---
id: 4960
title: "PimpMyBurp #2 – Auth Analyzer : How to test horizontal and vertical privileges escalation"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/pimpmyburp-auth-analyzer-test-horizontal-vertical-privileges-escalation"
published_at: "2021-02-17T13:38:00Z"
tags: ["bug-bounty", "burp-suite", "privilege-escalation", "idor", "tooling", "auth-analyzer"]
phying_url: "https://phying.com/item/4960"
lang: en
---

# PimpMyBurp #2 – Auth Analyzer : How to test horizontal and vertical privileges escalation

## Summary

PimpMyBurp #2 covers Auth Analyzer, a Burp extension that replays requests across user sessions to detect horizontal and vertical privilege escalation and auto-swap CSRF tokens or session parameters.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2021-02-17T13:38:00Z
- **Original:** https://www.yeswehack.com/learn-bug-bounty/pimpmyburp-auth-analyzer-test-horizontal-vertical-privileges-escalation
- **Phying News:** https://phying.com/item/4960