+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: Forbidden You don't have permission (/showthread.php?tid=6206400)
Forbidden You don't have permission - hasanali00 - May 21, 2022
If I type an IP address in the browser, how can I test out further if I get this messsage:
Forbidden
You don't have permission to access / on this server.
RE: Forbidden You don't have permission - Beladonis - May 21, 2022
You could always try fuzzing directories/subdomains, and check open ports.
RE: Forbidden You don't have permission - SIM-2501407 - May 21, 2022
What do you mean by ‘test it’ further?
You’re hitting a 403 error - access denied. That’s the only thing you’re giving us here.
RE: Forbidden You don't have permission - hackersfolio - May 21, 2022
(May 21, 2022 04:37 PM)Spy Wrote: What do you mean by ‘test it’ further?
You’re hitting a 403 error - access denied. That’s the only thing you’re giving us here.
I agree with Spy, you're not giving us much.
RE: Forbidden You don't have permission - JustHackIt - May 22, 2022
And I agree with Beladonis. Find out if that IP corespondents with a domain and check the subdomains, brute force directories with dirb and so on
But, yeah, you are actually not giving us a lot of info...
RE: Forbidden You don't have permission - hasanali00 - May 22, 2022
Thanks all. actually your replies have made me question myself what I was really asking.
The questions I had in my mind were:
Why is it denying access?
How does it know to deny access?
How would it know to ALLOW access?
Whats running behind this IP address? - must be important that’s why its restricting access
Checking subdomains and directories are good starting point for me. thanks
RE: Forbidden You don't have permission - Angela White - May 22, 2022
(May 22, 2022 12:23 PM)hasanali00 Wrote: Thanks all. actually your replies have made me question myself what I was really asking.
The questions I had in my mind were:
Why is it denying access?
How does it know to deny access?
How would it know to ALLOW access?
Whats running behind this IP address? - must be important that’s why its restricting access
Checking subdomains and directories are good starting point for me. thanks
It's denying access because you don't have the valid credentials to view the page. This could be an IP address, browser cookie (login info), or any other "identifying" information.
It knows to deny access because you either aren't logged in, or your IP address isn't on the "whitelist". A lot of private servers / IPs don't allow connections from random IP addresses, and only allow connections from specific IPs (your home network, your personal VPN, etc.) as an added layer of security.
RE: Forbidden You don't have permission - hasanali00 - May 22, 2022
thanks Angela. Makes alot of sense
Actually, where can I learn more to test if I can bypass these restrictions? thanks