CheckCdn
CheckCdn is a tool designed to accurately determine whether a given IP address is part of a CDN (Content Delivery Network). This tool is particularly useful in penetration testing, where identifying real IP addresses and filtering out CDN nodes can reveal valuable asset information.
Key Features:
- API Integration: Utilizes APIs from major cloud providers to check if an IP is a CDN node.
- Local Caching: Supports local caching using SQLite to store previously checked non-CDN IPs, reducing redundant API calls.
- Configurable Parameters: Allows users to configure various parameters such as database path, query delay, and input/output file paths.
- Multi-Provider Support: Currently supports multiple cloud providers including Tencent Cloud, Alibaba Cloud, Baidu Cloud, and Huawei Cloud.
Benefits:
- Efficiency: Quickly filters out CDN nodes from a large list of IPs, streamlining the reconnaissance process in security assessments.
- Cost-Effective: Can be used without incurring costs for CDN services, as it primarily relies on API calls that do not require active CDN subscriptions.
- User-Friendly: Easy to set up and configure, making it accessible for both novice and experienced users in the cybersecurity field.
Highlights:
- The tool creates a
config.yamlfile upon first run for easy configuration. - Users are advised to manage API keys carefully and understand the potential costs associated with certain cloud services.
- Contributions and feedback are encouraged to enhance the tool's capabilities and support for additional cloud providers.