Cyber Risks · PortSwigger Research

Auto Repeater

Summary: AutoRepeater is a Burp Suite extension by Justin Moore of NCC Group, version 1.0b, that automatically repeats requests with replacement rules and response diffing. It is positioned as a general-purpose solution for streamlining authorization testing within web applications, last updated 06 June 2023 with an estimated overall system impact rated Low.

What you should know: Authorization testing is where access-control flaws surface, and this extension automates the repeat-and-compare loop that analysts otherwise run by hand. PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions, so a tool rated Low impact still enters your testing pipeline without a vendor guarantee behind it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related