+- Hack Forums (https://hackforums.net)
+-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105)
+--- Forum: Auxiliary (https://hackforums.net/forumdisplay.php?fid=453)
+---- Forum: Buyers Bay (https://hackforums.net/forumdisplay.php?fid=44)
+---- Thread: [Looking] i wonder about bypass Cloudflare's WAF (/showthread.php?tid=6260240)
i wonder about bypass Cloudflare's WAF - C0D3M0N - Jan 5, 2024
hello,
I'm currently trying out sqli using sqlmap on a target website using Cloudflare.
For targets that are running on the same source code and do not use Cloudflare, sqlmap runs correctly, but
For those targets using Cloudflare, sqlmap returns HTTP 403.
Does anyone know how to solve this problem or find the REAL IP of that target?
If you can solve the problem I'm having or have a tutorial, I'd like to purchase it.
Thanks.
please PM me :)
[contract=tid]Start Contract[/contract]
RE: i wonder about bypass Cloudflare's WAF - Amyy - Jan 5, 2024
you could try using securitytrails and check if there are records where there was no cloudflare running.
RE: i wonder about bypass Cloudflare's WAF - C0D3M0N - Jan 5, 2024
(Jan 5, 2024 03:51 PM)Amyy Wrote: you could try using securitytrails and check if there are records where there was no cloudflare running.
i already tried that but, i only can see cloudflare
RE: i wonder about bypass Cloudflare's WAF - PenTest247 - Jan 5, 2024
i have a cisco merski target that i got level 17 access to following the cge.pl exploit, but when i go to access it i get the cloudflare denied access.
This is a LARGE corporate environment, if i can bypass this im looking at millions.