From ecb57dcbb2940ee24b48c0ae7bee5572b37dd761 Mon Sep 17 00:00:00 2001 From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com> Date: Fri, 12 Mar 2021 08:46:29 +0700 Subject: [PATCH] Create Bypass 304.md --- Bypass/Bypass 304.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 Bypass/Bypass 304.md diff --git a/Bypass/Bypass 304.md b/Bypass/Bypass 304.md new file mode 100644 index 0000000..c28ef0b --- /dev/null +++ b/Bypass/Bypass 304.md @@ -0,0 +1,29 @@ +# 304 Not Modified Bypass + +1. Delete "If-None-Match" header +``` +GET /admin HTTP/1.1 +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" +``` +Try this to bypass +``` +GET /admin HTTP/1.1 +Host: target.com +``` + +2. Adding random character in the end of "If-None-Match" header +``` +GET /admin HTTP/1.1 +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" +``` +Try this to bypass +``` +GET /admin HTTP/1.1 +Host: target.com +Host: target.com +If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b +``` + +Source: [https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521](https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521)