Clipboard Repeater
Summary: PortSwigger's BApp Store lists RepeaterClips, a Burp Suite extension by author 0xd0ug that converts a request into a compressed Base64 string copied to the clipboard, so a colleague can paste it into a new Repeater tab. The extension adds Copy RepeaterClip and Paste RepeaterClip to Repeater to Burp's context menu, and its documentation states it does not encrypt data or verify request integrity or check for malicious content.
What's compelling: Requests shared this way can carry session cookies or encoded and cleartext passwords in headers or parameters, and the Base64 encoding only obfuscates them, so anyone handling the string in email or IM is handling live credentials in the clear.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026