Cyber Risks · PortSwigger Research

Installing Burp's CA certificate in Chrome - Windows - Port Swigger

Summary: PortSwigger's documentation describes how to install Burp Suite's CA certificate in Chrome on Windows so that a user's own external browser can test applications over HTTPS through Burp Proxy. The steps require confirming the proxy listener is active, configuring the browser to work with Burp, exporting the .der-format certificate, and placing it in the Trusted Root Certification Authorities store.

Key Takeaway: The procedure ends with Burp's CA certificate sitting in Windows' Trusted Root Certification Authorities store, a position that lets it vouch for any HTTPS site the machine visits until someone removes it.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related