@Loi Liang Yang so what's the third and fourth step? We now know there is a WAF and it's sitting in cloudflare. Yet we still don't know the *type of WAF* it truly is...so how do you find out the type? Do we use WAFWoof or keep using Nmap? Once the type is revealed then research can be done to write effective payload to bypass it.
all you need to do is find iso files that aren't 2020.1 version,just find iso files that the version 2019.3 or less than that and then you can using kali linux as a normal