New Burp Suite Extensions for Exploitation and Bypass Techniques

• •BurpMetaFinder extracts metadata from documents, aiding in information discovery.
• •BurpSuite_403Bypasser automates scans for 403 Forbidden responses, enhancing testing efficiency.
• •Both tools are proof-of-concept extensions available on GitHub for security professionals.

Two new Burp Suite extensions have been released that enhance exploitation capabilities. The BurpMetaFinder extension allows users to extract metadata from PDF and DOCX files, potentially revealing sensitive information. The BurpSuite_403Bypasser extension automates the scanning of 403 Forbidden responses, enabling attackers to bypass directory restrictions. Both tools are available on GitHub and are aimed at security professionals for testing purposes. The BurpMetaFinder requires external libraries for installation, while the 403Bypasser uses PassiveScan to automatically handle requests. These extensions represent proof-of-concept tools and are not confirmed to be actively exploited in the wild. Users are encouraged to review and improve upon the provided code. The current status of these tools is that they are publicly available for use.