REPEATER STRIKE: MANUAL TESTING, AMPLIFIED

Summary from the TLDR InfoSec newsletter

Gareth Heyes of PortSwigger writes about his experience writing a Burp Suite AI extension to automate hunting for IDOR and similar vulnerabilities. The extension, Repeater Strike, scans requests and responses to generate regular expressions that can be used to identify vulnerabilities in your traffic. While the extension worked in small tests, the AI struggled with longer responses, creating regular expressions that aren't site specific, and detecting more complex vulnerabilities.