[HQ-Tutorial] How to Bypass a Cloudflare protected website and get the ip address.

[HQ-Tutorial] How to Bypass a Cloudflare protected website and get the ip address. - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [HQ-Tutorial] How to Bypass a Cloudflare protected website and get the ip address. (/showthread.php?tid=5334635)

Pages: Pages 1 2 3 4 5

[HQ-Tutorial] How to Bypass a Cloudflare protected website and get the ip address. - kmz22222 - Jul 10, 2016

Note: Please notice that this thread is posted at HF Current time: 07-10-2016, 07:46 PM
Any other thread that is identical to this is probably a copy of my thread.

KMZ Is back,i am going to post another bunch of HQ Tutorials to keep this section alive.
============================
What is this used for?
This is used to bypass cloudflare's secuirty on a website and get the real hidden ip address.
============================
The Actual Tutorial:
1-Go to https://toolbox.googleapps.com/apps/dig
2-Type in the website that you are going to hack.
3-Press enter and click on these options untill u find the ip address like shown in the photo:
[Image: NR528WP.png]

4-Once you get the ip now you can check it real quick here: http://iphub.info/
IP Hub will provide you with:
Hostname,ISP/ASN,Country and Type.

Hostname=The resolved host for the ip address that you lookup for.
ISP=The internet provider [If the ip address is a possible home connection,it will provide you with the ISP.]
ASN=Autonomous System Number [If the ip address is a hosting provider,it will provide you with the ASN]
Country=Do i even need to explain this?
Type=It tells you the type of the ip address. [It can be a possible home connection or a hosting provider,etc...]
============================
The whole idea:
You make a DNS Lookup to get some sort of hosting history to possibly get the official hosting provider upon with the ip address Using Google apps toolbox's tool ''Dig''
============================
Hope you guys enjoyed this tutorial and trust me there will be more tutorials in the future.
Tommorow's tutorial will be similar to this one.
Peace~

========

=============

Please show some feedback and write a reply to make this thread alive for everyone to benefit from.

* - hvault - Jul 12, 2016

Thanks bro for the tutorial

* - The_Defiant_One - Jul 12, 2016

Great tutorial. I know a lot of folks here have been looking for way to bypass Cloudflare protections to retrieve the real
IP for a website host. Thanks for sharing.

* - kmz22222 - Jul 12, 2016

(Jul 12, 2016 03:54 AM)hvault Wrote: Thanks bro for the tutorial

Your welcome.
Thanks for the reply bro 🤝🤝🤝🤝🤝

(Jul 12, 2016 06:13 AM)The_Defiant_One Wrote: Great tutorial. I know a lot of folks here have been looking for way to bypass Cloudflare protections to retrieve the real
IP for a website host. Thanks for sharing.

You are welcome my friend,thanks for the reply. 🤝🤝🤝

Cloudflare Resolvers also might work.

* - clawd31 - Jul 12, 2016

Thanks, i'll give it a try :D

* - Lync - Jul 12, 2016

This only works if the person who setup the Cloudflare is a idiot. Also, you can use any dns lookup such as http://viewdns.info or http://iphostinfo.com/cloudflare/

* - kmz22222 - Jul 12, 2016

(Jul 12, 2016 05:28 PM)clawd31 Wrote: Thanks, i'll give it a try :D

Your welcome 🤝🤝🤝

(Jul 12, 2016 07:58 PM)Webcore Wrote: This only works if the person who setup the Cloudflare is a idiot. Also, you can use any dns lookup such as http://viewdns.info or http://iphostinfo.com/cloudflare/

It happens my friend... it happens...
There is many idiots out there.

(Jul 12, 2016 08:01 PM)Sl0th. Wrote: I'll try this out soon nice tutorial

You are welcome my friend.
Feel free to try it whenever you need it.

* - LetItShine - Jul 13, 2016

id 60457
opcode QUERY
rcode NOERROR
flags QR RD RA
;QUESTION
cubecraft.net. IN TXT
;ANSWER
cubecraft.net. 3599 IN TXT "v=spf1 include:_spf.google.com include:mail.zendesk.com -all"
;AUTHORITY
;ADDITIONAL

Btw where is the real ip?

* - Shinzawai - Jul 13, 2016

Thanks for the tutorial...

* - FabianO - Jul 13, 2016

Thanks. Tried it with one website and it worked.

* - EvilNerd - Jul 13, 2016

Thanks for sharing
nice and simple method..

* - kmz22222 - Jul 13, 2016

(Jul 13, 2016 12:03 AM)LetItShine Wrote: id 60457
opcode QUERY
rcode NOERROR
flags QR RD RA
;QUESTION
cubecraft.net. IN TXT
;ANSWER
cubecraft.net. 3599 IN TXT "v=spf1 include:_spf.google.com include:mail.zendesk.com -all"
;AUTHORITY
;ADDITIONAL

Btw where is the real ip?

Sir,first of all you are not allowed to post such info of the website ''cubecraft.net''
And don't use the same TXT method like me u can use other methods.

Other methods also can give you the hostname which of course you can get the ip from.

(Jul 13, 2016 05:26 AM)Shinzawai Wrote: Thanks for the tutorial...

You are welcome my friend.

(Jul 13, 2016 05:59 AM)ranochigo Wrote: Thanks. Tried it with one website and it worked.

Thanks for writing the reply,you are welcome. 🤝🤝🤝

(Jul 13, 2016 08:44 AM)EvilNerd Wrote: Thanks for sharing
nice and simple method..

Thanks for the reply and thanks for the rep,i appreciate it. 🤝🤝

* - ❤️Fetz❤️ - Jul 13, 2016

(Jul 13, 2016 10:15 AM)kmz22222 Wrote: i am legally autistic

do you have proof?

* - kmz22222 - Jul 13, 2016

(Jul 13, 2016 10:42 AM)❤️Fetz❤️ Wrote: do you have proof?

Please stop using fake quotes,thanks. 🤝

* - samaki91 - Jul 13, 2016

thanks cant wait to use this