Type Xplorer
Summary: PortSwigger's BApp Store lists Type Xplorer, a Burp Suite extension by Mohammad Khaleghdadi, version 1.0.0, last updated 18 September 2025, that tests different content types in HTTP requests. It lets users try all possible Content-Types such as urlencoded, JSON and XML and review responses in a single click, aimed at finding vulnerabilities involving restrictions like CSRF, IDOR and ATO.
What you should know: The extension targets access-control and account-takeover flaws that appear when an endpoint trusts one content type and not another, so a single click can surface the kind of restriction bypass a manual header-by-header test would miss.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026