+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? (/showthread.php?tid=6098851)
Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - GR305 - Jul 30, 2020
I was able to capture the origin ID of a site I'm testing and was wondering if it is possible to use the origin IP that cloudflare uses as the main IP of said website to test for vulnerabilities? It blocks it from being used as an HTTP link.
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - AeroBotPro - Jul 30, 2020
Considering that Cloudflare hosts many sites behind 1 IP, they take measures to make sure this doesn't happen.
You will get Error 1003: Direct IP access not allowed. You need to be redirected from the domain for CF to work properly.
Moving forward:
Check out censys[.]io.
Enter your target's domain (or search in title or text like google) and you will be surprised how many back ends are exposed due to misconfigs when setting up/transferring sites :)
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - GR305 - Jul 30, 2020
(Jul 30, 2020 08:34 AM)AeroBotPro Wrote: Considering that Cloudflare hosts many sites behind 1 IP, they take measures to make sure this doesn't happen.
You will geterror 1003: Direct IP access not allowed. You need to be redirected from the domain for CF to work properly.
Moving forward:
Check out censys[.]io.
Enter your target's domain (or search in title or text like google) and you will be surprised how many back ends are exposed due to misconfigs when setting up/transferring sites :)
Thanks so much for the information! Any place I can learn more about this? I'm currently reading "the web application hackers handbook"
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - AeroBotPro - Aug 1, 2020
(Jul 30, 2020 06:21 PM)GR305 Wrote: Thanks so much for the information! Any place I can learn more about this? I'm currently reading "the web application hackers handbook"
Absolutely, glad I could help! I don't have many resources on this, I guess this would be considered a "dorking" technique, for further research's sake 👍
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - KeySender - Aug 15, 2020
https://www.mycyber.tools/
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - niqscann - Oct 11, 2020
nmap also works if admin is idiot.
you can chk google for nmap cloudflare bypass commands
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - NeverMore - Oct 11, 2020
if you can Bypass cloudflare WAF , you dont need to get the original IP to hack site,
this is how cloudflare WAF works : https://www.cloudflare.com/waf/
and this is some bypassing ways for it :
https://blog.detectify.com/2019/07/31/bypassing-cloudflare-waf-with-the-origin-server-ip-address/
https://medium.com/bugbountywriteup/bypass-cloudflare-waf-to-pwned-application-2c9e4f862319
https://enciphers.com/bypassing-cloudflare-waf-to-get-more-vulnerabilities/
feel free to ask me about anything for bypassing it,
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - Carb0n - Oct 26, 2020
(Oct 11, 2020 05:16 AM)invo12 Wrote: if you can Bypass cloudflare WAF , you dont need to get the original IP to hack site,
this is how cloudflare WAF works : https://www.cloudflare.com/waf/
and this is some bypassing ways for it :
https://blog.detectify.com/2019/07/31/bypassing-cloudflare-waf-with-the-origin-server-ip-address/
https://medium.com/bugbountywriteup/bypass-cloudflare-waf-to-pwned-application-2c9e4f862319
https://enciphers.com/bypassing-cloudflare-waf-to-get-more-vulnerabilities/
feel free to ask me about anything for bypassing it,
Well, would you be able to do it?
RE: Testing Site - Cloudflare Origin IP Grabbed - How To Bypass Origin IP Block? - Phil Swift 47 - Oct 27, 2020
(Jul 30, 2020 08:34 AM)AeroBotPro Wrote: Considering that Cloudflare hosts many sites behind 1 IP, they take measures to make sure this doesn't happen.
You will geterror 1003: Direct IP access not allowed. You need to be redirected from the domain for CF to work properly.
Moving forward:
Check out censys[.]io.
Enter your target's domain (or search in title or text like google) and you will be surprised how many back ends are exposed due to misconfigs when setting up/transferring sites :)
This is true and if one could look at hosting history one may be able to find the host from a date before cloudflare was enabled.... I pulled 3 Websites today that were hosted behind cloudflare however 2-3 years ago the weren't using cloud flare and I found the server.... I also found from whois that one was on namescheap domain services.
A lot of tools.... I may edit this for the direct link to the website.
(Jul 30, 2020 08:11 AM)GR305 Wrote: I was able to capture the origin ID of a site I'm testing and was wondering if it is possible to use the origin IP that cloudflare uses as the main IP of said website to test for vulnerabilities? It blocks it from being used as an HTTP link.
Here this a free and paid for service but works amazing, you can pull History of the website's hosting and DNS allowing you to gather some info.... Maybe check some registrar DBs of the non cloud flare domains or sub domains.
https://securitytrails.com/domain/