2022-06-15 10:38:42 +00:00
|
|
|
# Bypass 304 (Not Modified)
|
2021-03-12 01:46:29 +00:00
|
|
|
|
|
|
|
|
1. Delete "If-None-Match" header
|
|
|
|
|
```
|
|
|
|
|
GET /admin HTTP/1.1
|
|
|
|
|
Host: target.com
|
|
|
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"
|
|
|
|
|
```
|
|
|
|
|
Try this to bypass
|
|
|
|
|
```
|
|
|
|
|
GET /admin HTTP/1.1
|
|
|
|
|
Host: target.com
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
2. Adding random character in the end of "If-None-Match" header
|
|
|
|
|
```
|
|
|
|
|
GET /admin HTTP/1.1
|
|
|
|
|
Host: target.com
|
|
|
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"
|
|
|
|
|
```
|
|
|
|
|
Try this to bypass
|
|
|
|
|
```
|
|
|
|
|
GET /admin HTTP/1.1
|
|
|
|
|
Host: target.com
|
|
|
|
|
Host: target.com
|
|
|
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b
|
|
|
|
|
```
|
|
|
|
|
|
2022-06-15 10:38:42 +00:00
|
|
|
## References
|
|
|
|
|
* [https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521](https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521)
|
