Cyber Risks · PortSwigger Research

Burp Crypto, Encryption Payload Processor

Summary: BurpCrypto is a Burp Suite extension by author whwlsfb, version 0.1.9.1, last updated 25 November 2021, listed in the BApp Store with Chinese usage instructions and an overall system impact rated Low. PortSwigger states the extension is written by a third-party Burp user and that it makes no warranty about its quality or usefulness for any particular purpose.

What you should know: This is a third-party extension last updated in November 2021, and PortSwigger explicitly disclaims any warranty on third-party BApps - so the encryption and payload handling it performs inside your testing workflow carries no vendor assurance behind it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related