Blocked by f-ing clownflare

Turbocapitalist · 04-04-2022, 04:07 AM

I have tried to continue posting in the TFTP + DNSmasq thread,

https://www.linuxquestions.org/quest...se-4175710361/

However, clownflare keeps blocking my response. Please resolve the problem.

Quote:

Cloudflare Ray ID: 6f68e1c6287d9906

Cloudflare Ray ID: 6f68e34dcf739906

etc.

Thanks.

Edit: it seems to be the net cat line which the malicious / incompetent cloudflare is objecting to. Take out the [b[/b] to see the actual line which causes the clownflare filter to trigger.

ondoho · 04-04-2022, 01:26 PM

Not sure which line in which post you're refering to, but here are some hints:
https://www.linuxquestions.org/quest...st-4175705379/
https://www.linuxquestions.org/quest...ks-4175710080/
https://www.linuxquestions.org/quest...ed-4175710286/

dugan · 04-04-2022, 03:42 PM

Why does this forum need Cloudflare anyway?

teckk · 04-04-2022, 04:00 PM

I was blocked on a post today. Tried it 3 times, did not have js on. I deleted LQ's cookies, then reopened the browser and re opened the page, posted the exact same thing in the code block, and was able to post without js on.

boughtonp · 04-04-2022, 04:40 PM

Quote:

Originally Posted by teckk

I deleted LQ's cookies, then reopened the browser and re opened the page, posted the exact same thing in the code block

Odd. If you click edit on that post and hit preview repeatedly, does it eventually block, or does it continue to work?

teckk · 04-04-2022, 04:47 PM

Test:
https://0x0.st/obNn.png

teckk · 04-04-2022, 04:48 PM

I have been trying to test
Test:
xxxnc -u 192.168.0.2 69
xxxncat -klp 8000 -v
xxxnmap -p 1-100 192.168.1.1
xxxnmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24

Can't put any tags on that. Not color, bold, italic, code, script etc.

teckk · 04-04-2022, 04:50 PM

Test:
__nc -u 192.168.0.2 69

teckk · 04-04-2022, 04:52 PM

Test:
__nc -u 192.168.0.2 69
__ncat -klp 8000 -v
__nmap -p 1-100 192.168.1.1
__nmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24

teckk · 04-04-2022, 04:56 PM

Test:

Code:

__nc -u 192.168.0.2 69
__ncat -klp 8000 -v
__nmap -p 1-100 192.168.1.1
__nmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24

__nc -u 192.168.0.2 69

Hey everyone, ignore the 2 stupid underscores in my code block, because of cloudflare. Just an idea...

Quote:

Odd. If you click edit on that post and hit preview repeatedly, does it eventually block, or does it continue to work?

Didn't try that. Let me try it on this post.

Edit:
Test Test. Checking preview Butoon. Hit 5 times. I can still edit.

Turbocapitalist · 04-05-2022, 12:23 AM

Quote:

Originally Posted by teckk

I have been trying to test
Test:
xxxnc -u 192.168.0.2 69
xxxncat -klp 8000 -v
xxxnmap -p 1-100 192.168.1.1
xxxnmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24

Can't put any tags on that. Not color, bold, italic, code, script etc.

Not on but in it. Try:

n[b][/b]c -u 192.168.0.2 69

The LQ parser does not filter out the null-content bold tag to it sits there between the n and the c.

ondoho · 04-05-2022, 01:50 AM

Quote:

Originally Posted by teckk

Hey everyone, ignore the 2 stupid underscores in my code block, because of cloudflare.

While I couldn't make much sense of what you're posting there, this nicely illustrates the issue we currently face.

!!! · 04-05-2022, 02:57 AM

NO need to *actually post*: just click 'Go Advanced' (or Preview Post)

I played with this for a while. If I put the space in to make nc a separate token, followed by a numeric IP address, ANYwhere, I get hard-blocked by cloudfare.

NC0.0.0.0

nc 2001:0db8:85a3:0000:0000:8a2e:0370:7334 #IPv6 missed, duh!

I wonder what their collection of regex are...

Edit added (Goo'ed)
https://www.invicti.com/support/cloudflare-waf-rules/
https://developers.cloudflare.com/ru...e/expressions/
https://api.cloudflare.com/

I wonder if LQowner configs this...

teckk · 04-05-2022, 09:26 AM

Quote:

NO need to *actually post*: just click 'Go Advanced' (or Preview Post)

Ok thanks.

Code:

_nc -u 192.168.0.2 69
_ncat -klp 8000 -v
_nmap -p 1-100 192.168.1.1
_nmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24
_script_  ..javascript code goes here..  _/script_
_nc 2001:0db8:85a3:0000:0000:8a2e:0370:7334

Let me try the source from this page.

Code:

<table cellpadding="0" cellspacing="0" border="0" class="fieldset">
<tr>
<td class="smallfont" colspan="3">Title:</td>
</tr>
<tr>
<td><input type="text" class="bginput" name="title" value="" size="50" maxlength="140" tabindex="1" title="Optional" /></td>
<td>&nbsp;&nbsp;</td>
<td><img id="display_posticon" src="clear.gif" alt="" /></td>
</tr>
</table>

<div class="smallfont">Message:</div>

#Here
_script type="text/javascript" src="clientscript/vbulletin_textedit.js?v=3810b1">_/script_ #Here

#Here
_script type="text/javascript"_ #Here

Ok, Doesn't care about tr, td, table, div, tags

I had to replace the script tags with _ as you can see.