1.0

Release Notes for PyCript v1.0

New Features and Improvements

• Support for Non-ASCII Data:

  • Added support for raw encrypted data, binary data, compressed data, etc.
  • Issue #14

• Persistent Configuration:

  • Users can now persist configurations for request/response types, language paths, and more.
  • Issue #12

Bug Fixes

• Include/Exclude Configuration Reset:

  • Fixed an issue where include/exclude parameters were not reverting back to None.
  • Fixed by @Parimal-shaw.
  • Issue #16

• Include/Exclude for Non-JSON Form Parameters:

  • Fixed include/exclude not working with non-JSON form parameters.
  • Reported by @Parimal-shaw.
  • Partial fix provided in Pull Request #15.

• Language Path Execution with Spaces:

  • Fixed casing errors in executing scripts when the language path contained spaces.

Major Changes

• Backward Compatibility:

  • Older encryption/decryption scripts are not compatible with PyCript v1.0.

• Request Type Updates:

  • Removed Custom Request and Custom Request (Edit Header) types.
  • All request types now include headers with the ability to edit them in the Complete Body request type.

• Temp File Changes:

  • Temp files no longer use JSON objects. Parameters/body and headers are now separated using \n--BODY_END--\n.
  • Headers are written as plain text instead of Base64.
  • Parameters/body are written as byte arrays instead of Base64.

• Script Execution Updates:

  • PyCript no longer reads script output. Instead, it reads the updated request from the same temp file, enabling support for non-ASCII data that cannot be printed to the terminal.

• UI Improvements:

  • The configuration tab UI is now dynamic and optimized for smaller screens.

0.4

Issues Fix

• Fixed #8 in 46b8b8c 5b19667
• Fixed #7 in a5e51d3
• Fixed #5 in 2cc4c25 89d13b3

New/Changes

• Removed -h command line argument for Custom Request Type to fix #5
• Now Support all languages for encryption and decryption not limited to Java, JavaScript and Python
• Now, there is no need for Language in the System environment variable, You can select language binary path as well.
• Command Line argument -d will not have data to fix #5
• Use of temp file to pass data instead of -d or -h

Full Changelog: 0.3...0.4

0.3

• Fixed an error in Mac OS M1 and M2 that was caused by direct subprocess execution. Special thanks to Tavi for reporting the issue in the extension.
• Added a logger to aid in debugging the encryption and decryption background process.
• Implemented a new way to include or exclude parameters for encryption and decryption in requests and responses, thanks to Parimal Shaw for the feature idea.
• Improved the speed of PyCript compared to older versions.
• The PyCript editor tab now works more efficiently for both requests and responses at the same time.
• Added a new resource option to help users get started with PyCript.
• Custom requests can now take headers in base64 encoded format.
• The decrypted request table now allows for deleting entries. Special thanks to Akshay Dandekar for the feature idea.
• Fixed a bug where the response encryption file was being replaced with the request encryption file from local storage.
• Optimized the code to make PyCript more efficient.
• Fixed a bug where the PyCript editor tab would show an error and get stuck when handling plain text requests or error scripts.
• Fixed an issue where invalid or empty requests or responses would cause Burp Suite to freeze in the decrypted request table.

0.2

Release Notes:

• Added support for response encryption and decryption.
• Added support for GET parameters.
• Implemented separate encryption and decryption for request and response.
• Enhanced support for handling form data and nested complex JSON data.
• Introduced functionality to edit, update, and add headers.
• Extended language support to include Python and Java.
• Improved Pycript by storing the encryption and decryption script path locally, eliminating the need to load it after each reload.

0.1

The first release of PyCript.

• Encryption and Decryption on the Fly
• Decrypt multiple request
• Live edit the plain text format
• Auto Encrypt for Scanner and Intruder