sting8k/BurpSuite_403Bypasser

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1705 stars · 208 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Burp Suite extension written in Python that automatically attempts to bypass 403 Forbidden responses on restricted directories. It hooks into Burp's PassiveScan to test each 403 request against a list of path manipulation and header-spoofing payloads.

Use cases

• bypass 403 forbidden pages during web app pentesting
• automatically test restricted directories for access control flaws
• find ways to access admin panels blocked by 403
• test header-based authorization bypasses like X-Forwarded-For
• augment Burp Suite scans with 403 bypass payloads

When to choose

• you already use Burp Suite for manual web penetration testing
• you want automatic passive scanning of 403 responses without extra tooling
• you need a quick curated payload list for access control bypass attempts

When to avoid

• you need a standalone CLI bypass tool outside Burp Suite
• you require a maintained project with a license and active releases
• you need advanced bypass techniques beyond the built-in payload list

Facets

plugin · maturity maintenance

security penetration-testing http-client middleware security penetration-testing web-development developer-tools cross-platform python browser-extension burpsuite-extension 403-bypass passive-scanning payload-generation web-security-testing

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sting8k/BurpSuite_403Bypasser")