3 ms·

Plenty of ways to leak the original server IP address if it isn't really well hardened against that (and most aren't).

• deleted 11mo ago
  [deleted]
• olalonde 11mo ago
  Like? Aside from scanning DNS records (assuming the protected IP is in there somewhere) or scanning the entire IPv4 (assuming the server responds to non CloudFlare requests), I can't think of any. And both methods are simple to protect against.
  • q3k 11mo ago
    Some of it is tradecraft, but have two: SSRF bugs/features and chatty email headers.
    • olalonde 11mo ago
      Right. Still a far cry from "anyone can bypass CloudFlare" though.