TLDR Tech / InfoSec
Introducing Session Switcher. Swap Burp Sessions with One Click!
Doyensec released Session Switcher, a Burp Suite extension that adds a Sessions tab to the request editor to store named cookie/header sets and swap between user roles, tenants, or privilege levels with a single click. Auto Update rules monitor Proxy traffic to keep stored sessions valid, refreshing the alice session whenever cookies change on requests carrying the X-User: alice header, which removes the manual JWT and cookie re-pasting that drives false positives in IDOR and privilege-escalation testing.
Read the full story