5 ms·

I put on my white hat, found a site that is probably still vulnerable with a bug bounty program, tried to run a modified query, only this time pointed at `/dev/

I put on my white hat, found a site that is probably still vulnerable with a bug bounty program, tried to run a modified query, only this time pointed at `/dev/random` and.... "Sorry, you have been blocked" "This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data." Apparently, Cloudflare's great at detecting threats. Bummer.

aboutruby 8y ago
You could get the origin IP and bypass Cloudflare, there are many many ways to do this.
- amingilani 8y ago
  Thank you for the idea! But in general, it'd nice to be less mysterious when helping people ;) but you're right, there really are many ways to uncover the origin IP[0] [0]: https://www.secjuice.com/finding-real-ips-of-origin-servers-behind-cloudflare-or-tor/ https://www.secjuice.com/finding-real-ips-of-origin-servers-...
- hombre_fatal 8y ago
  They all depend on mistakes. Common ones, sure.