403Kangaroo

(!! This tool is still under development if you have any issues please don't hesitate to contact me via linkedin or smth )

403/401 bypass tool via certain headers and values (headers.txt,values.txt). When you load the extension for the first time it will open a headers.txt file and write the given headers in code to txt file and does the same thing for the values with values.txt file. So if you want to add another value or header you can add it to txt files and from then extension will include that values and headers in requests too.

USAGE;

First of all you need to send request from your proxy tab to extension. And then you need to forward the request from burp suite proxy because the extension won't be able to catch the request unless it is sent.

After that the extension will take the request and send it again to confirm whether the response code (403 || 401) or not. Then It will add the headers and values, and send a request for each value .

It will print out whether the target got bypassed or not.(Based on response value being 200)

KNOWN ISSUES;

When you open the Burp Suite again you will see an output like this (or when you unload and reload the extension) ;

If you already used the extension and if the headers.txt is from extension then you don't need to worry about it but if it is your first time using this extension and if you are not the one who copy the headers and values txt files for this extension to work ; then you need to transfer the file in order to extension work properly.

There is 2 main problems which may occur and you can get over them with these;

1.You already have an headers.txt or values.txt in path which extension is going to use then you need to move this files in order to extension can write this directory.

2.There can be something goes on with the write permisson of the extension then it will give you a path to copy headers.txt and values.txt in given error.

(I know that this GUI sucks but also coding a GUI sucks too, I will work on it sometime but honestly I don't know when )

//For my one friend who thought above explanation is not formal enough;

(I know current GUI isn't user friendly due to my low experience on GUI design, I will work on this problem in the future)