403-bypass-subdomains.txt-toll's Introduction

403-bypass

This is a bash script for testing potential 403 bypasses in web security by sending various payloads and headers to a domain or list of subdomains.

Features

This bash script is designed to test for potential 403 bypasses on a domain or a list of subdomains. It sends GET requests with various payloads and headers, and prints the requested URL along with the status code. If a 403 error is bypassed, it could indicate a potential security vulnerability.
In addition to this, the script also tests both HTTP and HTTPS protocols. This is crucial as the server’s response might differ based on the protocol used. The script will automatically switch between HTTP and HTTPS while sending the requests, providing a more comprehensive assessment of the server’s security configuration.
Remember, identifying a 403 bypass can be a significant finding during a penetration test or bug bounty hunt, as it may lead to unauthorized access to sensitive information or functionality. Always ensure you have permission to perform these tests to avoid any legal issues. Happy hunting!

./script.sh -d example.com -o output.txt

-d option: This is used to specify a single domain to test. For example, if you want to test the domain example.com, you would use the command ./script.sh -d example.com
-l option: This is used to specify an input file containing subdomains to test. For example, if you have a file named subdomains.txt with one subdomain per line, you would use the command ./script.sh -l subdomains.txt
Remember, you can combine these options as needed. For instance, if you want to test a single domain and save the results to a file, you could use ./script.sh -d example.com -o output.txt

Recommend Projects