X-Forwarded-For: localhost
or
X-Forwarded-For: 127.0.0.1
Reference: https://observationsinsecurity.com/2020/08/09/bypassing-403-to-get-access-to-an-admin-console-endpoints/
Last updated 3 years ago