[xHully]

How to bypass cloudflare to be able to do ddos to a website?

[Biggy_Asian]

You can do this by getting a job application.

[Virsencryff]

Send text by adding my Zangi private number
[deleted] add my Zangi private number for correspondence

[albert-berti]

is really this method

[Hackers]

is really this method

this is an old thread and most people are not "bypassing CF" they're just using an IP, user agent, browser, etc to not be flagged with captcha every time, but ultimately any repeat use is going to be flagged.

If people want to "bypass cloudflare" their best bet is to use Shodan, or similar to look for old DNS / IP logs so they can try to connect to the site off-Cloudflare via a direct, or old way.

[noxy1001]

yes there are some ways

The member who made this post was warned. In some way it violates our rules or policies.
Please familiarize yourself by reading our Help Documents.

[raceconditioned]

If by bypassing you mean bypassing the WAF and other limitations, there's a bunch of papers and tools out there explaining how.

Basically you are looking for the origin IP the actual IP of the web server.

One fun technique is grabbing the favicon from the site and searching it's hash on Shodan to try and find historic IP results that match the favicon, one of which might be the actual origin IP of the web server serving the target subdomain.

https://github.com/pielco11/fav-up

Other techniques generally involve checking errors, certificates and performing OSINT to find cached or old data that leak the origin IP (assuming it has not changed also).

PS: For this to work, the web server (Apache, Nginx or whatever) has to be configured to serve the website over IP, which is not so common nowadays.

[Learning Hacking]

Have to Found anything usefull?

[Sphere]

just find an SSRF bug & send a request to your host own host. usually works for me.
although some of them make strict rules in the network layer(i.e: whitelist incoming traffic only from CF servers) so even if you find the IP it might not be useful.