[darkninja1980]

generally speaking, if you're getting a 403, you're doing something that you're not supposed to and the client code isn't even receiving your requests (server software filter).

Precisely.

Moreover, It can also be a WAF blocking requests.

my friend is getting this error!
* Forbidden: You do not have permission to access this directory on this server

If permissions have been set server-side/back-end, unless you have access to alter/modify the permissions, you cannot do anything solely from a client-side standpoint.

great point. yes there is no way to change the permissions if you not on the server side.

[mothered]

generally speaking, if you're getting a 403, you're doing something that you're not supposed to and the client code isn't even receiving your requests (server software filter).

Precisely.

Moreover, It can also be a WAF blocking requests.

my friend is getting this error!
* Forbidden: You do not have permission to access this directory on this server

If permissions have been set server-side/back-end, unless you have access to alter/modify the permissions, you cannot do anything solely from a client-side standpoint.

great point. yes there is no way to change the permissions if you not on the server side.

I've experienced It when the WAF kicked In, and had to circumvent that to gain access.

The 403 does differ on how It's configured server-side, hence there's no hard and fast rules on how to handle each one.

[darkninja1980]

Precisely.

Moreover, It can also be a WAF blocking requests.


If permissions have been set server-side/back-end, unless you have access to alter/modify the permissions, you cannot do anything solely from a client-side standpoint.

great point. yes there is no way to change the permissions if you not on the server side.

I've experienced It when the WAF kicked In, and had to circumvent that to gain access.

The 403 does differ on how It's configured server-side, hence there's no hard and fast rules on how to handle each one.

I see and there also no way to hack a 403 correct ? to change the chmod

[phyrrus9]

great point. yes there is no way to change the permissions if you not on the server side.

I've experienced It when the WAF kicked In, and had to circumvent that to gain access.

The 403 does differ on how It's configured server-side, hence there's no hard and fast rules on how to handle each one.

I see and there also no way to hack a 403 correct ? to change the chmod

file permissions likely aren't your problem here. But to answer your question, yes there is. Wherever someone wrote code, there exists a bug. Now, finding a bug that's useful and exploitable is the tricky part.

[mothered]

great point. yes there is no way to change the permissions if you not on the server side.

I've experienced It when the WAF kicked In, and had to circumvent that to gain access.

The 403 does differ on how It's configured server-side, hence there's no hard and fast rules on how to handle each one.

I see and there also no way to hack a 403 correct ? to change the chmod

Of course there Is, but as mentioned, there's no hard and fast rules- It can differ from one web server to another.

[darkninja1980]

I've experienced It when the WAF kicked In, and had to circumvent that to gain access.

The 403 does differ on how It's configured server-side, hence there's no hard and fast rules on how to handle each one.

I see and there also no way to hack a 403 correct ? to change the chmod

Of course there Is, but as mentioned, there's no hard and fast rules- It can differ from one web server to another.

thank you for your point of view.

[mothered]

I see and there also no way to hack a 403 correct ? to change the chmod

Of course there Is, but as mentioned, there's no hard and fast rules- It can differ from one web server to another.

thank you for your point of view.

You're welcome.

[hackyou92]

Is it on your server, or on another server. If it's on another server, you have been blocked.

[darkninja1980]

Is it on your server, or on another server. If it's on another server, you have been blocked.

it was not on my server.

[hackyou92]

Then you have been blocked, or the service has been hidden from you because you don't have authority.