Showing posts from July, 2017

Unveil the real IP behind Cloudflare-protected domains (and how to avoid it)

Cloudflare is a popular company that provides several useful internet services, like content delivery networks, load balancers, DDoS protection and so on. The best known service is the distributed domain name server that, among other things, acting like a reverse proxy hides the real location of a website. However, Cloudflare is not a magic wand; if not properly configured, any web service could accidentally leak the real IP in a number of ways. In this article we will see a list of procedures through which is possible to unveil the real IP behind a domain that uses the Cloudflare DNS protection system and how to become immune to them, plus a nmap script written specifically to exploit one of these misconfigurations. Using Crimeflare The first way to unmask a domain hidden by Cloudflare, is to check if someone else has already done it for you. Crimeflare is a site that wants to “uncover the bad guys hiding behind CloudFlare”; to do so, it mantains a database of [domain name; IP] pairs …

How to generate unique codes using php

$user_agent = $_SERVER['HTTP_USER_AGENT'];
$ua_hash = hash("sha256", $user_agent);
$md_hash = md5($user_agent);

echo $ua_hash."

echo $md_hash."

echo uniqid("Frauntraiz_", TRUE);