Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Processing AES encrypted JSON paylaod

Vishal | Last updated: Jul 23, 2020 11:32AM UTC

Hi, I am currently testing an API which has the following POST request in JSON format: { "Code1": "123", "Time": "2020-07-20 10:00:00", "Amount": 1, "List": [{ "Code2": "abc123", "Color": "black" }] } The request is AES encrypted before being sent to the application. Is there a way or a Burp extension to process these requests through Intruder or Scanner. I have found one AES Crypto extension, however that has not been able to cut it since it only encrypts the individual JSON parameters before processing the payload, and not encrypt the whole request after inserting the payload into individual JSON parameters.

Hannah, PortSwigger Agent | Last updated: Jul 23, 2020 11:57AM UTC

Have you had a look at the Hackvertor extension?

Vishal | Last updated: Jul 23, 2020 04:20PM UTC

Thanks, this has done the magic.

Hannah, PortSwigger Agent | Last updated: Jul 24, 2020 06:41AM UTC