+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Tutorial]Cloudflare Bypass (/showthread.php?tid=4951492)
Pages: Pages
1
2
[Tutorial]Cloudflare Bypass - fLQZ - Aug 16, 2015
Hey Guys,
today I am going to show you how to bypass the cloudflare protection.
Target: tv.com.pk
Step 1:
Paste your target URL at the end of this URL to get the real IP:
ht tp://api.predator.wtf/cfresolve/?arguments=YOURTARGET
(without http and www)
Example:
ht tp://api.predator.wtf/cfresolve/?arguments=tv.com.pk
Now you will see the real IP.
Step 2:
Open c:\windows\system32\drivers\etc\ and edit the "hosts" file.
Like this:
.
.
127.0.0.1 localhost
173.192.32.248 tv.com.pk
Notice: This will not work on every Website
* - Krew - Aug 16, 2015
This Domain Is Not Vulnerable To Our Method!
Luckily mine isn't.
* - fLQZ - Aug 16, 2015
Quote:This Domain Is Not Vulnerable To Our Method!
Luckily mine isn't.
Yeah like I said not every website is vulnerable, but did you check your website without http and www?
* - Krew - Aug 16, 2015
(Aug 16, 2015 06:15 AM)fLQZ Wrote: Yeah like I said not every website is vulnerable, but did you check your website without http and www?
Yep. Should be 100% safe. 🤝
* - SIM-2223238 - Aug 16, 2015
Wow 90% of the websites does not work, try again later.
n000b
* - fLQZ - Aug 16, 2015
(Aug 16, 2015 06:49 AM)Aggron Wrote: Wow 90% of the websites does not work, try again later.
n000b
Not 90% I actually found a lot, and I did say that it does not work all the time
* - BassheadHF - Aug 16, 2015
Wow Great share man thanks for this!! =)
* - UnKnOwN333 - Aug 16, 2015
Its work with my domain :D thnx bro :P its cool keep up
* - Aur3xis - Aug 16, 2015
Well, this works sometimes...
Actually like 5%~ of the times unfortunetly.
* - beachkid - Aug 16, 2015
works for mylol.com mwahahaha XD
* - Buried Alive - Aug 17, 2015
Explain a bit more
i get this
aspmx.l.google.com => 74.125.20.26
alt2.aspmx.l.google.com => 173.194.206.26
alt1.aspmx.l.google.com => 173.194.193.26
aspmx3.googlemail.com => 173.194.206.27
aspmx2.googlemail.com => 173.194.193.27
and what does step 2 do ?
* - fLQZ - Aug 17, 2015
(Aug 17, 2015 01:43 PM)Buried Alive Wrote: Explain a bit more
i get this
aspmx.l.google.com => 74.125.20.26
alt2.aspmx.l.google.com => 173.194.206.26
alt1.aspmx.l.google.com => 173.194.193.26
aspmx3.googlemail.com => 173.194.206.27
aspmx2.googlemail.com => 173.194.193.27
and what does step 2 do ?
If you get this, your website isn't vulnerable. This are just some subserver.
Step 2 makes that you can access the website without cloudflare even if you type the hostname so you do not have to type the IP manually
* - Learner Boy - Aug 18, 2015
This Domain Is Not Vulnerable To Our Method!
Bad Luck
Anyways
Thanks for this
* - Th3PonyWizard - Aug 18, 2015
I don't get how the hosts file is related. Explain.
* - fLQZ - Aug 18, 2015
(Aug 18, 2015 11:23 AM)Th3PonyWizard Wrote: I don't get how the hosts file is related. Explain.
You do not need to do the step with the host file. It just makes it easier for you so if you do the step you can write the hostname and you connect to the unprotected IP