Cyber Risks · PortSwigger Research

Installing Burp's CA certificate in Chrome - Linux - Port Swigger

Summary: PortSwigger's guide describes how to install Burp Suite's CA certificate in Chrome on Linux so that a user's own external browser can test applications over HTTPS through Burp Proxy. The steps require confirming the proxy listener is active and the browser is configured for Burp, then importing the downloaded cacert.der file under the Authorities tab and selecting "Trust this certificate for identifying websites."

Bottom line: The procedure asks the user to grant a Burp-generated certificate authority the right to identify websites, and PortSwigger advises removing any previously installed Burp CA certificate before installing a new one - so each certificate trusted this way widens what that browser will accept.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related