CODEWITHSUNDEEP
encryptionpaw-app
rustyMagnet
rustyMagnet

Reputation: 4095

Paw-App - encrypting a request field with AES

This is a Paw question. Is there a Paw encryption add-on that supports AES working in the commonly used modes and lengths?

I have a request that includes encrypted fields. These fields are AES encrypted. The key is 128 bits long. The encryption mode is CBC. The encryption is performed by the mobile app. The key is inside the mobile app.

At the moment, I capture the requests in Burp, Import them into Paw, and then I have the valid request.

I know the plaintext. I know the key. I know the algorithm. I know the Initialization Vector. There must be a better way.

I could not find anything on: https://paw.cloud/extensions/

Upvotes: 1

Views: 285

Answers (1)

Jonathan Montane
Jonathan Montane

Reputation: 396

There are two new DynamicValues that should allow you to do what you wish to do:

  • AES Decrypt
  • AES Encrypt

They are based on an npm port of the CryptoJS library and should expose most of the API for decryption/encryption in AES.

Here's a couple screenshot to show you what it looks like:

AES Encryption example AES Decryption example

Since the DynamicValues are quite recent, there may be a few issues with them. Don't hesitate to report them.

Upvotes: 2

Related Questions