Also I may be dense but where does it specify that those endpoints are locked behind Enterprise subs

Jjohn mcafee Also I may be dense but where does it specify that those endpoints are locked be...

C

Cyb3r-Jak3•3/12/23, 9:32 PM

That endpoint isn't ent and they will say in the description if it is

J

john mcafeeOP•3/12/23, 9:32 PM

Hmm, I still got an authorization error.

C

Cyb3r-Jak3•3/12/23, 9:33 PM

Are you using global email and api key or api token?

J

john mcafeeOP•3/12/23, 9:34 PM

got my account identifier from here

J

john mcafeeOP•3/12/23, 9:34 PM

using global email

J

john mcafeeOP•3/12/23, 9:34 PM

and API token

C

Cyb3r-Jak3•3/12/23, 9:35 PM

Oh if you are using the API token then you don't need email

C

Cyb3r-Jak3•3/12/23, 9:35 PM

Email is only needed with Global API key

J

john mcafeeOP•3/12/23, 9:35 PM

J

john mcafeeOP•3/12/23, 9:35 PM

ok

C

Cyb3r-Jak3•3/12/23, 9:35 PM

And you need

Account:Intel

Account:Intel

Account:Intel

Account:Intel on it

C

Cyb3r-Jak3•3/12/23, 9:37 PM

curl --request GET   --url https://api.cloudflare.com/client/v4/accounts/<account id>/intel/domain?domain=cloudflare.com   --header 'Content-Type: application/json' --header 'Authorization: Bearer <api token>'

curl --request GET   --url https://api.cloudflare.com/client/v4/accounts/<account id>/intel/domain?domain=cloudflare.com   --header 'Content-Type: application/json' --header 'Authorization: Bearer <api token>'

curl --request GET   --url https://api.cloudflare.com/client/v4/accounts/<account id>/intel/domain?domain=cloudflare.com   --header 'Content-Type: application/json' --header 'Authorization: Bearer <api token>'

curl --request GET   --url https://api.cloudflare.com/client/v4/accounts/<account id>/intel/domain?domain=cloudflare.com   --header 'Content-Type: application/json' --header 'Authorization: Bearer <api token>'

J

john mcafeeOP•3/12/23, 10:03 PM

sweet, thanks

J

john mcafeeOP•3/12/23, 10:04 PM

i asked chatgpt to incorporate this function into a python script and this is what it gave me

import sys
import requests

def get_domain_intel(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        return response.json()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    account_id = "xxxxxxxxxxxxxxxxx"
    domain = sys.argv[1]
    auth_token = "xxxxxxxxxxxxxxxxxxxxxxxx"
    domain_intel = get_domain_intel(account_id, domain, auth_token)
    print(domain_intel)

import sys
import requests

def get_domain_intel(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        return response.json()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    account_id = "xxxxxxxxxxxxxxxxx"
    domain = sys.argv[1]
    auth_token = "xxxxxxxxxxxxxxxxxxxxxxxx"
    domain_intel = get_domain_intel(account_id, domain, auth_token)
    print(domain_intel)

import sys
import requests

def get_domain_intel(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        return response.json()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    account_id = "xxxxxxxxxxxxxxxxx"
    domain = sys.argv[1]
    auth_token = "xxxxxxxxxxxxxxxxxxxxxxxx"
    domain_intel = get_domain_intel(account_id, domain, auth_token)
    print(domain_intel)

import sys
import requests

def get_domain_intel(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        return response.json()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    account_id = "xxxxxxxxxxxxxxxxx"
    domain = sys.argv[1]
    auth_token = "xxxxxxxxxxxxxxxxxxxxxxxx"
    domain_intel = get_domain_intel(account_id, domain, auth_token)
    print(domain_intel)

J

john mcafeeOP•3/12/23, 10:04 PM

>mfw it actually works

A

Artemis•3/12/23, 10:26 PM

that's cool but tbf non-ai tools can also convert curl requests to python ones

J

john mcafeeOP•3/13/23, 12:01 AM

well

J

john mcafeeOP•3/13/23, 12:04 AM

chatgpt just helped me combine two different apis, first one is Cloudflare domain intel, the ipv4 addressed is grabbed from that then sent to ipinfo.io to retrieve asn info:

import sys
import requests

def get_domain_ip(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        domain_intel = response.json()
        ipv4_addresses = [r['value'] for r in domain_intel['result']['resolves_to_refs'] if r['id'].startswith('ipv4-addr')]
        if ipv4_addresses:
            return ipv4_addresses[0]
        else:
            return None
    else:
        response.raise_for_status()

def get_ip_asn(ip):
    url = f"https://ipinfo.io/{ip}/org?token=43750u3gh3g"
    response = requests.get(url)
    if response.ok:
        return response.text.strip()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    if len(sys.argv) != 4:
        print("Usage: python3 combined_script.py <account_id> <auth_token> <domain>")
        sys.exit(1)

    account_id = sys.argv[1]
    auth_token = sys.argv[2]
    domain = sys.argv[3]

    ip_address = get_domain_ip(account_id, domain, auth_token)

    if ip_address:
        asn = get_ip_asn(ip_address)
        print(f"ASN for {ip_address}: {asn}")
    else:
        print(f"No IPV4 addresses found for {domain}")

chatgpt just helped me combine two different apis, first one is Cloudflare domain intel, the ipv4 addressed is grabbed from that then sent to ipinfo.io to retrieve asn info:

import sys
import requests

def get_domain_ip(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        domain_intel = response.json()
        ipv4_addresses = [r['value'] for r in domain_intel['result']['resolves_to_refs'] if r['id'].startswith('ipv4-addr')]
        if ipv4_addresses:
            return ipv4_addresses[0]
        else:
            return None
    else:
        response.raise_for_status()

def get_ip_asn(ip):
    url = f"https://ipinfo.io/{ip}/org?token=43750u3gh3g"
    response = requests.get(url)
    if response.ok:
        return response.text.strip()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    if len(sys.argv) != 4:
        print("Usage: python3 combined_script.py <account_id> <auth_token> <domain>")
        sys.exit(1)

    account_id = sys.argv[1]
    auth_token = sys.argv[2]
    domain = sys.argv[3]

    ip_address = get_domain_ip(account_id, domain, auth_token)

    if ip_address:
        asn = get_ip_asn(ip_address)
        print(f"ASN for {ip_address}: {asn}")
    else:
        print(f"No IPV4 addresses found for {domain}")

chatgpt just helped me combine two different apis, first one is Cloudflare domain intel, the ipv4 addressed is grabbed from that then sent to ipinfo.io to retrieve asn info:

import sys
import requests

def get_domain_ip(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        domain_intel = response.json()
        ipv4_addresses = [r['value'] for r in domain_intel['result']['resolves_to_refs'] if r['id'].startswith('ipv4-addr')]
        if ipv4_addresses:
            return ipv4_addresses[0]
        else:
            return None
    else:
        response.raise_for_status()

def get_ip_asn(ip):
    url = f"https://ipinfo.io/{ip}/org?token=43750u3gh3g"
    response = requests.get(url)
    if response.ok:
        return response.text.strip()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    if len(sys.argv) != 4:
        print("Usage: python3 combined_script.py <account_id> <auth_token> <domain>")
        sys.exit(1)

    account_id = sys.argv[1]
    auth_token = sys.argv[2]
    domain = sys.argv[3]

    ip_address = get_domain_ip(account_id, domain, auth_token)

    if ip_address:
        asn = get_ip_asn(ip_address)
        print(f"ASN for {ip_address}: {asn}")
    else:
        print(f"No IPV4 addresses found for {domain}")

chatgpt just helped me combine two different apis, first one is Cloudflare domain intel, the ipv4 addressed is grabbed from that then sent to ipinfo.io to retrieve asn info:

import sys
import requests

def get_domain_ip(account_id, domain, auth_token):
    url = f"https://api.cloudflare.com/client/v4/accounts/{account_id}/intel/domain?domain={domain}"
    headers = {
        "Content-Type": "application/json",
        "Authorization": f"Bearer {auth_token}"
    }
    response = requests.get(url, headers=headers)
    if response.ok:
        domain_intel = response.json()
        ipv4_addresses = [r['value'] for r in domain_intel['result']['resolves_to_refs'] if r['id'].startswith('ipv4-addr')]
        if ipv4_addresses:
            return ipv4_addresses[0]
        else:
            return None
    else:
        response.raise_for_status()

def get_ip_asn(ip):
    url = f"https://ipinfo.io/{ip}/org?token=43750u3gh3g"
    response = requests.get(url)
    if response.ok:
        return response.text.strip()
    else:
        response.raise_for_status()

if __name__ == "__main__":
    if len(sys.argv) != 4:
        print("Usage: python3 combined_script.py <account_id> <auth_token> <domain>")
        sys.exit(1)

    account_id = sys.argv[1]
    auth_token = sys.argv[2]
    domain = sys.argv[3]

    ip_address = get_domain_ip(account_id, domain, auth_token)

    if ip_address:
        asn = get_ip_asn(ip_address)
        print(f"ASN for {ip_address}: {asn}")
    else:
        print(f"No IPV4 addresses found for {domain}")

J

john mcafeeOP•3/13/23, 12:04 AM

btw i have no prior python experience lol

TTheJourneyMan Hey Team Cloudflare. Your workers platforms is shaping up well! Any plans for an...

Z

zegevlier•4/1/23, 12:05 PM

This message would be a much better fit in #workers-feature-suggestions, this channel is meant for CF Radar (https://radar.cloudflare.com/)

TTheJourneyMan Hey Team Cloudflare. Your workers platforms is shaping up well! Any plans for an...

J

Jori•4/1/23, 5:26 PM

Maybe an integration with Zero Trust would be applicable?

D

Dahoom•4/24/23, 2:01 AM

Hello, is there anyway to interface with the URL scanner to check for malicious links? All im looking for is a simple Boolean answer or score for thousands of links an hour

Aaclassickoder any idea?

C

Chaika•6/14/23, 5:36 PM

I don't think there's a way to do that, even moreso if you want all of them, but that's one of the easiest features in Zero Trust. You could create a free Zero Trust account, and set up a DNS Policy to block all Social Networks based off the content category, and then use the ZT DNS as your pihole upstream by creating a DNS Location. It supports DoH/DoT as well

D

Dahoom•6/15/23, 5:53 AM

I'm looking for somthing that will return a boolean or a score to how safe or malicious a link could/can be. The url scanner security risks section doesnt seem to be generating my expected results when tested on a known malicious site. Is this something that could be added to the API? possibly even bypassing a full scan to just give the score/boolean?

Also I may be dense but where does it specify that those endpoints are locked behind Enterprise subs

Similar Threads

Similar Threads

Similar Threads