{"id":22619575,"url":"https://github.com/davemolk/bye403","last_synced_at":"2025-03-29T01:47:18.512Z","repository":{"id":65447606,"uuid":"584262733","full_name":"davemolk/bye403","owner":"davemolk","description":"bypass 403 responses (or try to). you can bypass other responses as well (or try to).","archived":false,"fork":false,"pushed_at":"2023-02-01T13:04:47.000Z","size":29,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-03T11:51:11.130Z","etag":null,"topics":["403","403-bypass","go","golang","hacking","pentesting","pentesting-tools","recon","security"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/davemolk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2023-01-02T03:16:35.000Z","updated_at":"2023-05-02T06:58:40.000Z","dependencies_parsed_at":"2023-02-12T10:30:43.329Z","dependency_job_id":null,"html_url":"https://github.com/davemolk/bye403","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davemolk%2Fbye403","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davemolk%2Fbye403/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davemolk%2Fbye403/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/davemolk%2Fbye403/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/davemolk","download_url":"https://codeload.github.com/davemolk/bye403/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246126671,"owners_count":20727594,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["403","403-bypass","go","golang","hacking","pentesting","pentesting-tools","recon","security"],"created_at":"2024-12-08T22:06:28.417Z","updated_at":"2025-03-29T01:47:18.491Z","avatar_url":"https://github.com/davemolk.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# bye403\nbypass 403 responses (or try to)\n\n## Overview\nBy default, bye403 uses a combination of path, header, and method manipulation in the attempt to bypass a 403 response. Any non-403 response is considered a success, although you can filter by status code to determine what gets printed to stdout.\n\n## Examples\nbye403 has a default url of https://www.example.com/secret. Here's a sample of what's printed to stdout without adding any additional flags:\n```\n404: GET request\nhttp://www.example.com/secret/.\n\n404: GET request\nhttps://www.example.com/secret\nheaders: [X-Remote-IP localhost:443]\n\n501: REBIND request\nhttps://www.example.com/secret\n\n404: GET request\nhttp://www.example.com/%2e/secret\n\n404: GET request\nhttps://www.example.com/secret\nheaders: [X-Remote-IP localhost:80]\n\n404: POST request\nhttps://www.example.com/secret\n\n404: GET request\nhttps://www.example.com/secret\nheaders: [X-Remote-IP 127.0.0.1]\n\n404: GET request\nhttps://www.example.com/secret\nheaders: [X-Remote-IP 127.0.0.1:80]\n\n404: GET request\nhttps://www.example.com/secret;/\n```\n\n## Install\nFirst, you'll need to [install go](https://golang.org/doc/install). Then, run the following command:\n\n```\ngo install github.com/davemolk/bye403/cmd/bye403@latest\n```\n\n## Flags\n```\nUsage of bye403:\n  -c int\n    \tmax number of goroutines to use at any given time\n  -h bool\n    \tmanipulate headers\n  -i bool\n    \tread url off stdin\n  -ignore string\n    \tstatus code responses to ignore (403 is ignored by default)\n  -insecure bool\n    \taccept any certificate and host name presented by server\n  -m bool\n    \tmanipulate http method\n  -os string\n    \toperating system (used in request header creation)\n  -p bool\n    \tmanipulate path\n  -proxy string\n    \tproxy to use\n  -r bool\n    \tallow redirects\n  -rh bool\n    \tinclude response headers in output\n  -s bool\n    \tsilent error reporting\n  -sc string\n    \tfilter output by status code(s)\n  -t int\n    \trequest timeout (in ms)\n  -u string\n    \ttarget url\n  -v bool\n    \tvalidate url before running program\n```\n\n## Note\nEach request gets a randomly assigned user agent corresponding to your os as well as appropriate headers (50/50 chance of chrome or firefox). Go unfortunately doesn't preserve header order, so if that's important to you and what you're up to, you'll have to look elsewhere.\n\n## Thanks\nI looked at these, more or less ported them to Go, and added a bunch of new features. Enjoy!\n* [byp4xx](https://github.com/lobuhi/byp4xx)\n* [403bypasser](https://github.com/yunemse48/403bypasser)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavemolk%2Fbye403","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdavemolk%2Fbye403","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdavemolk%2Fbye403/lists"}