Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/lgrangeia/aesburp
Burp Extension to manipulate AES encrypted payloads
https://github.com/lgrangeia/aesburp
Last synced: 2 months ago
JSON representation
Burp Extension to manipulate AES encrypted payloads
- Host: GitHub
- URL: https://github.com/lgrangeia/aesburp
- Owner: lgrangeia
- License: apache-2.0
- Created: 2015-06-26T11:41:36.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2017-08-02T15:15:24.000Z (over 7 years ago)
- Last Synced: 2024-08-02T00:23:09.559Z (6 months ago)
- Language: Java
- Size: 379 KB
- Stars: 26
- Watchers: 4
- Forks: 22
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
- awesome-burp-extensions - AES Burp/AES Payloads - Burp Extension to manipulate AES encrypted payloads. (Cryptography / SSRF)
README
# BURP AES Extension
## Intro
This is a plugin to handle AES encryption / decryption in Burp.
It registers two Intruder **payload processors** so you can encrypt/decrypt payloads on the **Intruder Tab**.
It also registers a **Scanner insertion point provider**. What this does is when you request an active Burp scan, it looks in existing parameters for AES payloads that can be decrypted using the current configuration / keys. If it finds any, it registers scanner insertion points to perform injection inside the AES payloads.
Contact me via twitter at @lgrangeia for suggestions and use cases and I will try to implement them. I welcome ideas or pull requests.
## Compilation
This can be compiled normally using 'javac'. I still haven't built a build.xml or pom.xml file, but there's a jardesc file to compile and package it using Eclipse. There's a precompiled jar at the dist/ folder.
## Usage
Install the burp extension as usual in burp. If you need AES 256 bits and are using Oracle JRE, you may need to install Java Cryptography Extension:
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
## Screenshots
