メニュー
Systematic, tiered 403/WAF bypass decision guide plus common curl error diagnosis. Converted from master-pentest-prompt.md Phase 0.6. Use whenever a request comes back 403/blocked, or tool_resolver.classify_block() flags a WAF signature.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/ankitsingh015/HuntMCP --skill waf-bypassコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Access-control technique list (IDOR, mass assignment, horizontal/vertical privilege escalation, GraphQL abuse, business-logic/money manipulation, race conditions) plus the explicit two-account IDOR testing procedure. Converted from master-pentest-prompt.md Phases 8/8.5. Use on any endpoint that returns or modifies user-specific data, and any multi-role application.
CSRF token-bypass techniques, CORS misconfiguration patterns, postMessage origin issues, clickjacking, and WebSocket cross-origin hijacking. Converted from master-pentest-prompt.md Phase 10. Use on any state-changing request, any endpoint with CORS headers, and any page that could be framed.
Full injection-class technique list (SQLi, command injection, LDAP/XPath/XSLT/EL, SSTI, CRLF, HPP, prototype pollution) and remote-code-execution technique list (deserialization, file-upload webshells, LFI/RFI, framework-specific RCE, dependency CVEs), plus concrete exploitation mechanics for SSTI-per-engine, unauthenticated Redis RCE, filename argument injection, and cloud-metadata-to-RCE chaining. Converted from master-pentest-prompt.md Phases 2/3. Use during scan-agent's injection-testing pass on any target with user-controlled input reaching a backend.
SKILL.md を表示中
| name | waf-bypass |
| description | Systematic, tiered 403/WAF bypass decision guide plus common curl error diagnosis. Converted from master-pentest-prompt.md Phase 0.6. Use whenever a request comes back 403/blocked, or tool_resolver.classify_block() flags a WAF signature. |
A 403 appears, or mcp-servers/tool_resolver.py's classify_block()
returns "waf" on a tool's output. Work the tiers in order before giving
up on a blocked endpoint you actually need to test.
Tiers 1-4 below are automated by mcp-servers/waf-bypass-mcp's
attempt_bypass(url, baseline_status, tiers) -- call that first rather
than hand-crafting each variant; it runs all of them in one call and
reports which (if any) changed the response. This skill documents what
it's actually doing, plus Tier 5, which isn't automated (it needs
external OSINT, not a retry loop).
X-Forwarded-For / X-Real-IP / X-Originating-IP /
X-Remote-IP / X-Client-IP / X-Custom-IP-Authorization /
X-ProxyUser-Ip / True-Client-IP / Forwarded: for=127.0.0.1;host=localhost
-- set to 127.0.0.1/localhost on the blocked endpoint.Host: localhost, 127.0.0.1, internal.<domain>.URL-encode letters (%61dmin), %2f for /, trailing space/tab/null,
--path-as-is with ./, /., //, /../, %2e; case variations
(Admin, ADMIN); extension append (.json/.html/.php/;.js/#).
POST/PUT/PATCH/OPTIONS/TRACE/HEAD/CONNECT plus method
override headers (X-HTTP-Method-Override, X-Method-Override,
_method=).
--http1.0/--http1.1, --http2, --http2-prior-knowledge.
Find the origin IP (SecurityTrails/Shodan/Censys/CT logs), then
--resolve <domain>:443:<IP> or -H "Host: <domain>" straight to the
IP; spoof CF-Connecting-IP/CF-IPCountry; reuse cf_clearance if
known. This needs real OSINT lookups per target, not a retry loop, which
is why waf-bypass-mcp doesn't automate it.
Still 403 after all tiers -> document the host as WAF-protected and move on. If the target is heavily WAF-protected, research current WAF-bypass techniques for that specific vendor online, apply them; if bypass still fails, move on rather than looping.
| curl error | Meaning | Fix |
|---|---|---|
| (6) DNS | Couldn't resolve host | --dns-servers 8.8.8.8 |
| (7) port closed | Connection refused | try 80/8080/8443 |
| (35) SSL | SSL handshake failed | -k / --tlsv1.2 |
| (52) empty reply | Server closed connection | --http1.1 |
| (56) recv failure | Receive error | retry with delay + a legit UA |