# How To Use Websploit In Android & Bypass Cloudflare 💯

**URL:** <https://onehack.st/t/how-to-use-websploit-in-android-bypass-cloudflare/72263>\
**Category:** Tutorials & Methods\
**Tags:** programming, hacking, android\
**Created:** [March 3, 2020, 1:11pm UTC](https://onehack.st/t/how-to-use-websploit-in-android-bypass-cloudflare/72263 "2020-03-03T13:11:10Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [March 3, 2020, 1:11pm UTC](https://onehack.st/t/how-to-use-websploit-in-android-bypass-cloudflare/72263/1 "2020-03-03T13:11:11Z")

</div>

In This tutorial we will see how to use **Websploit** in android using **andrax framework. It** is a high level **MITM** framework, And an open source project which is used to scan and analysis remote system. in order to find various type of **vulnerabilites,** This tool is very powerful. and support multiple vulnerabilities. like **MITM**** ,cloudflare bypass** etc.

## **WEBSPLOIT FEATURE:-**

- **Autopwn** – Used From Metasploit For Scan and Exploit Target Service
- **wmap** – Scan,Crawler Target Used From Metasploit wmap plugin
- **format infector** – inject reverse & bind payload into file format
- **phpmyadmin** – Search Target phpmyadmin login page
- **lfi** – Scan,Bypass local file inclusion Vulnerability & can be bypass some WAF
- **apache users** – search server username directory (if use from apache webserver)
- **Dir Bruter** – brute target directory with wordlist
- **admin finder** – search admin & login page of target
- **MLITM Attack** – Man Left In The Middle, XSS Phishing Attacks
- **MITM** – Man In The Middle Attack
- **Java Applet Attack** – Java Signed Applet Attack
- **MFOD Attack Vector** – Middle Finger Of Doom Attack Vector
- **USB Infection Attack** – Create Executable Backdoor For Infect USB For Windows
- **ARP DOS** – ARP Cache Denial Of Service Attack With Random MAC
- **Web Killer Attack** – Down Your WebSite On Network(TCPKILL)
- **Fake Update Attack** – Create Fake Update Page For Target OS
- **Fake Access point Attack** – Create Fake AP & Sniff Victims Information

### HOW TO USE WEBSPLOIT IN ANDROID:-

1. [Download and install andrax](https://andrax.thecrackertechnology.com/)
2. Open **Dragon terminal**  
3. Type `cd`
4. Then type **`ls`**
5. Then type `cd websploit `
6. Type **`chmod +x *`**
7. Now type `websploit` and hit enter

 ![image](https://onehack.st/uploads/default/original/3X/4/1/41d156b8cb417e232de8b6f2de16250506bdc9c2.jpeg)

#### **HOW TO BYPASS CLOUFLARE DDOS PROTECTION AND FIND REAL IP:-**

- Type `Help`

 ![image](https://onehack.st/uploads/default/original/3X/8/6/864c1ee561d0fb221339ab23ca939390f3e2e97a.jpeg)

Type `show modules`

 ![image](https://onehack.st/uploads/default/original/3X/5/f/5f5a9fb26b2ed7b6f999b4810aa2aaaa23a5ad2f.jpeg)

- Now type **`use web/cloudflare_resolver`** and hit enter
- Now set the target type `set target xyz.com` and hit enter
- Now type `run` and hit enter

 ![image](https://onehack.st/uploads/default/original/3X/e/f/efa96f1a892cf4eece16d21f99a1b966d54ee380.jpeg)

**Github** : [https://github.com/websploit/websploit](https://github.com/websploit/websploit)

## HAPPY LEARNING! 👍