Mastering Kali Linux for Web Penetration Testing

Select, attack, highlight, and repeat!

The last tool we'll discuss in this chapter is the Burp Suite's Repeater tool, where Intruder allows you to focus on one or more fields and apply specific payload sets. Repeater focuses more on applying field modification for input validation checking and can even reply requests in different orders to test business logic.

Repeater is a great utility to augment other tools in the suite, and just like the other tools, it can be called by right-clicking and selecting the Send to Repeater option, which will automatically spawn a Repeater task tab (look at the following screenshot) and preconfigure all of the basics.

Repeater allows us to take a request we've captured and play with it.

Once we've got our ...