Open Firefox-> Preferences-> Network settings and configure proxy setting to send traffic to Burp. Picture 6 - CA Certificate Installation into FirefoxĤ.3 Firefox Configuration to Use Burp as Proxy The new certificate PortSwigger CA has been Installed (Picture 6). Type cer in 'Find in Preferences' box and click View Certificates. Download der encoded certificate r and import it unto Firefox.Ĥ.2 Import Burp CA Certificate to Firefox Open Firefox web browser and navigate to Click on CA Certificate in the upper right corner of the web page. Import Burp CA Certificate to Firefox and Configure Firefox to Use Burp as Proxy Picture 5 - Enable Traffic Interception on BurpĤ. Cick 'Intercept is on' button (Picture 5). Once you finish, intercept traffic by selecting Proxy-> Intercept. Picture 4 - Burp Configuration to Intercept Client Requests and Server Responses Click the both check boxes next to the options - Intercept requests based on the following rules and Intercept responses based on the following rules. Picture 3 - Configuration of IP and Port Burp is Listening Onģ.3 Configure Burp to Intercept Client Requests and Server Responses Configure the IP address and port Burp is listening on. Navigate to Proxy-> Option-> Proxy listeners. Picture 2 - Burp Configuration for Tor Proxy Insert the Tor socket settings (Picture 2). Open Burp and navigate to User Option-> Connection-> SOCKS Proxy and click Check button - Use SoCKS proxy. Picture 1 - Checking Port Open by Tor Serviceģ.1 Configure Burp To Use Tor as Socks Proxy Log to Kali LInux with the default credentials - root/toor and install Tor.Įnable and start Tor service and check if the service is listening on port 9050. Download the latest Kali Linux VirtualBox appliance and import ova file into VirtualBox (Ctrl-I). We can find BurpSuite Community Edition within Kali Linux. The tutorial discusses configuration of Burp to use connection over Tor network. Burp Proxy allows manual testers to intercept all requests and responses between the browser and the target application, even when HTTPS is being used. BurpSuite is a manual toolkit for investigating web security.

Tor browser linux debian