Spoof Call and Spoof SMS set any caller ◆ Cheap KYC Verifications & Openups ◆ Traffic service & campaign optimization ◆ Private Crypter - Unique Private Stubs ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking › How to bypass waf htaccess 403?

New Reply 

How to bypass waf htaccess 403?
VmNada
VmNada Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 3, 2019 01:30 PM
After a lot of work (reading, testing tools, learning basic of shell etc) i found out how get real ip of hosting behind s*u*c*uri. And it is latest and working well.

I successfuly got access to couple of wordpress sites.

But now those sites have an extra layer of security where htaccess is configured to allow only ip of waf and for other ips it is 403 forbidden error (when you access any type of file be it txt or php)

Any working method to get past 403 forbidden?
CyberStrike
CyberStrike Offline
[closed@HF:]
Posts:
8,441
Threads:
78
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
10,568
Sep 3, 2019 10:05 PM
Try 127.0.0.1 in the referrer just a thought or in the referrer have the WAF IP.
VmNada
VmNada Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 9, 2019 08:38 AM
(Sep 3, 2019 10:05 PM)CyberStrike Wrote:  Try 127.0.0.1 in the referrer just a thought or in the referrer have the WAF IP.

That did not work!!!
CyberStrike
CyberStrike Offline
[closed@HF:]
Posts:
8,441
Threads:
78
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
10,568
Sep 9, 2019 08:49 AM
(Sep 9, 2019 08:38 AM)VmNada Wrote:  That did not work!!!

Sometimes it's also the URI which referred a user to a page, I guess that you need to do some probing (fuzzing). For example in some malware you will see that before you hit the control panel your referrer has to be maybe "login.php". I am guessing you just bruteforced files/directories? If that is the case then yes good chance that they expected it and there is a specific referrer or maybe it has to be from a specific IP which the connection is allowed from, like you mentioned the WAF IP. Find the WAF IP and try that as the referrer. Trying 127.0.0.1 as the referrer sometimes works with misconfigured webapps, looks like you got more work ahead of you.
GersonHdez
GersonHdez Offline
[n00b@HF:]
*
Registered
Posts:
12
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 9, 2019 10:46 AM
I agree that is the case then yes good chance that they expected it and there is a specific referrer or maybe it has to be from a specific IP which the connection is allowed from
altalav99654
altalav99654 Offline
[n00b@HF:]
*
Registered
Posts:
24
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 9, 2019 11:27 AM
In the referrer put WAF IP
VmNada
VmNada Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 10, 2019 08:25 AM
Found a way to bypass 403 using many combinations and experiments. I will cross verify and update here.
CyberStrike
CyberStrike Offline
[closed@HF:]
Posts:
8,441
Threads:
78
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
10,568
Sep 10, 2019 07:32 PM
Sounds good looking forward to the update.
VmNada
VmNada Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 17, 2019 11:39 AM
(Sep 10, 2019 08:25 AM)VmNada Wrote:  Found a way to bypass 403 using many combinations and experiments. I will cross verify and update here.

Not working. Any other help?
chutadsingh
chutadsingh Offline
[n00b@HF:]
*
Registered
Posts:
2
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 27, 2019 10:25 AM
I need your help regarding wordpress access, I created the website, client did not pay, changed admin email (i got the email notification) and changed the server, I know what all plugins are installed, I even have the wordpress server dump.
Minaise
Minaise Offline
[n00b@HF:]
*
Registered
Posts:
27
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 29, 2019 05:36 AM
Good to know also guys!!

Will be waiting for a solution or if I find out i will post it here

Cheers
Ramb0x
Ramb0x Offline
[closed@HF:]
Posts:
909
Threads:
54
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
19
Sep 29, 2019 10:50 AM
Search the forum for sucuri waf byapss.
Minaise
Minaise Offline
[n00b@HF:]
*
Registered
Posts:
27
Threads:
8
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 29, 2019 11:39 AM
(Sep 29, 2019 10:50 AM)Ramb0x Wrote:  Search the forum for sucuri waf byapss.

No video there.
Trying to get that bastard 403 fault off my plate..
26h and trying
Titit
Titit Offline
[n00b@HF:]
*
Registered
Posts:
17
Threads:
3
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Sep 30, 2019 10:39 AM
Why not using the first victim as a proxy then overide the rules with htaccess
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by TobiasrohJul 8, 2024 02:11 AM 9 292 Jul 8, 2024 02:11 AM
Last Post: SilentNuke
by 8R8_Dec 9, 2023 06:31 AM 4 248 Dec 9, 2023 06:31 AM
Last Post: source
by superblaze27Dec 9, 2023 05:00 AM 1 248 Dec 9, 2023 05:00 AM
Last Post: 8R8_