Rate limit bypass using some custom headers:

X-Forwarded-For: IP
X-Forwarded-IP: IP
X-Client-IP: IP
X-Remote-IP: IP
X-Originating-IP: IP
X-Host: IP
X-Client: IP

403 bypass techniques

Bypassing Rate Limit Protection

When trying for XSS if alert() is blocked you can use an alternative like:

1. Confirm
2. Prompt
3. Eval
4. Write

@WebHacking

Bug Bounty Tip

Want to learn HTTP Request Smuggling?

Check out this incredible Workshop with over 120 minutes of theory, videos, and practice using Docker Labs


https://gosecure.github.io/request-smuggling-workshop/#0

A curated list of bugbounty writeups (Bug type wise)

https://github.com/devanshbatham/Awesome-Bugbounty-Writeups

403 Bypass tricks...

Aircrack-NG Cheat Sheet

Github Dorks Cheatsheet

Find files with sensitive info, API Keys, Tokens and Passwords.

+ list of github dorks automation tools