Collaborate Disseminate
For example i have phone which use wifi proxy settings of my host machine with burp. I see that HTTP protocols proxied by host machine and if i use VPN on host machine, all HTTP requests from phone will be from VPN. But if application usin… Continue reading Android wifi proxy settings and burp with non HTTP protocols
Through ZAP, I was able to capture the following from a Change Password form:
GET /rest/user/change-password?current=P@ssword&new=password123
&repeat=password123 HTTP/1.1
Host: localhost:3000
User-Agent: Mozilla/5.0 (X11; Linux x86… Continue reading Capturing data from a Change Password form
Currently, I’m learning IS and training on THM, so I use build-in VirtualBox (that might be important). I met this problem with broken coding in Burp Suite. How can I fix that? May be someone has already had such problem
I configured Burp Suite in my virtual Kali Linux on VMware and activated FoxyProxy in Firefox (again in Kali/VMware). However it does not intercept anything, rather websites are blocked with the below message What can I do about it?
Did N… Continue reading Burp Suite does not intercept packages from my Firefox
I’m trying to MITM an Android application but I cannot get it to work properly. Usually, I’m using Burp for those kind of attacks, which allows me to intercept and decrypt HTTPS traffic. (Assuming the certificate is installed on the Androi… Continue reading Man-in-the-Middle Mobile (e.g. Android) Application Tool
I recently was doing a pentest and was continuously looking up translations for words, and thought “there has to be a better way…”. That is when I landed on BurpelFish, which adds a google translate context option to your BurpSuite’s right click. When … Continue reading How to configure BurpelFish
I’m trying to intercept traffic from an Andriod app.
I’ve forwarded ports 80, 443, 6699 and 6698 on Kali to a listener port and set up arp-spoofing. I’m using BurpSuite on the same computer to listen and intercept (invisible proxy).
Certif… Continue reading Needing help intercepting local SSL traffic on a difficult Android app
I’m trying to intercept traffic between an Andriod App and a Router interface. I’m using a rooted device.
They communicate on port 6699 which I believe is typical for nginx.
I’ve tried setting up Burp to capture the traffic but all it sees… Continue reading Burp – How to capture local traffic from Android device (i.e traffic that doesn’t use the internet)
I’m evaluating BurpSuite Enterprise Edition and had a question for anyone who might have experience using it.
Architecturally, BurpSuite EE (hereafter "BSEE") seems to have the following componentry:
A web app; used by SecOps to… Continue reading Configuring and automating BurpSuite Enterprise Edition scans
I’m attempting to test a Citrix XenApp application by running it on a Windows 10 VM (VirtualBox) guest machine, and proxying the traffic through a Burp Professional proxy on the host only network (the proxy sits on the bare-metal host).
If… Continue reading Testing a Citrix XenApp application using Burp