+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Cloudflare WAF Bypass Origin server IP address (/showthread.php?tid=6227231)
Cloudflare WAF Bypass Origin server IP address - Money- - Nov 10, 2022
Just wondering , do you guys got anymore methods for this attack vector?
What's the latest methodology for it now at the moment?
RE: Cloudflare WAF Bypass Origin server IP address - kayla_90 - Nov 10, 2022
There is no way around it, you lucky if they left a service out of the cloudfare.
RE: Cloudflare WAF Bypass Origin server IP address - Blazin - Nov 10, 2022
There is no method, you hope they didn't put all sub domains on cloudflare.
You check if email server leaks IPS,
or lastly you check whois records and see if they leak the info.
RE: Cloudflare WAF Bypass Origin server IP address - Sekhmet - Nov 11, 2022
(Nov 10, 2022 05:42 PM)Blazin Wrote: There is no method, you hope they didn't put all sub domains on cloudflare.
You check if email server leaks IPS,
or lastly you check whois records and see if they leak the info.
+200 for this but also i have found a well known and widely used scripts that expose the real ip behind cloudflare if it's installed on the server ofc this is not " method " or even vulnerability it's just how this scripts work
Tip : look for misconfigured files
RE: Cloudflare WAF Bypass Origin server IP address - Brief - Nov 13, 2022
(Nov 11, 2022 03:01 AM)Sekhmet Wrote: +200 for this but also i have found a well known and widely used scripts that expose the real ip behind cloudflare if it's installed on the server ofc this is not " method " or even vulnerability it's just how this scripts work
Tip : look for misconfigured files
Speaking of scripts, there might be some tools. I have seen a scanner report about a web application that has the real IP of the web application, even though the site was behind cloudfare.