JCryption Handler
Summary: PortSwigger's BApp Store lists a third-party Burp extension by Gabriele Gristina, version 1.3, that performs manual and automatic security assessment of web applications using the JCryption JavaScript library to encrypt data sent over HTTP GET and POST methods. The extension requires Java 8, was tested against JCryption v2.x and v3.x, was last updated 14 July 2017, and carries an overall system impact rating of Low, with PortSwigger stating it makes no warranty about third-party extensions' quality or usefulness.
Why it matters: Applications that rely on JCryption to encrypt data in the browser are handling that encryption client-side, and this extension exists specifically to test what happens on the other end - a tool last updated in 2017 aimed at a library whose original releases are still what it was tested against.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026