Repeater Strike
Summary: PortSwigger released Repeater Strike, an AI-powered Burp extension by Gareth Heyes that analyzes Repeater requests to find IDOR and other vulnerabilities by automatically generating targeted regular expressions from the requests and responses under test. Once a vulnerability is detected, those regexes are applied to proxy history to identify similar issues across all traffic, with configurable proxy data scan limits, request/response/image caps, and automatic Strike Rules and proxy history scanning available in the extension's settings.
Bottom line: The tool turns a single confirmed finding into a sweep of your entire proxy history, so one IDOR found in a Repeater tab can surface every comparable instance across captured traffic - the same scaling effect an attacker gets when they generalize a single broken access control pattern.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026