jxscout-repeater

What problem does it solve?

Manual raw HTTP request iteration for security testing is tedious, makes it hard to track historical attempts, and risks losing valuable test data when modifying requests repeatedly. This skill automates the sending, saving, and tracking of request/response pairs to streamline iterative security testing workflows.

Core Features & Use Cases

• Automated Request/Response Tracking: Sends raw HTTP requests from .req files and automatically saves timestamped request/response pairs for every attempt, preserving full test history without manual effort.
• Vulnerability Testing Support: Enables quick modification of parameters, headers, and request bodies to test for common web vulnerabilities including IDOR, authentication bypass, and injection attacks.
• Real Request Integration: Works with captured HTTP traffic from tools like jxscout, letting you start testing from real, authenticated requests instead of crafting them from scratch. For example, when testing an API endpoint for IDOR flaws, you can modify the user ID in the request, send it, and compare the response to the original to detect unauthorized data access.

Quick Start

Use the jxscout-repeater skill to send and iterate on the raw HTTP request stored in the repeater/api_v2_users_profile/idor_test/original.req file to test for insecure direct object reference vulnerabilities.