ch0ic3/the-book-of-secret-knowledge
1
0
Fork 0
mirror of https://github.com/trimstray/the-book-of-secret-knowledge.git synced 2024-12-18 17:36:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add 'Bypass WAFs by Shortening IP Address'

Browse Source 
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray 2019-12-02 14:48:06 +01:00
parent 996da61c56
commit 92ec021ecc
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
README.md
View File

@ -1470,6 +1470,18 @@ In Firefox's addressbar, you can limit results by typing special characters befo
- `#` - for matches in page titles. - `#` - for matches in page titles.
- `@` - for matches in web addresses. - `@` - for matches in web addresses.
###### Bypass WAFs by Shortening IP Address (by [0xInfection](https://twitter.com/0xInfection))
IP addresses can be shortened by dropping the zeroes:
```
http://1.0.0.1 → http://1.1
http://127.0.0.1 → http://127.1
http://192.168.0.1 → http://192.168.1
```
> This bypasses WAF filters for SSRF, open-redirect, etc where any IP as input gets blacklisted.
#### One-liners &nbsp;[<sup>[TOC]</sup>](#anger-table-of-contents) #### One-liners &nbsp;[<sup>[TOC]</sup>](#anger-table-of-contents)
##### Table of Contents ##### Table of Contents