extension ExtPose

X-Cycle (delisted)

CRX id


Description from extension meta

Cycles X-Forwarded-For Header from a set of configured IP addresses.

Image from store X-Cycle
Description from store Similar to ModHeaders, but less static. Configure a Target IP address or Hostname, and a List of IP addresses. This extension will pick one IP address from the list and insert it into requests to the target server as the value of the X-Forwarded-For header. This is geared towards testers of Web Application Firewalls, where you need to generate traffic that looks like it's coming from different IP addresses. Normally, servers do not trust XFF that is not set by their DMZ, so you will need to configure your WAF to accept untrusted XFF first. I found it particularly useful in Testing F5's Application Security Manager Software. [What's New] [v0.2.0] * bug fixes.

Latest reviews

  • (2018-04-03) Alin CALINCIUC: It really works for Synology IP block.
  • (2016-07-14) Ashwin Venkat: This is brilliant and exactly what I've been looking for. Thanks Fanen!!

Latest issues

  • (2019-08-01, v:0.2.0) Most Popular: ip not changing
    Hello, IP not changing to me dunno why I hope you can help me ty


226 history
4.5 (8 votes)
Last update / version
2016-02-08 / 0.2.0
Listing languages