Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PimpMyBurp #1 – PwnFox + Autorize: The perfect combo to find IDOR

yeswehack.com | blog | #bug-bounty | #burp-suite | #idor | #tooling | #autorize | #pwnfox

Summary

PimpMyBurp #1 explains combining PwnFox — a Firefox container-based multi-session extension — with Autorize to streamline IDOR hunting by color-coding sessions and replaying requests automatically.
Published
Collected

original ↗

Related coverage

  1. Introducing SignSaboteur: forge signed web tokens with ease (portswigger.net)
  2. Refining your HTTP perspective, with bambdas (portswigger.net)
  3. Bypassing WAFs and cracking XOR with Hackvertor (portswigger.net)
  4. Turbo Intruder: Embracing the billion-request attack (portswigger.net)
  5. Breaking the chains on HTTP Request Smuggler (portswigger.net)
  6. Adapting Burp extensions for tailored pentesting (portswigger.net)

back