ch0ic3/AllAboutBugBounty
1
0
Fork 0
mirror of https://github.com/daffainfo/AllAboutBugBounty.git synced 2024-12-22 04:16:10 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
db67aa4646
AllAboutBugBounty/Bypass/Bypass 304.md
Muhammad Daffa ecb57dcbb2
Create Bypass 304.md
2021-03-12 08:46:29 +07:00

656 B
Raw Blame History

304 Not Modified Bypass

  1. Delete "If-None-Match" header
GET /admin HTTP/1.1
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"

Try this to bypass

GET /admin HTTP/1.1
Host: target.com
  1. Adding random character in the end of "If-None-Match" header
GET /admin HTTP/1.1
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld"

Try this to bypass

GET /admin HTTP/1.1
Host: target.com
Host: target.com
If-None-Match: W/"32-IuK7rSIJ92ka0c92kld" b

Source: https://anggigunawan17.medium.com/tips-bypass-etag-if-none-match-e1f0e650a521