Forum Discussion
Eric_Grepps_264
Nimbostratus
NimbostratusEncrypt URL's and querystrings
I know about the SSN and credit card scrubber, but is it possible to search the payload for http href's and replace them with an encrypted string them decrypt it on the way back in.
We have ...
hoolio
Cirrostratus
CirrostratusHi,
You should be able to use the credit card scrubber rule (Click here) as an example for inspecting and replacing the HTTP response content. You could search for the URLs/URIs in the response content and use the AES functions (Click here) to encrypt the content. On subsequent responses, you could use HTTP::header or HTTP::uri to decrypt the strings.
If there is sensitive data in the HTTP response headers, you would need to en/decrypt that seperately using the HTTP::header functions (Click here).
Try starting with this and repost with any questions.
Aaron
