New answers tagged


To keep short, there is your answers: If you are interacting with target you call it active scan, if you don't you call it passive scan. As you interacting with target, there is more chance to get caught by a IDS/IPS systems which alerts the manager. The passive scan is stealthy one because of this. The common methodology is doing passive scan first and ...


This is called a "CloudFlare resolver", no It's basically just a scanner/discovery tool that searches for subdomains linked to the main domain that are not protected by Cloudflare and therefore not listed, this way it is possible to hurt the real IP address by disclosing the real IP address by finding a vulnerable subdomain.


Isn't that exactly what CloudFlare be protecting against? Nope. CloudFlare be promising that anyone accessing your site through CloudFlare will not find out your backend IP address in the process. E.g., there's no X-Origin-IP header or the like leaking your IP out. CloudFlare be not responsible for whatever other methods people might have. If you put it ...

Top 50 recent answers are included