首先声明
本文章仅供技术研究,若将信息做其他用途,由用户承担全部法律责任及连带责任,本站不承担任何法律及连带责任,请遵守中华人民共和国网络安全法
---本期教程内容比上次做的更加完善,做了很多补充
讲解
CDN有什么作用?
对于网络安全人员而言,查找到真实的IP有助于追踪溯源,可以进一步发现攻击者的线索。
对于执法机构而言,如果发现互联网上出现非法的行为,可以传唤ISP(互联网服务提供商)获取该ip地址的详细信息,从而打击违法犯罪活动
对于一些套了CDN的网站,保护自己网站能够安全运营
等等的安全用途
查找方法
1.DNS历史解析记录
2.查找子域名分站
3.网站邮件信息
4.网络空间安全引擎搜索
5.利用SSL证书寻找真实IP
6.国外主机解析域名
7.扫描全网
8.配置不当导致绕过
9.网站phpinfo.php文件
10.网络抓包
方法一:历史解析记录
查询域名的历史解析记录,可能会找到网站使用CDN前的解析记录,从而获取真实IP
相关查询的网站有:iphistory、DNS查询、微步在线、域名查询、DNS历史查询、Netcraft
方法二:查找子域名分站
很多时候,一些重要的站点会做CDN,而一些子域名并没有加入CDN,而且跟主站在同一个C段内,这时候,就可以通过查找子域名来查找网站的真实IP
1.搜索引擎查询:如Google、Baidu、Bing等传统搜索引擎,比如site:"baidu.com -www(-就是不包含这个www,来查询)
2.通过HTTPS证书来查询(只适用于https网站),如crt.sh在线查询
3.通过爆破子域名工具查询:Layer子域名爆破机、subDomainBrute
方法三:网站邮件信息
一般邮件服务器在内部,没有CDN解析,邮件返回的域名IP可能是真实IP,比如邮箱注册、邮箱找回密码、RSS邮件订阅等功能场景,通过网站给自己发邮件,从而让目标主动暴露他们的真实的IP,查看邮件头信息,从而获取到网站的真实IP
方法四:网站空间安全引擎搜索
通过关键字或者网站域名,就可以找出被记录的IP,很多时候获取到的就是网站的真实IP
其中Fofa里新出了一个工具据说是查到显示了就是90%保真具体我也不知道,项目地址:https://fofa.info/extensions/source
方法五:利用SSL证书寻找真实IP
证书颁发机构(CA)必须将他们发布的每个SSL/TLS证书发布到公共日志中,SSL/TLS证书通常包括域名、子域名和电子邮件地址。因此SSL/TLS证书成为了脚本小子的常用溯源方法
1.在crt.sh上查找目标网站SSL证书的HASH
2.然后再用Censys搜索该HASH即可获取真实IP地址
3.也可以直接在Censys进行搜索主机
方法六:国外主机解析域名
大部分CDN厂商因为各种原因只做了国内的线路,而针对国外的线路可能几乎没有,此时我们使用国外的DNS查询,很可能获取到真实IP
海外多PING测试工具推荐:Pingdom、Catchpoint、host-tracker
需要找冷门国外DNS才行,像谷歌的DNS,国内用的人越来越多了,很多CDN提供商都把谷歌DNS作为国内市场之一,所以能查到的结果自然会和国内差不了多少
方法七:扫描全网
通过Zmao、masscan等工具对整个互联网发起扫描,针对扫描结果进行关键字查找,获取网站真实IP
1.Zmap号称是最快的互联网扫描工具,能够在45分钟扫遍全网
2.masscan号称是最快的互联网端口扫描器,最快可以在六分钟内扫遍互联网
方法八:配置不当导致绕过
在配置CDN的时候,需要指定的域名、端口信息,有时候往往小小的细节就最容易导致CDN防护被绕过从而暴露真实IP
案例:
1.为了方便用户访问,我们常常将1.xx.cn和xx.cn解析到同一个站点,而CDN只配置了1.xx.cn,通过访问xx.cn,就可以绕过CDN了
2.站点同时支持http和https协议访问,站长粗心大意只配置了https协议,忘记了配置http协议那么这时访问http就可以轻易绕过
方法九:网站phpinfo.php文件
这个命中率很高,很多大站都喜欢放个phpinfo,具体要看路径字典强度,是很容易跑出来的
方法十:网络抓包
如果目标站点有自己的APP,通过抓取APP请求来获取真实IP
Comments 141 条评论
博主 Stevenrow
https://36and6health.com/# canadian pharmacy without prescription
博主 CharlesApele
canadian pharmacy 1 internet online drugstore [url=https://cheapestcanada.com/#]best canadian pharmacy to buy from[/url] 77 canadian pharmacy
博主 DavidSlign
https://cheapestandfast.shop/# buy drugs without prescription
buy drugs without prescription [url=https://cheapestandfast.com/#]purchasing prescription drugs online[/url] buying prescription medicine online
博主 Stevenrow
https://cheapestandfast.shop/# canada pharmacy online no prescription
博主 DavidSlign
https://cheapestandfast.com/# buy medications without prescriptions
canada online pharmacy [url=https://cheapestcanada.com/#]ordering drugs from canada[/url] canadian online pharmacy
博主 JimmieJup
https://cheapestandfast.com/# discount prescription drugs canada
博主 CharlesApele
the canadian drugstore [url=https://cheapestcanada.shop/#]canadian pharmacy meds[/url] canadian pharmacy tampa
博主 Stevenrow
https://cheapestcanada.com/# canadian pharmacy
博主 MarvinFet
cheap propecia without rx [url=https://propeciaf.online/#]cheap propecia without prescription[/url] buying generic propecia
博主 Robertethef
https://clomiphene.shop/# how to get cheap clomid without insurance
博主 MarvinFet
buy cheap propecia pills [url=https://propeciaf.online/#]cost of propecia pill[/url] get propecia no prescription
博主 MarvinFet
neurontin singapore [url=https://gabapentin.club/#]neurontin 300 mg coupon[/url] generic neurontin 300 mg
博主 JamesBrese
https://cytotec.xyz/# order cytotec online
博主 MarvinFet
can you get clomid pills [url=https://clomiphene.shop/#]where can i buy clomid[/url] can you get clomid price
博主 Robertethef
https://lisinopril.club/# price of lisinopril 30 mg
博主 JamesBrese
https://propeciaf.online/# cost of generic propecia without dr prescription
博主 MarvinFet
lisinopril 20 mg price in india [url=https://lisinopril.club/#]lisinopril 20 mg price in india[/url] buy lisinopril mexico
博主 JamesBrese
https://gabapentin.club/# drug neurontin
博主 MarvinFet
order generic propecia pill [url=https://propeciaf.online/#]generic propecia pills[/url] buying generic propecia online
博主 JamesBrese
https://clomiphene.shop/# cost of clomid online
博主 Robertethef
https://lisinopril.club/# zestril online
博主 MarvinFet
can i purchase clomid price [url=https://clomiphene.shop/#]where buy clomid without dr prescription[/url] buying generic clomid
博主 JamesBrese
https://lisinopril.club/# lisinopril 2
博主 MarvinFet
Cytotec 200mcg price [url=https://cytotec.xyz/#]buy cytotec pills online cheap[/url] buy cytotec over the counter
博主 Robertethef
https://cytotec.xyz/# Abortion pills online
博主 JamesBrese
https://gabapentin.club/# neurontin generic south africa
博主 Williamnit
https://mexicanpharmacy1st.online/# mexican drugstore online
博主 Manuelver
mexico drug stores pharmacies [url=https://mexicanpharmacy1st.com/#]mexican mail order pharmacies[/url] mexican mail order pharmacies
博主 Williamnit
https://mexicanpharmacy1st.shop/# mexican pharmacy
博主 Manuelver
buying prescription drugs in mexico [url=https://mexicanpharmacy1st.com/#]mexican mail order pharmacies[/url] mexico pharmacy
博主 Williamnit
https://mexicanpharmacy1st.shop/# medication from mexico pharmacy
博主 KennethAgomy
https://mexicanpharmacy1st.online/# п»їbest mexican online pharmacies
博主 Manuelver
mexico pharmacies prescription drugs [url=https://mexicanpharmacy1st.com/#]mexican border pharmacies shipping to usa[/url] mexico pharmacies prescription drugs
博主 Williamnit
https://mexicanpharmacy1st.shop/# mexican drugstore online
博主 Manuelver
mexican mail order pharmacies [url=https://mexicanpharmacy1st.online/#]medicine in mexico pharmacies[/url] п»їbest mexican online pharmacies
博主 Williamnit
https://mexicanpharmacy1st.com/# reputable mexican pharmacies online
博主 Manuelver
medication from mexico pharmacy [url=https://mexicanpharmacy1st.shop/#]purple pharmacy mexico price list[/url] mexico drug stores pharmacies
博主 Williamnit
https://mexicanpharmacy1st.online/# reputable mexican pharmacies online
博主 KennethAgomy
https://mexicanpharmacy1st.shop/# buying prescription drugs in mexico online
博主 Manuelver
mexican mail order pharmacies [url=https://mexicanpharmacy1st.shop/#]mexican mail order pharmacies[/url] purple pharmacy mexico price list
博主 Williamnit
https://mexicanpharmacy1st.com/# mexico drug stores pharmacies
博主 Manuelver
reputable mexican pharmacies online [url=https://mexicanpharmacy1st.online/#]mexican mail order pharmacies[/url] mexico drug stores pharmacies
博主 Williamnit
https://mexicanpharmacy1st.com/# mexico pharmacy
博主 KennethAgomy
https://mexicanpharmacy1st.online/# mexico drug stores pharmacies
博主 Williamnit
https://mexicanpharmacy1st.com/# mexican drugstore online
博主 Billyenapy
https://gabapentinneurontin.pro/# neurontin 100mg tablet
博主 MarvinHaf
zithromax for sale us [url=https://zithromaxa.store/#]can i buy zithromax over the counter in canada[/url] generic zithromax 500mg india
博主 MarvinHaf
amoxicillin 500 mg for sale [url=https://amoxila.pro/#]canadian pharmacy amoxicillin[/url] can we buy amoxcillin 500mg on ebay without prescription
博主 Billyenapy
https://amoxila.pro/# rexall pharmacy amoxicillin 500mg
博主 MarvinHaf
zithromax 500 mg [url=https://zithromaxa.store/#]zithromax buy[/url] buy zithromax 1000mg online
博主 Billyenapy
https://doxycyclinea.online/# doxylin
博主 MarvinHaf
canada pharmacy prednisone [url=https://prednisoned.online/#]prednisone 30 mg tablet[/url] prednisone 10 mg price
博主 Billyenapy
https://prednisoned.online/# prednisone tablet 100 mg
博主 MarvinHaf
purchase zithromax online [url=https://zithromaxa.store/#]buy zithromax no prescription[/url] generic zithromax over the counter
博主 Billyenapy
https://amoxila.pro/# amoxicillin 500 capsule
博主 MarvinHaf
can you buy zithromax online [url=https://zithromaxa.store/#]zithromax tablets for sale[/url] zithromax 500 mg lowest price pharmacy online
博主 Billyenapy
https://amoxila.pro/# how much is amoxicillin
博主 MarvinHaf
prednisone 30 mg tablet [url=https://prednisoned.online/#]prednisone uk[/url] order prednisone with mastercard debit
博主 Billyenapy
https://gabapentinneurontin.pro/# neurontin brand name 800mg
博主 MarvinHaf
order zithromax over the counter [url=https://zithromaxa.store/#]zithromax for sale cheap[/url] zithromax 1000 mg pills
博主 Billyenapy
https://amoxila.pro/# can you purchase amoxicillin online
博主 MarvinHaf
prednisone 10 mg tablet [url=https://prednisoned.online/#]how to get prednisone tablets[/url] where can i get prednisone
博主 Billyenapy
https://amoxila.pro/# amoxicillin 500mg capsules antibiotic
博主 MarvinHaf
zithromax 500mg price [url=https://zithromaxa.store/#]zithromax online no prescription[/url] generic zithromax online paypal
博主 Billyenapy
https://gabapentinneurontin.pro/# neurontin capsules
博主 MarvinHaf
prednisone 40 mg tablet [url=https://prednisoned.online/#]cost of prednisone tablets[/url] 50 mg prednisone tablet
博主 Billyenapy
https://gabapentinneurontin.pro/# neurontin 200
博主 MarvinHaf
amoxil generic [url=https://amoxila.pro/#]can we buy amoxcillin 500mg on ebay without prescription[/url] buy amoxicillin online with paypal
博主 Billyenapy
https://doxycyclinea.online/# buy doxycycline without prescription
博主 MarvinHaf
doxycycline [url=https://doxycyclinea.online/#]doxylin[/url] 200 mg doxycycline
博主 Billyenapy
https://gabapentinneurontin.pro/# cheap neurontin
博主 MarvinHaf
doxycycline [url=https://doxycyclinea.online/#]where can i get doxycycline[/url] doxycycline
博主 Billyenapy
https://doxycyclinea.online/# buy doxycycline without prescription uk
博主 Billyenapy
https://prednisoned.online/# buy prednisone 10mg online
博主 MarvinHaf
how can i get prednisone [url=https://prednisoned.online/#]prednisone 2.5 mg cost[/url] prednisone 1 mg tablet
博主 Davidkiz
buy drugs without prescription [url=https://pharmnoprescription.icu/#]online meds without prescription[/url] order prescription from canada
博主 FelipeUnaps
https://pharmworld.store/# canadian prescription pharmacy
博主 Jeromenug
https://pharmcanada.shop/# canadian pharmacy no scripts
博主 FelipeUnaps
https://pharmmexico.online/# mexican border pharmacies shipping to usa
博主 Davidkiz
canadian pharmacy coupon code [url=https://pharmworld.store/#]pharm world store[/url] buying prescription drugs from canada
博主 FelipeUnaps
https://pharmcanada.shop/# canada drugs online reviews
博主 Davidkiz
reputable canadian pharmacy [url=https://pharmcanada.shop/#]canada drugstore pharmacy rx[/url] canada drugs online
博主 FelipeUnaps
https://pharmworld.store/# online pharmacy discount code
博主 Davidkiz
canada mail order prescription [url=https://pharmnoprescription.icu/#]no prescription online pharmacy[/url] online pharmacy not requiring prescription
博主 Davidkiz
best rated canadian pharmacy [url=https://pharmcanada.shop/#]cheap canadian pharmacy[/url] canadian pharmacy meds review
博主 FelipeUnaps
https://pharmcanada.shop/# reputable canadian pharmacy
博主 Davidkiz
onlinepharmaciescanada com [url=https://pharmcanada.shop/#]online canadian pharmacy[/url] canada online pharmacy
博主 FelipeUnaps
https://pharmcanada.shop/# legitimate canadian pharmacies
博主 Jeromenug
https://pharmmexico.online/# reputable mexican pharmacies online
博主 CharlesTic
https://cialist.pro/# Buy Tadalafil 20mg
博主 ElmerSlike
Kamagra 100mg price [url=https://kamagra.win/#]buy kamagra online[/url] п»їkamagra
博主 CharlesTic
https://cialist.pro/# Cheap Cialis
博主 Davidcew
https://kamagra.win/# buy Kamagra
博主 TylerBluen
https://cenforce.pro/# cenforce for sale
博主 ElmerSlike
buy cenforce [url=https://cenforce.pro/#]Cenforce 150 mg online[/url] cenforce.pro
博主 ElmerSlike
Kamagra tablets [url=https://kamagra.win/#]kamagra oral jelly[/url] super kamagra
博主 CharlesTic
https://viagras.online/# buy Viagra over the counter
博主 ElmerSlike
Levitra 10 mg best price [url=https://levitrav.store/#]Buy Vardenafil 20mg[/url] Levitra 20 mg for sale
博主 CharlesTic
https://cialist.pro/# Cialis 20mg price
博主 ElmerSlike
Buy Tadalafil 10mg [url=https://cialist.pro/#]Generic Cialis without a doctor prescription[/url] Cialis over the counter
博主 Davidcew
https://viagras.online/# generic sildenafil
博主 CharlesTic
https://viagras.online/# Order Viagra 50 mg online
博主 DavidSmurn
who should take tamoxifen [url=https://nolvadex.life/#]nolvadex 20mg[/url] tamoxifen blood clots
博主 Williamtom
https://lisinopril.network/# order lisinopril
博主 DavidSmurn
how to get nolvadex [url=https://nolvadex.life/#]tamoxifen benefits[/url] nolvadex for pct
博主 RonaldCiz
https://nolvadex.life/# how does tamoxifen work
博主 Charlesbep
https://cytotec.club/# cytotec pills buy online
buy lisinopril online no prescription india [url=https://lisinopril.network/#]lisinopril tabs 4mg[/url] prinivil 20 mg cost
博主 Williamtom
https://finasteride.store/# get propecia pills
博主 DavidSmurn
cytotec abortion pill [url=https://cytotec.club/#]cytotec pills buy online[/url] buy misoprostol over the counter
博主 Williamtom
https://nolvadex.life/# nolvadex estrogen blocker
博主 DavidSmurn
ciprofloxacin 500 mg tablet price [url=https://ciprofloxacin.tech/#]ciprofloxacin 500mg buy online[/url] cipro for sale
博主 Williamtom
https://nolvadex.life/# clomid nolvadex
博主 DavidSmurn
ciprofloxacin [url=https://ciprofloxacin.tech/#]ciprofloxacin[/url] buy cipro online canada
博主 RonaldCiz
https://lisinopril.network/# lisinopril 60 mg tablet
博主 Charlesbep
https://cytotec.club/# buy misoprostol over the counter
buy misoprostol over the counter [url=https://cytotec.club/#]buy cytotec over the counter[/url] buy cytotec
博主 DavidSmurn
buy propecia pill [url=https://finasteride.store/#]buying generic propecia for sale[/url] buying generic propecia without rx
博主 Williamtom
https://lisinopril.network/# lisinopril price
博主 DavidSmurn
lisinopril 40 mg without prescription [url=https://lisinopril.network/#]zestril 10 mg[/url] lisinopril 50 mg price
博主 Williamtom
https://ciprofloxacin.tech/# buy cipro online canada
博主 RonaldCiz
https://nolvadex.life/# tamoxifen generic
博主 DavidSmurn
cytotec abortion pill [url=https://cytotec.club/#]Misoprostol 200 mg buy online[/url] buy misoprostol over the counter
博主 Charlesbep
https://cytotec.club/# cytotec pills buy online
cost of generic propecia price [url=https://finasteride.store/#]cheap propecia tablets[/url] order generic propecia without prescription
博主 Williamtom
https://lisinopril.network/# lisinopril pill 40 mg
博主 DavidSmurn
20 mg lisinopril without a prescription [url=https://lisinopril.network/#]lisinopril cost 40 mg[/url] lisinopril 18 mg
博主 Williamtom
https://nolvadex.life/# tamoxifen depression
博主 DavidSmurn
tamoxifen and weight loss [url=https://nolvadex.life/#]where to get nolvadex[/url] cost of tamoxifen
博主 RonaldCiz
https://ciprofloxacin.tech/# buy cipro online without prescription
博主 Charlesbep
https://finasteride.store/# cost of cheap propecia without dr prescription
order lisinopril from mexico [url=https://lisinopril.network/#]lisinopril online canadian pharmacy[/url] buy lisinopril 20 mg
博主 Williamtom
https://finasteride.store/# how cЙ‘n i get cheap propecia pills
博主 DavidSmurn
ordering lisinopril without a prescription [url=https://lisinopril.network/#]lisinopril 40 mg on line[/url] lisinopril buy in canada
博主 DavidSmurn
purchase cipro [url=https://ciprofloxacin.tech/#]buy ciprofloxacin[/url] cipro for sale
博主 Williamtom
https://nolvadex.life/# nolvadex for pct
博主 RonaldCiz
https://finasteride.store/# cost cheap propecia for sale
博主 Charlesbep
https://cytotec.club/# buy cytotec in usa
tamoxifen headache [url=https://nolvadex.life/#]benefits of tamoxifen[/url] nolvadex price
博主 DavidSmurn
10 mg lisinopril tablets [url=https://lisinopril.network/#]buy lisinopril uk[/url] lisinopril 40 mg cost
博主 Williamtom
https://lisinopril.network/# lisinopril 5 mg
博主 MarcelNam
https://indiaph24.store/# legitimate online pharmacies india
博主 RickyPYcle
canadian pharmacy in canada [url=https://canadaph24.pro/#]Licensed Canadian Pharmacy[/url] canadian pharmacy online
博主 Justintom
online pharmacy india https://indiaph24.store/# top online pharmacy india
indianpharmacy com
博主 MarcelNam
https://indiaph24.store/# reputable indian online pharmacy
博主 Justintom
online pharmacy india https://indiaph24.store/# cheapest online pharmacy india
indianpharmacy com