Autorize
Summary: Autorize is a Burp Suite extension, authored by Barak Tawily of AppSec Labs and listed at version 1.9.4 with a last update of 24 February 2026, that detects authorization and authentication enforcement gaps in web applications. It monitors traffic from a high-privileged user, replays those requests with low-privileged or unauthenticated credentials, and analyzes the responses to identify authorization bypasses and authentication weaknesses.
What's compelling: The tool exists because access control flaws are found by replaying a privileged user's own requests as a low-privileged or anonymous one - the same test an attacker runs after landing a single valid account. PortSwigger states the extension is written by a third party and carries no warranty of quality or usefulness, so the finding still rests on how your team reads the responses.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026