prjblk/aura-dump — reverse-engineered prompt

Reverse engineered prompt

GitHub

Build me a Python command line tool for authorized Salesforce Aura security testing. I want to give it a full Aura endpoint URL, the aura context value, and the aura token, then have it pull useful data that a tester would need to review for exposed objects, excessive permissions, or possible SOQL injection issues.

It should be able to list available objects, dump specific objects like User, Account, Case, Contact, Attachment, and similar records, dump a single record by record ID, or dump accessible standard and custom objects. Let me choose standard, custom, or both, and optionally try to fetch all pages instead of just a small first pass.

Please support authentication with a cookie if needed, proxy traffic through a tool like Burp, dump ApexClass entries, choose an output folder, and write results to files. Also add an option that summarizes custom fields found on standard objects into a separate file. Include clear help text and a couple of example commands.

Want more depth? Deep Reverse