How burp Suite crawls HTTPS requests

1. Download and install the Burp Suite tool

Https://portswigger.net/burp/communitydownload

If it is a Windows system, select Windows click download Download; if it is an iOS system, click "Other platforms" to expand the display, with the iOS system

2, installation, one-click Installation

3, configuring the agent

Open burp Suite, the page is shown below, click Proxy, then choose Options to set up the agent

 

4, download the certificate

Normal HTTP request does not require a certificate, HTTPS request requires installation certificate, love, click CA Certificate Download Certificate

5. Install certificate after download

After you download the certificate, double-click Install certificate

One-click installation succeeds, prompting the Certificate Import Wizard to import successfully

6, Export the certificate

Open Firefox Settings options-"Certificate Manager, click on the box shown below, click Export, File Save type Select the certificate

7, get the file, put it to the root directory of the phone-SD card

Problems encountered:

1, Mobile

Follow the above process down, mobile (mobile) can catch the data, the contents of the display is garbled, and the phone display blank

Workaround: Close the agent, test the page is OK

Bind the agent again, the phone can catch the request and the data is not garbled.

2,web End with Firefox flow device

Bind the agent, or do not receive the request

Tick "Use the same proxy server (S) for all protocols", then go to the operation and you will receive the request.

How burp Suite crawls HTTPS requests