+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: How to bypass waf htaccess 403? (/showthread.php?tid=6004767)
How to bypass waf htaccess 403? - VmNada - Sep 3, 2019
After a lot of work (reading, testing tools, learning basic of shell etc) i found out how get real ip of hosting behind s*u*c*uri. And it is latest and working well.
I successfuly got access to couple of wordpress sites.
But now those sites have an extra layer of security where htaccess is configured to allow only ip of waf and for other ips it is 403 forbidden error (when you access any type of file be it txt or php)
Any working method to get past 403 forbidden?
RE: How to bypass waf htaccess 403? - CyberStrike - Sep 3, 2019
Try 127.0.0.1 in the referrer just a thought or in the referrer have the WAF IP.
RE: How to bypass waf htaccess 403? - VmNada - Sep 9, 2019
(Sep 3, 2019 10:05 PM)CyberStrike Wrote: Try 127.0.0.1 in the referrer just a thought or in the referrer have the WAF IP.
That did not work!!!
RE: How to bypass waf htaccess 403? - CyberStrike - Sep 9, 2019
(Sep 9, 2019 08:38 AM)VmNada Wrote: That did not work!!!
Sometimes it's also the URI which referred a user to a page, I guess that you need to do some probing (fuzzing). For example in some malware you will see that before you hit the control panel your referrer has to be maybe "login.php". I am guessing you just bruteforced files/directories? If that is the case then yes good chance that they expected it and there is a specific referrer or maybe it has to be from a specific IP which the connection is allowed from, like you mentioned the WAF IP. Find the WAF IP and try that as the referrer. Trying 127.0.0.1 as the referrer sometimes works with misconfigured webapps, looks like you got more work ahead of you.
RE: How to bypass waf htaccess 403? - GersonHdez - Sep 9, 2019
I agree that is the case then yes good chance that they expected it and there is a specific referrer or maybe it has to be from a specific IP which the connection is allowed from
RE: How to bypass waf htaccess 403? - altalav99654 - Sep 9, 2019
In the referrer put WAF IP
RE: How to bypass waf htaccess 403? - VmNada - Sep 10, 2019
Found a way to bypass 403 using many combinations and experiments. I will cross verify and update here.
RE: How to bypass waf htaccess 403? - CyberStrike - Sep 10, 2019
Sounds good looking forward to the update.
RE: How to bypass waf htaccess 403? - VmNada - Sep 17, 2019
(Sep 10, 2019 08:25 AM)VmNada Wrote: Found a way to bypass 403 using many combinations and experiments. I will cross verify and update here.
Not working. Any other help?
RE: How to bypass waf htaccess 403? - chutadsingh - Sep 27, 2019
I need your help regarding wordpress access, I created the website, client did not pay, changed admin email (i got the email notification) and changed the server, I know what all plugins are installed, I even have the wordpress server dump.
RE: How to bypass waf htaccess 403? - Minaise - Sep 29, 2019
Good to know also guys!!
Will be waiting for a solution or if I find out i will post it here
Cheers
RE: How to bypass waf htaccess 403? - Ramb0x - Sep 29, 2019
Search the forum for sucuri waf byapss.
RE: How to bypass waf htaccess 403? - Minaise - Sep 29, 2019
(Sep 29, 2019 10:50 AM)zpx Wrote: Search the forum for sucuri waf byapss.
No video there.
Trying to get that bastard 403 fault off my plate..
26h and trying
RE: How to bypass waf htaccess 403? - Titit - Sep 30, 2019
Why not using the first victim as a proxy then overide the rules with htaccess