4xxBypasser

a tool to bypass negative HTTP status codes on the client side (4xx)

Liscence : MIT license

Creator

Installation :

git clone https://github.com/RistBS/4xxBypasser
cd 4xxBypasser && sudo pip3 install -r requirements.txt
sudo python3 4xxbypasser.py

Arguments / options available:

• Proxy: put http proxies (can avoid connection refusals)
• Params: add parameters if ever the status code indicates it (401 for example)
• Path: the path that returns the 4xx code

Format for the args Proxy et Params :

Params > {'p1':'hello', 'p2':'world'}

Proxy > {"http": "proxy"}

Nginx Alias Traversal Attack :

Vulnerable code :

location /admin {
    alias /var/www/site/data;
}

URL with a Payload : http://site.com/admin../<path/file>