iamj0ker / bypass-403 Goto Github PK

look here for same issue: sting8k/BurpSuite_403Bypasser#4

currently the line is:
curl -s -o /dev/null -iL -w "%{http_code}","%{size_download}" " $1/$2;/"
the space between the quote and $ causes the curl to fail " $1/$2;/"
the following line should do:
curl -s -o /dev/null -iL -w "%{http_code}","%{size_download}" "$1/$2;/"

Here if you try with this https://reptox.cnesst.gouv.qc.ca/bin/admin_backup/catall.aspx we got a line with:
200,101017 --> https://reptox.cnesst.gouv.qc.ca -H X-rewrite-url: /bin/admin_backup/catall.aspx

in fact when i go over it in burp I actually got a 302 redirect. Any idea how or why ?

In some situations (when investigating apps on different port numbers) this script is missing some bypasses.

Example, this is missing the bypass:
403,9 --> http://xxxx:8096/ -H X-Forwarded-For: 127.0.0.1:80
This is what I added myself to make sure it finds it:
200,2860 --> http://xxxx:8096/ -H X-Forwarded-For: 127.0.0.1

i got 200 status code in this but i don't know how to exploit it , any usage tutorials ?

404,1360./bypass-403.sh: line 37: unexpected EOF while looking for matching `"'
./bypass-403.sh: line 38: syntax error: unexpected end of file

I read changing the protocol version can work in some cases too

curl --http1.0 for example

thanks