cstc
cstc copied to clipboard
CSTC is a Burp Suite extension that allows request/response modification using a GUI analogous to CyberChef
**Attention**: The `XmlFullSignature` operation is vulnerable to XXE. This has the following implications: 1) Depending on your use case of *CSTC*, you are directly vulnerable to this attack. E.g. if...
Disable external Entities (https://github.com/usdAG/cstc/issues/69).
Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.11.1 to 2.13.3. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [maven-compiler-plugin](https://github.com/apache/maven-compiler-plugin) from 3.7.0 to 3.10.1. Release notes Sourced from maven-compiler-plugin's releases. 3.10.1 🚀 New features and improvements [MCOMPILER-426] - add flag to enable-preview java compiler feature (#98) @olamy 🐛...
Bumps [burp-extender-api](https://github.com/PortSwigger/burp-extender-api) from 1.7.22 to 2.3. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [bcprov-jdk15on](https://github.com/bcgit/bc-java) from 1.59 to 1.70. Changelog Sourced from bcprov-jdk15on's changelog. 2.1.1 Version Release: 1.70 Date: 2021, November 29th. ... (truncated) Commits See full diff in compare view [](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
The operations test feature seems to be broken: Steps to reproduce: 1. Paste a request or response into the "Input" field in the upper right corner of the CSTC window...