Auth Matrix
Summary: AuthMatrix is a Burp Suite extension that lets testers define tables of users, roles, and requests for a target application, then run all combinations of roles and requests through a click-to-run interface. Results appear in a color-coded view flagging authorization vulnerabilities, and target configurations can be saved and loaded for regression testing; version 0.8.2 requires Jython 2.7.0 or later and was last updated 15 October 2021.
Why it matters: Authorization flaws are found by testing every role against every request, and this tool exists because doing that by hand across a full matrix of users and endpoints is slow enough that teams skip it. The extension is third-party, last updated in 2021, and PortSwigger makes no warranty about its quality or usefulness.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026