Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Stresser: Any CF 5sec bypass Stresser out there ?

Hi all, do you know any Stresser that can bypass the CF 5sec protection
There are not many L7 with this option out there ?


I noticed some of them did have it but retracted it and kept only XMLRPC
Anyone still have it and is fully operational ?
No reference of them at all ?
From what i see at the forum some of them are :
webstresser
rawlayer

i don't know if there are any others
I believe the javascript protection can be bypassed by a massive http flood
However i can't find stressers that do this thing (apart from these two i mentioned)
OK thanks for your opinion
Is there a stresser out there with this option ?
I do understand that L4 attacks are easier and stronger but L7 and especially CFbypass works for sites under the free plan of CF. I saw it working that's why i ask for it
(Dec 4, 2015 03:48 PM)๖ۣۜAnubis Wrote:  It's impossible bypass cloudflare unless the server is misconfigured.

Not true, bypasses do exist, and the server doesn't need to be misconfigured.

Some are easy to patch manually, others are not.


Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.
(Dec 6, 2015 11:23 AM)PLT ‌ Wrote:  Not true, bypasses do exist, and the server doesn't need to be misconfigured.

Some are easy to patch manually, others are not.


Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.

There are not too many offering CF-bypass
That's why i try to gather them in one list
So far i know the two are mentioned at the top
(Dec 6, 2015 12:32 PM)๖ۣۜAnubis Wrote:  Give me a example.

https://github.com/Decafe/CloudflareBypa...bypass.php
(Dec 6, 2015 01:31 PM)๖ۣۜAnubis Wrote:  I mean, bypass cf IP... get the real IP.
Plenty of ways exist, here's just one of them:

Scanning the internet for a certain title header and return a list of IP's that respond successfully.

E,g "YouTube" "Google" "Hack Forums"

People used to do it to HF all the time, the solution is to return a 403 forbidden error or drop packets completely if a user is trying to directly access the servers IP address rather than through a domain.

Sure, it's not really "bypassing CF" as such, but it's still relevant.
Thanks both of you for your participation

Since i can't post to the relevant section of the forum (due to my few posts so far) is there any other stresser that use efficiently the CF-bypass method ?