# Byp4Xx  Simple Bash Script To Bypass "403 Forbidden" Messages

**URL:** <https://onehack.st/t/byp4xx-simple-bash-script-to-bypass-403-forbidden-messages/178308>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [April 10, 2021, 12:32pm UTC](https://onehack.st/t/byp4xx-simple-bash-script-to-bypass-403-forbidden-messages/178308 "2021-04-10T12:32:08Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [April 10, 2021, 12:32pm UTC](https://onehack.st/t/byp4xx-simple-bash-script-to-bypass-403-forbidden-messages/178308/1 "2021-04-10T12:32:08Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/6/86950b6e4c395a98fe85bf9da43e761d972afdb0.png)

_ **byp4xx.sh** _

```auto
    ____  __/ /___  ______/ // / ____  __/__ / / / / __/ // /_| |/_/ |/_/ / /_/ / /_/ / /_/ /__  __/> <_> < /_.___ / __, / .___ / /_/ /_/|_/_/|_| / ____ /_/                        

```

A bash script to bypass “403 Forbidden” responses with well-known methods discussed in #bugbountytips

**Installation:**

```auto
git clone https://github.com/lobuhi/byp4xx.gitcd byp4xxchmod u+x byp4xx.sh

```

**Usage:** Start URL with http or https.

```auto
./byp4xx.sh [OPTIONS] http(s)://url/pathOPTIONS: -c Return the entire curl command if response is 200 -r Redirects if the response is 3XX

```

**Example:**

```auto
./byp4xx.sh https://www.google.es/test

```

**Features:**

- Multiple HTTP verbs/methods
- Multiple methods mentioned in #bugbountytips
- Multiple headers: Referer, X-Custom-IP-Authorization…
- Allow redirects
- Return the entire curl command if response is 200

**Tips:**

- You can add proxychains to use with BurpSuite
- Interlace is a good option for multithreading multiples URLs

## GitHub:

> **[GitHub - lobuhi/byp4xx: 40X/HTTP bypasser in Go. Features: Verb tampering,...](https://github.com/lobuhi/byp4xx)**
>
> 40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...