Cyber Risks · PortSwigger Research

AES Payloads

Summary: PortSwigger's BApp Store lists AES Payloads, a third-party extension by Luis Grangeia, version 1.0a, last updated 04 February 2022, that adds encryption and decryption of AES payloads to Burp Intruder and Scanner. PortSwigger states the extension is written by a third-party user of Burp and that it makes no warranty about its quality or usefulness for any particular purpose.

Why it matters: This is a third-party extension with no PortSwigger warranty, last updated in February 2022, so anyone relying on it to handle AES payloads in Intruder and Scanner is trusting code the vendor explicitly declines to vouch for.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related