Origin IP & Cloud WAF Bypass Scanner

Detect if your origin server's real IP address is leaking through MX records, historical DNS, or direct ping.

Technical Scope & Verification Behavior

Cross-references mail exchange records, historical certificates, and direct port responses to test if attackers can bypass Cloudflare/Fastly WAFs.

Automated Inspection Checks (8)

Passive URL parameter fuzzing

Non-destructive boundary tests

Header & cookie flag assertions

Differential latency timing

Proof of Concept (PoC) Vector

Canonical test payload dispatched during security surface audits.

Direct IP access on 198.51.100.24 responds with site TLS cert

Probe Execution Simulator

Watch the probe engine test this signature in an isolated sandbox.

probe-runner (isolated ephemeral container)

Click 'Simulate Check' to watch the headless audit engine test this vector.

Remediation Patch

Firewall Origin to Cloudflare Only

patch.diff (bash)

--- a/handler.bash (Vulnerable)

# Allow all incoming on port 443

+++ b/handler.bash (Remediated)

# Restrict port 443 to Cloudflare IP ranges only via iptables/UFW
sudo ufw allow from 173.245.48.0/20 to any port 443 proto tcp

Lock down your origin firewall to accept HTTPS traffic only from designated WAF edge proxy IP ranges.

AI Agent Prompt (Cursor · Claude · Copilot)

Copy and paste into your editor to refactor this issue automatically.

"Configure your cloud security group to drop all inbound traffic on port 80/443 not originating from Cloudflare IP ranges."

Run Isolated Check

Test your public domain specifically for Origin IP & Cloud WAF Bypass Scanner.

100% passive • No server load

Specification Details

CVSS Score: 7.9 / 10.0
Severity Level: HIGH
Category: INFRASTRUCTURE
Test Vectors: 8 automated
Execution SLA: < 2.5 seconds
False Positive Defense: Strict assertion

Related Standards

#WAF#Origin IP#Cloudflare#Bypass

Frequently Audited Together

Checks commonly evaluated alongside Origin IP & Cloud WAF Bypass Scanner during surface discovery.

View all 41 checks →

VULNERABILITY

Cross-Site Scripting (XSS) Scanner

Find XSS vulnerabilities that could let attackers inject malicious scripts and steal customer sessions.

CVSS 8.2

VULNERABILITY

CORS Misconfiguration Scanner

Detect dangerous CORS policies that allow unauthorized third-party origins to invoke authenticated APIs.

CVSS 8.1

VULNERABILITY

IDOR & Access Control Scanner

Inspect parameter tampering and insecure direct object references across user-scoped data endpoints.

CVSS 8.6

Run continuous monitoring for Origin IP & Cloud WAF Bypass Scanner

Audit your site across all 41 vectors automatically on every deploy.

Back to Catalog