Cryptic Burp, Encrypted Traffic Editor
Summary: PortSwigger's BApp Store lists CrypticBurp, a Burp Suite extension by Mansoor Ahmad and Alex Thines, at version 1.1 and last updated 08 October 2026. It handles application-layer encryption layered on top of TLS, intercepting requests and responses, decrypting ciphertext into a Decrypted tab for editing, and re-encrypting modified content before forwarding it to the server so tools like Repeater work against apps that encrypt their API traffic.
What you should know: Any application that treats its own API encryption as a security control now has a published Burp extension that decrypts, edits, and re-encrypts that traffic, and PortSwigger states it makes no warranty about the quality or usefulness of third-party extensions.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026