Shadow Repeater v1.2.3 release

The new version of Shadow Repeater has been released with a couple of cool new features.

Timing differences

Shadow Repeater analyses your Repeater requests and looks for response differences but it was missing something, what if there was a timing difference? Now it will create the variations and check timing as well as response differences. You can change the timing threshold in Burp Settings->Extensions->Shadow Repeater.

Additional LLM instructions

You can configure additional LLM instructions in the settings too which enable you to add further instructions that you want the LLM to do. For example you want the vectors in a specific encoding or you want to prevent it from dropping tables in a SQL attack.

Stop when first difference found

I've added another configuration option that allows you to stop when the first variation is found. It's off by default which enables Shadow Repeater to find many variations per Repeater invocation session.

Installation instructions

In Burp Suite Professional, go to Extensions->BApp store and search for Shadow Repeater. Click the install button and then navigate to the installed tab then select Shadow Repeater and check the "Use AI" checkbox in the Extension tab.

You can read the Shadow Repeater blog post for details on how to use it. Here is a video demonstrating the timing differences functionality.