Cyber Risks · PortSwigger Research

Clipboard Repeater

Summary: PortSwigger's BApp Store lists RepeaterClips, a Burp Suite extension by author 0xd0ug that converts a request into a compressed Base64 string copied to the clipboard, so a colleague can paste it into a new Repeater tab. The extension adds Copy RepeaterClip and Paste RepeaterClip to Repeater to Burp's context menu, and its documentation states it does not encrypt data or verify request integrity or check for malicious content.

What's compelling: Requests shared this way can carry session cookies or encoded and cleartext passwords in headers or parameters, and the Base64 encoding only obfuscates them, so anyone handling the string in email or IM is handling live credentials in the clear.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related