yuziiiiiiiiii/SMS_Bomb_Fuzzer ? reverse-engineered prompt
Reverse engineered prompt
Build me a Burp Suite extension in Java that helps me test whether an app’s SMS sending endpoint can be abused or bypassed during security checks.
I want to be able to right click a captured request in Burp and send it to the extension, then have the tool automatically try a bunch of common parameter variations and fuzzed inputs on things like GET, POST, JSON, and Cookie values. It should support testing a custom phone number, let me turn different test groups on or off, and include a whitelist option so I can avoid testing safe values. A simple UI is fine, but it should also let me stop a running test, sort or remove results, and show which payloads got different responses.
Please make it easy to use from Burp Suite, include sensible defaults, and keep the code compatible with Java 8. If you need to check current Burp extension docs or APIs online, go ahead.
Are you gonna build this?
make sure you review the code using coderabbit