AllAboutBugBounty/Bypass/Bypass 304.md
2021-03-12 08:46:29 +07:00

656 B

304 Not Modified Bypass

  1. Delete "If-None-Match" header
GET /admin HTTP/1.1
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"

Try this to bypass

GET /admin HTTP/1.1
Host: target.com
  1. Adding random character in the end of "If-None-Match" header
GET /admin HTTP/1.1
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"

Try this to bypass

GET /admin HTTP/1.1
Host: target.com
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b

Source: https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521