All Projects → devploit → dontgo403

devploit / dontgo403

Licence: Apache-2.0 license
Tool to bypass 40X response codes.

Programming Languages

go
31211 projects - #10 most used programming language

Projects that are alternatives of or similar to dontgo403

Resources-for-Application-Security
Some good resources for getting started with application security
Stars: ✭ 97 (-78.77%)
Mutual labels:  ctf, websec
Tiny Xss Payloads
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
Stars: ✭ 975 (+113.35%)
Mutual labels:  ctf, bugbounty
spellbook
Framework for rapid development and reusable of security tools
Stars: ✭ 67 (-85.34%)
Mutual labels:  ctf, bugbounty
Basecrack
Decode All Bases - Base Scheme Decoder
Stars: ✭ 196 (-57.11%)
Mutual labels:  ctf, bugbounty
Security Tools
Collection of small security tools, mostly in Bash and Python. CTFs, Bug Bounty and other stuff.
Stars: ✭ 509 (+11.38%)
Mutual labels:  ctf, bugbounty
MyJWT
A cli for cracking, testing vulnerabilities on Json Web Token(JWT)
Stars: ✭ 92 (-79.87%)
Mutual labels:  ctf, websec
machinescli
This tool provides commandline access for https://www.hackthebox.eu, https://tryhackme.com/ and https://www.vulnhub.com/ machines.
Stars: ✭ 34 (-92.56%)
Mutual labels:  ctf
micro-sentry
Tiny Sentry client with idiomatic wrapper for Angular
Stars: ✭ 100 (-78.12%)
Mutual labels:  bugbounty
magicRecon
MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilities, all this saving the results obtained in an organized way in directories and with various formats.
Stars: ✭ 478 (+4.6%)
Mutual labels:  bugbounty
ctf-eth-env
Moved to https://github.com/chainflag/eth-challenge-base/tree/main/geth
Stars: ✭ 30 (-93.44%)
Mutual labels:  ctf
PayloadsAll
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Stars: ✭ 31 (-93.22%)
Mutual labels:  bugbounty
bhedak
A replacement of "qsreplace", accepts URLs as standard input, replaces all query string values with user-supplied values and stdout.
Stars: ✭ 77 (-83.15%)
Mutual labels:  bugbounty
kernelpwn
kernel-pwn and writeup collection
Stars: ✭ 348 (-23.85%)
Mutual labels:  ctf
EzpzShell
Collection Of Reverse Shell that can easily generate using Python3
Stars: ✭ 46 (-89.93%)
Mutual labels:  ctf
AHE17
Android Hacking Event 2017 Write-up
Stars: ✭ 40 (-91.25%)
Mutual labels:  ctf
Inventus
Inventus is a spider designed to find subdomains of a specific domain by crawling it and any subdomains it discovers.
Stars: ✭ 80 (-82.49%)
Mutual labels:  bugbounty
CTF
🚩 A cheatsheet of useful tools and shell scripts that come in handy in capture the flag contests.
Stars: ✭ 31 (-93.22%)
Mutual labels:  ctf
heaptrace
helps visualize heap operations for pwn and debugging
Stars: ✭ 252 (-44.86%)
Mutual labels:  ctf
github-endpoints
Find endpoints on GitHub.
Stars: ✭ 118 (-74.18%)
Mutual labels:  bugbounty
solveme
SolveMe - Jeopardy CTF Platform
Stars: ✭ 51 (-88.84%)
Mutual labels:  ctf

contributions welcome

dontgo403 is a tool to bypass 40X errors.

Installation

Grab the latest release for your OS from RELEASES (Outdated atm)

Or compile by your own (RECOMMENDED):

git clone https://github.com/devploit/dontgo403; cd dontgo403; go get; go build

Customization

If you want to edit or add new bypasses, you can add it directly to the specific file in payloads folder and the tool will use it.

Options

./dontgo403 -h

Command line application that automates different ways to bypass 40X codes.

Usage:
  dontgo403 [flags]

Flags:
  -b, --bypassIp string      Try bypass tests with a specific IP address (or hostname). i.e.: 'X-Forwarded-For: 192.168.0.1' instead of 'X-Forwarded-For: 127.0.0.1'
  -d, --delay int            Set a delay (in ms) between each request. Default: 0ms
  -f, --folder string        Define payloads folder (if it's not in the same path as binary)
  -H, --header strings       Add a custom header to the requests (can be specified multiple times)
  -h, --help                 help for dontgo403
  -t, --httpMethod string    HTTP method to use (default 'GET')
  -m, --max_goroutines int   Set the max number of goroutines working at same time. Default: 50 (default 50)
  -p, --proxy string         Proxy URL. For example: http://127.0.0.1:8080
  -u, --uri string           Target URL
  -a, --useragent string     Set the User-Agent string (default 'dontgo403')

Example of usage

asciicast

Contact

Twitter: devploit

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].