Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Looking For 

i wonder about bypass Cloudflare's WAF

hello,

I'm currently trying out sqli using sqlmap on a target website using Cloudflare.

For targets that are running on the same source code and do not use Cloudflare, sqlmap runs correctly, but

For those targets using Cloudflare, sqlmap returns HTTP 403.

Does anyone know how to solve this problem or find the REAL IP of that target?

If you can solve the problem I'm having or have a tutorial, I'd like to purchase it.

Thanks.

please PM me :)
Start Contract
you could try using securitytrails and check if there are records where there was no cloudflare running.
(Jan 5, 2024 03:51 PM)Amyy Wrote:  you could try using securitytrails and check if there are records where there was no cloudflare running.

i already tried that but, i only can see cloudflare
i have a cisco merski target that i got level 17 access to following the cge.pl exploit, but when i go to access it i get the cloudflare denied access.
This is a LARGE corporate environment, if i can bypass this im looking at millions.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[WTB] by rock1zzDec 5, 2024 05:53 AM 3 227 Dec 5, 2024 05:53 AM
Last Post: rock1zz
[WTB] by SIM-3327349Jan 22, 2023 08:42 PM 6 476 Jan 22, 2023 08:42 PM
Last Post: Edge
[Looking] by OGLORDOct 5, 2022 05:13 PM 0 214 Oct 5, 2022 05:13 PM
Last Post: OGLORD