+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Tutorial]Cloudflare Bypass (/showthread.php?tid=4951492)
Pages: Pages
1
2
* - FFY00 - Aug 19, 2015
.-. It is easy to do but is more easy to acess the website in the browser to generate the cookies, then use these cookies in the HTTP request on the exploit.
(Aug 18, 2015 11:23 AM)Th3PonyWizard Wrote: I don't get how the hosts file is related. Explain.
When u acess a domain it will conect with the ns servers to resolve the dns, the hists file is used to bypass it, if u set a expecific ip for a domain it wouldn't resolve the domain in the dns server, the computer will use the ip adress specified in that file.
* - fLQZ - Aug 19, 2015
(Aug 19, 2015 02:38 PM)FFY00 Wrote: .-. It is easy to do but is more easy to acess the website in the browser to generate the cookies, then use these cookies in the HTTP request on the exploit.
Yeah but I wanted to show this way
* - FFY00 - Aug 19, 2015
(Aug 19, 2015 02:42 PM)fLQZ Wrote: Yeah but I wanted to show this way
So ol, xD but my method is mire easy and just few people use it. I posted because very cf websites can't be resolved and my method will work on that cases...
* - Th3PonyWizard - Aug 19, 2015
(Aug 19, 2015 02:38 PM)FFY00 Wrote: .-. It is easy to do but is more easy to acess the website in the browser to generate the cookies, then use these cookies in the HTTP request on the exploit.I still don't get it. Your job is to get that IP address in the first place. What's the point accessing the domain from your computer if your whole point is to get the IP to further attack it? If you already have the IP to put in the hosts file, you've already bypassed CF.
When u acess a domain it will conect with the ns servers to resolve the dns, the hists file is used to bypass it, if u set a expecific ip for a domain it wouldn't resolve the domain in the dns server, the computer will use the ip adress specified in that file.
* - FFY00 - Aug 19, 2015
(Aug 19, 2015 03:05 PM)Th3PonyWizard Wrote: I still don't get it. Your job is to get that IP address in the first place. What's the point accessing the domain from your computer if your whole point is to get the IP to further attack it? If you already have the IP to put in the hosts file, you've already bypassed CF.
Yes that's right... If u don't know how to get the real IP directly I can teach u, just PM me...
* - Th3PonyWizard - Aug 20, 2015
(Aug 19, 2015 11:56 PM)FFY00 Wrote: Yes that's right... If u don't know how to get the real IP directly I can teach u, just PM me...Oh, for me that's not an issue :3
* - FFY00 - Aug 20, 2015
(Aug 20, 2015 02:43 AM)Th3PonyWizard Wrote: Oh, for me that's not an issue :3
Ok, but if you need help in other thing feel free to PM me, i have a very big knowleadge 🤝
* - boribari - Aug 26, 2015
works maybe for 10% of websites ..