hakluke/hakoriginfinder

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1101 stars · 138 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

hakoriginfinder is a Go CLI tool that discovers the origin host behind a reverse proxy or WAF. It sends requests with the original Host header to a list of IP addresses and compares responses to the real site using Levenshtein similarity to identify matches.

Use cases

• find the origin server IP behind cloudflare
• bypass a cloud WAF to reach the real host
• identify which IPs in a range host the same website
• discover origin hosts during a penetration test
• check if a domain's WAF can be bypassed via direct IP access

When to choose

• you have a list of candidate IPs (e.g. from DNS history or a CIDR range) and want to find which one serves the target site
• you are doing authorized penetration testing or bug bounty recon on WAF-protected targets

When to avoid

• you lack authorization to test the target
• you need a general-purpose web scanner rather than a single-purpose origin finder

Facets

cli-tool · maturity active

http-client security networking security penetration-testing osint networking windows cli go origin-discovery waf-bypass reverse-proxy host-header levenshtein bug-bounty recon linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="hakluke/hakoriginfinder")