# 使用 Homebrew, Nix 安装 forbidden

查看 forbidden 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:forbidden
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install forbidden
```

  证据: local Homebrew formula metadata

### Linux

- Nix (92%):

```sh
nix profile install nixpkgs#forbidden
```

  证据: nixpkgs package indexes: pkgs/by-name/fo/forbidden/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## 软件包事实

- **软件包键:** brew:forbidden
- **软件包管理器:** Homebrew
- **版本:** 13.4
- **来源摘要:** Bypass 4xx HTTP response status codes and more
- **主页:** <https://github.com/ivan-sincek/forbidden>
- **仓库:** <https://github.com/ivan-sincek/forbidden>
- **最后更新:** 2026-06-03T10:43:07Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- forbidden (别名)
- stresser (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 13.4
## 项目历史与用法

Forbidden is a security testing CLI for attempting bypasses of 4xx HTTP response status codes and related web access-control behaviors. Its README describes separate forbidden and stresser commands and states that the tool is based on Python Requests, PycURL, and Python's HTTP client.

### 项目历史

The public project history available from official sources is mostly README-level rather than narrative. The maintained README documents a mature command set, a v13.4 build artifact in source-install instructions, and a roadmap of future tests such as hop-by-hop headers, User-Agent headers, cookies, HTTP smuggling, CRLF, Log4j, and AWS metadata SSRF.

### 采用历史

The README positions pip as the standard installation route and mentions a Homebrew formula as an alternative that is not maintained by the author. That combination places Forbidden in the common pentesting-tool distribution pattern of upstream Python packaging plus downstream CLI formulas.

### 使用方式

Typical use is to supply a target URL and choose test groups such as protocols, methods, uploads, overrides, headers, path mutations, encodings, authentication bypasses, redirects, and parser tests. The README cautions about proxies normalizing URLs, rate limiting, anti-bot protections, and engine-specific behavior.

### 为什么软件包爱好者会关心

Forbidden is package-nerd relevant as a compact example of a Python security CLI that depends on multiple HTTP engines to exercise edge cases that ordinary curl invocations cannot always produce, such as duplicate Host headers or requests without a Host header.

### 时间线

- v13.4: README source-install instructions reference building forbidden-13.4-py3-none-any.whl.
- Current README: Homebrew installation is documented as an alternative not maintained by the author.

### Related projects

- The README names Python Requests, PycURL, and Python HTTP Client as implementation engines and links to internal forbidden.py, test.py, and value.py files for the test definitions.

### 来源

- <https://github.com/ivan-sincek/forbidden>
- <https://raw.githubusercontent.com/ivan-sincek/forbidden/main/README.md>


## 安全说明

没有找到 forbidden 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。


## 其他软件包管理器记录

- Nix - forbidden: normalized package name match | nixpkgs package indexes: pkgs/by-name/fo/forbidden/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/forbidden.yml](https://github.com/mxcl/pkgdb/blob/main/combined/forbidden.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph