Type Xplorer

Type Xplorer is designed to test different content types in HTTP requests. It allows users to test all possible Content-Types (such as urlencoded, JSON, XML) and visually review the responses in a user-friendly interface. This tool is particularly useful for finding vulnerabilities that involve certain restrictions, like CSRF, IDOR, and ATO. Changing the Content-Type header manually might be a tedious task, but with this extension, all checks can be performed in a single click.

Features

• Send HTTP requests with a variety of content types.
• View request and response details in a split-pane interface.
• Easily clear entries using the delete key.
• Support for multiple test cases, which include combinations of header and body formats.

Usage

Sending Requests

• Right-click on a request in Burp Suite, for example in the Proxy or Repeater tab.
• Select "Send to TypeXplorer" from the context menu.
• The request will then be added to the extensions endpoint list.

Deleting Entries

• Select an endpoint in the list.
• Press the delete key to remove it from the list.