Traffic service & campaign optimization ◆ Cheap KYC Verifications & Openups ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › Cloudflare bypass via smtp headers? Information Disclosure?

Thread Closed 

Cloudflare bypass via smtp headers? Information Disclosure?
Venture
Venture Offline
[closed@HF:]
Posts:
816
Threads:
189
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
3,037
Sep 11, 2019 06:09 AM (This post was last modified: Sep 11, 2019 06:10 AM by Venture.)
So I've noticed that a website that sends emails; does so on the back-end through php function; I also know that when receiving an email, the headers of the email usually contain the mail servers ip; Would this lead to disclosure of the servers IP address?
BTC
BTC Offline
nafnlaus
***
HF Ub3r
Posts:
4,370
Threads:
46
Credibility:
11301
Popularity:
1,246
βytes:
β 0
Game XP:
31,600
Sep 11, 2019 06:12 AM
No it would just appear with a proxy address
[Image: XeoMD0Q.gif]
SIGRU
SIGRU Offline
[n00b@HF:]
*
Registered
Posts:
43
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
2,316
Sep 11, 2019 06:14 AM
If the backend server sends emails yes, it will leak the site IP, obviously.

This has been a well known method for "bypassing" CloudFlare for some time, and HF even used to be vulnerable to it many years ago.
BTC
BTC Offline
nafnlaus
***
HF Ub3r
Posts:
4,370
Threads:
46
Credibility:
11301
Popularity:
1,246
βytes:
β 0
Game XP:
31,600
Sep 11, 2019 06:15 AM (This post was last modified: Sep 11, 2019 06:15 AM by BTC.)
(Sep 11, 2019 06:14 AM)SIGRU Wrote:  If the backend server sends emails yes, it will leak the site IP, obviously.

This has been a well known method for "bypassing" CloudFlare for some time, and HF even used to be vulnerable to it many years ago.

Only if your mail server's records are not configured properly in cloudflare. Most people know how to do that, in fact it did it automatically for me.
[Image: XeoMD0Q.gif]
SIGRU
SIGRU Offline
[n00b@HF:]
*
Registered
Posts:
43
Threads:
4
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
2,316
Sep 11, 2019 06:43 AM
(Sep 11, 2019 06:15 AM)BTC Wrote:  Only if your mail server's records are not configured properly in cloudflare. Most people know how to do that, in fact it did it automatically for me.

CloudFlare doesn't proxy email traffic. The emails still originate from the mail server, which will be the backend and will therefore be found in the email header.
Next Oldest | Next Newest
Thread Closed 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by xHullyFeb 22, 2025 10:51 AM 8 473 Feb 22, 2025 10:51 AM
Last Post: Sphere
by JDoawpMay 7, 2024 12:53 AM 1 183 May 7, 2024 12:53 AM
Last Post: Tocx
by 8R8_Dec 9, 2023 06:31 AM 4 248 Dec 9, 2023 06:31 AM
Last Post: source