---
id: 448
title: "Breaking encrypted data using Burp"
source_domain: portswigger.net
source_url: "https://portswigger.net/blog/breaking-encrypted-data-using-burp"
published_at: "2011-10-12T11:05:00Z"
tags: ["burp-suite", "cryptography", "intruder", "ecb", "session-tokens", "block-shuffling", "attack-techniques"]
phying_url: "https://phying.com/item/448"
lang: en
---

# Breaking encrypted data using Burp

## Summary

Burp Intruder's ECB Block Shuffler payload type lets testers exploit ECB-encrypted session tokens by shuffling ciphertext blocks, potentially altering user IDs or encrypted prices.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2011-10-12T11:05:00Z
- **Original:** https://portswigger.net/blog/breaking-encrypted-data-using-burp
- **Phying News:** https://phying.com/item/448