Bypassing 403 Protection To Get Admin Access

Hi Cybersecurity Enthusiast Mr.Horbio here.

In this story I will talk about one of my finding “Bypassing 403 Restrictions and gaining access Admin Panel”

So whenever you visit some restricted resource you generally get 403-Forbidden message.

Don’t give up here! Keep trying to Bypass this restrictions to access important information or resources that are blocked.

You can also follow on youtube to get more tips for BugBounty

Youtube channel Here : https://www.youtube.com/channel/UCBiIg0P8onz7EZgXNhjpR4A

There are many headers and paths which you can use to bypass 403 restrictions.

/*
/%2f/
/./
/
/*/

2. Adding Headers in request :By adding different headers in request with value 127.0.0.1 can also help in bypassing restrictions.

X-Custom-IP-Authorization
X-Forwarded-For
X-Forward-For
X-Remote-IP
X-Originating-IP
X-Remote-Addr
X-Client-IP
X-Real-IP

3. Changing the request method type: Changing method from GET to POST , etc can also lead to bypass.

You can use these ways to Bypass this 403 restriction.