Burpsuite preliminary introductory notes
Organize study notes
1. JAVA environment configuration
1. Download: First search jdk in the search engine, find the website, download, and remember the installation path.( Note: The higher version of JAVA is not compatible with the lower version of burp)
2. Environment variable configuration: Right-click on my computer, select properties, select advanced system settings, click on the environment variable option, after the environment variable dialog box opens, click the new button under system variables below, and then enter JAVA_HOME, the corresponding The variable value is the directory where jdk is installed, click OK. Then create a new variable name: classpath variable value: %JAVA_HOME%\lib;%JAVA_HOME%\lib\tools.jar and click OK. Then find the variable named "Path" in the system variables and double-click, the new variable is %JAVA_HOME%\bin.
After all configuration is complete, click OK to close all open windows, press Win+R, and enter cmd in the input field.Enter JAVA and JAVAC to show detailed parameters, that is, the configuration is successful.
2. Download and install Burpsuite
1. After downloading, first open the folder where Burpsuite is located, find the burp-loader-keygen.jar file, and double-click to open it.
2. Click "run". Copy and paste the blue part of LISENCE in the figure into the pop-up box, then click Next, and click: Manual activation. Copy and paste the contents of the second column of the small box that pops up to the second column before, and a series of clauses will be generated in the third column, and finally copy and paste this series of clauses into the second space of the small box .
3. Finish, open the Burpsuite software.
3. Capture
1. Configure the proxy of the browser: take firefox as an example, open firefox, open the menu, click options, and click network settings. Select manual proxy configuration, set proxy IP 127.0.0.1, port 8080, select Use the same proxy for all protocols, and confirm.
2. Configure Burp proxy: click Proxy, Options, add, Binding in turn, set the port and IP, the IP is set to the loopback IP of the machine (127.0.0.1), and the port is set to 8080.
3. Packet capture: click in order, Proxy Intercept, Intercept is on
Intercept is off means not to capture packets, and Intercept is on to capture packets.
4. Open the browser, enter the search content, and capture the package. It will light up when caught.
(If there is no certificate, only the http protocol can be captured, and it is invalid for the https protocol)
*Part of the information comes from Encyclopedia