+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Stresser: Any CF 5sec bypass Stresser out there ? (/showthread.php?tid=5076155)
Pages: Pages
1
2
Stresser: Any CF 5sec bypass Stresser out there ? - rhinos - Nov 29, 2015
Hi all, do you know any Stresser that can bypass the CF 5sec protection
There are not many L7 with this option out there ?
I noticed some of them did have it but retracted it and kept only XMLRPC
Anyone still have it and is fully operational ?
* - rhinos - Dec 2, 2015
No reference of them at all ?
* - rhinos - Dec 4, 2015
From what i see at the forum some of them are :
webstresser
rawlayer
i don't know if there are any others
* - ๖ۣۜAnubis - Dec 4, 2015
It's impossible bypass cloudflare unless the server is misconfigured.
* - rhinos - Dec 4, 2015
I believe the javascript protection can be bypassed by a massive http flood
However i can't find stressers that do this thing (apart from these two i mentioned)
* - ๖ۣۜAnubis - Dec 4, 2015
(Dec 4, 2015 03:51 PM)rhinos Wrote: I believe the javascript protection can be bypassed by a massive http flood
However i can't find stressers that do this thing (apart from these two i mentioned)
nope
* - rhinos - Dec 4, 2015
OK thanks for your opinion
Is there a stresser out there with this option ?
* - ๖ۣۜAnubis - Dec 5, 2015
(Dec 4, 2015 04:39 PM)rhinos Wrote: OK thanks for your opinion
Is there a stresser out there with this option ?
http://webresolver.nl/cloudflare
After that just DDOS the real IP. But as I said, this won't work unless the DNS is misconfigured.
* - rhinos - Dec 6, 2015
I do understand that L4 attacks are easier and stronger but L7 and especially CFbypass works for sites under the free plan of CF. I saw it working that's why i ask for it
* - PLT - Dec 6, 2015
(Dec 4, 2015 03:48 PM)AnubisCore Wrote: It's impossible bypass cloudflare unless the server is misconfigured.
Not true, bypasses do exist, and the server doesn't need to be misconfigured.
Some are easy to patch manually, others are not.
Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.
* - rhinos - Dec 6, 2015
(Dec 6, 2015 11:23 AM)PLT Wrote: Not true, bypasses do exist, and the server doesn't need to be misconfigured.
Some are easy to patch manually, others are not.
Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.
There are not too many offering CF-bypass
That's why i try to gather them in one list
So far i know the two are mentioned at the top
* - ๖ۣۜAnubis - Dec 6, 2015
(Dec 6, 2015 11:23 AM)PLT Wrote: Not true, bypasses do exist, and the server doesn't need to be misconfigured.
Some are easy to patch manually, others are not.
Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.
Give me a example.
* - PLT - Dec 6, 2015
(Dec 6, 2015 12:32 PM)AnubisCore Wrote: Give me a example.
https://github.com/Decafe/CloudflareBypass/blob/master/cfbypass.php
* - ๖ۣۜAnubis - Dec 6, 2015
(Dec 6, 2015 12:54 PM)PLT Wrote: https://github.com/Decafe/CloudflareBypass/blob/master/cfbypass.php
I mean, bypass cf IP... get the real IP.
* - PLT - Dec 6, 2015
(Dec 6, 2015 01:31 PM)AnubisCore Wrote: I mean, bypass cf IP... get the real IP.Plenty of ways exist, here's just one of them:
Scanning the internet for a certain title header and return a list of IP's that respond successfully.
E,g "YouTube" "Google" "Hack Forums"
People used to do it to HF all the time, the solution is to return a 403 forbidden error or drop packets completely if a user is trying to directly access the servers IP address rather than through a domain.
Sure, it's not really "bypassing CF" as such, but it's still relevant.