Title: Some Pitfalls of Using Burp
Date: 2020-06-08 16:14
I just got a new computer and had to reinstall a bunch of stuff. When I installed Burp, I encountered some issues, so I'm writing them down here.
Browsers:
360 Speed Browser
Edge Browser
IE Browser
Burp Version: v2020.2.1
The first issue was that I couldn't export the certificate. The proxy was working fine and I could capture packets, but I couldn't access http://burp. Then I thought that maybe it was a bug caused by too many modifications made by 360 browser, so I switched to Edge (after all, it's the son of Microsoft). Even after setting up the proxy, I still couldn't access it.
Solution:
-
Set up the proxy in Internet Options and use IE browser to access it. (Although I didn't want to, it worked.)
-
Use the built-in export function in Burp to export the certificate directly.
(Remember to change the file extension when exporting.)
The second issue was that the certificate didn't work after successfully importing it.
I've encountered this issue before, and it magically resolved itself. But since it was still a problem, I decided to investigate it further. At first, I thought it was caused by this:
However, clearing it didn't have any effect. I checked the certificate location multiple times, and it was indeed in the trusted area. Finally, I found a "blind spot" in the certificate list. There were two identical PortSwigger CA certificates, but one could be deleted while the other had the delete option grayed out. So, I speculated that the certificate that couldn't be deleted was installed under certain circumstances (possibly a bug), and the second one was installed by myself. Therefore, the problem should be with the certificate that couldn't be deleted.
Solution:
- Run cmd and enter mmc.
- Select "Add/Remove Snap-in" and add the certificate option.
- In this window, you can delete the certificate that couldn't be deleted.
- After deleting it, follow the usual certificate installation method (I added it to the Intermediate Certificate first, then exported it and installed it in the Trusted Certificate).
That's it.
The more I write, the more I want to omit. Goo goo goo!
2021
Here's another one. After capturing packets with the new version of Burp, the body of the request may appear shifted. Most people improve it by adjusting the font and size, but that's just a temporary fix. The correct method is to go into JAVA (or JRE), right-click on java.exe or javaw.exe, select compatibility options, uncheck DPI scaling, and choose system options.