Back Sploitus

BurpSuite_403Bypasser exploit

Sploitus • September 22, 2026

Расширение для BurpSuite для обхода 403 ограниченных директорий. Используя PassiveScan (включен по умолчанию), каждый 403 запрос будет **автоматически** сканирован этим расширением, так что просто добавьте в BurpSuite и наслаждайтесь.

Полезные нагрузки: $1: ИМЯ_ХОСТА $2: ПУТЬ

$1/$2 -H "X-Custom-IP-Authorization: 127.0.0.1"

**Спасибо@lohubi за добавление множества полезных нагрузок.**

`BurpSuite -> Extender -> Extensions -> Add -> Extension Type: Python -> Select file: 403bypasser.py -> till Finish`

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Burp Suite Extensions for Exploitation and Bypass Techniques Two new Burp Suite extensions have been released that enhance exploitation capabilities. The BurpMetaFinder extension allows users to extract metadata from PDF and DOCX files, potentially revealing sensitive information. The BurpSuite_403Bypasser extension automates the scanning of 403 Forbidden responses, enabling attackers to bypass directory restrictions. Both tools are available on GitHub and are aimed at security professionals for testing purposes. The BurpMetaFinder requires external libraries for installation, while the 403Bypasser uses PassiveScan to automatically handle requests. These extensions represent proof-of-concept tools and are not confirmed to be actively exploited in the wild. Users are encouraged to review and improve upon the provided code. The current status of these tools is that they are publicly available for use. 2 sources 37

Extracted Entities

Tools (3)

403bypasser.py Burpsuite Python