search

vincentcox / bypass-firewalls-by-DNS-history

Firewall bypass script based on DNS history records. This script will search for DNS A history records and check if the server replies for that domain. Handy for bugbounty hunters.
MIT License
1.2k stars 262 forks source link

Access 403 #1

Closed jaikishantulswani closed 5 years ago

jaikishantulswani commented 5 years ago

Hello @vincentcox , Its not an issue but I am curious that by abusing the DNS history can we able to access the ip / domain which is throwing 403 ?

Thank You.

vincentcox commented 5 years ago

Yes, that can be a possibility. It depends on how the server is configured.

jaikishantulswani commented 5 years ago

so should we have to add http header i.e X-Forwarded-For / X-Forwarded-Host during the request to access the host?

vincentcox commented 5 years ago

If you use burp you can add the IP and hostname here: image

If you want it system-wide, you need to edit your hostfile (/etc/hosts or c:\Windows\System32\Drivers\etc\hosts).

jaikishantulswani commented 5 years ago

@vincentcox Thank You :+1:

vincentcox commented 5 years ago

No problem. I'll close this issue, but if you have any further questions feel free to re-open this or create a new issue. Have a nice day! 🙌

jaikishantulswani commented 5 years ago

Hello @vincentcox , Is there any other way to do this as I have to resolve a bunch of domains with status 403 ?

vincentcox commented 5 years ago

There will be a new updated version anytime soon. I will think of a solution (for example a flag) that will make output to put in a /etc/hosts file. But you still have to put it in manually because editing the hosts file requires admin rights.