Cloudflare is a Content Delivery Network (CDN).
Questions tagged [cloudflare]
47 questions
2
votes
1 answer
Is there any way to pretend like we are routing our request via cloudflare?
There is this Web App which uses cloudflare and to bypass certain things I had to find a way to access the actual web server directly. I tried numerous things and finally I think I have found the actual server's IP but seems like direct access to IP…
![](../../users/profiles/224309.webp)
John
- 21
- 2
2
votes
4 answers
How do I configure Azure Web Apps so that the only access is via CloudFlare?
I have a Web Apps (Linux) application on Azure, and I added a custom domain which I have protected with CloudFlare.
I added Azure Security Center to my subscription.
At the moment one can access the application either
directly via…
![](../../users/profiles/103049.webp)
gordon613
- 271
- 2
- 7
2
votes
2 answers
Can't Cloudflare sniff sensitive login data from its users' websites?
So I recently started using the free Cloudflare plan for my website to provide any sort of protection. And I noticed that, given they do the whole "We'll accelerate your website by caching parts of your pages!" they need to MITM the connections to…
![](../../users/profiles/114809.webp)
TheFuzzyFish
- 25
- 2
2
votes
2 answers
How does Cloudflare track their client? Tor is not a workaround
I mirrored a ecommerce site using wget. This site seems to use Cloudflare to handle their web traffic.
What's interesting is that after 90 % or so of the mirroring was done, wget started to produce/receive a lot of error messages. I then tried to…
![](../../users/profiles/181577.webp)
hensti
- 151
- 3
1
vote
2 answers
CloudFlare - prompted for "attention required"
I am getting a CloudFlare - attention required / security check prompt on most of the sites I visit through my Macbook running OS X Yosemite, these sites work perfectly on other devices (such as iPad, iPhone, Android and Windows based laptop)…
![](../../users/profiles/59758.webp)
Dipak G.
- 111
- 1
- 1
- 3
1
vote
1 answer
Any Cloudflare's DNS over TLS (DoT) check + DNSSEC test?
In my original question from 2020, I was unsuccessful in my effort to setup Cloudflare's (link to docs) DNS over TLS (DoT) (link to wiki) in my old, and now decomissioned, router:
Does Cloudflare's DNS over TLS (DoT) implement DNSSEC too?
Now,…
![](../../users/profiles/82570.webp)
LinuxSecurityFreak
- 1,562
- 2
- 18
- 32
1
vote
0 answers
How are DDOS protection mechanisms setup when confidential data is involved?
Scenario:
A hospital has the records of all patients. There is an online portal where patients can login to see their personal medical data.
Since a hospital is an obvious target for any type of hack, the hospital decides to implement DDoS…
![](../../users/profiles/271222.webp)
groundwine
- 11
- 1
1
vote
2 answers
Bypass WAF to perform XSS?
I am trying to find an XSS in website protected by Cloudflare. I use Burp to find which HTML tags allowed.
Only the