musana/CF-Hero

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2632 stars · 253 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CF-Hero is a Go-based reconnaissance CLI tool that discovers the real origin IP addresses of Cloudflare-protected web applications. It aggregates data from multiple intelligence sources such as ZoomEye, Censys, Shodan, and SecurityTrails, plus DNS records and historical data, and validates findings to reduce false positives.

Use cases

• find the real IP behind a Cloudflare-protected site
• enumerate DNS records and historical DNS data for a domain
• correlate related domains to locate origin servers
• run OSINT reconnaissance using Shodan, Censys, and ZoomEye
• validate candidate origin IPs through response analysis
• map the attack surface of a target domain

When to choose

• you need to bypass or audit Cloudflare proxying to find origin IPs
• you want a multi-source OSINT tool that aggregates several search engines in one run
• you prefer a fast, single-binary Go CLI for DNS and intelligence gathering

When to avoid

• you need a general-purpose vulnerability scanner rather than origin IP discovery
• the target is not behind Cloudflare or a similar CDN proxy
• you require a GUI or web interface instead of a command-line tool
• your use case requires a permissively licensed dependency with an explicit OSS license (the repo has no license file)

Facets

cli-tool · maturity active

osint security networking cli security osint networking penetration-testing windows cli cross-platform cloudflare reconnaissance origin-ip-discovery dns-recon attack-surface go linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="musana/CF-Hero")