usdAG / cstc

CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef

Home Page:https://herolab.usd.de/news-cyber-security-transformation-chef/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

From_HTML_Entity function

theblackturtle opened this issue · comments

Hi, It will be nice if it has From_HTML_Entity function because sometimes you need to decode JSON embed in HTML response.

Could you please specify some more details what you need and how it should look like?

Ah okay, this is rather straight forward. Will be implemented soon ;)

Implemented in the develop branch.

But notice that there seems to be no good library to perform HTML transformations on byte input. This means that the HTTP input needs to be translated to a string first. Fist causes no problems for 99% of the applications out there. However, if an application uses raw-bytes (non UTF8 formatted sequences) inside of HTTP requests, this may causes problems.

We try to keep all operations byte safe (no unintended transformations on raw bytes), but like already said library support is missing here. The preferred way to resolve this in future would be, that Burp exposes its HTML Encode and HTML Decode operations as part of their extender API. But currently it is not available.

Issue will be closed after the next push to master.

Was merged to master