skills.rest
dreadnode
dreadnodeOFFICIAL
Explore all skills by this author →
Website𝕏@dreadnodeGitHub

ip-rotation

Configure flareprox or fireprox rotating proxies for authorized web security testing.

11|1|Updated May 4, 2026
Search Tags:#web-security#proxy#waf-bypass#ip-rotation#rate-limit-bypass#fireprox#flareprox
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill ip-rotation-dreadnode
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ip-rotation
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/ip-rotation
Command: npx skills add https://github.com/dreadnode/capabilities --skill ip-rotation-dreadnode

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill resolves disruptions to web security testing caused by anti-automation defenses including rate limiting, IP bans, WAF challenges, and geo-restrictions that block normal testing requests.

Core Features & Use Cases

  • Dual IP rotation backends: Supports flareprox (free Cloudflare Workers proxy for unauthenticated recon, fuzzing, and multi-target testing) and fireprox (AWS API Gateway proxy for authenticated, session-based testing).
  • Targeted use cases: Enables testing when encountering 429 rate limits, 403 IP bans, WAF blocks, geo-blocks, and high-volume fuzzing requiring IP diversity.
  • Safety guardrails: Only activates when the IPROTATE_ENABLED environment variable is set, with clear constraints to avoid misuse for CORS tests or tests requiring exact source IP attribution.

Quick Start

Use the ip-rotation skill to configure a rotating proxy to bypass the WAF block on your target web application during authorized security testing.

Frequently Asked Questions about ip-rotation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I bypass rate limits and IP bans during web security testing?▼

You can bypass rate limits and IP bans during web security testing by configuring a rotating proxy backend. This Skill provides flareprox and fireprox backends to distribute requests across multiple IPs during authorized offensive workflows.

What is the difference between flareprox and fireprox for proxy rotation?▼

Flareprox uses free Cloudflare Workers proxies for unauthenticated reconnaissance and fuzzing, while fireprox uses AWS API Gateway proxies for authenticated, session-based testing requiring higher reliability and IP diversity.

Do I need AWS credentials to use fireprox for IP rotation?▼

Yes, you need AWS cloud provider credentials to operate the fireprox backend for IP rotation. You must also set the IPROTATE_ENABLED environment variable to activate the proxy features.

Can I use IP rotation to bypass WAF blocks and geo-restrictions?▼

Yes, IP rotation can bypass WAF blocks and geo-restrictions by cycling through diverse source IPs. This allows high-volume content discovery and fuzzing to continue without triggering anti-automation defenses.

When should I not use rotating proxies for security testing?▼

Avoid using rotating proxies for CORS tests or scenarios requiring exact source IP attribution. IP rotation disrupts consistent source tracking, making it unsuitable for tests dependent on a single origin.

Related Skills

Explore More Software Engineering Skills→
The-Tech-IdeaThe-Tech-Idea
1

connectionproperties

Configure BeepDM datasource connections with a centralized typed model.

Official
Basic
AgentComputerAIAgentComputerAI
5

proxy

Route Puppeteer web scraping through authenticated residential, datacenter, or mobile proxies.

Official
Advanced
dreadnodedreadnode
11

caido-proxy

Search and replay HTTP proxy traffic via Caido MCP tools.

Official
Intermediate
SompoteSompote
22

youtube-transcript

Fetch YouTube video transcripts via residential IP proxy for summarization.

Community
Advanced