https://github.com/projectdiscovery/cdncheck
A utility to detect various technology for a given IP address.
https://github.com/projectdiscovery/cdncheck
api cdn cli cname detection lib technology
Last synced: 8 months ago
JSON representation
A utility to detect various technology for a given IP address.
- Host: GitHub
- URL: https://github.com/projectdiscovery/cdncheck
- Owner: projectdiscovery
- License: mit
- Created: 2020-07-04T07:22:38.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2025-03-31T15:29:13.000Z (8 months ago)
- Last Synced: 2025-04-03T09:41:25.829Z (8 months ago)
- Topics: api, cdn, cli, cname, detection, lib, technology
- Language: Go
- Homepage: https://projectdiscovery.io
- Size: 2.16 MB
- Stars: 819
- Watchers: 19
- Forks: 97
- Open Issues: 17
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
- jimsghstars - projectdiscovery/cdncheck - A utility to detect various technology for a given IP address. (Go)
README
cdncheck
Features •
Installation •
Usage •
Join Discord
cdncheck is a tool for identifying the technology associated with dns / ip network addresses.

## Features
- **CDN**, **CLOUD** and **WAF** Detection
- **Easy to use as library**
- Easily extendable providers
- IP, DNS input support
- Text, JSONL output
- Filters on output
# Installation
**cdncheck** requires **go1.19** to install successfully. Run the following command to install the latest version:
```sh
go install -v github.com/projectdiscovery/cdncheck/cmd/cdncheck@latest
```
# Usage
```sh
cdncheck -h
```
This will display help for the tool. Here are all the switches it supports.
```yaml
Usage:
./cdncheck [flags]
Flags:
INPUT:
-i, -input string[] list of ip / dns to process
DETECTION:
-cdn display only cdn in cli output
-cloud display only cloud in cli output
-waf display only waf in cli output
MATCHER:
-mcdn, -match-cdn string[] match host with specified cdn provider (cloudfront, fastly, google, leaseweb)
-mcloud, -match-cloud string[] match host with specified cloud provider (aws, google, oracle)
-mwaf, -match-waf string[] match host with specified waf provider (cloudflare, incapsula, sucuri, akamai)
FILTER:
-fcdn, -filter-cdn string[] filter host with specified cdn provider (cloudfront, fastly, google, leaseweb)
-fcloud, -filter-cloud string[] filter host with specified cloud provider (aws, google, oracle)
-fwaf, -filter-waf string[] filter host with specified waf provider (cloudflare, incapsula, sucuri, akamai)
OUTPUT:
-resp display technology name in cli output
-o, -output string write output in plain format to file
-v, -verbose display verbose output
-j, -jsonl write output in json(line) format
-nc, -no-color disable colors in cli output
-version display version of the project
-silent only display results in output
CONFIG:
-r, -resolver string[] list of resolvers to use (file or comma separated)
-e, -exclude exclude detected ip from output
-retry int maximum number of retries for dns resolution (must be at least 1) (default 2)
UPDATE:
-up, -update update cdncheck to latest version
-duc, -disable-update-check disable automatic cdncheck update check
```
## How to add new providers?
[provider.yaml](cmd/generate-index/provider.yaml) file contains list of **CDN**, **WAF** and **Cloud** providers. The list contains **URLs**, **ASNs** and **CIDRs** which are then compiled into a final `sources_data.json` file using `generate-index` program.
Example of `provider.yaml` file -
```yaml
cdn:
# asn contains the ASN numbers for providers
asn:
leaseweb:
- AS60626
# urls contains a list of URLs for CDN providers
urls:
cloudfront:
- https://d7uri8nf7uskq.cloudfront.net/tools/list-cloudfront-ips
fastly:
- https://api.fastly.com/public-ip-list
# cidr contains the CIDR ranges for providers
cidr:
akamai:
- "23.235.32.0/20"
- "43.249.72.0/22"
- "103.244.50.0/24"
- "103.245.222.0/23"
- "103.245.224.0/24"
- "104.156.80.0/20"
```
New providers which can be scraped from a URL, ASN or a list of static CIDR can be added to `provider.yaml` file by following simple steps as listed below:
- Fork the GitHub repository containing the `cmd/generate-index/provider.yaml` file.
- Clone your forked repository to your local machine and navigate to the `cmd/generate-index` directory.
- Open the `provider.yaml` file and locate the section for the type of provider you want to add (CDN, WAF, or Cloud).
- Add the new provider's information to the appropriate section in the `provider.yaml` file.
- Commit your changes with a descriptive commit message.
- Push your changes to your forked repository on GitHub.
- Open a pull request to the original repository with your changes.
### Other providers
**CNAME** and **Wappalyzer** based additions can be done in [other.go](other.go) file. Just simply add the values to the variables and you're good to go.
```go
// cdnCnameDomains contains a map of CNAME to domains to cdns
var cdnCnameDomains = map[string]string{
"cloudfront.net": "amazon",
"amazonaws.com": "amazon",
...
}
// cdnWappalyzerTechnologies contains a map of wappalyzer technologies to cdns
var cdnWappalyzerTechnologies = map[string]string{
"imperva": "imperva",
"incapsula": "incapsula",
...
}
```
## cdncheck as library
Helper library that checks if a given IP is running on Cloud / CDN / WAF.
The library can be used by importing `github.com/projectdiscovery/cdncheck`. here follows a basic example:
```go
package main
import (
"fmt"
"net"
"github.com/projectdiscovery/cdncheck"
)
func main() {
client := cdncheck.New()
ip := net.ParseIP("173.245.48.12")
// checks if an IP is contained in the cdn denylist
matched, val, err := client.CheckCDN(ip)
if err != nil {
panic(err)
}
if matched {
fmt.Printf("%v is a %v\n", ip, val)
} else {
fmt.Printf("%v is not a CDN\n", ip)
}
// checks if an IP is contained in the cloud denylist
matched, val, err = client.CheckCloud(ip)
if err != nil {
panic(err)
}
if matched {
fmt.Printf("%v is a %v\n", ip, val)
} else {
fmt.Printf("%v is not a Cloud\n", ip)
}
// checks if an IP is contained in the waf denylist
matched, val, err = client.CheckWAF(ip)
if err != nil {
panic(err)
}
if matched {
fmt.Printf("%v WAF is %v\n", ip, val)
} else {
fmt.Printf("%v is not a WAF\n", ip)
}
}
```
--------
