How to bypass firewall like Cloudflare or Sucuri

Check your website application firewall (WAF) bypass

Check your integrated Sucuri firewall bypass or Cloudflare firewall bypass yourself

Web applications are most valuable in this era because of digitization. But active hackers are also always behind an application for gaining access, destroying content, SEO stealing & bypass firewall. To get rid out of those active hackers security specialists use sucuri or cloud flare web application firewall. But the hackers try to bypass that application firewall security in different ways. So if the targeted site is prevented by the web application firewall and but not properly applied the firewall bypass prevention then there is a common way to test what hackers do to Sucuri firewall bypass or Cloudflare Firewall bypass. This is for only learning purposes. Do not use this method to attack someone’s computer.

Perform a Sucuri firewall bypass or Cloudflare firewall bypass in the following way.

To test a site of bypass firewall use the following command from the terminal, like Sucuri firewall bypass or Cloudflare firewall bypass

$ curl -H "host:www.your-domain-name.com"

https://38.60.239.249

 -kIL
HTTP/2 200 
server: nginx
date: Tue, 24 Dec 2019 21:09:42 GMT

You are seeing the IP of the original hosting. But if the firewall bypass prevention was enabled then you will see the information like below:

After Bypass prvention:
$ curl -H "host:www.your-domain-name.com"

https://37.60.239.247

 -kIL
HTTP/2 403 
server: nginx
date: Tue, 24 Dec 2019 21:10:56 GMT

You can see the difference between the response code.

This is what we are looking for when testing Sucuri firewall bypass or Cloudflare firewall bypass. To ensure it is correctly set we need to test the connection through the Firewall IP:

$ curl -H "host: www.your-domain-name.com"

https://192.125.249.105

 -kIL
HTTP/2 200 
server: nginx
date: Tue, 24 Dec 2019 21:11:18 GMT

This shows the connection is correctly passing through the Firewall. So there is no way to overcome the Sucuri firewall bypass or Cloudflare firewall bypass. Additionally, I can confirm that the site is loading correctly after the bypass prevention. You can see this here in the image given below :

See the response from the image below.

Sucuri firewall bypass or Cloudflare firewall bypass

Sucuri firewall bypass or Cloudflare firewall bypass

Read also How to check DNS zone transfer vulnerability on DNS?