BypassFuzzer-Burp

BypassFuzzer is a Java-based Burp Suite extension designed to identify and exploit authorization bypass vulnerabilities, particularly for HTTP status codes 401 and 403. It offers an array of features, including a sweep mode for extensive coverage of proxy history, targeted bypass testing, IDOR and BOLA-style request mutation, and integrated URL validation for security assessments. The tool supports advanced attack vectors with a wide variety of payloads, rate limiting, and dynamic Burp Collaborator integration, making it a comprehensive solution for security professionals focused on authorization testing.