m0rtem's tracked open-source repos, sorted by stars.
Utilize misconfigured DNS and old database records to find hidden IP's behind the CloudFlare network