Breaking encrypted data using Burp
portswigger.net | blog | #burp-suite | #cryptography | #intruder | #ecb | #session-tokens | #block-shuffling | #attack-techniques
Summary
Burp Intruder's ECB Block Shuffler payload type lets testers exploit ECB-encrypted session tokens by shuffling ciphertext blocks, potentially altering user IDs or encrypted prices.
- Published
- Collected
--- id: 448 title: "Breaking encrypted data using Burp" source_domain: portswigger.net source_url: "https://portswigger.net/blog/breaking-encrypted-data-using-burp" published_at: "2011-10-12T11:05:00Z" tags: ["burp-suite", "cryptography", "intruder", "ecb", "session-tokens", "block-shuffling", "attack-techniques"] phying_url: "https://phying.com/item/448" lang: en --- # Breaking encrypted data using Burp ## Summary Burp Intruder's ECB Block Shuffler payload type lets testers exploit ECB-encrypted session tokens by shuffling ciphertext blocks, potentially altering user IDs or encrypted prices. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2011-10-12T11:05:00Z - **Original:** https://portswigger.net/blog/breaking-encrypted-data-using-burp - **Phying News:** https://phying.com/item/448