish9 avatar

Watchers

James Cloos avatar pt007 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.