KAZIcodes/403-Forbidden-Bypass-Tool — reverse-engineered prompt

Build me a small Python command line tool for authorized pentesting and bug bounty work that checks whether 403 Forbidden endpoints can be reached because a server wrongly trusts forwarded headers or different HTTP methods.

I want to give it either one URL or a file of URLs, plus a file of IPs or domains to try, and it should also accept CIDR ranges and expand them automatically. It should test a default set of bypass style headers from a text file unless I provide my own header list. It should optionally try GET, POST, PUT, PATCH, and DELETE for each request, let me add custom headers, support a proxy, add a delay between requests, resume from the last run, and save results to an output file. Clear terminal output would be great, especially showing anything that changes from 403 to something more interesting.

Keep it simple to run from the command line, with sensible defaults and a short README with example commands. You can look up current docs online if needed.