From 16fbbc8c3bbbc970b76fce762e914a23a95b44cd Mon Sep 17 00:00:00 2001 From: h0tak88r Date: Wed, 21 Jan 2026 04:41:23 +0200 Subject: [PATCH 01/13] docs: Add comprehensive Auth Analyzer documentation and update fork info - Document Auth Analyzer features and comparison engine - Add detailed setup guide with testing methods - Update repository URLs to h0tak88r/rep-firefox - Explain SAME/SIMILAR/DIFFERENT result classifications - Include workflow examples and use cases - Note Firefox-specific Auth Analyzer improvements --- README.md | 106 ++++++++++++++++++++++++++++++++++++++++++++++++++++-- 1 file changed, 104 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 77a7898..39bbc31 100644 --- a/README.md +++ b/README.md @@ -38,7 +38,9 @@ rep+ is a lightweight Firefox DevTools extension inspired by Burp Suite's Repeat [![rep+](https://img.shields.io/badge/rep%2B%20Chrome%20Extension-Install%20Now-4285F4?style=for-the-badge&logo=googlechrome&logoColor=white)](https://chromewebstore.google.com/detail/rep+/dhildnnjbegaggknfkagdpnballiepfm) ### Firefox -Firefox install coming soon! ๐ŸฆŠ +๐ŸฆŠ **Now Available!** Clone and load manually (see [Installation](#installation) below). + +> **Note:** This Firefox port includes all features from the Chrome version, plus Auth Analyzer improvements. ## Table of Contents @@ -80,6 +82,50 @@ Firefox install coming soon! ๐ŸฆŠ - Mark positions with `ยง`, configure payloads, pause/resume long runs. - Response diff view to spot changes between baseline and attempts. +### ๐Ÿ” Auth Analyzer (Firefox Enhanced) +Comprehensive authentication and authorization testing toolkit inspired by Burp Suite's Auth Analyzer extension. + +#### Key Features +- **Automatic Cookie Swapping**: Replay requests with different session tokens to detect authorization bypasses +- **Real-time Analysis**: Automatically analyze all captured requests (optional with domain scope filtering) +- **Manual Testing**: "Test Auth" button for on-demand single request analysis +- **Response Comparison Engine**: + - **SAME** (๐Ÿ”ด Bypass): Identical responses indicate potential authorization bypass + - **SIMILAR** (๐ŸŸก Warning): Same status code but slightly different content (90-98% similar) + - **DIFFERENT** (๐ŸŸข Secure): Properly denied access +- **Smart Normalization**: Removes dynamic content (timestamps, CSRF tokens, script tags) for accurate comparison +- **Token Similarity Algorithm**: Uses Jaccard index on word tokens for content-aware comparison +- **Bulk Replay**: Analyze all captured requests against a different session in one click +- **Session Management**: Import/export session configurations +- **Filtering Options**: Scope restriction by domain/URL pattern +- **Static File Exclusion**: Automatically skip CSS, JS, images, and other static resources + +#### Workflow +1. Configure victim/test session cookie in Auth Analyzer settings +2. Browse application with privileged account (original session) +3. Auth Analyzer replays each request with the victim cookie +4. Results panel shows color-coded analysis: + - ๐Ÿ”ด **SAME**: Critical! Unauthorized access granted (potential bypass) + - ๐ŸŸก **SIMILAR**: Warning! Nearly identical response (investigate further) + - ๐ŸŸข **DIFFERENT**: Secure! Access properly denied + +#### Use Cases +- **Privilege Escalation Testing**: Test if low-privilege users can access admin endpoints +- **Horizontal Privilege Escalation**: Test cross-user data access (IDOR) +- **Session Testing**: Verify endpoints properly check authorization +- **Bug Bounty Automation**: Bulk test applications for authorization flaws + +#### Comparison Engine +Our Firefox implementation uses an **advanced content-aware comparison** approach: +- **Normalization**: Removes ` @@ -36,14 +38,17 @@
- +
@@ -399,15 +436,20 @@

Response


                             
@@ -436,23 +478,28 @@

Response

Rep+ AI Assistance

- - + +
- + +
+
+

๐Ÿ”’ Auth Analyzer Configuration

+ +
+
+
+ โšช + Auth Analyzer is DISABLED +
+ +
+

Authorization Header / Cookie to Swap

+
+ Enter the full header value (e.g., Cookie string or Authorization header) from a valid, + authenticated session for the victim/test user. + This value will replace the original header in replayed requests. +
+ + +
+ Tip: Log in as the test user in another browser/container, copy their Cookie + header, + and paste it here. +
+
+ + +
+

Realtime Analysis Settings

+
+ +
+ If enabled, requests will be automatically analyzed as they are captured. +
+
+
+ + +
+ Only analyze requests where URL contains this string (or matches regex). Leave empty to analyze + all. +
+
+
+ +
+ Skip common static resources (CSS, JS, images, fonts, etc.) to reduce noise. +
+
+
+ +
+
+ ๐Ÿ’ก How it works +
+
+ When enabled, Auth Analyzer listens for every HTTP request you make in the current tab. + It then automatically: +
    +
  • Replays the request with the Viktim/Test Session cookie/header you + provided. +
  • +
  • Compares the response with the original response (Your Session).
  • +
  • Flags any SAME responses (Potential Bypass) or SIMILAR + responses (Warning).
  • +
+
+
+ + +
+

Bulk Replay (Existing Requests)

+
+ Run Auth Analyzer against requests already captured in your history. +
+ + +
+ +
+
+ +
+