Abstract

I would be discussing how to create custom burp suite extensions using Jython to test the web application/mobile applications with strong encryptions in HTTP requests and responses.Our main agenda will be to learn how to test the application if the request body or the value of any parameter is encrypted with AES or any other encryptions, and also how will you analyze the response if the response body is fully encrypted.You will learn how I created a burp suite extension with Jython to view the encrypted request and response data in clear text, and how we can modify that data to inject our payload at run time.