{"repo":"laluka/bypass-url-parser","free":true,"listed":false,"github":"https://github.com/laluka/bypass-url-parser","clone":"git clone https://github.com/laluka/bypass-url-parser.git","description":"bypass-url-parser","language":"Python","stars":1136,"topics":["bypass","differential","exploit","hacking","offensive","parser","pentest","security","semicolon","tool"],"license":"AGPL-3.0","category":"security-tools","readme_excerpt":"Bypass Url Parser Tool that tests MANY url bypasses to reach a 40X protected page . If you wonder why this code is nothing but a dirty curl wrapper , here's why: - Most of the python requests do url/path/parameter encoding/decoding, and I hate this. - If I submit raw chars, I want raw chars to be sent. - If I send a weird path, I want it weird, not normalized. This is surprisingly hard to achieve in python without loosing all of the lib goodies like parsing, ssl/tls encapsulation and so on. \\ So, be like me, use curl as a backend , it's gonna be just fine. Also, this tool can be used as a library, see lib sample usage.py Installation We recommend using pipx to install this tool: Alternatively, you can use pip : Usage Expected result Setup LINUX DOCKER More about supported arguments Arguments parsing Bypass url parser allows to define some arguments in many ways: - -m, --mode , -s, --spoofip and -p, --spoofport arguments can be a filename, a string, a comma-separated string list or a list (when Bypasser is used as a library); - -u, --url argument can be a filename, a string or a list (when Bypasser is used as a library); - stdin (with - ) is supported for all these arguments. For example, if you want to define several target urls ( -u, --url ), all the following commands produce the same result: Target definition A target must be defined for the tool to work. 2 options: - -u, --url : URL(s), in GET - -R, --request : Request file. The protocol can't be guessed from file, so htt","default_branch":null,"files":null,"tree":[],"storefront":"/r/laluka","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/laluka/bypass-url-parser/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}