Getting started with the Inspector - Port Swigger
Summary: PortSwigger published a tutorial on Burp Suite's Inspector, a side-panel tool that automatically groups items from a selected request and response pair by category such as HTTP headers, cookies, and parameters. The walkthrough uses a deliberately vulnerable blog lab to show the Inspector decoding a session cookie through URL and then Base64 decoding, and re-applying the correct encoding sequence after a value is edited from wiener to administrator.
What's compelling: The tutorial demonstrates editing a decoded session cookie to administrator and having the tool re-encode it automatically, which is the exact step that turns a captured request into an authentication bypass. For advanced users, PortSwigger also points to the Inspector's HTTP/2 features for exploiting HTTP/2-exclusive request smuggling vulnerabilities.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026