Light

dheerajmadhukar / 4-zero-3 Goto Github PK

View Code? Open in Web Editor NEW

1.1K 1.1K 218.0 17.05 MB

403/401 Bypass Methods + Bash Automation + Your Support ;)

License: MIT License

Shell 100.00%

4-zero-3's Introduction

Let's Connect

`LinkedIn` `Twitter` `Twitch` `YouTube`

Live Sessions

HTTP/2 Request Smuggling Bash Automation
Subdomain Enum On Live Target 'rockstargames.com' Bash Automation
Content Discovery FUFF in detail + Live Bug Bounty Automation
Live Bug hunting Chaining Bugs (SSRF + Blind RCE + DNS Exfiltration)
Dive into Android Forensics for Beginner Powered by Google Developers
Prototype-Pollution-Lab to chain the vulnerabilities between multiple accounts.
Android UXSS, Local File Steal, OpenRedirect [null Ahmadabad Meet]

Public CTF/Labs

Prototype Pollution Vulnerability Chaining

Insecure Comparison in JavaScript

Write-ups

Full ATO [Account Takeover] $$$
Android insecure IPC leads to Full Account Takeover via IDOR
Android - Chaining Vulnerabilities [ Local File Steal, Java Script injection, Open Redirect ]
Bypass of biometrics & password security functionality for Android
Origin IP found, D-DOS & WAF Cloudflare protection bypassed

🔭 I’m currently working on

Show ❤️ :)(:

Kindly Nominate me as a @github Stars ! If you like my contribution & brings you happy feelings, please show your support ! https://stars.github.com/nominate/

4-zero-3's People

Contributors

Stargazers

Watchers

Forkers

tounsi007 shripad5258 faisalrathore arhamjain vishal9066 gmtungphan cybertron10 ykankaya affilares 0x240x23elu bbhunter deepanjalkumar aerosayan khyati2598 bhishma14 rajesh457 aali99 cybernewbies tk-t0n0y ravindranathrl okaayfine anonsharzzk witchfindertr skybulk polling-repo-continua dn0m1n8tor n0lsecurity madusec hackerandya an0nym0u5101 l34rner alphisilaw m4d3bug harekrishnarai slsis cream-sec pixelza hnd3884 h4ckdi developer191 a-faaeq vinnyvinoth slooppe truonghuuphuc 5m7x aben1979 king-soft-hackers d1nk0993 fynewine dinghi-security spiderhehehoho marcoshat aqimmm 3as0n flagamat kiralab getdrive trhacknonimous parkjunmin spongyb e1abrador beauknowstech 0xh7ml magdy23 gprime31 seqrity laowang1026 run0nceex sarmadbytes jaswanth-arch xiaokuoai 0neatsec r4ph4e1-0x01 sry309 ak4l3r3 zglaozhu xstpl worldhack666 jayaram-yalla storenth spyboy7711 massito bx0ne niranc pager5cx415cx415cx69 murkuo wizard0fthedigitalage nansjcn saurabhsam96216 arr3sty0u admin-079 stickybit01 zzhsec siselong b1narys0ul xzone911 hritish42 ayplusllc 0xsojalsec bugbountydude

4-zero-3's Issues

issue

hi just wanted to ask how do I like export? the request this script made so I can use it in a browser?

Stopping at 'Head' under HTTP Method bypass

--encode runs fine and --HTTPmethod runs fine too when opted as standalone, but when --exploit is used, it's hanging after reaching 'Head: ' under HTTP Method Bypass and not progressing from there no matter how long I wait.

help

I have a list of headers how can I add it to your tool

Add flag to only show found bypasses

Add flag to only show found bypasses
like -silent or -q

Case Switching

Hey, thanks a lot for this great tool : ) Just wanted to know if your tool also does case switching?

https://redacted.com/admin -> 403 Forbidden
https://redacted.com/Admin -> 200 OK

CF-Connecting_IP property can not use to bypass 403.

I am not sure how CF-Connecting_IP is used to bypass 403. CF-Connecting_IP is an invalid header property, so it is not useful. If you think differently, please explain.

change to Burp

add for burp passive scan

Show redirects URL

Amazing tool, which be great if you can add the URL to show on 302 redirects, to see in the Output where is the Location: header redirects.

thank you!

Error in Termux

question : IP Forward Payload

you forwarding the request to this IP : 68.180.194.242
what is this IP Address and why you do that ?

New branch requested

Please create a new branch to contribute updated code and fixed issues.

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.