CloudFlare Tips & Secrets?

Just wanted to give out some information about CloudFlare and Tips.

1. CloudFlare Supports These Ports: 2052, 2053, 2082, 2083, 2086, 2087, 2095, 2096, 8080, 8443, 8880
This means if you have a TCP based app such as a websocket, it can be proxied by cloudflare a good example is discordapp.com

2. CloudFlare leaks your Website's Backend Ip via mx headers.
Using http://api.predator.wtf/cfresolve/?arguments=(domain) replacing (domain) with a website's domain will give you the IP.

3. CloudFlare has a page on your website for developers to check your caching time e.t.c
You can see this by adding /cdn-cgi/cl/img.gif to a domain on cloudflare, i.e: http://raid.lol/cdn-cgi/cl/img.gif

4. CloudFlare has an exploit on it's on system letting people bypass the layer 7 protection (Wait 5 Seconds).
This one you will need to contact me at tech[at]raid.lol to find out as it is a bypass.

5. CloudFlare's protection against Layer 7, the same as number 4 can be "bypassed" / emulated.
You can do this by visiting the website passing the wait 5 seconds and then saving your cookies and use it to flood a website.

6. CloudFlare can be embed with your minecraft server without giving your server's IP Out using their SRV record system.
I.e:Service: _minecraft / Protocol: _tcp / Name: (subdomain) / Priority: 0 / Weight: 0 / Port: (server port -25565) / IP of Server.

7. CloudFlare's protection can be enhanced by blacklisting all IPs on your server other than CloudFlare Server's Ip.
Find all their IP Ranges here: https://www.cloudflare.com/ips/

Thanks for Reading,
Share <3