2536 | 403 Forbidden Bypass |
403 bypass
Forced browsing |
NA |
th3.d1p4k (@DipakPanchal05) |
Bug Bounty | 2021-05-21 | 2023-06-13 |
2479 | Importance of burp history analysis to bypass 403 |
403 bypass |
NA |
Vuk Ivanovic |
Bug Bounty | 2021-06-15 | 2023-06-13 |
2417 | Broken Access control bug : Bypassing 403’s by finding another endpoint that do the same thing. |
Broken Access Control
403 bypass |
NA |
tomorrowisnew (@tomorrowisnew_) |
Bug Bounty | 2021-07-12 | 2023-06-13 |
2277 | Two account takeover bugs worth $4300 🎁 |
Account takeover
Privilege escalation
403 bypass
IDOR |
NA |
Usama Varikkottil (@usama_dev) |
Bug Bounty | 2021-08-29 | 2023-06-13 |
2172 | Bypassing 403 Protection To Get Pagespeed Admin Access |
403 bypass |
NA |
Prajit Sindhkar (@PrajitSindhkar) |
Bug Bounty | 2021-10-04 | 2023-06-13 |
2132 | A story of another awesome old school hacking that lead to a cool P1 bug |
403 bypass |
NA |
Vuk Ivanovic |
Bug Bounty | 2021-10-22 | 2023-06-13 |
1808 | 403 forbidden bypass & Accessing config files using a header |
403 bypass
Authorization flaw |
NA |
vishnurajr |
Bug Bounty | 2022-02-17 | 2023-06-13 |
1803 | How I get my first SWAG from SIDN (Sensitive Data Exposer) |
Directory listing
Information disclosure
403 bypass |
SIDN |
remonsec (@remonsec) |
Bug Bounty | 2022-02-19 | 2023-06-13 |
1687 | How I bypassed 403 forbidden domain using a simple trick |
403 bypass |
NA |
Jan Muhammad Zaidi (@hasanakajan) |
Bug Bounty | 2022-03-29 | 2023-06-13 |
1483 | My first CVE-2022–31289 |
Authentication bypass
403 bypass
HTTP response manipulation |
Sonatype |
Praveen Mali (@pmmali_) |
Bug Bounty | 2022-06-11 | 2023-06-13 |
1468 | 403 bypass on a fortune 100 financial institution (P3) |
Information disclosure
Authorization flaw
Forced browsing |
NA |
Damaidec |
Bug Bounty | 2022-06-14 | 2023-06-13 |
1352 | FFUF-ing RECON, or how to get to P1–P3 from a slightly different recon |
vHost misconfiguration
403 bypass
Information disclosure |
NA |
Vuk Ivanovic |
Bug Bounty | 2022-07-17 | 2023-06-13 |
1258 | 403 Forbidden Bypass Leading to Admin Endpoint Access. |
403 bypass
Information disclosure |
NA |
Christian Dray (@G0ds0nXY) |
Bug Bounty | 2022-08-10 | 2023-06-13 |
1102 | New technique 403 bypass lyncdiscover.microsoft.com |
403 bypass |
Microsoft |
Abbas Heybati (@abbas_heybati) |
Bug Bounty | 2022-09-08 | 2023-06-13 |
1009 | Tale of Easy P1 Bugs in Wild |
Forced browsing
403 bypass
Information disclosure |
NA |
Harsh Tandel |
Bug Bounty | 2022-10-01 | 2023-06-13 |
877 | How 403 Forbidden Bypass got me NOKIA Hall Of Fame (HOF) |
403 bypass |
Nokia |
Jaydeepsinh Thakor (@thakor_jd_) |
Bug Bounty | 2022-11-02 | 2023-06-13 |
652 | Unusual 403 Bypass to a full website takeover [External Pentest] |
403 bypass |
NA |
Viktor Mares |
Bug Bounty | 2022-12-25 | 2023-06-13 |