Ross ROSS = Recommend OSS · open-source software intelligence for agents

spyboy-productions/CloakQuest3r

Open-source security research tool for identifying origin IP exposure of websites protected by Cloudflare and similar reverse proxy services. observed · 2026-08-28

github.com/spyboy-productions/CloakQuest3r · homepage · Python · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

54/100

  • Activity 61
  • Release rhythm 35
  • Longevity 73

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 1035
  • days_rel: n/a
  • days_push: 239
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

2250 stars · 301 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

CloakQuest3r is a Python-based open-source security research tool that identifies potential origin IP exposure of websites protected by Cloudflare and similar reverse proxy/CDN services. It uses subdomain enumeration and passive analysis techniques (DNS history, SSL certificate analysis) to detect misconfigurations that reveal underlying server infrastructure.

Use cases

  • find the real origin IP behind a Cloudflare-protected website
  • check if my subdomains leak the origin server IP
  • enumerate subdomains and resolve their IPs during a pentest
  • audit DNS history and SSL certificates for exposed infrastructure
  • assess whether a WAF or CDN is properly hiding the backend server
  • harden my website's infrastructure against origin IP discovery

When to choose

  • you are a penetration tester or security researcher doing authorized reconnaissance on Cloudflare-protected targets
  • you are a web administrator auditing whether your own origin servers are exposed
  • you need a lightweight Python CLI for subdomain and DNS-based origin discovery

When to avoid

  • you need a full vulnerability scanner or exploitation framework
  • you require a GUI or continuous monitoring platform rather than a point-in-time CLI scan
  • your target is not behind a reverse proxy/CDN, since the tool's techniques are Cloudflare-focused

Facets

cli-tool · maturity active

osint security networking web-scraping developer-tools security penetration-testing osint networking web-development python cli windows cross-platform cloudflare-bypass origin-ip-discovery subdomain-enumeration dns-analysis pentesting reconnaissance waf-bypass linux macos

2 sources

Member repositories

RepositoryRoleHealth v2
spyboy-productions/CloakQuest3rmain54

For agents

markdown · JSON · MCP: product_card(name="spyboy-productions/CloakQuest3r")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem