We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.

Shadow Repeater is now available via the BApp store. For technical details & backstory, check out our blog post:

The latest episode of The Catalyst is your guide to navigating the AI revolution. Our VP of AI Solutions, Craig McQueen, breaks down measurable business impacts, tangible use cases, and the obstacles to AI adoption. Listen now 🎧

oh nice, fixes the payload and sent back to target and got it right, very nice

This is great. Question, what keyboard shortcut sends the request from repeater?

By default auto invoke is on. Which means every repeater request sent will analyse your parameters and on the 5th request these parameters will be sent to the AI. You can switch this off in the settings and manual invoke it by right clicking the request and clicking Do analysis

Nice

Looks awsome! When will we get it in prod?

Should be next month

...and obviously the full request (including auth cookies and creds) is never sent to an AI in the cloud right? Just the parameters?

It will only send the parameter or header you most change. It looks at the differences. If the auth cookie doesn't change it shouldn't be sent or analysed by the AI.

Pretty cool.