autoDecoder

I want to maintain this project with many use cases and interfaces. I hope everyone with encryption/decryption needs can communicate together to improve this project.

---

Target audience: Masters with some coding foundation, or those without foundation but willing to learn and tinker with automatic encryption/decryption.

---

For autoDecoder examples, please refer to autoDecoder-usages, which will be helpful for many who want to write interfaces themselves.

---

AutoDecoder English/Chinese Language Option

This project is primarily used in Chinese as the main language of the plugin. I've edited this project in both Chinese and English. The core code structure hasn't been changed.

https://github.com/f0ng/autoDecoder

English

Chinese

---

Plugin Compilation Command

mvn -DskipTests clean package

---

Do not casually modify the interface code template for obtaining parameters and return formats, otherwise garbled characters or inability to run normally may occur.

Communication Group

If the QR code expires, please add WeChat f-f0ng, note autoDecoder communication.

Follow the main WeChat official account (only security), reply autodecoder to get the download address]

Donation (If the project helps you, you can choose to donate some funds for the maintenance of subsequent versions of autoDecoder, this project is maintained long-term)

If you have problems, first check FAQ

Simple Flowchart

Normal Flowchart

Process handled by autoDecoder for ciphertext

Process handled by autoDecoder for plaintext

2025.12.14 update 0.57

1. Modify the request header keywords to add support for built-in encryption and decryption
2. Optimize the extension tab to adapt to the request header method with built-in encryption and decryption for decryption
3. Add confirmation for encryption/decryption method selection when saving configurations
4. Fixed the issue where the unknown version could not display the save configuration interface
5. Optimize the arrangement of plugin buttons to prevent mixed usage

2025.11.19 Update 0.56

1. Update the English version, thank you very much @secfb # 48
2. Fix sm2 decryption issue # 47
3. Add request body base64 automatic decoding, adapt encrypted content to binary data, thank you to WeChat group master @满溢

2025.7.24 Update 0.55

1. Added matching for header in built-in encryption/decryption mode [including matching for GET request parameters]

2025.7.8 Update 0.54

1. Fixed bug where built-in encryption/decryption requests and responses used different encryption/decryption methods

2025.4.3 Update 0.53

1. Fixed newline bug [When writing debug module, unified return format, causing the number of newlines to be the same whether header is checked or not]

2024.12.30 Update 0.52 Happy New Year to everyone!

1. Interface debugging module adds keyword substitution mode to prevent errors caused by keywords
2. Interface mode encryption/decryption will echo errors, so you can know what specific problem caused the encryption/decryption to fail

When the return packet format is wrong

When the interface is not connected

You can also check error information on the Extensions page

2024.10.12 Update 0.51

1. Fixed host matching issue in replacement module
2. Optimized replacement module, added automatic unicode decoding mode, needs to be Literal mode, Replace needs to be #unicode#, unicode encoded content in response packet will be automatically decoded

2024.9.24 Update 0.50

1. Fixed sm4 encryption/decryption error

2024.5.5 Update 0.40

1. Fixed sm4 encryption/decryption bug (base64)
2. Added ciphertext keyword judgment for response body

2024.3.17 Update 0.39-beta1

1. Fixed encryption bug (SM4 and AES)

2024.3.13 Update 0.39

1. Fixed base64 encryption/decryption bug in SM4
2. Fixed base64 decryption bug in AES/DES encryption

2024.2.2 Update 0.38

1. Optimized SM4, SM2 encryption/decryption
2. Optimized regular expression matching and replacement

2024.1.2 Update 0.37 First update of the new year, wish everyone a happy new year!

1. Built-in encryption/decryption adds sm2, sm4 (CBC, ECB) encryption/decryption
2. Regular expressions are saved to configuration file

2023.12.18 Update 0.36

1. Fixed the problem that the replacement switch was selected by default
2. Interface encryption/decryption debugging optimization
3. Optimized header keyword judgment

2023.11.22 Update 0.35

1. Added load configuration file and save configuration file module, subsequent use can load configuration according to the naming of the configuration file
2. Added request and response replacement function, similar to burp's Match and Replace module, added extraction module, configuration example as follows

Normal response

Modified response

2023.11.11 Update 0.34

1. Added header keyword judgment

2023.10.23 Update 0.33

1. Added automatic base64 decoding for response, when the response packet returns base64, it can be automatically decoded to prevent binary data packet corruption
2. Added option saving and reading

2023.9.16 Update 0.32

1. Optimized settings for plaintext keywords and ciphertext keywords

2023.9.5 Update 0.31

1. In the domain name matching module, multi-domain matching is possible, fixed the problem that the extension tab could not be displayed under multiple domains in the original version
2. Removed two newline characters in the interface debugging module

2023.7.6 Update 0.30

1. In Repeater, Intruder modules, added right-click encryption and decryption, when the corresponding method is set, the body of the request can be encrypted and decrypted
2. Fixed the problem that Send to Repeater, Send to Intruder would not bring the port number

2023.5.22 Update 0.27

1. autoDecoder extension tab adds right-click Send to Repeater, Send to Intruder, and adds formatting, currently only supports json format

2023.5.17 Update 0.26

1. Fixed the problem that request headers were missing after checking Process request headers
2. Added ciphertext URL decoding reading and encrypted ciphertext URL decoding options
3. Fixed other issues, such as extension tabs not appearing when specifying domain ports, Chinese decryption garbled on windows, etc.

Thanks to WeChat group yosel master for feedback

2023.4.25 Update 0.25

1. Added binary request body and response body processing, the principle is to base64 encode the content of the request packet and pass it to the interface, you need to set burp as follows, otherwise the encoding obtained will be damaged
2. You need to check User options->Character Sets Use the platform default(UTF-8) [MAC], or check Display as raw bytes [Windows]

2023.4.14 Update 0.24-beta2

1. RSA encryption/decryption
2. Response packet regular mode encryption/decryption

2023.4.12 Update 0.24-beta1

1. Truncate key according to encryption method
2. Fixed the problem that only selecting interface encryption/decryption could not perform encryption/decryption

2023.4.8 Update 0.24

1. Optimized test interface data packet display
2. Added zeropadding padding mode encryption
3. Optimized base64 decoding problem

2023.2.22 Update 0.23

1. Optimized some problems with the plugin
2. Cases moved to autoDecoder-usages

2023.2.16 Update 0.22-beta1

1. Optimized the problem of removing \u0000 when reading ciphertext
2. In the built-in algorithm, request packet encryption/decryption and response packet encryption/decryption are separated, you can select encryption algorithm null to indicate no encryption/decryption, return original data packet

2023.2.15 Update 0.22 Major update

1. Refactored UI page, the previous UI was too messy, spent some time refactoring the page UI

2. Added regular expression extraction for built-in algorithm encryption/decryption, effective when regular expression has content, for two situations:

3. Only request encryption

4. Encrypting username and password in brute force attacks

Configuration page

Original request

Real request

After decryption

3. Added debugging page when interface encryption/decryption, convenient for further code writing

Normal decryption request packet

Normal decryption response packet

Process request headers

2023.2.14 Update 0.21

1. Added burp module button to prevent conflicts with requests generated by other modules (such as plugin Extender)
2. Optimized plugin decryption reading ciphertext method, read after URL decoding

2023.1.5 Update 0.20

1. Added RSA decryption an example
2. Optimized tab data packet settings, does not affect the data packet content of repeater itself

Decrypt request packet

Decrypt request packet does not affect original request packet

2022.9.7 Update 0.19

• Added different encryption algorithm buttons for request packet and response packet [Only for interface encryption/decryption mode], for request packet and response packet using different encryption algorithms (implementation method: when requesting decryption interface, pass parameter requestorresponse at the same time, indicating request [request] or response [response])

<img width="800" alt="image" src="https://user-images.githubusercontent.com/48286013/188768352-f7d33440-0f13-4a