What is easydecrypt?

EasyDecrypt is a proxy tool built for security testers who work with apps, mini-programs, and websites whose network traffic is encrypted and signed. Many modern apps encrypt their request and response data with algorithms like AES, SM4, or RSA, and also validate signatures, random values, and timestamps to stop tampering and replay. That normally makes tools like Burp Suite or Yakit show only scrambled ciphertext, and any edited request tends to fail signature checks. EasyDecrypt sits between those pieces to solve that problem, without requiring the tester to write custom decryption code. It is built in Python on top of Mitmproxy and works as two linked proxies. The upstream proxy intercepts traffic coming from a browser or mini-program, automatically decrypts the encrypted request so it can be viewed and edited in plain text inside Burp, then re-encrypts and re-signs the edited response before it goes back to the client. The downstream proxy does the mirror image job: it takes the plain text request that was edited in Burp, re-encrypts and re-signs it before sending it on to the real server, then decrypts the server's encrypted response so it can be inspected in Burp as well. The tool comes with a desktop interface for setting listening ports for the upstream proxy, Burp, and the downstream proxy, along with a rule editor. Rules are built by matching a domain and path, then chaining together built in operations for encoding, encryption, hashing, and timestamp generation, so a tester can define exactly how a given endpoint's traffic should be transformed without writing code. Each rule can be tested against a sample request or response before being saved for reuse. To use it, a tester points their browser or mini-program at the upstream port, points Burp at the downstream port, and installs the Mitmproxy root certificate so HTTPS traffic can be intercepted. The README notes the project folder path must not contain Chinese characters or the tool will fail to start, and mentions the tool may be flagged by antivirus software due to one of its packaged files, recommending it be added to an allowlist since the project is fully open source. It links to a companion practice target called Encrypt-Labs for hands on exercises. The README does not state a license.