nomore403

Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Name:nomore403

Category:Scanners

Publisher:trickest-mhmdiaa

Created:6/10/2025

Container:quay.io/trickest/nomore403:v1.1.8-patch-1

Output Type:

License:Unknown

Source:View Source

Parameters

http · boolean

--httpUse HTTP instead of HTTPS for requests defined in the request file.

urls · file · required

Specify the target URLs.

delay · string

--delaySpecify a delay between requests in milliseconds. Helps manage request rate (default: 0ms).

proxy · string

--proxySpecify a proxy server for requests (e.g., 'http://server:port').

folder · folder

--folderSpecify the folder location for payloads if not in the same directory as the executable.

header · string

--headerAdd one or more custom headers to requests. Repeatable flag for multiple headers.

status · string

--statusFilter output by comma-separated status codes (e.g., 200,301,403)

unique · boolean

--uniqueShow unique output based on status code and response length.

timeout · string

--timeoutSpecify a max timeout time in ms. (default 6000)

verbose · boolean

--verboseEnable verbose output for detailed request/response logging (not based on auto-calibrate).

redirect · boolean

--redirectAutomatically follow redirects in responses.

bypass-ip · string

--bypass-ipUse a specified IP address or hostname for bypassing access controls. Injects this IP in headers like 'X-Forwarded-For'.

no-banner · boolean

--no-bannerDisable the display of the startup banner (default: banner shown).

technique · string

--techniqueSpecify one or more attack techniques to use (e.g., headers,path-case). (default [verbs,verbs-case,headers,endpaths,midpaths,double-encoding,http-versions,path-case])

rate-limit · boolean

--rate-limitHalt requests upon encountering a 429 (rate limit) HTTP status code.

user-agent · string

--user-agentSpecify a custom User-Agent string for requests (default: 'nomore403').

http-method · string

--http-methodSpecify the HTTP method for the request (e.g., GET, POST). Default is 'GET'.

random-agent · boolean

--random-agentEnable the use of a randomly selected User-Agent.

request-file · file

--request-fileLoad request configuration and flags from a specified file.

max-goroutines · string

--max-goroutinesLimit the maximum number of concurrent goroutines to manage load (default: 50).