Burp Extension Mini series | Autorize | Bug Bounty Service LLC

This video explains the use of the Autorize Burp extension.
Check out my courses:
1. The Ultimate Web Application Bug Bounty Hunting Course
www.udemy.com/...
2. Burp Suite Apprentice Web App Penetration Testing Course
www.udemy.com/...
3. Burp Suite Professional Web App Penetration Testing Course
www.udemy.com/...
4. Cyber Awareness Training
www.udemy.com/...

[@camelotenglishtuition6394]

A great tool, and I really like how you explained it! Great job!

[@martinvoelk]

Glad you liked it!

[@camelotenglishtuition6394]

@martinvoelk it was excellent.. I sent an email previously, and you gave me some excellent advice. Is it possible to ask another question? I understand if you can't because you're busy. Thank you 😊

[@martinvoelk]

@@camelotenglishtuition6394 sure

[@Lucas-n3l7n]

Awesome!! Thanks master of Burp!

[@martinvoelk]

You're welcome!

[@didyouknowamazingfacts2790]

Am I missing something? why do you need to create 2 account to identify a IDOR/BOLA vulnerability. I thought it looks for unique identifiers/ID's and change the value and see if it gets a response. I'm confused on why you need 2 accounts to do this.

[@martinvoelk]

Because you can find things faster and more efficient. You create 2 accounts (say Green and Blue). You feed the Blue Cookie / token into Autorize. Then you browse the website as a user with the Green account. For every green account request, Autorize will automatically create a 2nd request with the blue cookie. This makes it a lot faster than manually doing this in repeater.