hakoriginfinder is an open-source Go utility that identifies possible origin servers behind reverse proxies and web application firewalls. It helps security researchers investigate whether publicly accessible servers expose the infrastructure supporting a protected website. The software sends a request to a reference website and records its HTTP response. It then tests candidate IP addresses using the original hostname in the HTTP Host header. Responses are compared using Levenshtein distance to identify servers returning similar content. Users can configure similarity thresholds, concurrent threads, and destination ports. The tool accepts IP addresses through standard input and reports matching candidates with similarity scores. It is useful for authorized infrastructure assessments, reverse proxy configuration reviews, and origin server exposure detection.
Features
- Reverse Proxy Origin Server Discovery
- HTTP Response Similarity Analysis
- Levenshtein Distance-Based Matching
- Configurable Thread Counts and Port Selection
- Custom Host Header Testing
- Command-Line Match Reporting and Scoring