BurpSuite installation and usage and Firefox proxy configuration tutorial

BurpSuite installation

Applicable to various BPs
After downloading and unzipping, double-click burp-loader-keygen-2.jar and click run to run the BurpSuite softwareInsert image description here

Copy the License shown aboveInsert image description here

Click Next and select Manual Activation
Insert image description here

Copy the string of codes at the position in the picture below into the Activation Request in Burp Suite Pro 1.7.31 Loader & keygen
Then the Activation Response will return a string of codes, copy This string is coded into the picture above.
Insert image description here

Click next to complete activation.

Set browser proxy

In order to easily switch browser proxy, you can download and install the plug-in, which can be searched in the extension of Firefox browser.
![Insert image description here](https://img-blog.csdnimg.cn/2ea0a720ed2e46038bd075a619b1a4aa.png

Click Add, name it BurpSuite (you can change the name at will, or not name it), select HTTP for the proxy protocol, fill in 127.0.0.1 for the proxy server, fill in 8080 for the proxy port, and then click Save
Insert image description here
The username and password do not need to be set here, but I have not set them here.

When you need to switch your browser proxy in the future, just click on the plug-in icon and select it. Please turn off foxyproxy when you do not need proxy service.
Insert image description here

Set up to capture HTTPS requests

Export certificate
Turn on burp interceptionInsert image description here

Open the Firefox browser, enter http://burp to download the certificate, and drag cacert.der to the desktopInsert image description here

Import the certificate into the browser
Open the Firefox browser, click Settings, and search for the certificate
Insert image description here

Click the Import button, select the file you just exported, and import it. (Import the certificate selected in Figure 2 below)Insert image description hereInsert image description here

Test capture Baidu homepage
After setting up the browser proxy, enter the Baidu URL in the browser address bar, then press Enter. Click to see that the browser's access request has been Intercepted by BurpSuite.
Insert image description here

Modify response

Enable proxy interception
Find the request you want to modify and click Action->Do intercept->Response to this request, as shown below:
Insert image description here

Click Forward. When the previously marked request returns a result, it will be displayed:Insert image description here

The horizontal line in the above picture is the content returned by the response. You can directly edit and modify it, and then click Forward to send it.

Guess you like

Origin blog.csdn.net/qq_52395989/article/details/131598113