+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Is there a way to bypass the authentication firewall message? (/showthread.php?tid=4988644)
Is there a way to bypass the authentication firewall message? - nameisno - Sep 15, 2015
Hellow everyone, Just want to know is there a way to bypass the authentication like the firewall that on the admin panel ,, I know already the post method but is there a way to bypass it when the htaccess limit the access to get + post only :(
* - Artisanal - Sep 15, 2015
Are you talking about bypassing .htaccess ?
* - nameisno - Sep 15, 2015
(Sep 15, 2015 08:59 AM)Zombay Wrote: Are you talking about bypassing .htaccess ?
I mean how to bypass the authentication that the owner of the website made using htaccess + htapsswd
htaccess file:
AuthType Basic
AuthName "Password Protected Area"
AuthUserFile /home/aamalyqa/public_html/admin/SystemImages/aaa/.htpasswd
Require valid-user
<limit GET POST>
require valid-user
</limit>
as an example :)
if the htaccess file is :
------
AuthType Basic
AuthName "Password Protected Area"
AuthUserFile /home/aamalyqa/public_html/admin/SystemImages/aaa/.htpasswd
Require valid-user
------
I can bypass it easly using post or brup suite to edit the header :)
but when the htaccess is
AuthType Basic
AuthName "Password Protected Area"
AuthUserFile /home/aamalyqa/public_html/admin/SystemImages/aaa/.htpasswd
Require valid-user
<limit GET POST>
require valid-user
</limit>
I can't bypass it as it limit only get + post :( so is there a way !!
* - Meowie - Sep 16, 2015
Make a request that isn't GET or POST using LiveHTTPHeaders, since those are the methods that htaccess is currently blocking.
* - nameisno - Sep 16, 2015
(Sep 16, 2015 06:23 AM)Meowie Wrote: Make a request that isn't GET or POST using LiveHTTPHeaders, since those are the methods that htaccess is currently blocking.
thnx but I already know this methode :) it doesn't work when the htaccess limit the access to get and post only so hope some one have bypassed it 😉