Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Processing AES encrypted JSON paylaod

Vishal | Last updated: Jul 23, 2020 11:32AM UTC

Hi, I am currently testing an API which has the following POST request in JSON format: { "Code1": "123", "Time": "2020-07-20 10:00:00", "Amount": 1, "List": [{ "Code2": "abc123", "Color": "black" }] } The request is AES encrypted before being sent to the application. Is there a way or a Burp extension to process these requests through Intruder or Scanner. I have found one AES Crypto extension, however that has not been able to cut it since it only encrypts the individual JSON parameters before processing the payload, and not encrypt the whole request after inserting the payload into individual JSON parameters.

Hannah, PortSwigger Agent | Last updated: Jul 23, 2020 11:57AM UTC

Have you had a look at the Hackvertor extension?

Vishal | Last updated: Jul 23, 2020 04:20PM UTC

Thanks, this has done the magic.

Hannah, PortSwigger Agent | Last updated: Jul 24, 2020 06:41AM UTC

Glad to hear it!

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.