Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp Extension + UpStream Proxy SLOWWWW

Christian | Last updated: Oct 10, 2018 03:09PM UTC

Hi all, I created a burp extension that decrypts AES traffic. The infrastructure I am testing is in such way that all requests' payloads are being encrypted with AES. In order to work around this, I am sending the request to another Burp Instance to do the analysis and then finally send it to the server. The problem I am facing is that when I make a request, it takes around 3 minutes to get to the next proxy. The output of my extension shows that the decryption is being done fairly fast, but after the decryption is done it takes forever to send the request.

PortSwigger Agent | Last updated: Oct 11, 2018 12:18PM UTC

This is most likely due to a Content-Length header not being correctly updated. If you send us some traces of HTTP requests or the extension source code, we can investigate further.

Burp User | Last updated: Jul 11, 2019 10:00PM UTC

What language did you write your extension in? I have an app that encrypts body of HTTP requests and responses with AES and am writing an extension. I am using Python and the AES module from the library PyCryptoDome is having import issues in Burp.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.