Check your integrated Sucuri firewall bypass or Cloudflare firewall bypass yourself
Web applications are most valuable in this era because of digitization. But active hackers are also always behind an application for gaining access, destroying content, SEO stealing & bypass firewall. To get rid out of those active hackers security specialists use sucuri or cloud flare web application firewall. But the hackers try to bypass that application firewall security in different ways. So if the targeted site is prevented by the web application firewall and but not properly applied the firewall bypass prevention then there is a common way to test what hackers do to Sucuri firewall bypass or Cloudflare Firewall bypass. This is for only learning purposes. Do not use this method to attack someone’s computer.
Perform a Sucuri firewall bypass or Cloudflare firewall bypass in the following way.
To test a site of bypass firewall use the following command from the terminal, like Sucuri firewall bypass or Cloudflare firewall bypass
$ curl -H "host:www.your-domain-name.com"
-kIL HTTP/2 200 server: nginx date: Tue, 24 Dec 2019 21:09:42 GMT
You are seeing the IP of the original hosting. But if the firewall bypass prevention was enabled then you will see the information like below:
After Bypass prvention: $ curl -H "host:www.your-domain-name.com"
-kIL HTTP/2 403 server: nginx date: Tue, 24 Dec 2019 21:10:56 GMT
You can see the difference between the response code.
This is what we are looking for when testing Sucuri firewall bypass or Cloudflare firewall bypass. To ensure it is correctly set we need to test the connection through the Firewall IP: $ curl -H "host: www.your-domain-name.com"
-kIL HTTP/2 200 server: nginx date: Tue, 24 Dec 2019 21:11:18 GMT
This shows the connection is correctly passing through the Firewall. So there is no way to overcome the Sucuri firewall bypass or Cloudflare firewall bypass. Additionally, I can confirm that the site is loading correctly after the bypass prevention. You can see this here in the image given below :
See the response from the image below.
Read also How to check DNS zone transfer vulnerability on DNS?