forbidden

{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [
    "certifi",
    "cffi",
    "cryptography",
    "curl",
    "openssl@3",
    "pycparser",
    "python@3.14"
  ],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Bypass 4xx HTTP response status codes and more",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:37:45+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "forbidden",
  "github_default_branch": "main",
  "github_last_commit_at": "2026-02-25T23:10:41Z",
  "github_readme_excerpt": "# Forbidden\n\nBypass 4xx HTTP response status codes and more.\n\nThe tool is based on `Python Requests`, `PycURL`, and `HTTP Client`.\n\nTested on Kali Linux v2024.2 (64-bit).\n\nMade for educational purposes. I hope it will help!\n\n**Future plans:**\n\n* Add the `silent` option to suppress console output.\n* Add the `no color` option to disable colored console output.\n* Add tests for `hop-by-hop` HTTP request headers.\n* Add tests for the `User-Agent` HTTP request header.\n* Add tests for HTTP cookies.\n* Add tests for HTTP smuggling.\n* Add tests for CRLF.\n* Add tests for Log4j.\n* Add tests for AWS metadata SSRF.\n\n## Table of Contents\n\n* [How to Install](#how-to-install)\n    * [Install PycURL](#install-pycurl)\n    * [Standard Install](#standard-install)\n    * [Build and Install From the Source](#build-and-install-from-the-source)\n* [How to Use](#how-to-use)\n* [Tests](#tests)\n    * [HTTP Methods](#http-methods)\n    * [HTTP Request Headers](#http-request-headers)\n* [Results](#results)\n* [Usage](#usage)\n* [Images](#images)\n\n## How to Install\n\n### Install PycURL\n\nOn Kali Linux, this should work without issues; otherwise, run:\n\n```bash\napt-get -y install libcurl4-gnutls-dev librtmp-dev\n\npip3 install --upgrade pycurl\n```\n\n---\n\nPycURL on Windows OS is not supported.\n\n---\n\nOn macOS, run:\n\n```bash\nbrew uninstall curl\nbrew uninstall openssl\n\nbrew install curl\nbrew install openssl\n\necho \u0027export PATH=\"/opt/homebrew/opt/curl/bin:$PATH\"\u0027 \u003e\u003e ~/.zshrc\necho \u0027export PATH=\"/opt/homebrew/opt/openssl@3/bin:$PATH\"\u0027 \u003e\u003e ~/.zshrc\nsource ~/.zshrc\n\nexport LDFLAGS=\"-L/opt/homebrew/opt/curl/lib\"\nexport CPPFLAGS=\"-I/opt/homebrew/opt/curl/include\"\nexport PYCURL_SSL_LIBRARY=openssl\n\npip3 install --no-cache-dir --compile --ignore-installed --config-setting=\"--with-openssl=\" --config-setting=\"--openssl-dir=/opt/homebrew/opt/openssl@3\" pycurl\n```\n\nAlternatively, install using [Homebrew](https://formulae.brew.sh/formula/forbidden) (not maintained by me):\n\n```fundamental\nbrew install forbidden\n```\n\n### Standard Ins",
  "github_repo": "ivan-sincek/forbidden",
  "github_stars": 257,
  "github_topics": [
    "401",
    "403",
    "broken-access-controls",
    "brute-force",
    "bug-bounty",
    "bypass",
    "curl",
    "ethical-hacking",
    "fuzzing",
    "offensive-security",
    "open-redirect",
    "owasp-top-10",
    "penetration-testing",
    "pycurl",
    "python",
    "python-requests",
    "red-team-engagement",
    "security",
    "web",
    "web-penetration-testing"
  ],
  "homepage": "https://github.com/ivan-sincek/forbidden",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 43,
  "installs_365d": 440,
  "installs_90d": 130,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "MIT",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "forbidden",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 4989,
  "rank_365d": 5405,
  "rank_90d": 5003,
  "raw_hash": "72582d6923ad43ad",
  "recommended_dependencies": [],
  "revision": 7,
  "ruby_source_path": "Formula/f/forbidden.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "13.4",
  "versioned_formulae": [],
  "why_use_this": null
}