CS Money · Report #1105673

Origin IP found, Cloudflare bypassed

N/Astatus

mediumseverity

11upvotes

30 Mar 2021disclosed

How it was found

Greetings!, Hope Y'all good and fine.

Summary:

I would like to report another vulnerability very Similar to my other report in #975991

Due to lack of secure design, I was able to find the origin IPs behind Cloludflare WAF.

The IPs I found belong to :

3d.cs.money

Description:

I was able to find and access the Origin IPs behind the WAF due to lack of access control, I could also port scan the IP

The IP found : 51.83.253.82

Steps To Reproduce:

simply visit:

https://51.83.253.82/

Impact

As reported in many other submissions, Cloudflare bypasses can have a significant impact, as any adversary is now able to communicate with the origin server directly, enabling them to perform unfiltered attacks (such as denial-of-service), and data retrieval.

This attack vector can be extremely bad because with the IP found out an attacker could attack the servers by DDoS or other attacks without being stopped by CloudFlare.]

Thanks!

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original