Bypass 403 Go

Description

Bypass 403 Go is a tool designed to bypass 403 Forbidden responses for specific endpoints. It allows users to make HTTP requests to specified URLs and includes options for adding custom headers to the requests.

Installation

go install github.com/elvisgraho/bypass-403-go@latest

Flags

Option	Description
-u	Target URL (mandatory), e.g., -u https://example.com/admin
-h	User header, e.g., -h 'Cookie: lol'
-hfile	File containing user headers, with one header per line
-fs	Suppresses output with the desired content length, -fs 42,205
-fc	Suppresses output with the desired response code, -fc 307
-fr	Filter specific message in the response, -fr "Request unsuccessful."
-skipUrl	Skip attacks that change url.
-skipMethod	Skip attacks that change request method.
-skipAgent	Skip attacks that change Agent header.
-show400	Show all 400 errors.
-t	Timeout before making a request, -t 50ms

Examples

bypass-403-go -u https://example.com/secret -h 'Cookie: lol'
bypass-403-go -u https://example.com/secret -hfile headers.txt
bypass-403-go -u https://example.com/secret -hfile headers.txt -fs 42

Testing with Playground (local)

docker build -t 403-playground ./playground
docker run -p 8080:8080 403-playground

Once the playground is running, you can test the tool using commands similar to the following:

go run main.go -u "http://localhost:8080/admin" -h "Cookie: hello"

Playground output

$ go run .\main.go -u "http://localhost:8080/admin" -h "Cookie: hello"
2024/03/15 16:03:38.692321 Started bypass-403-go
PUT <http://localhost:8080/admin> 200 OK. Length: 44.
GET <http://localhost:8080/admin> 200 OK. Length: 44. Cluster-Client-IP: localhost
GET <http://localhost:8080/admin> 200 OK. Length: 44. X-Forwarded-Port: 8080
2024/03/15 16:03:41.889985 Finished bypass-403-go

Create POC curl

curl -X GET \
  -H "X-Forwarded-For: 127.0.0.1:80" \
  -i "https://target.com/secret"