portswigger/403-bypasser ? reverse-engineered prompt
Reverse engineered prompt
Build me a Burp Suite extension that helps test and bypass 403 Forbidden pages automatically.
I want it to take a request and try lots of common bypass tricks for me, especially by inserting payloads into the URL path in every possible position, adding header based payloads, and swapping in a POST request with an empty body when the original request is GET. It should also try downgrading the request to HTTP 1.0 and stripping headers to see if that gets around the block.
Please make it easy to use from Burp’s right click menu so I can run it manually on a request, and add a place in the extension UI where I can edit the query payloads and header payloads. If there are default payload lists, load those from the provided text files. Also show any interesting results or issues in an activity area so I can see what worked.
If you need to check current Burp API details online, go ahead.
Are you gonna build this?
make sure you review the code using coderabbit