
Behind the Curtain ์ ์์: DAMcraft
A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare. Also allows you to gather a lot more information about the website, like querying info from crt.sh, Shodan and more.
์ด ํ์ฅ ๊ธฐ๋ฅ์ ์ฌ์ฉํ๋ ค๋ฉด Firefox๊ฐ ํ์ํจ
ํ์ฅ ๋ฉํ ๋ฐ์ดํฐ
์คํฌ๋ฆฐ์ท




์ ๋ณด
Behind the Curtain
A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare.
Also allows you to gather a lot more information about the website, like querying info from crt.sh,
Shodan and IP-API.
On top of that, it also allows you to spoof the
use a different domain, for example when bypassing some Cloudflare protections.
Credits:
The logo
A big special thank you to Skittles (@skitsy. on Discord, @skitty_skits on Twitter)
for creating the logo for this extension, both the one with Cloudflare enabled and the one with Cloudflare disabled.
MurmurHash3 library
I was reading the Shodan blog on favicons and I thought it would be
interesting to create a browser extension that would hash the favicon of the current page and then search for it on Shodan.
After I started working on this, I checked if someone made a js library for murmurhash3 and I found out that someone
already made a browser extension that does exactly what I wanted to do! The extension is called "favicon-hash-browser-extension",
please check it out here, I only used the library for hashing from it:
https://github.com/michaelknap/favicon-hash-browser-extension/blob/main/src/lib/murmurhash3.js
This was after I did most code. I decided to implement it anyway, as I wanted to add a lot more to my extension anyway
than just hashing the favicon.
A Firefox extension supposed to help you find the backend IP-Address of a website proxied by Cloudflare.
Also allows you to gather a lot more information about the website, like querying info from crt.sh,
Shodan and IP-API.
On top of that, it also allows you to spoof the
Host
header of the request, which can be useful for pretending to use a different domain, for example when bypassing some Cloudflare protections.
Credits:
The logo
A big special thank you to Skittles (@skitsy. on Discord, @skitty_skits on Twitter)
for creating the logo for this extension, both the one with Cloudflare enabled and the one with Cloudflare disabled.
MurmurHash3 library
I was reading the Shodan blog on favicons and I thought it would be
interesting to create a browser extension that would hash the favicon of the current page and then search for it on Shodan.
After I started working on this, I checked if someone made a js library for murmurhash3 and I found out that someone
already made a browser extension that does exactly what I wanted to do! The extension is called "favicon-hash-browser-extension",
please check it out here, I only used the library for hashing from it:
https://github.com/michaelknap/favicon-hash-browser-extension/blob/main/src/lib/murmurhash3.js
This was after I did most code. I decided to implement it anyway, as I wanted to add a lot more to my extension anyway
than just hashing the favicon.
ํ๊ฐ
๊ถํ๋ ์์๋ณด๊ธฐ
๋ค์ ๊ถํ ํ์:
- ๋ธ๋ผ์ฐ์ ํญ์ ์ ๊ทผ
- ๋ชจ๋ ์น์ฌ์ดํธ์์ ์ฌ์ฉ์์ ๋ฐ์ดํฐ์ ์ ๊ทผ
์ถ๊ฐ ์ ๋ณด
- ๋ถ๊ฐ ๊ธฐ๋ฅ ๋งํฌ
- ๋ฒ์
- 1.3.2
- ํฌ๊ธฐ
- 26.08 KB
- ๋ง์ง๋ง ์ ๋ฐ์ดํธ
- ์ผ ๋ ์ (2024๋ 3์ 20์ผ)
- ๊ด๋ จ ์นดํ ๊ณ ๋ฆฌ
- ๋ผ์ด์ ์ค
- All Rights Reserved
- ๋ฒ์ ๋ชฉ๋ก
- ํ๊ทธ
๋ชจ์์ง์ ์ถ๊ฐ
DAMcraft ๋์ ๋ค๋ฅธ ํ์ฅ ๊ธฐ๋ฅ
- ์์ง ํ์ ์ด ์์ต๋๋ค
- ์์ง ํ์ ์ด ์์ต๋๋ค
- ์์ง ํ์ ์ด ์์ต๋๋ค
- ์์ง ํ์ ์ด ์์ต๋๋ค
- ์์ง ํ์ ์ด ์์ต๋๋ค
- ์์ง ํ์ ์ด ์์ต๋๋ค