Scribd
Upload
101 views14 pages

Getting Started With Burp Suite

draft

Uploaded by

Crystaly Crys
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
101 views14 pages

Getting Started With Burp Suite

draft

Uploaded by

Crystaly Crys
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 14

GETTING STARTED

WITH BURP SUITE


GETTING STARTED WITH BURP SUITE

BASIC SETUP AND CONFIGURATION

To get you started with the basic configuration, We will follow as the
below steps:

I. Download and Setup Burp


Suite II. Config the Proxy
III. Turn off Intercept
IV. Add Certificate

I. DOWNLOAD AND SETUP

We can download the Community Edition (Free version)


at https://portswigger.net/burp/communitydownload

Here is the welcome screen after open Burp Suite

pg. 2
GETTING STARTED WITH BURP SUITE

1. Click on “Next” button to create a Temporary project.

2. Click on “Start Burp” button to keep the default configuration


for the current project.

pg. 3
GETTING STARTED WITH BURP SUITE

3. Go to the main layout of Burp Suite.

II. CONFIG THE PROXY

Setup the proxy will help us to capture the request in the middle, edit
the request and submit again to the server.

Setup the proxy on Burp Suite

1. Go to Proxy > Options


2. Click on “Add” button

3. Open the windows “Add a new proxy listener”. Here is the place
that we can set the new proxy information.

pg. 4
GETTING STARTED WITH BURP SUITE

  Blind to port: The proxy port number, We will set as “8888”.


 Blind to address: Set as default with “Loopback only”.

4. Click “OK” button to save the proxy config, here is the results.

Setup the proxy on Web browser

Click on Open menu at the top – right side, select Preferences

pg. 5
GETTING STARTED WITH BURP SUITE

pg. 6
GETTING STARTED WITH BURP SUITE

Go to General tab, at Network Proxy – select “Settings…” button.

Select “Manual Proxy configuration”


HTTP Proxy: 127.0.0.1
Port: The port number as Burp settings (8888)
Stick on the option: Use this proxy server for all protocols
No proxy for: Empty all (this will allow us to test on
the localhost)
Click “OK” button.

pg. 7
GETTING STARTED WITH BURP SUITE

Take Note: After close the Burp Suite application (Burp proxy
has been turned off), you need to change browser settings to
“No Proxy” to access to the website as normal (without proxy).

pg. 8
GETTING STARTED WITH BURP SUITE

III. TURN OFF INTERCEPT

Turn off Intercept by go to Proxy > Intercept

Click on the button “Intercept is on” to turn it off, after set the
Intercept as off, we will able to tracking all request at HTTP
history tab.

After turn off, it will be like this

pg. 9
GETTING STARTED WITH BURP SUITE

IV. IMPORT THE CERTIFICATION

Export the Certificate from Burp Suite and Import it to the Browser
to deal with the HTTPS request (domain). We do not need to add
Certificate with the request without secure protocol (with HTTP only)

Export Certificate from Burp

Go to Proxy > Options, click on “Import / export CA certificate”.

Select on the option: “Certificate in DER format”, click on Next button.

Click on “Select file …” button, Select the location to save the file,
enter the name as below format: “Name.cer”

pg. 10
GETTING STARTED WITH BURP SUITE

Example: “burp.cer”

Click on Next and Close to complete.

Import the Certificate to Browser

Go to the browser to import the Certificate.

Open menu > Preferences > Privacy & Security

Click on “View Certificates…”

pg. 11
GETTING STARTED WITH BURP SUITE

At the form Certificate Manager

Click on “Import…” button, select the exported file from


Burp (burp.cer) and click Open to import.

Take Note: If it show the popup that asks to check on the


Trusted certificate, you should check “all” options.

pg. 12
GETTING STARTED WITH BURP SUITE

pg. 13
GETTING STARTED WITH BURP SUITE

Test the config

We can start to use and test the request by open the Firefox, go to
“google.com” and check all request that captured by Burp at Proxy >
HTTP History

All request on Firefox will be captured on this tab

pg. 14

You might also like