Anvilpoint CyberOps - Hacker for Hire ◆ ProxiesFood: Unlimited Residential Proxy ◆ Cheap KYC Verifications & Openups ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Beginner Hacking › Stresser: Any CF 5sec bypass Stresser out there ?

New Reply 

Stresser: Any CF 5sec bypass Stresser out there ?
rhinos
Guest
 
Nov 29, 2015 06:32 PM
Hi all, do you know any Stresser that can bypass the CF 5sec protection
There are not many L7 with this option out there ?

I noticed some of them did have it but retracted it and kept only XMLRPC
Anyone still have it and is fully operational ?
rhinos
Guest
 
Dec 2, 2015 03:11 PM
No reference of them at all ?
rhinos
Guest
 
Dec 4, 2015 03:02 PM
From what i see at the forum some of them are :
webstresser
rawlayer

i don't know if there are any others
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 4, 2015 03:48 PM
It's impossible bypass cloudflare unless the server is misconfigured.

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
rhinos
Guest
 
Dec 4, 2015 03:51 PM
I believe the javascript protection can be bypassed by a massive http flood
However i can't find stressers that do this thing (apart from these two i mentioned)
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 4, 2015 04:30 PM
(Dec 4, 2015 03:51 PM)rhinos Wrote:  I believe the javascript protection can be bypassed by a massive http flood
However i can't find stressers that do this thing (apart from these two i mentioned)

nope

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
rhinos
Guest
 
Dec 4, 2015 04:39 PM
OK thanks for your opinion
Is there a stresser out there with this option ?
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 5, 2015 05:15 AM
(Dec 4, 2015 04:39 PM)rhinos Wrote:  OK thanks for your opinion
Is there a stresser out there with this option ?

http://webresolver.nl/cloudflare

After that just DDOS the real IP. But as I said, this won't work unless the DNS is misconfigured.

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
rhinos
Guest
 
Dec 6, 2015 11:21 AM
I do understand that L4 attacks are easier and stronger but L7 and especially CFbypass works for sites under the free plan of CF. I saw it working that's why i ask for it
PLT ‌
Guest
 
Dec 6, 2015 11:23 AM
(Dec 4, 2015 03:48 PM)๖ۣۜAnubis Wrote:  It's impossible bypass cloudflare unless the server is misconfigured.

Not true, bypasses do exist, and the server doesn't need to be misconfigured.

Some are easy to patch manually, others are not.

Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.
rhinos
Guest
 
Dec 6, 2015 11:34 AM
(Dec 6, 2015 11:23 AM)PLT ‌ Wrote:  Not true, bypasses do exist, and the server doesn't need to be misconfigured.

Some are easy to patch manually, others are not.

Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.

There are not too many offering CF-bypass
That's why i try to gather them in one list
So far i know the two are mentioned at the top
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 6, 2015 12:32 PM
(Dec 6, 2015 11:23 AM)PLT ‌ Wrote:  Not true, bypasses do exist, and the server doesn't need to be misconfigured.

Some are easy to patch manually, others are not.

Most stressers that have CF-Bypass aren't good for it tbh, I'd recommend a DDoS service.

Give me a example.

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
PLT ‌
Guest
 
Dec 6, 2015 12:54 PM
(Dec 6, 2015 12:32 PM)๖ۣۜAnubis Wrote:  Give me a example.

https://github.com/Decafe/CloudflareBypa...bypass.php
๖ۣۜAnubis
๖ۣۜAnubis Away
hw/3,4,5-trimethoxyphenylethylamine
***
HF Ub3r
Posts:
979
Threads:
47
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Dec 6, 2015 01:31 PM
(Dec 6, 2015 12:54 PM)PLT ‌ Wrote:  https://github.com/Decafe/CloudflareBypa...bypass.php

I mean, bypass cf IP... get the real IP.

[Image: winged_scarab_white.png]
1AnubisAb8YszYn8TboYsBX5tywX9CnNy5
PLT ‌
Guest
 
Dec 6, 2015 03:17 PM
(Dec 6, 2015 01:31 PM)๖ۣۜAnubis Wrote:  I mean, bypass cf IP... get the real IP.
Plenty of ways exist, here's just one of them:

Scanning the internet for a certain title header and return a list of IP's that respond successfully.

E,g "YouTube" "Google" "Hack Forums"

People used to do it to HF all the time, the solution is to return a 403 forbidden error or drop packets completely if a user is trying to directly access the servers IP address rather than through a domain.

Sure, it's not really "bypassing CF" as such, but it's still relevant.
Next Oldest | Next Newest
New Reply