+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How to bypass cloudflare (/showthread.php?tid=6284154)
How to bypass cloudflare - xHully - Nov 6, 2024
How to bypass cloudflare to be able to do ddos to a website?
RE: How to bypass cloudflare - Biggy_Asian - Nov 6, 2024
You can do this by getting a job application.
RE: How to bypass cloudflare - Virsencryff - Nov 7, 2024
Send text by adding my Zangi private number
[deleted] add my Zangi private number for correspondence
RE: How to bypass cloudflare - albert-berti - Feb 9, 2025
is really this method
RE: How to bypass cloudflare - Hackers - Feb 9, 2025
(Feb 9, 2025 11:39 AM)albert-berti Wrote: is really this method
this is an old thread and most people are not "bypassing CF" they're just using an IP, user agent, browser, etc to not be flagged with captcha every time, but ultimately any repeat use is going to be flagged.
If people want to "bypass cloudflare" their best bet is to use Shodan, or similar to look for old DNS / IP logs so they can try to connect to the site off-Cloudflare via a direct, or old way.
RE: How to bypass cloudflare - noxy1001 - Feb 13, 2025
yes there are some ways [warn]
RE: How to bypass cloudflare - raceconditioned - Feb 13, 2025
If by bypassing you mean bypassing the WAF and other limitations, there's a bunch of papers and tools out there explaining how.
Basically you are looking for the origin IP the actual IP of the web server.
One fun technique is grabbing the favicon from the site and searching it's hash on Shodan to try and find historic IP results that match the favicon, one of which might be the actual origin IP of the web server serving the target subdomain.
https://github.com/pielco11/fav-up
Other techniques generally involve checking errors, certificates and performing OSINT to find cached or old data that leak the origin IP (assuming it has not changed also).
PS: For this to work, the web server (Apache, Nginx or whatever) has to be configured to serve the website over IP, which is not so common nowadays.
RE: How to bypass cloudflare - Learning Hacking - Feb 22, 2025
Have to Found anything usefull?
RE: How to bypass cloudflare - Sphere - Feb 22, 2025
just find an SSRF bug & send a request to your host own host. usually works for me.
although some of them make strict rules in the network layer(i.e: whitelist incoming traffic only from CF servers) so even if you find the IP it might not be useful.