Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

CloudFlare Mobile - A full-featured Cloudflare management app built with React Native & Expo

A full-featured Cloudflare management app built with React Native & Expo. Manage your domains, DNS records, Workers, KV, R2, Pages, and more — right from your phone. Disclaimer: This is an unofficial app and is not affiliated with, e…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

A full-featured Cloudflare management app built with React Native & Expo. Manage your domains, DNS records, Workers, KV, R2, Pages, and more — right from your phone.




Disclaimer: This is an unofficial app and is not affiliated with, endorsed by, or officially connected to Cloudflare, Inc.







Download





Get it on Google Play



Available on Google Play, or grab the APK from GitHub Releases.






Screenshots


















Dashboard Zones Services
Dashboard Zones Services















Settings (Dark) Settings (Light)
Settings Dark Settings Light





Features





  • Zone Management — View and manage all your Cloudflare zones


  • DNS Records — Create, edit, delete A, AAAA, CNAME, MX, TXT, and more


  • SSL/TLS — Configure encryption mode, certificates, HTTPS settings


  • Firewall — Manage firewall rules, IP access rules, rate limiting


  • Cache — Purge cache, toggle development mode, cache settings


  • Analytics — Traffic, bandwidth, and threats overview with time-series charts


  • Under Attack Mode — One-tap security level toggle per zone


  • DNS Import/Export — Bulk import & export records as BIND zone files


  • Email Routing — Manage routing rules, catch-all, destination addresses


  • Audit Logs — Account activity history viewer


  • Biometric Lock — Fingerprint/face lock before the app opens


  • Workers — View and manage Cloudflare Workers scripts


  • KV Namespaces — Browse KV storage namespaces


  • R2 Buckets — Manage R2 object storage with a built-in file browser (upload / download / delete)


  • Workers Live Logs — Real-time tail of Worker requests and console output


  • Pages — View Cloudflare Pages projects and deployments


  • Page Rules — Configure page rules per zone


  • Multi-Account — Switch between multiple Cloudflare accounts


  • Dark / Light Mode — Manual theme toggle (Light, Dark, System)


  • Localization — English and Bahasa Indonesia


  • Secure Storage — API tokens stored with hardware-backed encryption (Android Keystore)


  • Privacy First — Sensitive data (email, account IDs) masked by default


  • Premium — One-time purchase removes all ads forever






How to Use






1. Get Your Cloudflare API Token



You need a Cloudflare API Token or Global API Key to use this app.



API Token (Recommended):




  1. Login to dash.cloudflare.com

  2. Go to My Profile > API Tokens

  3. Click Create Token

  4. Use the Edit zone DNS template, or create a custom token with permissions you need:



    • Zone:Read — View zones


    • Zone Settings:Read/Edit — Manage zone settings (SSL, Cache, etc.)


    • DNS:Read/Edit — Manage DNS records


    • Firewall Services:Read/Edit — Manage firewall rules


    • Analytics:Read — View analytics


    • Worker Scripts:Read/Edit — Manage Workers


    • Account Settings:Read — View account info



  5. Click Continue to summary > Create Token

  6. Copy the token — you'll only see it once



Global API Key (Not Recommended):




  1. Go to My Profile > API Tokens

  2. Scroll down to Global API Key

  3. Click View and copy the key

  4. You'll also need your Cloudflare email address




Global API Key has full access to your entire account. Use API Token with scoped permissions whenever possible.







2. Login




  1. Open the app

  2. Complete the onboarding (first time only)

  3. Choose your auth method: API Token or Global API Key

  4. Enter your credentials and tap Sign In

  5. The app will verify your token and load your account






3. Navigate the App




























Tab What You Can Do
Dashboard Overview of zones, stats, quick actions
Zones Browse all zones, search, tap to manage
Services Workers, KV, R2, Pages management
Settings Theme, language, account info, sign out





4. Managing a Zone




  1. Tap any zone from Dashboard or Zones tab

  2. You'll see zone info, nameservers, and management options:



    • DNS Records — Add/edit/delete records, toggle proxy


    • SSL/TLS — Change encryption mode (Off/Flexible/Full/Full Strict)


    • Firewall — View and manage firewall rules


    • Cache — Purge all cache, toggle dev mode


    • Analytics — View traffic and threat data


    • Page Rules — Configure URL-based rules



  3. Toggle Development Mode directly from the zone detail page






5. Quick Actions



From the Dashboard, swipe the Quick Actions row to access:





  • Manage DNS — Jump to zones list


  • Purge Cache — Pick a zone and purge


  • Workers — Go to services


  • Analytics — Pick a zone and view stats


  • Firewall — Pick a zone and manage rules


  • SSL/TLS — Pick a zone and configure






6. Switch Account



If you have multiple Cloudflare accounts:




  1. Go to Settings

  2. Under Switch Account, tap the account you want

  3. The app will reload with that account's data






7. Change Theme & Language





  • Theme: Settings > Appearance > Light / Dark / System


  • Language: Settings > Language > English / Bahasa Indonesia






Auth Methods


























Method Header Security Scope
API Token Authorization: Bearer <token> Scoped permissions Recommended
Global API Key
X-Auth-Email + X-Auth-Key
Full account access Not recommended


Your credentials are stored locally on your device using Android Keystore (hardware-backed encryption). They are never sent to any server other than api.cloudflare.com.






Getting Started (Development)






Prerequisites




  • Node.js 18+

  • Android Studio with Android SDK

  • JDK 17+

  • A Cloudflare account






Install






git clone https://github.com/imtaqin/CFMobile.git
cd CFMobile
npm install









Run






# Start Expo dev server
npx expo start

# Run on Android emulator
npx expo run:android

# Run on Web
npx expo start --web









Build Production AAB






# Generate native project
npx expo prebuild --platform android --clean

# Build release AAB
cd android && ./gradlew bundleRelease

# Output: android/app/build/outputs/bundle/release/app-release.aab









Tech Stack





  • React Native 0.81 + Expo 54


  • Expo Router — File-based navigation


  • Expo Secure Store — Encrypted credential storage


  • Axios — HTTP client for Cloudflare API v4


  • i18next — Internationalization (EN / ID)


  • react-native-svg — Custom icon system (Lucide-based) & analytics charts


  • react-native-google-mobile-ads — AdMob ads (free version)


  • react-native-iap — Premium one-time purchase (removes ads)


  • expo-local-authentication — Biometric app lock


  • expo-document-picker / expo-sharing / expo-file-system — DNS import/export & R2 file browser






Project Structure






app/
(tabs)/ # Tab screens (Dashboard, Zones, Services, Settings)
zone/[id]/ # Zone detail pages (DNS, SSL, Firewall, Cache, Analytics, Page Rules)
login.tsx # Login screen
onboarding.tsx # First-time onboarding
components/ui/ # Reusable UI components (Card, Badge, Icon, MenuItem, etc.)
contexts/ # Auth & Theme providers
services/ # Cloudflare API client & TypeScript types
hooks/ # Custom React hooks
locales/ # i18n translation files (en.json, id.json)
constants/ # Theme colors, spacing, typography









Known Limitations





  • Rate Limiting — Cloudflare API allows 1,200 requests per 5 minutes. The app does not currently batch requests, so heavy usage may hit the limit.


  • No Offline Mode — All data is fetched live from Cloudflare API. No local caching of zone data.


  • iOS — Not tested on iOS. The app is built for Android first.


  • Workers Editor — You can view Workers scripts but cannot edit code inline. Use the Cloudflare dashboard for code editing.


  • Two-Factor Auth — The app does not handle 2FA. Use API Tokens which bypass 2FA.






Privacy Policy



https://imtaqin.id/page/-privacy-policy-cloudflare-mobile






License



MIT

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - CloudFlare Mobile - A full-featured Cloudflare management app built with React Native & Expo
id: fa79f8cb-4afe-4d21-a0bb-c1ac724c36cb
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "CloudFlare Mobile - A full-fea" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("CloudFlare Mobile - A full-featured Clou")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*CloudFlare Mobile - A full-featured Clou*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "CloudFlare Mobile - A full-featured Clou"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph3 Knoten / 2 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich CloudFlare Mobile - A full-featured Clou.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten CloudFlare Mobile - A full-featured Cloudflare management app built with React Native & Expo

Thematisch verwandte Begriffe: CloudFlare, Mobile, fullfeatured, Cloudflare · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-88003 | InvoicePlane is a self-hosted open source application for managing invoi…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag