[burp.api.montoya.utilities.json] Request method to get JSON parameter location with one click

[cloud-jie]

All methods of burp.api.montoya.utilities.json accept JSON strings and positions. However, for such an important position, there is no method that can get the position of all parameters in one click.

In addition, will burp.api.montoya.utilities.CryptoUtils provide encryption methods such as aes, rsa, sm2, sm4, des, etc. in the future?

[Michelle-PortSwigger]

Hi

If you don't know the structure of the JSON and need to walk it/interrogate it you might find the JsonNode interface useful as a starting point:
https://portswigger.github.io/burp-extensions-montoya-api/javadoc/burp/api/montoya/utilities/json/JsonNode.html
I hope this helps.

For your second question, we don't have any current plans to provide encryption methods as part of burp.api.montoya.utilities.CryptoUtils, if we did in the future we would just be wrapping existing Java APIs, so in the emantime you may want to check out the JCEs (Java cryptography extensions).