PimpMyBurp #2 – Auth Analyzer : How to test horizontal and vertical privileges escalation

This article reviews the Auth Analyzer Burp Suite extension, explaining how to create multiple session profiles, automatically replay requests across different privilege levels, extract and replace parameters (CSRF tokens, cookies, headers), and analyze responses to identify potential authorization/privilege escalation vulnerabilities; it focuses on features, usage tips and extraction modes rather than reporting an actual security incident.