Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CloudPeler — PHP CLI tool that resolves the real origin IP behind CloudFlare-protected websites, returning hostname, organization, geolocation, and DNS data for reconnaissance. | Kitploit
Tools/GitHubGitHub/zidansec/cloudpeler
OSINT (Open Source Intelligence)ReconnaissanceNetwork MappingInformation GatheringWAF BypassWeb SecurityPenetration TestingDNS AnalysisArchived
GitHubzidansec/cloudpeler

CloudPeler

PHP CLI tool that resolves the real origin IP behind CloudFlare-protected websites, returning hostname, organization, geolocation, and DNS data for reconnaissance.

1.6k19113 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View RepositoryWebsite


CrimeFlare is back again! This tools can help you to see the real IP behind CloudFlare protected websites





Donation for project development


Introduction

This tool serves to find the original IP behind websites that have been protected by CloudFlare, the information generated can be useful for further penetration. The information generated by this tool is as follows.

  • CloudFlare IP
  • CloudFlare NS1
  • CloudFlare NS2
  • Real IP
  • Hostname
  • Organization
  • Address (Country, City, Region, Postal Code)
  • Location
  • Time Zone

Code Samples

This tool is made with PHP code with very simple programming using several APIs to get maximum results, but this tool does not guarantee 100% to be able to bypass websites that have been protected by CloudFlare. Some websites sometimes cannot be detected by their original IP.

API Used In This Tool

  • https://crimeflare.zidansec.com
  • http://ipinfo.io/2.2.2.2/json

Additional reference tool to see the real IP behind WAF Cloudflare

OsintSec - Information Gathering Intelligence

Simple tools for further penetration, this tool is able to visualize network from Domain, IP, Email and more.

  • https://osinthreat.herokuapp.com/

Installation

Before running CrimeFlare make sure you have php-curl installed, install it with the command sudo apt install php-curl and follow the next installation steps.

git clone https://github.com/zidansec/CloudPeler.git
cd CloudPeler
./crimeflare.php exemple.com

Simple install CrimeFlare on Ubuntu:

sudo wget https://github.com/zidansec/CloudPeler/raw/master/crimeflare.php -O /bin/crimeflare && sudo chmod +x /bin/crimeflare

Run command: crimeflare or crimeflare exemple.com

Easy to run

If you want to run crimeflare easily on linux ubuntu, follow the below command. This command will add the crimeflare.php file into the /bin/ directory on your Ubuntu OS.

cd CloudPeler
sudo cp crimeflare.php /bin/crimeflare

To run it now just type command crimeflare in your linux terminal

Reference:

  • https://www.xploit.my.id/2021/07/crimeflare-bypass-tools-cloudflare.html
  • https://zidansec.com/cloudpeler-crimeflare-next-generation/
Download Tool