Documentation
README
Rate Limit Bypass
Objective
Bypass rate limiting mechanisms to enable brute-force attacks, credential stuffing, or abuse of rate-limited functionality.
Testing Methodology
Phase 1: Automated Bypass Testing
# Full bypass test suite (5 techniques)
attack_script rate_limit_bypass "https://TARGET/api/login" \
--method POST \
-H "Content-Type:application/json" \
-d '{"email":"test@test.com","password":"test"}' \
--count 20 \
--json-output
Tests automatically:
- X-Forwarded-For IP rotation
- URL case variation
- HTTP method switching
- Random query parameter injection
- Header-based bypasses
Phase 2: X-Forwarded-For Rotation
This is the opening of the README. Read the full README on GitHub.